$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: W4luHsbrYyx9euKShFNwbOYaJLcxUnDS5yWVjAyZ5mc= Subject key identifier: E3:14:39:07:F7:A2:79:0B:0A:5A:62:BA:6C:3E:1F:33:73:5B:4C:34 Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 0770 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 0762 Signing time: Sun 04 May 2025 21:18:22 +0000 Manifest this update: Sun 04 May 2025 21:18:21 +0000 Manifest next update: Sun 11 May 2025 21:18:21 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: Sagu3dvCIt2a0h8RNNiVirsOgXXCvxVpxZkWpAXS6gc=) 2: 24A9BFDE0FD811F08ABAAC1AC4F9AE02.roa (hash: IyER0mz0vb9MAuJJmaVzFEqnaYYgcSDAs66+bdrxMNM=) 3: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: eFS1nhS/cjjP4D0ssaf1AaxH+1D33Vf2JZuqTy0/YEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 21:18:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1904 (0x770) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: May 4 21:18:21 2025 GMT Not After : May 11 21:18:21 2025 GMT Subject: CN=6817d99e-4dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:36:3d:cd:d4:c9:a9:86:de:b5:04:87:2d: 89:f3:24:ad:0e:e9:8c:f3:a9:e7:c8:16:06:4d:43: 51:3f:9c:52:24:bf:3d:c3:aa:ce:a7:9c:7c:fa:27: 50:29:b5:ba:1c:a5:b9:42:ec:63:0d:53:89:15:6e: df:81:4d:06:54:5f:6c:42:87:77:03:23:8f:10:67: b0:28:07:ff:7b:f7:46:22:39:f9:19:81:32:ab:ea: d5:2a:d8:4c:25:a3:12:f2:02:71:79:06:ba:17:f8: 41:b1:70:92:32:02:f4:04:a8:ba:01:e8:fb:4a:57: 09:47:7e:89:7e:45:f1:2b:f8:e1:50:a1:18:b7:22: db:7f:57:8f:af:50:a2:a9:89:2e:6e:58:9c:d3:d2: cf:32:ad:83:51:dd:0c:9d:05:3c:2a:10:b3:68:08: 13:c6:1d:19:5b:1b:80:89:ea:46:53:d6:47:ef:50: 38:d2:97:47:83:69:24:f6:f4:a7:ae:ff:59:54:9c: 3a:26:bf:e7:6f:28:05:0e:79:7e:9f:93:92:35:f6: 75:14:d3:3f:7b:e8:d2:24:bf:3c:47:1d:26:24:2e: 21:47:f5:89:e3:64:7b:f3:db:f5:34:e4:88:54:ac: a5:f0:b7:ea:fa:6f:b0:d7:44:cf:bf:5c:16:6f:08: a9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:39:07:F7:A2:79:0B:0A:5A:62:BA:6C:3E:1F:33:73:5B:4C:34 X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:a4:57:3a:01:13:14:95:86:1d:17:a3:67:c0:f4:c8:6b:1b: f8:21:0d:57:a7:38:af:39:11:78:3a:bb:9a:40:75:3c:17:25: 42:5b:fc:b0:a9:25:4b:b1:2c:a8:69:f6:a6:d5:f4:90:af:80: f6:5d:f3:ab:83:c1:f5:9c:f3:9c:b2:1f:f2:ad:c8:f9:23:47: 9a:60:4a:99:0d:a9:e7:9c:f8:f9:73:18:f8:75:ba:30:35:e8: fe:78:3a:09:e1:9c:0a:84:dc:b0:f5:20:fe:c5:18:ae:82:af: 9c:4a:f7:13:8c:3b:ce:6e:c8:77:b0:37:6c:90:10:b1:81:b6: c3:b0:35:3b:05:1a:68:d7:a0:12:0c:3b:17:39:23:4f:77:4e: d7:69:eb:89:21:66:39:ac:bb:41:88:e3:a0:6b:60:af:06:7a: 55:f2:6d:8a:94:b2:97:82:aa:07:df:f4:3f:3f:53:66:f3:16: 4e:dd:95:1c:63:df:e5:e5:6d:5f:2f:76:47:15:f4:59:48:91: 79:0a:41:c4:95:32:b6:b3:90:66:e0:17:bb:04:32:aa:aa:21: ed:8b:73:50:83:54:dc:51:7c:76:89:5d:0f:8e:a2:f8:37:ea: e4:09:0f:2a:94:8a:1d:ff:ae:16:72:82:98:88:36:3a:6b:e5: 87:47:3c:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUwNTA0MjExODIxWhcNMjUwNTExMjExODIxWjAYMRYwFAYD VQQDEw02ODE3ZDk5ZS00ZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAup82Pc3UyamG3rUEhy2J8yStDumM86nnyBYGTUNRP5xSJL89w6rOp5x8+idQ KbW6HKW5QuxjDVOJFW7fgU0GVF9sQod3AyOPEGewKAf/e/dGIjn5GYEyq+rVKthM JaMS8gJxeQa6F/hBsXCSMgL0BKi6Aej7SlcJR36JfkXxK/jhUKEYtyLbf1ePr1Ci qYkublic09LPMq2DUd0MnQU8KhCzaAgTxh0ZWxuAiepGU9ZH71A40pdHg2kk9vSn rv9ZVJw6Jr/nbygFDnl+n5OSNfZ1FNM/e+jSJL88Rx0mJC4hR/WJ42R789v1NOSI VKyl8Lfq+m+w10TPv1wWbwipNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMUOQf3 onkLClpiumw+HzNzW0w0MB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJpFc6ARMUlYYdF6NnwPTIaxv4IQ1XpzivORF4OruaQHU8FyVCW/yw qSVLsSyoafam1fSQr4D2XfOrg8H1nPOcsh/yrcj5I0eaYEqZDannnPj5cxj4dbow Nej+eDoJ4ZwKhNyw9SD+xRiugq+cSvcTjDvObsh3sDdskBCxgbbDsDU7BRpo16AS DDsXOSNPd07XaeuJIWY5rLtBiOOga2CvBnpV8m2KlLKXgqoH3/Q/P1Nm8xZO3ZUc Y9/l5W1fL3ZHFfRZSJF5CkHElTK2s5Bm4Be7BDKqqiHti3NQg1TcUXx2iV0PjqL4 N+rkCQ8qlIod/64WcoKYiDY6a+WHRzzB -----END CERTIFICATE-----Generated at Mon May 5 08:16:50 2025 by rpki-client