$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: 69l6XBCjG4J9yfmQQAs2M9CmgKW45QjgDYwghkyJ2Dg= Subject key identifier: C1:97:29:15:CE:65:48:AC:AA:88:EE:A9:A6:33:CB:25:A8:2D:6D:26 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 0699 Signing time: Mon 12 May 2025 21:59:47 +0000 Manifest this update: Mon 12 May 2025 21:59:47 +0000 Manifest next update: Mon 19 May 2025 21:59:47 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: T7rTU/YnpkUGWmyq8AibXCtTsr4OoNs+eIGfrFLBRDA=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: oHlo3Sofjys47IZ2Ei8IuoMAeL8C2VUTJUZO9aDUVcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 21:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: May 12 21:59:47 2025 GMT Not After : May 19 21:59:47 2025 GMT Subject: CN=68226f53-5eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:bc:27:3c:7b:c6:6b:13:32:82:63:f0:fa: 02:e0:c3:bc:f4:1b:a0:f2:e4:20:67:0c:8f:00:f3: f7:c2:f0:12:00:a7:13:61:8e:91:a7:29:66:5f:81: 58:43:b5:7c:d3:7b:c4:5d:9e:41:b6:52:fb:aa:51: a1:85:19:b7:61:0b:84:1c:d2:48:aa:cb:fe:01:0a: 9c:ff:ef:33:10:bc:7d:b6:6c:55:b1:ee:5b:fb:fa: 1a:cb:f9:bc:86:7f:60:c6:a3:2c:46:65:3c:f1:4f: dd:16:72:a7:1f:75:49:1b:3e:5e:e1:d6:dd:8b:6f: a1:6f:75:30:ea:a7:03:e6:bf:68:c4:03:c6:d8:ff: b0:5f:70:55:13:8e:28:64:1b:54:6d:6f:82:9e:e1: 7b:40:4c:ef:92:7d:6d:87:a6:df:7d:1e:08:1b:26: fb:83:39:ad:1d:16:a6:57:1b:1b:fd:09:05:08:9c: 7f:70:fe:89:01:29:af:ae:1f:b1:d3:99:27:67:76: 97:56:3c:ea:40:33:96:d8:1a:66:ea:50:d7:ca:bb: b5:9f:7e:57:61:1f:de:23:c3:fe:80:44:4d:65:e1: 16:20:84:51:f4:61:65:82:66:b4:98:88:21:52:e3: 34:70:a3:6f:3c:e3:6b:9e:93:8b:3e:b2:c7:46:09: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:97:29:15:CE:65:48:AC:AA:88:EE:A9:A6:33:CB:25:A8:2D:6D:26 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:b2:93:07:6d:27:f0:ec:72:83:e5:eb:ac:43:a7:35:ee:08: 73:6b:fc:ee:62:24:0b:ff:50:44:0d:ca:dd:3b:e8:eb:a9:15: 57:f4:aa:30:2f:db:dd:b6:97:27:82:2f:66:76:73:c4:eb:24: 83:04:89:ab:ef:f6:36:dd:4c:af:c5:a0:1c:88:83:3a:ff:3c: a3:81:da:8b:50:42:6b:f9:ca:36:0f:4d:23:da:a3:12:73:ab: 1e:ca:b6:4f:be:b0:8c:05:85:96:3c:21:cc:44:76:4d:35:f1: 07:e8:ac:c7:3f:d3:c6:4b:ae:ff:a4:b3:64:fe:14:74:86:dd: 10:0e:95:cf:05:c2:ef:1b:60:eb:bb:5e:61:eb:1b:7e:5a:14: ac:b1:f2:5a:21:9f:f7:e3:72:c5:5b:32:48:57:39:8d:01:a6: 78:e4:00:2c:d9:26:04:2e:f0:38:25:74:87:c9:16:ca:f0:9a: 7d:29:de:da:23:f0:16:08:a3:d3:4e:5e:ba:16:fc:65:ff:17: 02:d5:e3:3d:87:6e:22:24:53:5f:e7:6b:62:ad:f0:c7:68:82: 05:04:ba:b4:a7:25:47:d8:cc:36:33:2b:c0:2c:fc:87:3f:62: 3b:eb:bc:20:bc:fe:73:48:61:b1:3a:a6:d7:ab:f3:d0:d4:26: 69:ba:2a:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUwNTEyMjE1OTQ3WhcNMjUwNTE5MjE1OTQ3WjAYMRYwFAYD VQQDEw02ODIyNmY1My01ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SS8Jzx7xmsTMoJj8PoC4MO89Bug8uQgZwyPAPP3wvASAKcTYY6RpylmX4FY Q7V803vEXZ5BtlL7qlGhhRm3YQuEHNJIqsv+AQqc/+8zELx9tmxVse5b+/oay/m8 hn9gxqMsRmU88U/dFnKnH3VJGz5e4dbdi2+hb3Uw6qcD5r9oxAPG2P+wX3BVE44o ZBtUbW+CnuF7QEzvkn1th6bffR4IGyb7gzmtHRamVxsb/QkFCJx/cP6JASmvrh+x 05knZ3aXVjzqQDOW2Bpm6lDXyru1n35XYR/eI8P+gERNZeEWIIRR9GFlgma0mIgh UuM0cKNvPONrnpOLPrLHRgmTKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGXKRXO ZUisqojuqaYzyyWoLW0mMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDLspMHbSfw7HKD5eusQ6c17ghza/zuYiQL/1BEDcrdO+jrqRVX9Kow L9vdtpcngi9mdnPE6ySDBImr7/Y23UyvxaAciIM6/zyjgdqLUEJr+co2D00j2qMS c6seyrZPvrCMBYWWPCHMRHZNNfEH6KzHP9PGS67/pLNk/hR0ht0QDpXPBcLvG2Dr u15h6xt+WhSssfJaIZ/343LFWzJIVzmNAaZ45AAs2SYELvA4JXSHyRbK8Jp9Kd7a I/AWCKPTTl66Fvxl/xcC1eM9h24iJFNf52tirfDHaIIFBLq0pyVH2Mw2MyvALPyH P2I767wgvP5zSGGxOqbXq/PQ1CZpuiob -----END CERTIFICATE-----Generated at Tue May 13 18:52:18 2025 by rpki-client