$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: 9IRuJjGnogpdL0SwNf1z40V/6NwpR7Cs3FLBmeIaS9U= Subject key identifier: F2:BD:61:8B:F5:E1:47:D3:02:6B:62:BA:16:39:C2:0D:C3:16:FD:54 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0A69 Signing time: Fri 04 Apr 2025 19:47:25 +0000 Manifest this update: Fri 04 Apr 2025 19:47:25 +0000 Manifest next update: Fri 11 Apr 2025 19:47:25 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: LCyx8mMZfsaMG3JRHMSGZtkug8yaj0EI38lwUKp+JH0=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3 Validity Not Before: Apr 4 19:47:25 2025 GMT Not After : Apr 11 19:47:25 2025 GMT Subject: CN=67f0374d-7e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b2:f8:50:e6:1d:2f:10:14:4d:97:2b:91:9f: 83:e9:2f:1c:66:53:80:cb:c0:e9:f3:53:e4:5d:7e: 53:7e:43:58:00:29:e5:38:f5:c4:7a:c7:2b:05:05: 75:c4:4f:d5:74:6d:3c:58:f9:f6:f0:37:52:78:6a: 28:3d:36:53:f7:9c:50:c2:4f:b4:7e:d7:b1:78:a1: 8c:c1:20:6e:3d:0f:8b:d6:7e:26:50:91:b5:b7:44: b9:3d:a8:15:45:a8:17:0a:ed:6f:4d:9a:6c:31:45: 26:57:1c:22:d2:24:b1:4a:23:bb:e9:2f:dd:d9:78: df:d5:33:33:ae:b8:bb:77:c3:54:6c:8c:2c:df:c6: 84:eb:a5:84:d3:60:54:21:34:9e:74:cf:ef:1c:bc: c2:1a:dd:25:4d:63:ba:6f:19:be:c7:6e:46:8e:4d: 53:3f:bf:1b:0b:24:69:ad:39:b4:ab:90:84:39:78: 7d:42:f2:7a:01:19:a0:04:4c:ed:6f:31:27:d0:b3: cc:8c:28:5e:b6:a4:eb:f1:3d:46:ce:32:00:96:43: 3d:27:f2:77:37:d7:3e:96:64:a6:e7:6c:24:c7:82: 63:1b:3e:6b:46:6c:14:09:3c:34:7f:8c:7f:09:2a: 29:5f:d2:65:d5:db:c3:13:03:64:fe:e0:0f:81:b4: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:61:8B:F5:E1:47:D3:02:6B:62:BA:16:39:C2:0D:C3:16:FD:54 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b1:24:f0:c1:76:3e:c9:2d:5b:e5:9b:72:a3:28:ab:05:85: c6:d8:23:c2:37:bd:3b:c7:b0:89:2f:45:08:06:26:8c:69:ed: 67:70:29:5a:2e:8b:ff:21:ae:a7:60:7c:cd:79:e4:c2:eb:e6: 68:56:ad:e1:1d:e9:08:89:47:83:8d:2d:d8:65:be:e7:7c:7c: cd:cf:87:ed:02:b6:7b:67:b9:54:bf:21:d8:6d:52:71:81:0f: 7e:ae:4b:f7:b3:77:c8:b7:63:42:1b:0d:87:d0:bd:7f:64:22: 52:c8:33:2a:f6:13:2c:a1:ba:8c:3c:65:da:54:cb:fb:a3:56: d8:83:bc:91:6b:13:94:26:5a:71:c9:8d:c9:f5:68:c8:93:6e: 9f:37:c9:e4:32:49:a9:44:8c:69:fd:af:30:d2:2d:e5:83:54: ea:2a:a6:91:2a:cd:87:4e:84:74:21:56:25:18:7b:f3:b0:c7: 4c:b7:d8:4c:e9:d3:76:37:96:28:25:79:75:82:20:6c:46:92: 0f:22:32:ac:23:05:bf:ab:49:23:f9:aa:88:0a:c7:de:2e:e1: ed:79:73:cf:7d:34:7f:e3:1a:c8:73:cd:17:41:f5:16:72:7e: 49:54:a1:33:e2:cf:7d:30:72:f3:d9:f5:12:77:0a:00:ca:82: a0:21:18:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwNDA0MTk0NzI1WhcNMjUwNDExMTk0NzI1WjAYMRYwFAYD VQQDEw02N2YwMzc0ZC03ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3rL4UOYdLxAUTZcrkZ+D6S8cZlOAy8Dp81PkXX5TfkNYACnlOPXEescrBQV1 xE/VdG08WPn28DdSeGooPTZT95xQwk+0ftexeKGMwSBuPQ+L1n4mUJG1t0S5PagV RagXCu1vTZpsMUUmVxwi0iSxSiO76S/d2Xjf1TMzrri7d8NUbIws38aE66WE02BU ITSedM/vHLzCGt0lTWO6bxm+x25Gjk1TP78bCyRprTm0q5CEOXh9QvJ6ARmgBEzt bzEn0LPMjChetqTr8T1GzjIAlkM9J/J3N9c+lmSm52wkx4JjGz5rRmwUCTw0f4x/ CSopX9Jl1dvDEwNk/uAPgbT7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK9YYv1 4UfTAmtiuhY5wg3DFv1UMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhsSTwwXY+yS1b5ZtyoyirBYXG2CPCN707x7CJL0UIBiaMae1ncCla Lov/Ia6nYHzNeeTC6+ZoVq3hHekIiUeDjS3YZb7nfHzNz4ftArZ7Z7lUvyHYbVJx gQ9+rkv3s3fIt2NCGw2H0L1/ZCJSyDMq9hMsobqMPGXaVMv7o1bYg7yRaxOUJlpx yY3J9WjIk26fN8nkMkmpRIxp/a8w0i3lg1TqKqaRKs2HToR0IVYlGHvzsMdMt9hM 6dN2N5YoJXl1giBsRpIPIjKsIwW/q0kj+aqICsfeLuHteXPPfTR/4xrIc80XQfUW cn5JVKEz4s99MHLz2fUSdwoAyoKgIRhG -----END CERTIFICATE-----Generated at Fri Apr 4 22:37:00 2025 by rpki-client