$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: YszsAqMtaqHexx+nf1XFt9iNorMKpwxnoCX0jhfRgRA= Subject key identifier: E6:31:95:71:C2:D5:9E:22:E9:08:9A:8B:AF:78:F6:14:3F:0E:56:66 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0ADB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0ABF Signing time: Wed 14 May 2025 19:38:41 +0000 Manifest this update: Wed 14 May 2025 19:38:41 +0000 Manifest next update: Wed 21 May 2025 19:38:41 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: HIx8ogr2WSoJoF1cia3+n3b6FHCJZKjFxI2SzXGOSz0=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 19:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2779 (0xadb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: May 14 19:38:41 2025 GMT Not After : May 21 19:38:41 2025 GMT Subject: CN=6824f141-0298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:24:2e:bc:e2:9e:c4:02:ea:2d:66:f5:22: 27:1e:b6:a6:90:6a:a9:ff:1d:0c:37:53:f8:61:f9: 7e:72:1f:87:0c:bf:4e:d9:11:17:6c:3e:ce:ea:0f: cc:a3:e7:3f:44:3c:d5:53:e5:4f:91:0b:b4:45:f2: 55:b9:6d:e3:c9:43:fc:81:f3:b8:b6:47:55:5c:c5: 8e:6a:fe:64:d1:63:71:8d:5d:1c:24:2f:ba:61:11: 7e:89:e5:7c:0c:2d:08:f7:f2:50:1b:d5:60:e6:4e: c9:12:dc:68:93:b3:71:4c:2b:a9:97:b9:bc:49:90: 63:6e:e3:bd:23:7f:96:05:49:24:0d:4a:93:5c:36: 90:c5:9e:5a:3e:c8:ec:83:14:20:28:26:32:1f:9e: 4d:64:ab:a3:b4:f2:fc:6b:f0:5a:08:1f:5c:0f:60: 27:80:93:ca:24:59:6c:a9:9e:0a:49:ea:ab:f5:d0: 31:17:f4:af:9c:95:53:6a:6c:ee:92:5c:5d:2c:c1: 54:e8:8d:c6:76:5c:45:dd:46:2e:ee:dd:1a:50:bd: b7:58:6d:aa:99:42:e0:dc:b3:71:30:95:7f:3e:7d: 81:cc:28:3b:2f:9e:63:5e:e8:50:c8:1a:33:e2:1d: 70:de:a0:7f:ba:2e:d4:c0:7a:a0:68:c9:19:5c:82: 11:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:31:95:71:C2:D5:9E:22:E9:08:9A:8B:AF:78:F6:14:3F:0E:56:66 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:53:9e:13:4b:58:3b:2d:5c:dc:a4:73:f5:ae:8d:2f:77:dc: 2f:7b:90:d3:b8:c4:f7:9a:5b:31:6b:dc:f2:a1:e2:95:a2:4b: 34:bb:0c:04:00:de:ee:62:08:f2:9a:02:4e:ac:e6:e6:19:ec: a9:d9:66:4c:c5:07:d9:0c:dd:10:28:59:72:c4:e9:2f:84:82: 2e:00:37:bc:29:c0:b7:a9:07:96:1a:c2:c6:fc:6d:4e:20:66: ea:ec:c4:24:27:b5:b3:47:35:ca:d2:a2:45:cd:ee:33:d8:d8: 7d:a3:b7:ca:a4:7f:9c:7f:2c:bd:ec:2b:04:89:22:e9:f1:3a: 62:a0:c0:e6:89:83:46:a7:c5:08:bf:89:73:24:a9:10:bc:79: 6a:6e:9e:44:e0:93:d8:a0:58:46:63:f3:6a:f8:9a:a7:73:f3: b9:b9:0f:3e:fd:76:fd:85:01:53:c9:65:06:64:c7:c5:2e:72: fe:f4:5e:4d:7a:44:d3:94:62:54:77:26:ca:78:4f:66:97:3f: 60:72:a0:31:85:63:d4:fc:3b:4a:ed:be:5a:2b:8c:03:b1:30: 12:94:9a:e2:88:d6:f8:f8:ae:e3:70:70:b5:4f:71:32:e6:5d: 30:c9:15:2d:9a:b1:49:10:01:2e:c1:79:0a:69:cb:74:4b:a5: 15:77:50:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwNTE0MTkzODQxWhcNMjUwNTIxMTkzODQxWjAYMRYwFAYD VQQDEw02ODI0ZjE0MS0wMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAliskLrzinsQC6i1m9SInHramkGqp/x0MN1P4Yfl+ch+HDL9O2REXbD7O6g/M o+c/RDzVU+VPkQu0RfJVuW3jyUP8gfO4tkdVXMWOav5k0WNxjV0cJC+6YRF+ieV8 DC0I9/JQG9Vg5k7JEtxok7NxTCupl7m8SZBjbuO9I3+WBUkkDUqTXDaQxZ5aPsjs gxQgKCYyH55NZKujtPL8a/BaCB9cD2AngJPKJFlsqZ4KSeqr9dAxF/SvnJVTamzu klxdLMFU6I3GdlxF3UYu7t0aUL23WG2qmULg3LNxMJV/Pn2BzCg7L55jXuhQyBoz 4h1w3qB/ui7UwHqgaMkZXIIRhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYxlXHC 1Z4i6Qiai6949hQ/DlZmMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCU54TS1g7LVzcpHP1ro0vd9wve5DTuMT3mlsxa9zyoeKVoks0uwwE AN7uYgjymgJOrObmGeyp2WZMxQfZDN0QKFlyxOkvhIIuADe8KcC3qQeWGsLG/G1O IGbq7MQkJ7WzRzXK0qJFze4z2Nh9o7fKpH+cfyy97CsEiSLp8TpioMDmiYNGp8UI v4lzJKkQvHlqbp5E4JPYoFhGY/Nq+Jqnc/O5uQ8+/Xb9hQFTyWUGZMfFLnL+9F5N ekTTlGJUdybKeE9mlz9gcqAxhWPU/DtK7b5aK4wDsTASlJriiNb4+K7jcHC1T3Ey 5l0wyRUtmrFJEAEuwXkKact0S6UVd1CO -----END CERTIFICATE-----Generated at Fri May 16 14:13:46 2025 by rpki-client