$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: 2G7zOvccb5CLFqWt+dWeL7WESxrwJfWlOGS5xzZYI04= Subject key identifier: 7F:5B:1B:A6:C1:39:C1:6F:11:3D:AA:BB:CD:F8:1B:6F:BE:B2:22:B4 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 07CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 07BD Signing time: Sat 10 May 2025 20:50:46 +0000 Manifest this update: Sat 10 May 2025 20:50:46 +0000 Manifest next update: Sat 17 May 2025 20:50:46 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: SM4xFQPIZZiYNA/aOuMHuEbOmHoghd8kWh/nGQ8XO48=) 2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 0UTI8vBXyFaaaPE8GDLKNFY+lSRTHbfC3s12YcpVQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 20:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1994 (0x7ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: May 10 20:50:46 2025 GMT Not After : May 17 20:50:46 2025 GMT Subject: CN=681fbc26-f1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:e4:5e:b8:de:0e:83:73:cb:42:46:ba:8f: 2f:ba:69:9e:fc:e1:35:db:db:23:ec:ad:0d:41:55: 58:e4:49:91:a2:29:c0:c1:49:8e:7b:e1:aa:93:15: 4d:9a:16:8d:c9:0f:58:c2:f4:19:61:14:5d:4c:20: 69:2a:ae:20:ba:ec:e0:96:38:a2:15:cd:ce:c3:68: 60:24:ad:1b:b1:84:8a:68:de:0c:e2:3d:bd:67:6c: ca:ac:37:f3:25:0a:c5:43:62:91:d9:eb:09:e9:a5: 29:cf:e4:db:e7:17:e0:c1:37:74:6f:c9:cc:9d:be: d5:fb:a1:25:0f:39:e8:b8:92:ec:81:87:01:f7:74: b8:b7:7f:4b:ad:af:7a:47:e9:2b:e3:6f:e6:a8:99: e0:47:0f:c6:8b:11:bc:e8:8c:41:8a:b6:bd:78:99: 07:2d:2e:0f:e8:fe:0b:30:6d:6c:eb:c3:58:2e:54: 4b:d8:0c:f9:a5:b4:51:c6:21:2c:a5:b6:b6:ab:e4: d2:23:bb:54:4e:54:e2:8e:40:b0:f8:c9:7c:ba:f8: 04:89:12:a4:69:e4:52:32:96:84:57:0b:13:f2:fd: 91:6e:fd:5b:4e:91:9e:a9:2e:15:14:f0:17:93:33: 53:a1:22:6f:cf:b7:4a:ce:76:e3:f9:96:0c:1a:fa: 44:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5B:1B:A6:C1:39:C1:6F:11:3D:AA:BB:CD:F8:1B:6F:BE:B2:22:B4 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:48:a5:8c:de:83:32:0e:4b:82:18:27:77:2a:ec:a4:7f:83: 2a:ee:e8:14:9b:58:ee:56:ab:f4:fa:39:2c:76:e5:cb:da:16: cf:34:5b:49:9f:c0:06:98:2a:08:23:1b:cc:dc:50:f3:ba:67: 6e:0e:64:f0:23:e8:b1:53:94:a9:01:6f:ce:8a:12:53:83:d5: 5a:de:ab:65:df:59:8b:e7:ae:92:59:eb:7e:b0:48:bf:0e:2a: 80:de:7e:c4:02:46:60:80:f9:40:06:b8:c4:69:66:e6:2d:cd: 6a:1b:75:9b:d2:16:a8:9c:bb:9c:e8:27:3a:12:c4:bb:c9:ac: 26:f0:6c:93:02:95:02:37:39:d8:03:8c:f1:71:c0:3d:74:8b: 29:a7:1c:5a:f1:91:df:db:4b:d5:3a:64:41:6a:5f:03:a2:68: e8:24:6e:31:bf:5d:4d:a8:cd:f4:ad:92:f1:6a:49:5c:15:59: ae:19:04:e1:00:88:e5:24:7c:22:41:cc:14:b5:51:07:90:34: ab:ed:61:af:b6:7b:20:e6:5e:31:45:60:c6:b2:1c:23:af:2e: 50:05:59:c2:93:d7:db:b8:3b:75:67:93:eb:dd:56:17:7e:5a: 87:98:b1:36:35:50:99:3f:2c:cb:4c:15:f6:66:64:c9:36:7b: 2b:b1:bc:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjUwNTEwMjA1MDQ2WhcNMjUwNTE3MjA1MDQ2WjAYMRYwFAYD VQQDEw02ODFmYmMyNi1mMWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxL7kXrjeDoNzy0JGuo8vumme/OE129sj7K0NQVVY5EmRoinAwUmOe+GqkxVN mhaNyQ9YwvQZYRRdTCBpKq4guuzgljiiFc3Ow2hgJK0bsYSKaN4M4j29Z2zKrDfz JQrFQ2KR2esJ6aUpz+Tb5xfgwTd0b8nMnb7V+6ElDznouJLsgYcB93S4t39Lra96 R+kr42/mqJngRw/GixG86IxBira9eJkHLS4P6P4LMG1s68NYLlRL2Az5pbRRxiEs pba2q+TSI7tUTlTijkCw+Ml8uvgEiRKkaeRSMpaEVwsT8v2Rbv1bTpGeqS4VFPAX kzNToSJvz7dKznbj+ZYMGvpEUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9bG6bB OcFvET2qu834G2++siK0MB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqSKWM3oMyDkuCGCd3Kuykf4Mq7ugUm1juVqv0+jksduXL2hbPNFtJ n8AGmCoIIxvM3FDzumduDmTwI+ixU5SpAW/OihJTg9Va3qtl31mL566SWet+sEi/ DiqA3n7EAkZggPlABrjEaWbmLc1qG3Wb0haonLuc6Cc6EsS7yawm8GyTApUCNznY A4zxccA9dIsppxxa8ZHf20vVOmRBal8DomjoJG4xv11NqM30rZLxaklcFVmuGQTh AIjlJHwiQcwUtVEHkDSr7WGvtnsg5l4xRWDGshwjry5QBVnCk9fbuDt1Z5Pr3VYX flqHmLE2NVCZPyzLTBX2ZmTJNnsrsbyG -----END CERTIFICATE-----Generated at Sun May 11 15:05:44 2025 by rpki-client