$ rpki-client -vvf rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft File: _y7elNMHvCOJpLc5WSplf3FhzKI.mft (raw, json) Hash identifier: A2fm1A2YWu0U6f0+uX9wTb1mJtDdVKICzvWtKjvDXxo= Subject key identifier: 9D:28:33:7D:AB:2C:DD:33:3D:1E:FA:57:41:7C:82:28:CD:38:30:2B Authority key identifier: FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 Certificate issuer: /CN=A911A7C2/serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft Manifest number: 011D Signing time: Sat 31 May 2025 04:25:49 +0000 Manifest this update: Sat 31 May 2025 04:25:49 +0000 Manifest next update: Sat 07 Jun 2025 04:25:49 +0000 Files and hashes: 1: _y7elNMHvCOJpLc5WSplf3FhzKI.crl (hash: f8UiD2UFs5r76Ud1DrdX5zQPTHXICqbhC0elm6+4spY=) 2: BFA5084C8E9011EEAD56911CC4F9AE02.roa (hash: fV5G2JHx/0fBFcbcRO1EqGSRjg68YJvhatHDOdfRaJ8=) 3: 020CCB128E9011EEB7C5651BC4F9AE02.roa (hash: Ftqlgd8k9h+7jvDiAqF4wkjpcUSN8GhKRQccLRNHlws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A7C2, serialNumber=FF2EDE94D307BC2389A4B739592A657F7161CCA2 Validity Not Before: May 31 04:25:49 2025 GMT Not After : Jun 7 04:25:49 2025 GMT Subject: CN=683a84cd-e2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9b:a7:ff:39:aa:4a:fb:b3:3d:be:95:40:6f: a3:be:a4:90:4b:ac:59:a7:a6:1c:72:27:d8:90:d8: b0:1d:8d:f2:1c:22:3d:13:be:a9:cb:a3:8c:fc:18: 43:fd:f2:25:97:e2:0b:99:ec:8c:e8:91:77:c2:95: e3:88:ad:02:77:8a:ea:e6:91:fa:96:02:ce:6e:50: 33:e8:31:5a:d9:60:0d:20:bd:d3:0b:b8:1d:8b:c9: 5a:b5:d6:d1:28:50:6f:1e:c7:bb:a2:18:69:97:81: ea:58:cf:27:8c:6d:7a:f7:9a:a0:6a:8c:dd:52:6e: 51:d8:6f:1a:02:94:54:82:92:5c:ba:5b:6d:85:ea: 07:de:a4:19:79:e5:e8:1e:3b:f0:11:d0:9b:7f:19: 7e:1d:07:dd:69:4e:c2:db:55:0c:ae:8c:f6:6e:7b: f0:aa:d7:38:da:b4:51:4a:40:54:44:d6:36:f7:6e: 34:eb:be:6b:3f:21:a2:12:33:bd:22:af:5d:cd:35: b4:9e:5d:9b:fe:53:cf:cb:ea:72:50:3b:de:22:71: 61:80:b8:72:bf:dc:8c:22:a8:5b:36:4c:65:c5:43: 84:a4:b9:36:37:32:a3:a6:c7:39:58:80:c2:42:6d: 38:59:64:80:59:5d:03:8a:56:75:f9:1d:31:55:68: f2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:28:33:7D:AB:2C:DD:33:3D:1E:FA:57:41:7C:82:28:CD:38:30:2B X509v3 Authority Key Identifier: keyid:FF:2E:DE:94:D3:07:BC:23:89:A4:B7:39:59:2A:65:7F:71:61:CC:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_y7elNMHvCOJpLc5WSplf3FhzKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A7C2/7AB850888E8911EEA6A5E357C4F9AE02/_y7elNMHvCOJpLc5WSplf3FhzKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:89:65:ff:05:d1:65:70:12:0f:b5:3d:89:d0:76:2a:e4:c0: 