$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: 1Mvq5iE4QAwJeDXt7l0VSRfmZN5T2IKvQ1NX+W8mMRM= Subject key identifier: F8:2B:A9:BE:D6:24:D0:AB:05:7C:5A:FE:C3:AA:D0:AF:A7:A9:B4:D4 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01AF Signing time: Sat 31 May 2025 02:55:00 +0000 Manifest this update: Sat 31 May 2025 02:54:59 +0000 Manifest next update: Sat 07 Jun 2025 02:54:59 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: d0fIeDh6QQMoAcxbJrHQ73fJuNLZERyUfDMxmMOwT8k=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: May 31 02:54:59 2025 GMT Not After : Jun 7 02:54:59 2025 GMT Subject: CN=683a6f83-011c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:c0:66:66:95:7f:e0:ce:66:51:27:1a:d4: 67:9c:c3:f0:8d:d3:0b:1c:11:f6:b2:4f:d9:ee:77: b8:ef:6d:33:9f:63:0b:bf:96:30:de:85:34:6b:fb: e6:3e:fc:aa:fe:8a:5a:12:b3:c1:8d:4c:40:48:6d: 7e:de:75:4c:ae:c2:a3:ac:20:f1:a9:a7:43:5c:e3: 07:e9:20:b4:37:21:e3:60:3e:ee:b5:e8:a9:34:e4: 7c:ee:cb:11:a8:a1:6a:3b:f4:7b:8a:a6:32:76:13: 3d:05:b5:02:89:1b:52:d1:29:bb:e5:34:c9:a2:1e: e8:2f:f4:76:27:73:71:d8:77:a5:d5:25:cb:cf:a1: f3:73:4b:79:a4:58:90:ce:d2:30:40:5b:f3:a0:14: 60:f0:59:04:38:95:ab:c0:ad:0f:42:60:33:ad:a1: c7:3c:fc:5c:5b:cb:7f:cf:bd:35:08:41:7b:21:07: 32:db:10:7b:10:39:c7:bc:84:2c:97:52:63:21:a0: ac:34:2c:8e:0b:b5:24:19:ed:46:f4:9e:81:25:43: 70:2d:82:42:16:00:6e:81:c7:05:98:3f:c0:1e:e9: 0c:ce:99:ea:b7:4c:11:fe:e9:cd:ab:ab:95:59:7e: a4:3b:bd:1a:a6:22:b2:c9:d6:1a:01:5b:92:da:ce: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2B:A9:BE:D6:24:D0:AB:05:7C:5A:FE:C3:AA:D0:AF:A7:A9:B4:D4 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fa:23:ea:0a:61:7a:f9:66:94:bd:f8:8e:4c:e4:1d:74:16: fd:34:6b:b2:77:7e:3f:a5:b2:23:7f:9e:49:f5:b2:c2:42:0e: 15:0f:d9:1c:09:f7:f3:99:33:ce:28:e7:1e:5f:24:87:cf:7e: c9:67:17:19:66:79:ac:4c:17:36:b6:e9:89:49:95:b4:58:05: 0b:cc:df:50:ad:80:4e:6e:b1:cc:fc:c2:31:2e:a2:94:1a:94: fe:c8:ac:74:3d:8d:6f:c5:4f:ea:10:99:5d:4e:37:86:2a:cb: 9e:27:4c:c2:15:23:7f:e3:a1:77:e5:61:d5:9b:58:a5:0b:57: 27:d8:4d:2d:77:9c:a1:14:f4:54:72:74:24:26:15:51:23:c5: 88:af:56:ee:9d:8f:4f:3c:08:ea:22:81:5a:23:2d:4d:f8:aa: c9:f1:ab:6f:30:b8:e0:3a:6e:e7:0d:f9:c0:75:68:63:d4:1c: b2:51:0e:25:4a:b2:8f:57:bd:02:56:ea:fe:b9:90:53:ff:a3: 00:e6:a3:f1:83:ee:83:38:42:21:b0:e7:81:5f:37:26:b6:e0: 98:f9:6b:2c:ca:e5:ef:b4:9f:d7:b3:0d:2f:36:3b:c7:f3:48: 61:2f:b1:5e:82:2c:d2:3a:c2:6f:95:98:96:97:d9:20:ac:d3: 71:18:a8:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwNTMxMDI1NDU5WhcNMjUwNjA3MDI1NDU5WjAYMRYwFAYD VQQDEw02ODNhNmY4My0wMTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4pvAZmaVf+DOZlEnGtRnnMPwjdMLHBH2sk/Z7ne4720zn2MLv5Yw3oU0a/vm Pvyq/opaErPBjUxASG1+3nVMrsKjrCDxqadDXOMH6SC0NyHjYD7uteipNOR87ssR qKFqO/R7iqYydhM9BbUCiRtS0Sm75TTJoh7oL/R2J3Nx2Hel1SXLz6Hzc0t5pFiQ ztIwQFvzoBRg8FkEOJWrwK0PQmAzraHHPPxcW8t/z701CEF7IQcy2xB7EDnHvIQs l1JjIaCsNCyOC7UkGe1G9J6BJUNwLYJCFgBugccFmD/AHukMzpnqt0wR/unNq6uV WX6kO70apiKyydYaAVuS2s7nbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgrqb7W JNCrBXxa/sOq0K+nqbTUMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw+iPqCmF6+WaUvfiOTOQddBb9NGuyd34/pbIjf55J9bLCQg4VD9kc CffzmTPOKOceXySHz37JZxcZZnmsTBc2tumJSZW0WAULzN9QrYBObrHM/MIxLqKU GpT+yKx0PY1vxU/qEJldTjeGKsueJ0zCFSN/46F35WHVm1ilC1cn2E0td5yhFPRU cnQkJhVRI8WIr1bunY9PPAjqIoFaIy1N+KrJ8atvMLjgOm7nDfnAdWhj1ByyUQ4l SrKPV70CVur+uZBT/6MA5qPxg+6DOEIhsOeBXzcmtuCY+WssyuXvtJ/Xsw0vNjvH 80hhL7FegizSOsJvlZiWl9kgrNNxGKgD -----END CERTIFICATE-----Generated at Sat May 31 16:44:56 2025 by rpki-client