$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: Ta0+kcW/k2buBdHw0mtKr+X4+h5Wcr6AyBOgtwL2LRI= Subject key identifier: F9:99:49:7B:31:97:6A:ED:C3:71:D0:BB:66:68:A1:2A:61:60:8D:8B Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 06E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 06D7 Signing time: Wed 02 Apr 2025 22:03:07 +0000 Manifest this update: Wed 02 Apr 2025 22:03:07 +0000 Manifest next update: Wed 09 Apr 2025 22:03:07 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: E1Xijhf78k/kx1/csz4iDxDR0SHZX9yVt6g6odjYm6g=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 22:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1763 (0x6e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43 Validity Not Before: Apr 2 22:03:07 2025 GMT Not After : Apr 9 22:03:07 2025 GMT Subject: CN=67edb41b-d391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5e:bf:c2:9a:3e:ae:43:fe:81:95:a7:05:e6: 35:8c:06:c6:0b:2f:ee:9b:b0:c4:3f:44:a8:31:f5: 98:0e:6e:21:5c:15:e2:b4:44:00:7d:fe:05:fb:a8: f1:59:4e:01:c1:80:38:cf:08:3c:fe:a4:86:5a:dc: e9:42:d6:39:0f:8c:b6:d7:6d:36:eb:69:89:ef:8c: 30:88:53:db:e1:d0:ce:f1:20:be:b4:0d:60:24:2f: 4d:b5:ab:5d:11:ff:44:2d:d3:d8:25:13:9e:d2:d8: 3c:06:c5:91:e2:85:f4:9f:ed:9e:70:a8:7d:3d:46: bc:a7:92:8e:a2:ed:4a:49:bc:fb:50:45:9d:d5:a7: fd:7c:65:cb:cc:c9:06:19:6e:51:5f:6d:76:2a:5d: 3f:d8:cc:8b:73:dc:f6:89:7f:3e:1c:81:05:63:d3: b6:13:77:12:7e:6f:26:3c:e9:63:7a:fb:a0:23:a7: 7c:f1:af:4d:08:69:e9:5a:81:3d:88:c3:5e:22:f9: da:2b:88:ed:9b:d5:21:4a:48:35:4d:04:0c:5f:5b: 9d:ef:13:e1:f3:5b:f1:b6:63:d2:fb:fd:c1:b6:45: ee:05:b3:80:e2:31:30:2d:e0:36:a6:dd:29:b2:d8: cb:72:76:d2:70:5f:b1:b9:92:2d:17:b8:24:ac:f9: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:99:49:7B:31:97:6A:ED:C3:71:D0:BB:66:68:A1:2A:61:60:8D:8B X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:06:f1:86:94:67:e7:a2:62:cb:f4:84:5d:a6:57:fa:1c:f8: f4:d2:75:ac:6a:d6:4a:e8:bb:bb:78:5c:58:12:99:28:6d:16: 40:e6:dd:2b:6c:c7:79:b4:e6:77:95:ee:b9:d4:af:84:aa:88: fa:b9:3e:3e:e5:a0:30:9c:e1:1e:aa:16:b0:fe:58:9e:e0:ab: 48:c2:6c:b0:14:bc:ee:51:47:f5:aa:c9:bc:6c:52:93:54:5e: 17:b8:ae:89:37:5f:5f:b3:73:b1:60:11:e6:3d:fd:9b:b1:c6: 65:a1:2c:3f:29:ed:ae:5e:30:4c:da:4a:65:ac:53:31:25:e1: 0b:0b:a7:33:3a:5d:b5:a6:5c:16:14:6d:1b:ea:94:0a:e8:bc: fe:80:26:00:07:c9:f8:37:ed:5b:f1:c2:1d:b5:6c:48:20:1f: c8:01:7c:9c:1e:35:d7:85:06:95:ea:da:04:a8:20:97:14:1f: 29:7f:3e:2e:7d:ee:9b:3b:8a:18:4d:42:9f:f5:b3:4e:9d:7b: 06:59:6e:9b:72:6e:83:55:1f:cc:68:dc:32:70:c5:a2:90:62: 0b:e9:4a:32:e5:f3:ae:4a:79:d5:ad:78:32:c3:88:bf:8a:b7: 08:f8:bf:61:3e:d8:e6:b5:2b:f9:0f:65:7e:90:27:af:71:7d: 86:76:c2:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwNDAyMjIwMzA3WhcNMjUwNDA5MjIwMzA3WjAYMRYwFAYD VQQDEw02N2VkYjQxYi1kMzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8F6/wpo+rkP+gZWnBeY1jAbGCy/um7DEP0SoMfWYDm4hXBXitEQAff4F+6jx WU4BwYA4zwg8/qSGWtzpQtY5D4y2120262mJ74wwiFPb4dDO8SC+tA1gJC9Ntatd Ef9ELdPYJROe0tg8BsWR4oX0n+2ecKh9PUa8p5KOou1KSbz7UEWd1af9fGXLzMkG GW5RX212Kl0/2MyLc9z2iX8+HIEFY9O2E3cSfm8mPOljevugI6d88a9NCGnpWoE9 iMNeIvnaK4jtm9UhSkg1TQQMX1ud7xPh81vxtmPS+/3BtkXuBbOA4jEwLeA2pt0p stjLcnbScF+xuZItF7gkrPmxuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmZSXsx l2rtw3HQu2ZooSphYI2LMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKBvGGlGfnomLL9IRdplf6HPj00nWsatZK6Lu7eFxYEpkobRZA5t0r bMd5tOZ3le651K+Eqoj6uT4+5aAwnOEeqhaw/lie4KtIwmywFLzuUUf1qsm8bFKT VF4XuK6JN19fs3OxYBHmPf2bscZloSw/Ke2uXjBM2kplrFMxJeELC6czOl21plwW FG0b6pQK6Lz+gCYAB8n4N+1b8cIdtWxIIB/IAXycHjXXhQaV6toEqCCXFB8pfz4u fe6bO4oYTUKf9bNOnXsGWW6bcm6DVR/MaNwycMWikGIL6Uoy5fOuSnnVrXgyw4i/ ircI+L9hPtjmtSv5D2V+kCevcX2GdsKm -----END CERTIFICATE-----Generated at Fri Apr 4 18:37:25 2025 by rpki-client