$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft File: rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft (raw, json) Hash identifier: vSEv8XpSbvGcqxzc7tG5/kYeoLXjjGGjeeosWl2XpW8= Subject key identifier: 6F:50:B9:E6:7F:4E:63:C5:25:43:AA:D7:1D:F8:B7:80:9B:8E:D3:E9 Authority key identifier: AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 Certificate issuer: /CN=A91F7BA0/serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft Manifest number: A7 Signing time: Sun 11 May 2025 04:59:04 +0000 Manifest this update: Sun 11 May 2025 04:59:04 +0000 Manifest next update: Sun 18 May 2025 04:59:04 +0000 Files and hashes: 1: rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl (hash: 7VphaJlzQQPBjH81XwQOhXt0Tck5TuLTtVpgW+8bGWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 04:59:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7BA0, serialNumber=ACFCB31E2BE2AD3D12B1A79102FCB4FD58BB6683 Validity Not Before: May 11 04:59:04 2025 GMT Not After : May 18 04:59:04 2025 GMT Subject: CN=68202e98-10a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:c7:ad:ce:a1:80:88:74:86:38:7b:5b:22: f0:8b:76:2c:3b:c1:47:de:cf:bc:54:28:e9:ee:5b: 78:d2:e7:cb:8e:cd:46:b8:b6:7d:05:d4:8f:6c:f0: 76:59:ab:a5:b4:bc:66:37:21:35:07:52:22:30:44: d4:4f:d3:6b:bc:c5:ee:b1:6e:dc:d0:06:03:2e:e5: c0:e5:14:55:cc:1d:d4:5c:b3:4e:94:41:3b:5a:74: 03:14:5a:fc:62:67:33:e1:f4:17:31:ea:c4:bd:3f: 03:cc:5d:a5:8c:65:12:44:c5:bf:68:f0:82:fa:79: 3f:37:16:9b:a8:91:56:54:5e:ed:16:be:a5:65:1f: b6:aa:6b:40:f1:5a:7a:1b:2a:8e:e8:41:af:c5:10: 1d:6f:73:38:79:dc:06:2a:f6:2d:4a:d9:fd:f2:b7: e6:11:02:c1:e3:5d:37:b3:0d:9d:08:09:a1:1c:20: bc:75:89:26:c2:df:27:d1:39:03:c6:2c:73:ec:6e: 71:f9:ff:48:ff:35:a7:cc:0a:ab:07:e6:ef:0b:e6: f0:b3:02:38:c5:5b:c9:19:19:7e:06:27:80:08:22: 28:d9:4d:6b:bc:11:5f:da:8f:b5:a2:34:23:71:3f: 67:17:9a:18:99:a2:ce:61:ec:73:3f:eb:8b:54:2a: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:50:B9:E6:7F:4E:63:C5:25:43:AA:D7:1D:F8:B7:80:9B:8E:D3:E9 X509v3 Authority Key Identifier: keyid:AC:FC:B3:1E:2B:E2:AD:3D:12:B1:A7:91:02:FC:B4:FD:58:BB:66:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rPyzHivirT0SsaeRAvy0_Vi7ZoM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BA0/F7383F8438F111EF90B90740C4F9AE02/rPyzHivirT0SsaeRAvy0_Vi7ZoM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ff:eb:90:7c:a1:6c:7f:3e:c1:09:7a:7f:ca:5b:19:4c:c2: f9:9a:86:8d:10:2b:08:c1:47:09:0e:76:6d:f4:f5:40:a0:0b: f0:7f:eb:14:5a:dc:ee:58:dc:d4:42:33:75:4c:d2:6c:0f:47: 8d:37:1f:b5:4e:ca:65:3f:f0:78:53:7b:38:52:ab:3c:d3:68: 96:6f:63:49:a6:06:b0:fc:9b:72:43:48:3e:e7:7e:ec:81:e0: 2c:8c:83:dd:aa:38:2b:be:5f:f8:54:8e:3e:2f:01:6c:7b:e3: 65:71:a1:e3:8f:b9:cb:3c:77:44:a8:a8:59:8c:13:65:62:f7: b9:5a:b9:18:6b:e2:b4:d8:fb:37:30:bb:fb:4b:87:be:34:95: a2:18:11:5d:ab:df:89:5f:dc:93:73:d0:0d:7c:04:04:ae:25: c6:06:35:89:6f:33:54:8b:e2:f9:0f:0a:09:0e:d0:36:0e:ac: 52:25:52:09:b8:e4:a8:65:3b:da:73:a8:c0:cb:84:41:6d:b7: ca:66:f4:15:98:6e:c3:6c:7b:d7:44:12:4f:16:04:8b:e2:f6: 2c:19:55:d1:6d:ac:0f:3b:c2:b8:50:35:33:9b:3e:20:be:2e: 81:9b:da:f9:f4:f2:37:d8:7c:68:19:60:89:16:ed:09:fc:db: 4a:2a:fa:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdCQTAxMTAvBgNVBAUTKEFDRkNCMzFFMkJFMkFEM0QxMkIxQTc5MTAyRkNCNEZE NThCQjY2ODMwHhcNMjUwNTExMDQ1OTA0WhcNMjUwNTE4MDQ1OTA0WjAYMRYwFAYD VQQDEw02ODIwMmU5OC0xMGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY3Hrc6hgIh0hjh7WyLwi3YsO8FH3s+8VCjp7lt40ufLjs1GuLZ9BdSPbPB2 WaultLxmNyE1B1IiMETUT9NrvMXusW7c0AYDLuXA5RRVzB3UXLNOlEE7WnQDFFr8 Ymcz4fQXMerEvT8DzF2ljGUSRMW/aPCC+nk/NxabqJFWVF7tFr6lZR+2qmtA8Vp6 GyqO6EGvxRAdb3M4edwGKvYtStn98rfmEQLB4103sw2dCAmhHCC8dYkmwt8n0TkD xixz7G5x+f9I/zWnzAqrB+bvC+bwswI4xVvJGRl+BieACCIo2U1rvBFf2o+1ojQj cT9nF5oYmaLOYexzP+uLVCpjOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9QueZ/ TmPFJUOq1x34t4CbjtPpMB8GA1UdIwQYMBaAFKz8sx4r4q09ErGnkQL8tP1Yu2aD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0JBMC9GNzM4M0Y4NDM4 RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJUMFNzYWVSQXZ5MF9WaTda b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JQeXpIaXZpclQwU3NhZVJBdnkwX1ZpN1pvTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0JBMC9GNzM4M0Y4NDM4RjExMUVGOTBCOTA3NDBDNEY5QUUwMi9yUHl6SGl2aXJU MFNzYWVSQXZ5MF9WaTdab00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF/+uQfKFsfz7BCXp/ylsZTML5moaNECsIwUcJDnZt9PVAoAvwf+sU WtzuWNzUQjN1TNJsD0eNNx+1TsplP/B4U3s4Uqs802iWb2NJpgaw/JtyQ0g+537s geAsjIPdqjgrvl/4VI4+LwFse+NlcaHjj7nLPHdEqKhZjBNlYve5WrkYa+K02Ps3 MLv7S4e+NJWiGBFdq9+JX9yTc9ANfAQEriXGBjWJbzNUi+L5DwoJDtA2DqxSJVIJ uOSoZTvac6jAy4RBbbfKZvQVmG7DbHvXRBJPFgSL4vYsGVXRbawPO8K4UDUzmz4g vi6Bm9r59PI32HxoGWCJFu0J/NtKKvqH -----END CERTIFICATE-----Generated at Sun May 11 19:37:54 2025 by rpki-client