$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: ZXCL+iQtQ4taPJ37tLWwxllxmnqhYWf0a4g61SWQDy8= Subject key identifier: 66:22:C1:2A:F7:2F:BB:8C:6D:88:31:17:75:86:2C:97:C6:72:CE:37 Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 03E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 03DC Signing time: Sun 11 May 2025 00:08:28 +0000 Manifest this update: Sun 11 May 2025 00:08:28 +0000 Manifest next update: Sun 18 May 2025 00:08:28 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: ym7ZvPfnitOg/CuxIvgqXJBcIXAkYZEZw6flvbQymvg=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 00:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 993 (0x3e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: May 11 00:08:28 2025 GMT Not After : May 18 00:08:28 2025 GMT Subject: CN=681fea7c-7608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:b0:66:4e:c0:93:74:f5:64:bc:56:0b:19: 39:6f:f7:c8:0b:69:02:40:4b:2f:bb:4d:3b:0e:46: 04:bf:84:2e:37:5a:0c:c3:45:1c:e0:d2:dd:14:5f: 3e:5c:18:9e:99:71:d6:2f:33:54:57:c3:37:29:c8: e7:9e:3d:60:f9:f3:5f:bb:90:ac:e3:15:7c:b6:09: 02:a5:27:b5:56:f9:30:0f:d3:dc:99:0b:f2:b6:de: c3:fa:ba:55:d5:f7:7a:c3:a2:75:89:4f:54:31:25: 31:3a:4f:62:16:b1:6e:11:ca:00:43:4d:46:5c:d8: 04:59:d5:ed:cd:f0:5e:3b:7a:81:f7:7b:d1:98:3b: b9:ff:01:59:47:da:5d:0e:37:09:cb:44:17:af:f1: 12:1a:3e:68:88:8f:9e:e0:8a:87:b6:ed:d2:47:5f: e6:ab:b5:98:bd:aa:86:d6:b7:1a:25:52:d9:85:36: 57:6f:11:7c:e9:35:6a:c0:e4:40:96:fa:a3:ee:97: 56:7e:83:f5:7f:59:1f:8b:0f:24:8e:4a:de:cd:bf: 3b:0c:36:f8:3c:bd:e5:a4:e6:a0:06:fd:04:e4:02: 65:64:e3:fc:ef:43:eb:98:16:19:57:92:fb:23:7e: a0:91:d5:46:fe:df:76:3e:2f:50:d6:c1:1c:3d:06: 06:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:22:C1:2A:F7:2F:BB:8C:6D:88:31:17:75:86:2C:97:C6:72:CE:37 X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:52:3c:9d:2f:ce:d8:9b:05:ae:70:8d:ce:7f:ae:2c:06:0e: 8d:75:a8:1b:c1:bd:e4:14:ba:88:9a:d2:7f:2f:eb:ae:77:17: 4f:42:e9:91:01:60:c8:50:fe:ca:70:c9:c4:dd:f5:99:10:6f: b5:ed:2a:6d:82:2a:17:4e:c8:71:a0:53:bf:52:4f:67:3f:f8: 70:3f:6f:37:62:d1:38:16:fb:08:d3:4c:b9:95:b9:55:2e:d1: f7:b9:13:eb:71:be:e4:1d:76:5d:71:2f:b6:33:89:3c:c6:11: 91:f2:17:78:62:4d:2d:6b:19:37:0c:fe:c5:58:18:4e:07:89: e8:f0:88:9b:78:5b:aa:93:f1:2b:60:5e:ce:b1:de:27:96:04: f5:88:df:f1:ae:65:d2:a9:84:b3:29:d9:c2:69:67:39:7e:04: a5:67:52:54:56:33:83:48:ed:13:09:4f:84:cd:3f:78:f7:18: 7c:5a:94:bf:c0:e7:9f:34:de:48:16:d2:3f:fb:89:e1:8e:e7: 07:74:0d:91:4e:20:9c:2e:98:1a:8c:8d:23:f6:b6:ba:0d:7b: c8:a8:ae:6c:7a:e1:bb:89:46:df:72:a3:8c:83:59:cf:94:2b: 9e:20:c5:31:34:63:ba:2e:ea:58:37:0b:73:d3:36:e4:e7:3f: 21:34:04:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwNTExMDAwODI4WhcNMjUwNTE4MDAwODI4WjAYMRYwFAYD VQQDEw02ODFmZWE3Yy03NjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyk+wZk7Ak3T1ZLxWCxk5b/fIC2kCQEsvu007DkYEv4QuN1oMw0Uc4NLdFF8+ XBiemXHWLzNUV8M3Kcjnnj1g+fNfu5Cs4xV8tgkCpSe1VvkwD9PcmQvytt7D+rpV 1fd6w6J1iU9UMSUxOk9iFrFuEcoAQ01GXNgEWdXtzfBeO3qB93vRmDu5/wFZR9pd DjcJy0QXr/ESGj5oiI+e4IqHtu3SR1/mq7WYvaqG1rcaJVLZhTZXbxF86TVqwORA lvqj7pdWfoP1f1kfiw8kjkrezb87DDb4PL3lpOagBv0E5AJlZOP870PrmBYZV5L7 I36gkdVG/t92Pi9Q1sEcPQYGYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYiwSr3 L7uMbYgxF3WGLJfGcs43MB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHUjydL87YmwWucI3Of64sBg6Ndagbwb3kFLqImtJ/L+uudxdPQumR AWDIUP7KcMnE3fWZEG+17SptgioXTshxoFO/Uk9nP/hwP283YtE4FvsI00y5lblV LtH3uRPrcb7kHXZdcS+2M4k8xhGR8hd4Yk0taxk3DP7FWBhOB4no8IibeFuqk/Er YF7Osd4nlgT1iN/xrmXSqYSzKdnCaWc5fgSlZ1JUVjODSO0TCU+EzT949xh8WpS/ wOefNN5IFtI/+4nhjucHdA2RTiCcLpgajI0j9ra6DXvIqK5seuG7iUbfcqOMg1nP lCueIMUxNGO6LupYNwtz0zbk5z8hNATP -----END CERTIFICATE-----Generated at Mon May 12 15:53:31 2025 by rpki-client