$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: ZD4uNB/PwxUsDcmvWNnKnIMFbXm7jthg+GUtjdr6f44= Subject key identifier: 48:94:42:56:06:30:C6:CF:63:79:94:2D:91:15:39:FB:85:5D:E8:1B Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 0303 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 02F3 Signing time: Sat 31 May 2025 01:32:02 +0000 Manifest this update: Sat 31 May 2025 01:32:01 +0000 Manifest next update: Sat 07 Jun 2025 01:32:01 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: EUeSyG9Q/n9L6SFkzoXhjT58YHk7bB6mq+2LAHrmQig=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: gjKSDC6B7qsbe2sBo9HUqRMdIYdfTfIQbIhpB1zkpkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 771 (0x303) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: May 31 01:32:01 2025 GMT Not After : Jun 7 01:32:01 2025 GMT Subject: CN=683a5c11-091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:71:a5:76:b2:66:78:e9:42:b2:2a:16:14:24: ae:36:08:0a:d8:04:5c:28:ff:2f:10:44:8e:d2:62: 10:0d:fa:c4:72:83:9e:a6:81:50:2b:05:7c:7a:95: ba:61:3b:a0:13:ae:1e:99:6e:eb:e1:8d:90:7b:45: 70:a2:4c:98:ad:00:51:f0:f3:52:76:72:d6:1a:d7: e8:dc:eb:90:77:47:38:86:8c:52:e5:a6:9a:7a:e3: 7e:8e:fb:53:a1:34:7c:ba:e9:f0:67:f3:1b:09:01: 15:c1:76:38:59:a3:ed:e9:06:f6:c1:01:da:d7:3a: ad:5b:a3:31:1e:a1:9c:42:97:3f:ab:0c:3c:2a:ac: b4:39:e0:41:05:ed:1f:13:a5:49:97:1e:c8:c6:40: e1:fb:16:37:6b:28:d0:06:2c:e2:9b:d9:1b:6d:48: 40:b4:aa:1d:9f:8d:bd:74:14:45:3f:f9:65:8b:d5: 6f:10:6b:d6:8b:92:21:aa:f9:89:0d:1e:b4:21:26: d0:ed:3f:2a:2a:11:5a:9e:10:08:63:db:da:eb:01: 21:8a:6e:a1:c8:6d:32:a3:5d:79:f0:ca:80:10:d3: c2:a9:4c:ef:7d:a1:01:25:4a:0c:58:1a:4c:8b:fe: 51:4b:05:b9:34:87:f4:69:25:43:9f:57:e4:11:7a: 28:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:94:42:56:06:30:C6:CF:63:79:94:2D:91:15:39:FB:85:5D:E8:1B X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:f4:8d:3c:31:29:5b:2f:e4:23:92:b5:9f:57:1f:15:80:48: de:73:7c:1c:89:91:9b:1e:1f:6c:34:94:12:2b:bb:6e:c0:00: 35:7b:ec:86:c9:8e:28:82:fd:1f:6b:25:4f:bc:8a:6a:ba:c4: 07:2b:96:c4:b8:32:9c:58:71:97:16:41:05:eb:a3:10:11:9c: 84:91:a8:bc:33:81:37:cf:13:72:e4:24:c1:e5:f1:9c:b7:12: 0a:01:77:96:a3:4e:b4:59:ea:1e:25:ac:4e:fa:63:64:44:4b: 97:f6:a6:65:f9:2c:84:35:a9:f7:32:a6:18:18:0b:bc:ce:d5: f4:bc:46:c4:b7:ea:c1:4a:cc:c9:09:38:4c:7c:0e:2f:8d:04: ea:f2:b7:a1:84:25:e8:d4:34:c6:ad:7f:38:3c:99:d7:12:50: 5e:9f:9e:e5:ca:64:3c:ed:cd:ab:d0:b8:27:55:f5:bb:d2:25: 1c:fb:54:40:c2:1a:74:8d:2d:4a:a7:1b:e6:87:70:1e:6a:fe: 2d:c4:04:db:d2:12:d9:fd:05:32:be:80:00:9f:31:3b:6c:69: 92:05:df:87:f2:0d:95:71:85:5a:f9:e8:be:44:25:3f:c6:56: 60:ab:09:1e:d3:7e:f7:51:d3:21:1f:9b:73:66:1a:9b:7c:76: 2b:f5:70:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwNTMxMDEzMjAxWhcNMjUwNjA3MDEzMjAxWjAYMRYwFAYD VQQDEw02ODNhNWMxMS0wOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA73GldrJmeOlCsioWFCSuNggK2ARcKP8vEESO0mIQDfrEcoOepoFQKwV8epW6 YTugE64emW7r4Y2Qe0VwokyYrQBR8PNSdnLWGtfo3OuQd0c4hoxS5aaaeuN+jvtT oTR8uunwZ/MbCQEVwXY4WaPt6Qb2wQHa1zqtW6MxHqGcQpc/qww8Kqy0OeBBBe0f E6VJlx7IxkDh+xY3ayjQBizim9kbbUhAtKodn429dBRFP/lli9VvEGvWi5IhqvmJ DR60ISbQ7T8qKhFanhAIY9va6wEhim6hyG0yo1158MqAENPCqUzvfaEBJUoMWBpM i/5RSwW5NIf0aSVDn1fkEXooBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiUQlYG MMbPY3mULZEVOfuFXegbMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl9I08MSlbL+QjkrWfVx8VgEjec3wciZGbHh9sNJQSK7tuwAA1e+yG yY4ogv0fayVPvIpqusQHK5bEuDKcWHGXFkEF66MQEZyEkai8M4E3zxNy5CTB5fGc txIKAXeWo060WeoeJaxO+mNkREuX9qZl+SyENan3MqYYGAu8ztX0vEbEt+rBSszJ CThMfA4vjQTq8rehhCXo1DTGrX84PJnXElBen57lymQ87c2r0LgnVfW70iUc+1RA whp0jS1Kpxvmh3Aeav4txATb0hLZ/QUyvoAAnzE7bGmSBd+H8g2VcYVa+ei+RCU/ xlZgqwke0373UdMhH5tzZhqbfHYr9XBV -----END CERTIFICATE-----Generated at Sat May 31 17:01:20 2025 by rpki-client