$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: /oq9OSijehcy0UO4AeP0ngGaCgW12danljWygcu7i1U= Subject key identifier: 20:88:2C:97:47:D5:76:25:C9:70:21:4C:C5:62:F6:FE:22:D4:59:E7 Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 01C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 01C2 Signing time: Sat 31 May 2025 02:47:45 +0000 Manifest this update: Sat 31 May 2025 02:47:45 +0000 Manifest next update: Sat 07 Jun 2025 02:47:45 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: QqfetlY3cCXVc0XOWnLN1BS4fVC93OZcG41vYqSWEJs=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:47:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 456 (0x1c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: May 31 02:47:45 2025 GMT Not After : Jun 7 02:47:45 2025 GMT Subject: CN=683a6dd1-5648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:da:c8:4f:e8:fe:37:89:b4:12:bf:b2:01: 47:c7:21:5a:d7:9c:38:bb:18:04:1e:aa:b4:25:96: b3:90:2e:4e:ad:a5:88:e4:18:37:c5:c0:23:ad:5e: 6b:8d:ca:65:8c:0c:90:93:a6:b5:e6:ab:93:ec:fb: 65:09:26:a3:1d:8a:ff:75:4f:b9:bc:06:39:92:be: b1:d9:0b:40:51:57:bb:f9:eb:15:f3:ae:47:7b:b5: 0f:91:77:4a:05:2c:3b:ab:77:dc:21:90:45:17:1f: 25:8f:5b:a0:6a:51:94:e8:b4:06:21:51:42:6a:30: b3:af:d3:45:73:3c:d7:4b:92:56:ff:d2:27:0b:9d: ce:f1:b4:e8:c8:2f:6a:84:4d:0e:91:fe:2a:4b:39: ca:c1:6b:3d:9d:d5:df:0b:d8:19:40:70:8a:d3:22: 56:17:fe:98:7e:49:7f:7d:15:16:cd:bf:23:c6:04: 69:ea:80:cb:64:c2:e7:77:f3:99:48:72:42:65:11: d3:7f:ca:45:23:cd:03:f5:25:5a:0d:b8:5e:18:e0: e9:24:ae:55:ef:ad:90:84:df:1f:4d:a4:65:15:16: 7c:d7:5a:c1:c7:60:d2:12:06:41:82:43:2a:b8:90: 4b:1e:d2:90:f9:d7:f1:8f:17:78:69:e5:a1:ce:5a: 21:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:2C:97:47:D5:76:25:C9:70:21:4C:C5:62:F6:FE:22:D4:59:E7 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:8d:61:f3:d8:f2:69:8f:85:32:04:93:c6:a7:ba:a5:a4: 09:0f:7f:bd:24:91:ed:9d:b0:52:43:94:5a:59:11:8a:28:39: 23:a5:19:82:e2:44:87:de:15:81:5e:4b:44:82:c0:2d:23:06: 90:6a:7c:6c:2d:16:66:3a:31:a5:74:3b:4c:6f:c3:c9:11:f6: 3c:29:1f:a5:d2:3a:69:25:8e:c8:eb:90:fd:80:25:ef:39:0f: 78:2b:d4:46:be:67:28:21:e6:40:7b:86:8c:a1:b5:98:a3:56: d1:d5:4d:ed:19:2f:e9:aa:b4:aa:ab:b1:49:8e:dd:92:58:5b: ee:b6:c4:62:10:49:3d:62:a1:5e:d1:ba:f0:62:19:c1:66:b7: 1d:a0:77:7a:1f:9a:88:4c:9e:f8:81:d2:01:e2:8a:35:5a:35: 3a:84:8a:f0:0e:82:3b:7f:2a:31:58:09:47:52:67:87:6c:9e: 5f:4c:aa:0b:41:6e:34:e4:45:1b:06:92:57:0b:fc:97:4e:2d: 19:55:6c:02:f6:a1:b2:d3:8b:bb:27:59:cd:e2:d1:22:59:75: 5b:2d:67:b5:f1:c1:66:ec:98:33:e1:39:07:d8:e3:e6:8e:e2: 61:49:4f:53:9a:46:7f:ea:20:17:01:59:93:6f:2c:41:09:a7: 4b:a6:74:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwNTMxMDI0NzQ1WhcNMjUwNjA3MDI0NzQ1WjAYMRYwFAYD VQQDEw02ODNhNmRkMS01NjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwLayE/o/jeJtBK/sgFHxyFa15w4uxgEHqq0JZazkC5OraWI5Bg3xcAjrV5r jcpljAyQk6a15quT7PtlCSajHYr/dU+5vAY5kr6x2QtAUVe7+esV865He7UPkXdK BSw7q3fcIZBFFx8lj1ugalGU6LQGIVFCajCzr9NFczzXS5JW/9InC53O8bToyC9q hE0Okf4qSznKwWs9ndXfC9gZQHCK0yJWF/6Yfkl/fRUWzb8jxgRp6oDLZMLnd/OZ SHJCZRHTf8pFI80D9SVaDbheGODpJK5V762QhN8fTaRlFRZ811rBx2DSEgZBgkMq uJBLHtKQ+dfxjxd4aeWhzlohiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCILJdH 1XYlyXAhTMVi9v4i1FnnMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmwo1h89jyaY+FMgSTxqe6paQJD3+9JJHtnbBSQ5RaWRGKKDkjpRmC 4kSH3hWBXktEgsAtIwaQanxsLRZmOjGldDtMb8PJEfY8KR+l0jppJY7I65D9gCXv OQ94K9RGvmcoIeZAe4aMobWYo1bR1U3tGS/pqrSqq7FJjt2SWFvutsRiEEk9YqFe 0brwYhnBZrcdoHd6H5qITJ74gdIB4oo1WjU6hIrwDoI7fyoxWAlHUmeHbJ5fTKoL QW405EUbBpJXC/yXTi0ZVWwC9qGy04u7J1nN4tEiWXVbLWe18cFm7Jgz4TkH2OPm juJhSU9TmkZ/6iAXAVmTbyxBCadLpnT/ -----END CERTIFICATE-----Generated at Sat May 31 17:14:39 2025 by rpki-client