$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: TPTkuZlvEl8qo6Ng2dFEzfQGd8OcXXqndStv6Q+2TuA= Subject key identifier: 91:67:0B:8E:5B:C9:FC:97:CF:1D:91:1D:0B:9C:06:C1:59:E1:95:C1 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0B78 Signing time: Sat 10 May 2025 18:49:14 +0000 Manifest this update: Sat 10 May 2025 18:49:14 +0000 Manifest next update: Sat 17 May 2025 18:49:14 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: vUjmulyu3paRrZI+UxmeoPGLLIjkTFUoyEfBZmPoxoI=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:24:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: May 10 18:49:14 2025 GMT Not After : May 17 18:49:14 2025 GMT Subject: CN=681f9faa-1003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:9f:bd:e9:58:cb:e4:a3:ef:96:fa:3e:fe: ac:93:14:87:e1:57:8e:de:7b:7c:a3:02:ba:a5:3a: 24:7a:99:63:7a:82:95:3e:9b:b2:39:1c:ec:3e:3b: 6d:29:5a:13:a7:c3:c0:75:2f:26:dc:00:48:11:3e: 17:5e:b6:d9:4f:76:8e:33:fc:1a:5d:46:4a:ac:57: 1a:90:4b:c2:3a:39:82:fb:5f:e0:3d:e8:79:66:25: ce:20:a3:7f:f9:da:ac:9e:e1:4e:7b:51:35:c1:c7: 40:a0:31:76:a7:50:df:61:f6:d6:68:0e:22:68:29: ee:b4:56:52:84:a6:72:b6:65:fd:a2:11:ed:0e:e6: 07:5f:fa:a7:7d:97:1c:5c:2f:0f:16:4e:83:49:3e: 0a:6d:a3:38:9d:bb:ae:68:a3:ef:d7:9c:c6:04:c5: e3:3d:72:84:89:bd:43:38:16:4e:d4:f8:db:0e:f4: 68:43:2f:a8:74:34:88:71:b0:a1:09:36:5e:a5:a4: bc:a2:0e:e3:5f:48:40:a4:1f:5c:91:f4:54:25:1f: 59:e4:e9:fb:5d:ae:b8:7f:99:cc:77:dc:ef:4a:e8: 16:eb:88:b1:88:f5:5f:05:2b:18:37:0f:81:ad:f4: 74:b8:63:2c:53:3b:46:c2:0d:a7:50:48:ff:1c:e4: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:67:0B:8E:5B:C9:FC:97:CF:1D:91:1D:0B:9C:06:C1:59:E1:95:C1 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:25:ee:1d:da:7a:ea:c4:bf:15:19:48:7f:37:f5:e3:e9:66: 8a:d8:ac:ab:c2:7c:b2:13:05:a4:49:78:3d:70:5a:e6:2e:f8: 91:11:49:01:3e:27:a0:48:7c:80:2a:d2:4e:9c:c9:8e:a7:ea: a9:77:f1:34:27:7b:52:56:55:e8:9f:16:5b:fb:14:dd:58:6b: fb:45:88:1d:2c:00:9b:1c:7e:6a:c8:6c:20:fe:78:00:0a:8e: 98:b4:41:0d:ea:d3:67:60:68:62:c1:2a:ac:1b:ff:ed:a0:e0: 65:f5:d9:34:16:aa:1b:c5:6c:2e:34:7c:bd:71:f4:0a:e4:62: cc:45:48:6a:9d:5f:29:0e:b4:90:f2:07:41:42:d5:75:1a:84: d4:0f:43:05:7a:91:39:c0:fe:f8:69:e5:de:40:7d:1c:63:a2: 89:62:b0:70:02:02:3e:99:df:b2:c9:2a:14:2f:a1:17:6e:e1: fc:82:0a:34:0c:52:c0:a3:79:9e:11:16:b3:d1:06:f9:61:e2: 32:4e:c0:12:6c:98:ee:94:6f:31:a5:78:ab:74:6b:50:db:fd: be:78:f2:50:8d:dd:a2:75:06:03:fa:e7:d3:48:d7:1c:69:3e: 92:a2:e8:17:89:5d:75:38:bd:c1:2a:e6:5b:be:d8:ca:32:67: eb:ce:8a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwNTEwMTg0OTE0WhcNMjUwNTE3MTg0OTE0WjAYMRYwFAYD VQQDEw02ODFmOWZhYS0xMDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvv+fvelYy+Sj75b6Pv6skxSH4VeO3nt8owK6pTokepljeoKVPpuyORzsPjtt KVoTp8PAdS8m3ABIET4XXrbZT3aOM/waXUZKrFcakEvCOjmC+1/gPeh5ZiXOIKN/ +dqsnuFOe1E1wcdAoDF2p1DfYfbWaA4iaCnutFZShKZytmX9ohHtDuYHX/qnfZcc XC8PFk6DST4KbaM4nbuuaKPv15zGBMXjPXKEib1DOBZO1PjbDvRoQy+odDSIcbCh CTZepaS8og7jX0hApB9ckfRUJR9Z5On7Xa64f5nMd9zvSugW64ixiPVfBSsYNw+B rfR0uGMsUztGwg2nUEj/HOS44wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFnC45b yfyXzx2RHQucBsFZ4ZXBMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbJe4d2nrqxL8VGUh/N/Xj6WaK2KyrwnyyEwWkSXg9cFrmLviREUkB PiegSHyAKtJOnMmOp+qpd/E0J3tSVlXonxZb+xTdWGv7RYgdLACbHH5qyGwg/ngA Co6YtEEN6tNnYGhiwSqsG//toOBl9dk0FqobxWwuNHy9cfQK5GLMRUhqnV8pDrSQ 8gdBQtV1GoTUD0MFepE5wP74aeXeQH0cY6KJYrBwAgI+md+yySoUL6EXbuH8ggo0 DFLAo3meERaz0Qb5YeIyTsASbJjulG8xpXirdGtQ2/2+ePJQjd2idQYD+ufTSNcc aT6SougXiV11OL3BKuZbvtjKMmfrzopI -----END CERTIFICATE-----Generated at Sat May 10 22:17:14 2025 by rpki-client