$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json) Hash identifier: l16OBzyucHPWxdGqgRa5uDA3L/SXVaEsRa5cY2i/r4g= Subject key identifier: B3:4E:2D:E2:40:00:A6:7C:26:FD:50:81:74:0E:E6:26:E0:AD:0F:2D Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft Manifest number: EB Signing time: Sat 17 May 2025 05:00:39 +0000 Manifest this update: Sat 17 May 2025 05:00:39 +0000 Manifest next update: Sat 24 May 2025 05:00:39 +0000 Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: bJbBu+mcuTyAgtXBdSBnecvL2E3rfhVDOc+wWmE2flY=) 2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Validity Not Before: May 17 05:00:39 2025 GMT Not After : May 24 05:00:39 2025 GMT Subject: CN=682817f7-d2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:4a:57:d6:c1:7c:52:84:35:dc:18:72:ce: 02:6f:9a:61:f5:6e:80:63:d1:e3:c2:e9:4c:cf:e5: b9:cc:5f:4d:25:ef:3d:df:c3:80:d1:74:a2:43:f7: 5e:3f:69:76:3d:9c:bb:3c:68:38:6c:3b:6e:f9:6e: d4:4a:37:0a:c7:2b:ff:84:45:64:68:49:51:10:5a: 2b:05:eb:f9:ce:16:e2:0b:18:ba:ab:b9:78:68:4d: 99:99:cc:c4:06:c3:69:08:35:0f:f7:58:13:6e:a2: 03:99:ca:64:80:c8:54:79:13:1f:cc:74:cc:0e:3c: d5:1c:bf:80:83:c3:8a:a3:e8:6d:07:af:b9:34:84: 71:09:c0:d5:d2:c7:1f:bf:c0:dd:28:2f:cc:a4:60: d9:83:f6:ab:b0:08:fb:1d:b7:93:cb:2c:0c:ca:3c: 6e:61:2e:86:55:6d:da:e3:c2:f4:4b:1b:ab:14:a2: 82:ad:29:ec:9d:00:1f:87:06:6a:ba:5d:6f:89:d8: 20:b4:fc:e0:b8:bd:5c:2f:f9:41:6f:e7:bd:48:f9: 41:1c:06:52:e1:40:3f:87:af:bc:c0:98:86:b6:a4: 19:c7:ea:21:17:ae:c1:09:1f:ec:d5:b8:71:2d:80: cf:6f:42:0e:2c:a0:a6:ad:26:86:d4:13:c6:31:63: 4b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:2D:E2:40:00:A6:7C:26:FD:50:81:74:0E:E6:26:E0:AD:0F:2D X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:4a:82:15:67:55:3f:a8:80:c9:e6:45:b8:1a:89:89:d5:1f: ed:4b:b1:4b:b9:08:68:99:46:8b:21:b3:26:7a:7c:a5:92:bb: 8f:8a:c4:f5:62:a1:34:0f:41:fb:a4:97:d8:06:38:da:6e:43: a1:57:44:02:4e:37:4d:a7:79:58:98:09:ed:92:b7:52:e5:99: f6:dc:e4:df:d6:83:80:37:f0:f8:18:9d:e6:38:e9:48:f9:22: d9:81:f4:88:94:78:89:06:90:82:3f:f1:80:b0:9b:6f:56:d2: 5e:48:4b:92:2c:0d:ae:e5:57:8c:62:7b:14:52:df:e2:02:5d: 9c:36:22:61:1c:0b:9e:eb:0e:3f:ad:d0:d4:9f:86:69:2a:d6: 57:8a:51:b1:27:0a:b2:0f:8b:d8:7d:6b:c8:20:2f:a7:fc:df: b6:8d:a2:31:ac:67:b5:10:a5:ee:f8:55:2f:7d:76:11:12:9a: 8f:9a:44:77:7f:a4:d0:5a:e7:cf:58:7e:4c:7c:97:e6:30:89: e8:5d:e1:a0:54:f2:68:4c:cf:87:bb:8a:fd:a3:0b:15:4a:15: 80:5a:9e:99:5e:50:f9:c0:c7:cb:a3:df:93:10:88:d5:12:a6: 83:6d:73:3d:f2:d6:73:1e:23:84:51:25:b6:97:0c:b8:6b:33: 60:ec:aa:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0 NUUwQjFDQUQwHhcNMjUwNTE3MDUwMDM5WhcNMjUwNTI0MDUwMDM5WjAYMRYwFAYD VQQDEw02ODI4MTdmNy1kMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsdFKV9bBfFKENdwYcs4Cb5ph9W6AY9HjwulMz+W5zF9NJe8938OA0XSiQ/de P2l2PZy7PGg4bDtu+W7USjcKxyv/hEVkaElREForBev5zhbiCxi6q7l4aE2ZmczE BsNpCDUP91gTbqIDmcpkgMhUeRMfzHTMDjzVHL+Ag8OKo+htB6+5NIRxCcDV0scf v8DdKC/MpGDZg/arsAj7HbeTyywMyjxuYS6GVW3a48L0SxurFKKCrSnsnQAfhwZq ul1vidggtPzguL1cL/lBb+e9SPlBHAZS4UA/h6+8wJiGtqQZx+ohF67BCR/s1bhx LYDPb0IOLKCmrSaG1BPGMWNL/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNOLeJA AKZ8Jv1QgXQO5ibgrQ8tMB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2 OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODgwNi8zOUQwODdBQUQ2OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklF N0xyU2JPTEpSaVpGNExISzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQSoIVZ1U/qIDJ5kW4GomJ1R/tS7FLuQhomUaLIbMmenylkruPisT1 YqE0D0H7pJfYBjjabkOhV0QCTjdNp3lYmAntkrdS5Zn23OTf1oOAN/D4GJ3mOOlI +SLZgfSIlHiJBpCCP/GAsJtvVtJeSEuSLA2u5VeMYnsUUt/iAl2cNiJhHAue6w4/ rdDUn4ZpKtZXilGxJwqyD4vYfWvIIC+n/N+2jaIxrGe1EKXu+FUvfXYREpqPmkR3 f6TQWufPWH5MfJfmMInoXeGgVPJoTM+Hu4r9owsVShWAWp6ZXlD5wMfLo9+TEIjV EqaDbXM98tZzHiOEUSW2lwy4azNg7Kqg -----END CERTIFICATE-----Generated at Sat May 17 19:20:54 2025 by rpki-client