$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: EVjUmR0MyNJ6BSFMvAqSQE8LLLYmci1qXKsjm53jzR4= Subject key identifier: 38:4F:5B:08:61:09:7F:DC:97:20:72:95:46:99:2C:C5:64:6F:31:51 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 018B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 017C Signing time: Sat 03 May 2025 03:20:21 +0000 Manifest this update: Sat 03 May 2025 03:20:21 +0000 Manifest next update: Sat 10 May 2025 03:20:21 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 6vaYygU/+Vg437XEdF/1vNQ96Tvfnp6TK4lG1AN5VDA=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 0tzqO1CmigPSpz/MhhBtA7Y+BKnfbYyMKy+tv5IkgiA=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: NKujXUGh0X/SkT7+y791gsNwYlUiCMjNSQHbtD/TZ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 395 (0x18b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: May 3 03:20:21 2025 GMT Not After : May 10 03:20:21 2025 GMT Subject: CN=68158b75-6795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:02:7f:b4:f2:60:9b:2b:dc:11:ec:24:95: 92:6f:7c:5b:2a:c3:ee:0e:62:0f:a5:ce:5d:63:f9: 05:2e:7f:e9:70:c9:04:f1:ee:4a:d2:3d:62:74:fc: 7b:6c:8b:fd:60:d7:a1:8a:1d:5a:dc:b2:52:c9:b5: e8:31:ee:fa:4d:f2:2f:34:17:59:8e:98:98:fa:4d: 06:d3:be:05:42:6f:01:bd:0b:12:ab:cd:c4:8b:15: 7a:c1:b8:5e:bb:c6:35:01:de:5f:46:fe:ee:b9:18: 94:0e:ba:71:f4:99:7b:5e:54:71:58:6c:de:25:aa: 79:5b:ca:5b:4a:c7:04:73:b7:b1:af:8d:d4:70:9a: 44:29:ec:05:02:37:23:59:1b:5c:5a:5f:54:43:77: fe:8a:c4:a5:c6:d9:1f:b0:ba:70:96:c8:4c:45:24: 02:9c:e3:65:df:fe:95:c5:9f:6f:9d:7c:ca:37:4c: 27:29:00:45:fb:d4:60:4e:22:e4:a7:e3:06:69:7e: d0:e8:bb:ae:04:cc:7a:c2:4d:e3:2d:70:54:29:86: 43:98:84:aa:f8:24:22:ad:5b:5d:2d:5f:80:4a:bc: 98:6b:60:ee:26:d4:f9:a2:7b:3e:ca:42:37:36:c3: 75:b1:e4:9b:4d:74:2b:d1:64:a8:36:14:a4:23:63: 4e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4F:5B:08:61:09:7F:DC:97:20:72:95:46:99:2C:C5:64:6F:31:51 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b7:c6:a8:9a:e9:cc:8f:1e:8b:c4:8c:77:a6:0a:6a:59:2e: 12:4c:43:61:31:0b:71:11:07:25:d3:ad:42:a8:13:f4:fe:90: 65:ed:86:85:f0:60:bb:52:da:26:1d:c7:1e:0b:44:a5:26:0b: 41:ac:89:54:d5:e7:42:35:b7:62:d7:15:8b:97:c3:0d:3f:aa: e0:6e:db:77:8a:46:b9:86:7c:82:1f:88:b7:e9:a8:e3:eb:73: 10:2b:ef:54:5a:47:10:9d:28:08:27:20:e7:64:cf:07:2f:db: 53:d3:42:83:e0:3e:89:cd:85:d5:0f:76:4a:0e:c1:6a:93:9b: b5:62:ef:1c:9e:54:2d:4d:d2:c3:42:a2:fd:6f:fa:5a:59:73: 8e:93:31:df:b3:de:7a:d3:6c:d4:2e:b7:36:a8:c9:92:b9:46: 31:27:e3:f7:bb:88:4c:be:72:36:f5:85:d7:38:54:ff:f1:f6: b3:7b:2e:ba:ca:72:20:43:2d:83:77:5e:4c:0c:64:b4:63:06: 0c:c2:37:9a:2d:09:c5:c9:79:ed:96:1d:03:19:45:44:5d:66: 01:44:f1:1e:2e:f4:34:ec:e0:8e:bf:ef:c2:03:8c:f5:84:ef: 30:37:ac:63:0a:a4:44:07:f0:f7:47:48:c5:e7:03:ac:d9:86: 04:01:53:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUwNTAzMDMyMDIxWhcNMjUwNTEwMDMyMDIxWjAYMRYwFAYD VQQDEw02ODE1OGI3NS02Nzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qYCf7TyYJsr3BHsJJWSb3xbKsPuDmIPpc5dY/kFLn/pcMkE8e5K0j1idPx7 bIv9YNehih1a3LJSybXoMe76TfIvNBdZjpiY+k0G074FQm8BvQsSq83EixV6wbhe u8Y1Ad5fRv7uuRiUDrpx9Jl7XlRxWGzeJap5W8pbSscEc7exr43UcJpEKewFAjcj WRtcWl9UQ3f+isSlxtkfsLpwlshMRSQCnONl3/6VxZ9vnXzKN0wnKQBF+9RgTiLk p+MGaX7Q6LuuBMx6wk3jLXBUKYZDmISq+CQirVtdLV+ASryYa2DuJtT5ons+ykI3 NsN1seSbTXQr0WSoNhSkI2NOiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhPWwhh CX/clyBylUaZLMVkbzFRMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBit8aomunMjx6LxIx3pgpqWS4STENhMQtxEQcl061CqBP0/pBl7YaF 8GC7UtomHcceC0SlJgtBrIlU1edCNbdi1xWLl8MNP6rgbtt3ika5hnyCH4i36ajj 63MQK+9UWkcQnSgIJyDnZM8HL9tT00KD4D6JzYXVD3ZKDsFqk5u1Yu8cnlQtTdLD QqL9b/paWXOOkzHfs95602zULrc2qMmSuUYxJ+P3u4hMvnI29YXXOFT/8fazey66 ynIgQy2Dd15MDGS0YwYMwjeaLQnFyXntlh0DGUVEXWYBRPEeLvQ07OCOv+/CA4z1 hO8wN6xjCqREB/D3R0jF5wOs2YYEAVNy -----END CERTIFICATE-----Generated at Mon May 5 03:04:22 2025 by rpki-client