$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft File: r80S80CYeM1KtEXERVRK6NqFGoQ.mft (raw, json) Hash identifier: H9+ItZLRXzNAKh8SJCmaRqa84y8oglDw4M9iLp/J7mQ= Subject key identifier: 01:98:8B:A5:FD:52:E9:BA:8E:3A:D8:0F:17:9F:65:1D:B2:F3:9B:74 Authority key identifier: AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 Certificate issuer: /CN=A91F2BD9/serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Certificate serial: 07F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft Manifest number: 07E7 Signing time: Mon 12 May 2025 20:49:38 +0000 Manifest this update: Mon 12 May 2025 20:49:37 +0000 Manifest next update: Mon 19 May 2025 20:49:37 +0000 Files and hashes: 1: r80S80CYeM1KtEXERVRK6NqFGoQ.crl (hash: ujX3pwo+QF4YDc0v1bcsm2/DQAFfNUIADqhPYGllCug=) 2: 85A0A1086C9711EEA4941846C4F9AE02.roa (hash: QE3nW2mNMr96ecxL+2Sa0cUHeFInEqjbi3IjJoVbX1E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 20:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2BD9, serialNumber=AFCD12F3409878CD4AB445C445544AE8DA851A84 Validity Not Before: May 12 20:49:37 2025 GMT Not After : May 19 20:49:37 2025 GMT Subject: CN=68225ee2-34ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:41:4f:5d:1f:90:c2:b7:c0:46:07:de:55:29: d4:c3:da:35:bf:ef:2f:2e:12:4a:45:e0:fe:e1:09: a7:e9:ce:ef:d8:bd:80:eb:14:48:aa:16:24:66:7d: f4:43:59:c8:6d:52:9d:e9:02:17:2d:0b:49:1e:31: ff:fc:e3:14:ca:d5:03:d2:3b:0e:02:55:da:36:36: 6e:62:a0:f9:35:8d:af:38:b9:20:54:41:92:a9:1a: 46:2a:ce:e2:b0:4d:62:1a:6f:c8:ab:21:93:79:11: 8f:00:6d:b9:48:50:e2:3b:69:3d:bb:87:a2:45:ce: 2b:4b:dc:9d:5f:87:0f:70:68:0e:66:d2:95:ff:12: 89:5e:65:91:d9:92:e2:6d:3c:3f:03:90:dd:6d:93: 43:35:8a:e5:e0:b9:53:69:a3:09:02:6a:0a:39:87: b2:2d:f5:ac:b9:fb:8a:bc:5b:4d:31:49:0c:e4:fa: 35:1b:74:d9:7e:cb:12:2e:ef:93:fd:29:1d:2f:07: 5d:d7:50:8d:bf:62:bc:6c:52:17:02:68:80:fe:26: 3e:9f:53:ba:e7:49:f2:79:b3:61:5b:31:cb:20:4d: 2a:a4:3b:89:96:a2:e2:6b:e9:73:66:33:25:d2:27: ce:51:4a:b9:a8:47:e3:ac:4b:c2:ff:04:39:be:71: 09:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:98:8B:A5:FD:52:E9:BA:8E:3A:D8:0F:17:9F:65:1D:B2:F3:9B:74 X509v3 Authority Key Identifier: keyid:AF:CD:12:F3:40:98:78:CD:4A:B4:45:C4:45:54:4A:E8:DA:85:1A:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r80S80CYeM1KtEXERVRK6NqFGoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2BD9/0481F786EC1911EA85B1E76FC4F9AE02/r80S80CYeM1KtEXERVRK6NqFGoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:e8:9f:f6:39:ff:95:e5:21:af:dd:7c:3f:e1:62:25:b3:4e: bc:e2:1a:f4:f7:69:45:e1:ac:b9:df:2c:25:88:bc:b9:4e:57: 9e:86:76:ea:cb:74:ba:d0:51:57:07:ed:f8:a6:7d:a2:bf:23: 23:d5:c6:5a:8d:49:fc:25:a7:53:42:70:bb:3e:62:51:ab:f5: 18:1f:b1:9a:97:bc:52:bc:2b:65:78:f1:2c:0c:28:83:10:0a: 3f:f8:3e:5f:e3:34:77:67:2b:52:de:b5:6d:23:cf:ca:b7:43: be:e5:f2:2f:b9:76:d9:73:20:78:11:a9:87:71:89:e6:d9:a9: 8b:f9:42:80:e9:51:7d:a7:aa:40:bb:39:c1:04:7c:8f:58:5f: 4d:73:cf:85:b2:4a:0e:f7:68:d4:67:8e:35:a4:e7:27:4e:8e: 56:ed:35:c3:0d:9c:8a:85:ef:c5:98:c2:a9:e8:2c:7c:37:4e: a7:5a:fe:c4:23:b7:64:41:f1:ff:1d:e6:ac:7d:04:c3:b3:b8: 12:f0:1e:31:16:43:05:92:ac:8f:08:a2:d0:16:55:7d:61:b8: 98:1d:74:72:a8:a9:4f:c9:69:cd:93:50:1c:e6:1f:86:eb:b3: f9:4e:d3:d5:21:28:b2:dc:12:18:47:56:f4:5f:8e:70:1e:54: b4:ed:57:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCRDkxMTAvBgNVBAUTKEFGQ0QxMkYzNDA5ODc4Q0Q0QUI0NDVDNDQ1NTQ0QUU4 REE4NTFBODQwHhcNMjUwNTEyMjA0OTM3WhcNMjUwNTE5MjA0OTM3WjAYMRYwFAYD VQQDEw02ODIyNWVlMi0zNGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEFPXR+QwrfARgfeVSnUw9o1v+8vLhJKReD+4Qmn6c7v2L2A6xRIqhYkZn30 Q1nIbVKd6QIXLQtJHjH//OMUytUD0jsOAlXaNjZuYqD5NY2vOLkgVEGSqRpGKs7i sE1iGm/IqyGTeRGPAG25SFDiO2k9u4eiRc4rS9ydX4cPcGgOZtKV/xKJXmWR2ZLi bTw/A5DdbZNDNYrl4LlTaaMJAmoKOYeyLfWsufuKvFtNMUkM5Po1G3TZfssSLu+T /SkdLwdd11CNv2K8bFIXAmiA/iY+n1O650nyebNhWzHLIE0qpDuJlqLia+lzZjMl 0ifOUUq5qEfjrEvC/wQ5vnEJwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGYi6X9 Uum6jjrYDxefZR2y85t0MB8GA1UdIwQYMBaAFK/NEvNAmHjNSrRFxEVUSujahRqE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkJEOS8wNDgxRjc4NkVD MTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVNMUt0RVhFUlZSSzZOcUZH b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4MFM4MENZZU0xS3RFWEVSVlJLNk5xRkdvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkJEOS8wNDgxRjc4NkVDMTkxMUVBODVCMUU3NkZDNEY5QUUwMi9yODBTODBDWWVN MUt0RVhFUlZSSzZOcUZHb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt6J/2Of+V5SGv3Xw/4WIls0684hr092lF4ay53ywliLy5Tleehnbq y3S60FFXB+34pn2ivyMj1cZajUn8JadTQnC7PmJRq/UYH7Gal7xSvCtlePEsDCiD EAo/+D5f4zR3ZytS3rVtI8/Kt0O+5fIvuXbZcyB4EamHcYnm2amL+UKA6VF9p6pA uznBBHyPWF9Nc8+FskoO92jUZ441pOcnTo5W7TXDDZyKhe/FmMKp6Cx8N06nWv7E I7dkQfH/HeasfQTDs7gS8B4xFkMFkqyPCKLQFlV9YbiYHXRyqKlPyWnNk1Ac5h+G 67P5TtPVISiy3BIYR1b0X45wHlS07Vee -----END CERTIFICATE-----Generated at Wed May 14 11:25:13 2025 by rpki-client