25:85:54:e9:62:e4:18:f7:01:21:39:ff:a0:26:51:bd:78:e5: 2c:36:2c:3a:15:4e:dd:f7:12:0c:f1:e6:ff:3d:d0:8d:fe:b2: 5a:e6:f8:8e:83:51:fb:23:e5:2f:5c:f2:48:e9:0d:9e:86:52: 65:5d:90:d9:83:2b:06:4a:5d:02:33:69:78:a0:69:65:a2:d1: 68:9e:8f:99:00:5d:58:d7:b6:b5:b6:41:05:9e:e1:91:9b:e3: b0:93:27:bb:e4:e8:66:ef:d8:eb:93:10:6d:3c:16:48:f6:ea: 11:6a:87:e1:93:75:ea:a8:b8:15:45:6d:a4:be:d0:10:c0:64: 69:86:e3:1e:e5:2d:24:12:82:16:cc:f9:30:bb:c4:f0:19:37: 8c:0b:a4:a7:67:ad:45:61:f5:e9:af:14:25:4f:17:81:68:b3: 00:9d:a0:1f:f6:0a:fe:5f:5f:8e:85:2a:2f:bc:a6:ba:f1:24: 44:4c:28:53:24:c2:a6:4d:63:87:5d:f3:0c:84:d2:7d:f5:3f: c1:e6:d2:7c:0b:e4:b2:74:d7:be:01:c9:39:dc:10:a8:9c:4b: 37:31:3f:6b:ef:47:20:56:eb:f7:d1:14:f9:70:92:57:03:e4: 27:27:bb:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE3QzIxMTAvBgNVBAUTKEZGMkVERTk0RDMwN0JDMjM4OUE0QjczOTU5MkE2NTdG NzE2MUNDQTIwHhcNMjUwNTMxMDQyNTQ5WhcNMjUwNjA3MDQyNTQ5WjAYMRYwFAYD VQQDEw02ODNhODRjZC1lMmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq5un/zmqSvuzPb6VQG+jvqSQS6xZp6YccifYkNiwHY3yHCI9E76py6OM/BhD /fIll+ILmeyM6JF3wpXjiK0Cd4rq5pH6lgLOblAz6DFa2WANIL3TC7gdi8latdbR KFBvHse7ohhpl4HqWM8njG1695qgaozdUm5R2G8aApRUgpJculttheoH3qQZeeXo HjvwEdCbfxl+HQfdaU7C21UMroz2bnvwqtc42rRRSkBURNY29240675rPyGiEjO9 Iq9dzTW0nl2b/lPPy+pyUDveInFhgLhyv9yMIqhbNkxlxUOEpLk2NzKjpsc5WIDC Qm04WWSAWV0DilZ1+R0xVWjyWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0oM32r LN0zPR76V0F8gijNODArMB8GA1UdIwQYMBaAFP8u3pTTB7wjiaS3OVkqZX9xYcyi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTdDMi83QUI4NTA4ODhF ODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZDT0pwTGM1V1NwbGYzRmh6 S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL195N2VsTk1IdkNPSnBMYzVXU3BsZjNGaHpLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QTdDMi83QUI4NTA4ODhFODkxMUVFQTZBNUUzNTdDNEY5QUUwMi9feTdlbE5NSHZD T0pwTGM1V1NwbGYzRmh6S0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiiWX/BdFlcBIPtT2J0HYq5MAlhVTpYuQY9wEhOf+gJlG9eOUsNiw6 FU7d9xIM8eb/PdCN/rJa5viOg1H7I+UvXPJI6Q2ehlJlXZDZgysGSl0CM2l4oGll otFono+ZAF1Y17a1tkEFnuGRm+Owkye75Ohm79jrkxBtPBZI9uoRaofhk3XqqLgV RW2kvtAQwGRphuMe5S0kEoIWzPkwu8TwGTeMC6SnZ61FYfXprxQlTxeBaLMAnaAf 9gr+X1+OhSovvKa68SRETChTJMKmTWOHXfMMhNJ99T/B5tJ8C+SydNe+Ack53BCo nEs3MT9r70cgVuv30RT5cJJXA+QnJ7tM -----END CERTIFICATE-----Generated at Sat May 31 17:16:15 2025 by rpki-client