$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft File: 7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json) Hash identifier: /MgBkG2q/uHmPNW4e+moiuStSHD0tkTgt9qMibY1U5g= Subject key identifier: 68:C9:CC:EC:44:0D:C3:04:7B:9A:97:C4:79:A1:59:83:CA:46:D3:F4 Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 Certificate issuer: /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Certificate serial: 0781 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft Manifest number: 0778 Signing time: Thu 08 May 2025 21:19:16 +0000 Manifest this update: Thu 08 May 2025 21:19:15 +0000 Manifest next update: Thu 15 May 2025 21:19:15 +0000 Files and hashes: 1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: GDY7az3Rda09qQWYVX/gQ9WUxaxFPQqmCAKVOsJjsxo=) 2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 21:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1921 (0x781) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Validity Not Before: May 8 21:19:15 2025 GMT Not After : May 15 21:19:15 2025 GMT Subject: CN=681d1fd3-be8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:f0:86:43:12:cb:c5:3c:ac:c4:d5:3d:48: d0:23:05:d1:d3:ca:78:f4:05:bb:62:10:b1:5d:02: e6:b8:5c:16:d8:6b:50:4b:00:78:52:68:82:cb:ab: 0c:74:50:75:0b:93:ed:21:82:d2:67:c8:27:d8:de: a2:6a:ec:5a:6d:81:35:d7:9e:98:8b:40:78:59:d2: 01:5c:bf:ee:89:96:79:c7:80:ea:3c:b2:7b:2f:64: 84:0e:0b:4a:ba:b8:19:99:a3:79:f5:5d:8c:e8:09: ea:93:69:eb:8b:a9:57:b2:a0:c3:f9:53:7b:7f:52: 23:2c:93:2c:ec:0c:92:ae:85:6f:fa:2c:b5:10:4a: 69:ec:09:47:ef:43:b9:7f:e3:f7:66:88:66:08:3e: 64:e7:be:d6:b8:59:84:73:f0:2e:af:e7:4c:60:eb: 41:fb:63:39:38:18:22:7b:cc:a2:6b:c9:a4:ac:ff: 04:79:c9:18:c1:0f:8b:bf:1a:fc:08:f9:ec:8f:a4: b8:c1:1d:18:13:01:4b:b5:30:ca:27:ae:f8:93:b9: cc:64:66:59:1e:3a:52:1c:87:60:e4:b7:75:a0:65: aa:ba:b6:7e:ba:4c:29:32:1d:31:4b:c0:40:5a:29: 2d:dd:d2:ee:76:95:f2:39:f9:89:12:43:0c:48:05: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:CC:EC:44:0D:C3:04:7B:9A:97:C4:79:A1:59:83:CA:46:D3:F4 X509v3 Authority Key Identifier: keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:90:56:25:78:35:fd:c4:36:63:1a:35:36:7b:7e:26:16:9e: af:49:8f:0f:f7:6e:93:97:c9:50:03:89:74:9f:1e:00:5c:2a: b9:e4:69:c9:0f:99:a2:d7:ca:1b:f4:7d:fc:98:15:bb:03:92: fc:a3:8e:fb:3d:bd:4c:ae:43:95:7b:76:22:cf:b4:49:ac:bd: bf:6b:b0:dc:1a:35:aa:13:60:92:01:95:4e:6f:98:89:0f:ea: c0:bc:82:1d:ae:d5:68:90:ee:1c:40:31:37:4c:23:16:3d:71: 2c:3e:b1:17:b3:ad:91:25:4e:c0:c8:38:be:ca:c1:ce:36:a4: c5:41:25:1a:00:5b:fc:b1:de:e6:3b:5e:a6:f4:89:a2:fa:81: c5:6a:25:f4:cf:1b:14:aa:8b:7a:df:d8:6e:1b:75:ef:9e:5a: 28:1c:59:f5:ad:3b:7d:02:bc:af:39:47:03:7b:ca:d7:98:78: d5:8a:92:9c:07:7f:cf:2e:71:87:6e:a3:38:69:05:78:15:5f: 2e:84:62:c1:f6:e5:76:90:50:98:24:61:44:17:1b:9b:c5:8f: 5f:03:03:00:bf:07:0f:5f:bd:f1:e9:68:d6:53:09:4c:fd:46: 98:64:c2:ec:40:7a:e1:5a:99:9f:7b:75:3a:93:e7:8a:49:99: 43:80:3f:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4M0ExMTAvBgNVBAUTKEVEQ0RGMDYwQTYxMDJCRkFEMDZFQkE4RDY4MzFEMjg0 OEQxREJERTcwHhcNMjUwNTA4MjExOTE1WhcNMjUwNTE1MjExOTE1WjAYMRYwFAYD VQQDEw02ODFkMWZkMy1iZThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzanwhkMSy8U8rMTVPUjQIwXR08p49AW7YhCxXQLmuFwW2GtQSwB4UmiCy6sM dFB1C5PtIYLSZ8gn2N6iauxabYE1156Yi0B4WdIBXL/uiZZ5x4DqPLJ7L2SEDgtK urgZmaN59V2M6Anqk2nri6lXsqDD+VN7f1IjLJMs7AySroVv+iy1EEpp7AlH70O5 f+P3ZohmCD5k577WuFmEc/Aur+dMYOtB+2M5OBgie8yia8mkrP8EeckYwQ+Lvxr8 CPnsj6S4wR0YEwFLtTDKJ674k7nMZGZZHjpSHIdg5Ld1oGWqurZ+ukwpMh0xS8BA Wikt3dLudpXyOfmJEkMMSAVhnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjJzOxE DcMEe5qXxHmhWYPKRtP0MB8GA1UdIwQYMBaAFO3N8GCmECv60G66jWgx0oSNHb3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzQS8wNzAxQjM0QTEy RDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtfclFicnFOYURIU2hJMGR2 ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjM3dZS1lRS19yUWJycU5hREhTaEkwZHZlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzQS8wNzAxQjM0QTEyRDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtf clFicnFOYURIU2hJMGR2ZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdkFYleDX9xDZjGjU2e34mFp6vSY8P926Tl8lQA4l0nx4AXCq55GnJ D5mi18ob9H38mBW7A5L8o477Pb1MrkOVe3Yiz7RJrL2/a7DcGjWqE2CSAZVOb5iJ D+rAvIIdrtVokO4cQDE3TCMWPXEsPrEXs62RJU7AyDi+ysHONqTFQSUaAFv8sd7m O16m9Imi+oHFaiX0zxsUqot639huG3XvnlooHFn1rTt9AryvOUcDe8rXmHjVipKc B3/PLnGHbqM4aQV4FV8uhGLB9uV2kFCYJGFEFxubxY9fAwMAvwcPX73x6WjWUwlM /UaYZMLsQHrhWpmfe3U6k+eKSZlDgD9b -----END CERTIFICATE-----Generated at Sat May 10 16:42:27 2025 by rpki-client