$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: Lc8dfyQyW3EkIo+w3U5hwVO1bXHBgTSPXWrN/09l6pk= Subject key identifier: 31:48:7C:75:C4:97:E7:19:CA:06:BE:66:77:F5:4C:5A:6C:3D:15:D3 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01A6 Signing time: Sat 31 May 2025 03:06:54 +0000 Manifest this update: Sat 31 May 2025 03:06:53 +0000 Manifest next update: Sat 07 Jun 2025 03:06:53 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: msn50PWF4KNcp+le2oucVqCU8a9qJBU58hnrr/kfHoo=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 432 (0x1b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: May 31 03:06:53 2025 GMT Not After : Jun 7 03:06:53 2025 GMT Subject: CN=683a724d-fab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:24:85:c0:27:aa:eb:e9:19:60:98:a0:bc: 90:ef:af:77:14:29:44:85:b9:13:42:53:f1:21:00: b6:ff:02:5f:80:38:b8:5a:c9:b9:fa:7c:a5:81:8c: b8:c1:10:eb:cb:10:da:a9:2e:be:00:c6:1a:82:fa: 51:79:0c:a4:b6:b1:2c:ab:08:b7:20:83:cf:62:08: e5:a7:6e:a9:8a:84:59:3b:f4:47:1f:9e:ec:20:95: d7:07:25:72:f5:53:c0:4c:81:02:d8:55:a6:8d:c5: 35:f0:80:e9:cf:78:38:0a:87:02:6a:23:e9:d2:28: 67:8f:5b:34:ca:0b:5d:6d:92:90:4f:13:cc:d0:f5: a6:6e:b3:7d:03:3d:2b:77:2d:3a:24:fb:7d:98:94: f3:76:00:cd:51:ee:a1:95:f0:fc:6d:6a:8c:25:d8: b8:7b:20:e1:03:79:48:da:92:39:7c:98:4c:0b:96: 04:d4:63:e9:67:e2:df:7e:84:e1:dd:76:1c:9d:b3: b2:2f:10:ca:a4:3f:0b:52:35:f5:d3:f2:91:d8:5c: 75:19:f3:13:b4:a4:b5:9f:25:aa:d4:d1:44:c1:5e: 26:9f:34:6b:c0:38:02:df:c7:b3:04:69:27:ba:d8: 6b:fa:0b:de:10:87:3a:35:16:35:df:a6:cc:92:5e: 30:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:48:7C:75:C4:97:E7:19:CA:06:BE:66:77:F5:4C:5A:6C:3D:15:D3 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:0d:de:bd:74:85:8a:76:87:dc:6f:91:b6:a5:de:c1:0e:68: 1b:f7:ba:c5:6d:1a:32:2b:5e:5e:72:37:6e:ad:3d:06:0d:41: 38:c2:07:17:7f:13:86:ee:06:d5:6c:81:36:1b:66:82:05:94: 11:ca:a7:b3:6c:bf:4c:ea:a5:e0:4a:09:bb:bd:e6:e9:c3:30: 55:50:56:f3:73:06:74:d5:8b:6b:6e:f4:55:e2:00:bf:9a:ed: 5e:8b:0c:82:bf:1c:17:9d:77:60:40:7a:cb:83:36:50:97:83: 2c:53:47:e3:51:82:1a:e1:23:85:d4:6d:66:eb:b4:d1:7a:5b: 1e:50:71:8a:38:f9:bd:e6:86:0a:2f:05:94:47:24:b0:b0:60: ad:51:28:ad:ca:4b:53:bc:f3:17:21:4d:ed:31:56:b6:53:39: 3c:e6:67:f7:e3:0d:3e:62:88:51:2c:8f:be:14:44:b6:bd:5c: fb:50:c2:6f:49:64:1c:67:88:37:d4:0b:23:ae:58:8c:73:01: f7:e3:70:11:7d:04:6c:46:76:8b:45:c5:83:25:82:e2:3d:b9: bb:38:45:52:4c:f0:a8:c6:f9:f4:b0:23:a6:6f:a1:57:94:c9: 58:16:6e:ae:0b:16:46:0f:71:94:b0:8a:99:5d:aa:f5:bc:e8: 9c:2a:b5:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNTMxMDMwNjUzWhcNMjUwNjA3MDMwNjUzWjAYMRYwFAYD VQQDEw02ODNhNzI0ZC1mYWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAls0khcAnquvpGWCYoLyQ7693FClEhbkTQlPxIQC2/wJfgDi4Wsm5+nylgYy4 wRDryxDaqS6+AMYagvpReQyktrEsqwi3IIPPYgjlp26pioRZO/RHH57sIJXXByVy 9VPATIEC2FWmjcU18IDpz3g4CocCaiPp0ihnj1s0ygtdbZKQTxPM0PWmbrN9Az0r dy06JPt9mJTzdgDNUe6hlfD8bWqMJdi4eyDhA3lI2pI5fJhMC5YE1GPpZ+LffoTh 3XYcnbOyLxDKpD8LUjX10/KR2Fx1GfMTtKS1nyWq1NFEwV4mnzRrwDgC38ezBGkn uthr+gveEIc6NRY136bMkl4wywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDFIfHXE l+cZyga+Znf1TFpsPRXTMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHDd69dIWKdofcb5G2pd7BDmgb97rFbRoyK15ecjdurT0GDUE4wgcX fxOG7gbVbIE2G2aCBZQRyqezbL9M6qXgSgm7vebpwzBVUFbzcwZ01YtrbvRV4gC/ mu1eiwyCvxwXnXdgQHrLgzZQl4MsU0fjUYIa4SOF1G1m67TRelseUHGKOPm95oYK LwWURySwsGCtUSityktTvPMXIU3tMVa2Uzk85mf34w0+YohRLI++FES2vVz7UMJv SWQcZ4g31AsjrliMcwH343ARfQRsRnaLRcWDJYLiPbm7OEVSTPCoxvn0sCOmb6FX lMlYFm6uCxZGD3GUsIqZXar1vOicKrWw -----END CERTIFICATE-----Generated at Sat May 31 17:49:37 2025 by rpki-client