$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: WmqCcQA/NDv9vaXxlTnlEC9EPUgeU9SVxdzKoczzMOE= Subject key identifier: B9:AE:DA:75:AB:ED:5A:CE:DA:7D:E9:C9:51:22:56:28:E2:BE:E0:B0 Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 0656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0651 Signing time: Wed 14 May 2025 22:33:43 +0000 Manifest this update: Wed 14 May 2025 22:33:43 +0000 Manifest next update: Wed 21 May 2025 22:33:43 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: ESbgKBkgr9Hw8HT/mDu04TB54Acr6lK0YPlIGJtrBdY=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: 0Vo3U2BdtOB6mX4+w3M4VNqdzFaeSWGYYn2lO8mMRcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1622 (0x656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: May 14 22:33:43 2025 GMT Not After : May 21 22:33:43 2025 GMT Subject: CN=68251a47-11b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:71:53:12:8d:fd:0d:b2:80:4b:10:42:49: e7:1f:02:33:fa:04:14:6d:29:8d:66:3d:68:7e:e7: 55:72:13:41:8d:27:9a:51:f9:0f:0e:16:cb:68:fc: 13:7d:a9:1f:72:ac:f7:e2:e1:9d:06:e7:67:61:79: af:41:ce:d4:8d:f1:4a:8b:c4:52:dc:0f:00:65:e3: 94:dc:d6:48:fa:0b:13:6f:a7:a7:0c:5c:13:cc:e0: c8:95:d0:8a:98:4e:ed:0d:e3:d2:d5:4b:b6:c1:94: d7:73:c5:a7:00:3c:ee:ad:36:1e:e8:7f:58:49:56: e8:d3:14:ee:fc:cf:3c:f4:db:65:c5:7d:49:a3:0c: 5e:73:41:0f:59:f0:75:60:f2:21:1b:04:d0:44:f7: d5:e6:55:75:eb:4a:3d:47:2c:97:c5:68:d3:2a:c5: 0c:53:48:2f:ba:a1:25:70:8a:b7:5d:fe:d2:e9:74: ec:2f:58:d9:29:59:ee:1f:49:74:59:87:cf:75:b1: cc:82:42:7b:c3:a9:eb:1b:54:d7:03:b5:4d:06:56: d6:87:70:d0:db:ea:a3:e1:c4:aa:fa:b5:a4:89:6f: b5:b7:1c:b9:fc:03:3f:b7:10:4c:f3:01:11:fd:5c: 7c:c5:fa:7b:aa:15:47:b7:5c:a9:4c:07:e7:60:21: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AE:DA:75:AB:ED:5A:CE:DA:7D:E9:C9:51:22:56:28:E2:BE:E0:B0 X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:83:8b:6b:18:d2:7f:ba:19:d7:03:f5:90:09:03:bd:89:3f: 5b:91:c5:ab:0b:71:5c:e3:8b:a5:6d:7c:a1:67:c9:23:70:b1: d2:69:1f:96:0a:5e:95:84:e6:96:94:97:28:71:91:56:70:4f: 8a:a3:ff:81:c5:ac:cb:ef:01:15:ec:bd:8d:c4:18:27:2c:47: 64:29:bf:bb:93:73:3c:6b:01:07:a2:c3:78:60:e0:f1:4d:a9: a8:b5:87:93:46:4b:96:80:07:4a:8a:4e:2c:bd:41:c3:a5:16: 42:13:ee:90:4a:8a:a2:b1:4f:a7:80:81:31:bd:2d:6c:b8:4e: ec:96:b0:c4:b1:4b:13:14:40:56:c8:f9:fd:1f:3a:66:4e:1c: fd:f0:60:2c:9b:63:60:c0:ef:be:e7:89:ee:34:42:4c:01:34: c6:f2:b1:c2:d0:3b:e8:42:06:e6:96:81:9b:74:97:f1:a4:a7: 08:6e:44:a1:73:b6:be:ba:c8:14:b5:de:dd:0d:b3:85:4a:f2: f3:d7:13:7b:26:c4:93:e2:ae:f9:7d:4a:11:d8:13:36:23:9a: 22:66:d5:ca:c9:ee:f2:9e:62:4b:a9:47:eb:39:be:c5:f0:2e: ed:18:b8:76:34:4d:09:0e:e1:bb:4f:6a:f9:56:0e:1c:3e:1f: e1:68:a0:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwNTE0MjIzMzQzWhcNMjUwNTIxMjIzMzQzWjAYMRYwFAYD VQQDEw02ODI1MWE0Ny0xMWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS1xUxKN/Q2ygEsQQknnHwIz+gQUbSmNZj1ofudVchNBjSeaUfkPDhbLaPwT fakfcqz34uGdBudnYXmvQc7UjfFKi8RS3A8AZeOU3NZI+gsTb6enDFwTzODIldCK mE7tDePS1Uu2wZTXc8WnADzurTYe6H9YSVbo0xTu/M889NtlxX1Jowxec0EPWfB1 YPIhGwTQRPfV5lV160o9RyyXxWjTKsUMU0gvuqElcIq3Xf7S6XTsL1jZKVnuH0l0 WYfPdbHMgkJ7w6nrG1TXA7VNBlbWh3DQ2+qj4cSq+rWkiW+1txy5/AM/txBM8wER /Vx8xfp7qhVHt1ypTAfnYCHW9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLmu2nWr 7VrO2n3pyVEiVijivuCwMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5g4trGNJ/uhnXA/WQCQO9iT9bkcWrC3Fc44ulbXyhZ8kjcLHSaR+W Cl6VhOaWlJcocZFWcE+Ko/+BxazL7wEV7L2NxBgnLEdkKb+7k3M8awEHosN4YODx TamotYeTRkuWgAdKik4svUHDpRZCE+6QSoqisU+ngIExvS1suE7slrDEsUsTFEBW yPn9HzpmThz98GAsm2NgwO++54nuNEJMATTG8rHC0DvoQgbmloGbdJfxpKcIbkSh c7a+usgUtd7dDbOFSvLz1xN7JsST4q75fUoR2BM2I5oiZtXKye7ynmJLqUfrOb7F 8C7tGLh2NE0JDuG7T2r5Vg4cPh/haKAs -----END CERTIFICATE-----Generated at Fri May 16 06:24:11 2025 by rpki-client