$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: oJsS2wLUW+Zcj2XpIczS3rFXHY20dWQDJL/6jbU6EhM= Subject key identifier: 5B:24:F9:9A:0E:85:85:27:08:E6:82:E3:06:A6:9E:91:73:5E:DE:B3 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 01E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 01DF Signing time: Tue 13 May 2025 01:59:32 +0000 Manifest this update: Tue 13 May 2025 01:59:31 +0000 Manifest next update: Tue 20 May 2025 01:59:31 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: hK/ADeqCc5D2Wr/mKyPncMZl+acFEp8WOHiKrRJPPX8=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 01:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 482 (0x1e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: May 13 01:59:31 2025 GMT Not After : May 20 01:59:31 2025 GMT Subject: CN=6822a784-1701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:c8:6d:45:13:da:00:cf:41:32:56:67:be: 1a:83:c2:8e:3e:20:62:ac:ab:3f:7b:1d:28:3e:5d: 18:f8:e8:d2:92:c9:8b:e8:52:9b:50:77:ca:18:cf: b6:87:42:6d:82:6d:61:fd:20:7e:98:4f:6a:3c:f5: b7:fa:d0:2d:6d:ba:06:12:d0:ee:af:3e:3d:99:c5: 93:fd:68:3d:72:ce:c1:89:60:d0:97:78:4a:e4:f0: 56:5b:8a:2e:01:53:b6:e8:f0:63:2b:8a:c9:9b:dd: 11:c5:af:04:a3:c3:8b:87:54:a5:3f:c9:a8:b4:50: 7a:88:71:09:c7:a9:b3:77:1b:aa:9e:4c:7d:a3:11: e0:60:e2:00:70:0d:91:7d:7d:71:23:2c:74:b8:fc: 0c:1b:47:8d:3a:56:47:51:79:7b:ec:bb:fe:37:29: ee:a4:03:39:04:68:c8:4c:5d:d5:b1:4f:2e:ab:7c: 71:23:1a:62:0d:68:52:bb:df:a3:ac:b1:e5:59:eb: d2:92:5e:22:5c:51:db:14:9b:a3:3e:b3:8b:37:24: de:0f:c0:a4:d6:19:54:1c:07:15:ba:61:0d:09:df: e6:17:e4:87:11:4a:83:7d:54:79:f0:e6:76:14:bd: 3f:b5:99:9f:7b:d2:93:34:98:dd:7b:6d:db:e2:7f: 61:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:24:F9:9A:0E:85:85:27:08:E6:82:E3:06:A6:9E:91:73:5E:DE:B3 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4f:00:43:00:3c:ed:d0:02:ba:00:dd:b1:20:84:44:10:5d: 78:2f:0f:8e:84:f0:e3:2d:5d:57:96:60:00:b3:be:fe:13:91: d8:57:8a:0b:e2:9f:9f:09:b2:da:ed:cd:b3:92:ad:8a:e3:fe: e8:23:fc:26:eb:75:f2:af:e1:69:c3:c1:b6:98:40:71:bb:8f: c5:64:c8:5c:33:b0:89:f1:13:76:20:5c:55:3c:61:95:3a:a7: 28:b5:27:9f:9c:02:b8:e7:34:88:de:62:10:e2:fa:4a:46:e4: 36:30:fc:8f:e6:1a:97:fe:ce:7d:86:27:b4:1a:c8:9c:b3:bf: 34:cb:56:9d:fb:f8:5a:e3:de:2b:38:d4:11:d7:19:3a:e1:a2: 47:dd:d9:82:4b:6f:5a:16:26:b7:2e:dc:3b:80:24:01:5d:ad: 3b:67:1d:c6:14:2b:9e:5e:89:50:4d:0d:0f:05:1d:40:de:c1: 65:a6:6f:f4:6e:fb:2f:eb:57:0a:03:9e:3e:5b:2f:22:df:02: ab:8b:c9:de:23:7a:88:77:f5:eb:f4:db:af:82:a2:96:61:35: 2c:0c:59:72:44:e1:09:fd:61:d5:c1:ff:4f:6d:30:22:7a:72: 31:8d:6d:84:79:eb:de:78:29:9a:76:50:fa:cd:ab:f2:ed:e1: 55:0e:93:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwNTEzMDE1OTMxWhcNMjUwNTIwMDE1OTMxWjAYMRYwFAYD VQQDEw02ODIyYTc4NC0xNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqXvIbUUT2gDPQTJWZ74ag8KOPiBirKs/ex0oPl0Y+OjSksmL6FKbUHfKGM+2 h0Jtgm1h/SB+mE9qPPW3+tAtbboGEtDurz49mcWT/Wg9cs7BiWDQl3hK5PBWW4ou AVO26PBjK4rJm90Rxa8Eo8OLh1SlP8motFB6iHEJx6mzdxuqnkx9oxHgYOIAcA2R fX1xIyx0uPwMG0eNOlZHUXl77Lv+NynupAM5BGjITF3VsU8uq3xxIxpiDWhSu9+j rLHlWevSkl4iXFHbFJujPrOLNyTeD8Ck1hlUHAcVumENCd/mF+SHEUqDfVR58OZ2 FL0/tZmfe9KTNJjde23b4n9hBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsk+ZoO hYUnCOaC4wamnpFzXt6zMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbTwBDADzt0AK6AN2xIIREEF14Lw+OhPDjLV1XlmAAs77+E5HYV4oL 4p+fCbLa7c2zkq2K4/7oI/wm63Xyr+Fpw8G2mEBxu4/FZMhcM7CJ8RN2IFxVPGGV OqcotSefnAK45zSI3mIQ4vpKRuQ2MPyP5hqX/s59hie0Gsics780y1ad+/ha494r ONQR1xk64aJH3dmCS29aFia3Ltw7gCQBXa07Zx3GFCueXolQTQ0PBR1A3sFlpm/0 bvsv61cKA54+Wy8i3wKri8neI3qId/Xr9NuvgqKWYTUsDFlyROEJ/WHVwf9PbTAi enIxjW2EeeveeCmadlD6zavy7eFVDpPc -----END CERTIFICATE-----Generated at Tue May 13 22:58:24 2025 by rpki-client