$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: uz260ZDJ3Fm3RBF/uXXocSlaLWJqscD6fX5Zcwt5dvU= Subject key identifier: E1:9F:D8:05:2F:1E:EE:47:5E:9C:FC:CA:31:CC:27:CD:71:F0:6C:FD Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0BAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0BA5 Signing time: Mon 12 May 2025 18:49:10 +0000 Manifest this update: Mon 12 May 2025 18:49:10 +0000 Manifest next update: Mon 19 May 2025 18:49:10 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: U2LxEkQ/MsjQq76R7yIuNV97OJd/7+7LJDzUSbC68Do=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2987 (0xbab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: May 12 18:49:10 2025 GMT Not After : May 19 18:49:10 2025 GMT Subject: CN=682242a6-e5a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:65:33:f8:59:14:84:29:f5:40:31:04:59: af:e8:a3:45:08:16:f0:d8:e1:20:b3:80:03:da:4c: b2:77:c3:1c:c4:dd:ef:bb:8d:5c:d2:f4:22:92:fd: 6b:64:99:f5:3d:5d:51:e5:86:df:d7:50:1a:54:d2: 4c:3f:c8:e0:20:97:3c:22:48:4a:81:79:94:54:b2: c1:92:b6:0e:96:0e:85:36:9a:96:42:8e:52:c4:7d: 55:13:3d:2c:db:62:46:3d:d7:be:e5:11:08:76:5b: c7:58:85:47:7a:19:11:f2:14:b5:be:29:1a:06:6e: da:95:24:f9:d1:23:88:37:c0:07:d8:d9:2a:f6:d2: 06:44:e6:47:1d:a9:8a:59:5d:de:b1:fa:f0:63:35: bc:7c:d1:cc:2b:a5:48:7e:18:13:7b:16:34:d7:50: 11:6b:c9:bf:fc:bd:10:56:cd:a5:3c:a8:31:bb:16: 5a:de:9a:12:f4:bb:b5:45:ab:79:14:23:9a:87:66: a8:d7:41:c8:a7:0b:47:40:1b:30:32:7b:22:59:dd: 5a:c2:26:26:1a:19:51:b9:8b:35:a8:da:38:3b:64: 2e:a0:80:b7:20:1e:f7:0f:8e:b8:3e:4d:bf:6c:b5: 83:00:4a:00:4b:3f:f1:72:ad:66:4c:7c:a5:70:8e: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9F:D8:05:2F:1E:EE:47:5E:9C:FC:CA:31:CC:27:CD:71:F0:6C:FD X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d4:b7:09:07:ef:34:c5:88:7f:e0:0a:1f:e7:38:19:c5:e7: a8:17:28:18:6a:4c:c4:fa:c1:e4:bd:e4:90:a5:da:75:78:7f: c9:41:0f:5c:60:fc:07:65:92:2f:fd:81:03:cf:29:2e:1d:16: ea:62:cf:15:f9:c5:2d:5b:d3:2f:2b:cc:24:92:16:94:01:1b: 78:da:ad:51:33:a0:d5:48:31:eb:59:28:c8:77:79:07:28:1c: 15:67:20:96:9e:4a:ef:ee:65:80:ff:4b:ef:b8:8e:40:19:d7: ff:20:06:d9:01:76:4d:56:d3:05:9e:66:6d:dd:6d:06:cf:d8: b4:af:06:f9:1b:70:e3:17:1e:c2:ab:3f:9d:e3:74:b4:28:24: a7:9b:90:c2:a5:4d:8f:4f:ea:58:3e:40:44:aa:40:b9:14:3a: 33:4a:e8:37:8c:ec:cf:03:ad:57:c2:b7:e1:ac:5b:d2:89:36: 33:d6:7c:ee:93:39:aa:0d:fc:86:56:c8:ec:b5:b5:e5:8a:9a: ae:d1:45:7d:0b:73:06:da:41:8b:88:09:60:fb:c6:ab:6d:c9: 1b:56:41:7e:15:87:be:25:b3:ea:f8:2f:59:32:27:38:7d:4f: f5:65:26:6e:09:25:ff:70:78:a0:80:93:e7:e5:3e:5c:00:46: a3:d6:f9:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjUwNTEyMTg0OTEwWhcNMjUwNTE5MTg0OTEwWjAYMRYwFAYD VQQDEw02ODIyNDJhNi1lNWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8JlM/hZFIQp9UAxBFmv6KNFCBbw2OEgs4AD2kyyd8McxN3vu41c0vQikv1r ZJn1PV1R5Ybf11AaVNJMP8jgIJc8IkhKgXmUVLLBkrYOlg6FNpqWQo5SxH1VEz0s 22JGPde+5REIdlvHWIVHehkR8hS1vikaBm7alST50SOIN8AH2Nkq9tIGROZHHamK WV3esfrwYzW8fNHMK6VIfhgTexY011ARa8m//L0QVs2lPKgxuxZa3poS9Lu1Rat5 FCOah2ao10HIpwtHQBswMnsiWd1awiYmGhlRuYs1qNo4O2QuoIC3IB73D464Pk2/ bLWDAEoASz/xcq1mTHylcI6H7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGf2AUv Hu5HXpz8yjHMJ81x8Gz9MB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh1LcJB+80xYh/4Aof5zgZxeeoFygYakzE+sHkveSQpdp1eH/JQQ9c YPwHZZIv/YEDzykuHRbqYs8V+cUtW9MvK8wkkhaUARt42q1RM6DVSDHrWSjId3kH KBwVZyCWnkrv7mWA/0vvuI5AGdf/IAbZAXZNVtMFnmZt3W0Gz9i0rwb5G3DjFx7C qz+d43S0KCSnm5DCpU2PT+pYPkBEqkC5FDozSug3jOzPA61XwrfhrFvSiTYz1nzu kzmqDfyGVsjstbXlipqu0UV9C3MG2kGLiAlg+8arbckbVkF+FYe+JbPq+C9ZMic4 fU/1ZSZuCSX/cHiggJPn5T5cAEaj1vmY -----END CERTIFICATE-----Generated at Wed May 14 04:53:52 2025 by rpki-client