$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: nt9XptqgWTD4x7ZpdK2VmhWNiS3kYoVzCuDaau1hgMQ= Subject key identifier: 75:2E:1A:69:52:FB:53:B1:17:25:2B:58:6A:B0:2A:CB:96:BB:B9:09 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: C5 Signing time: Sat 31 May 2025 05:23:33 +0000 Manifest this update: Sat 31 May 2025 05:23:33 +0000 Manifest next update: Sat 07 Jun 2025 05:23:33 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: B03pNdGKw0g9ajTBd82zd5H7ioueUdLY3Mky/At0yzI=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: May 31 05:23:33 2025 GMT Not After : Jun 7 05:23:33 2025 GMT Subject: CN=683a9255-97fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7c:be:5c:4d:cb:90:75:6e:39:f9:14:7b:92: 77:4e:76:61:9d:8a:86:1b:5d:ca:31:4e:6f:9e:c4: c7:cd:5c:89:74:50:40:89:a9:da:3e:b7:4a:6b:d9: 7d:27:bd:c7:eb:8e:ef:4c:43:66:c0:09:67:72:83: 30:a5:52:2c:43:b0:04:5a:c3:40:d1:bb:58:d5:cf: 18:44:71:27:c9:7b:7b:be:73:91:3c:19:84:a3:66: 32:3f:bd:13:ff:8e:60:54:96:f6:7f:a4:f9:4b:70: 76:4a:f1:5c:e1:29:c7:61:00:6d:65:7f:01:d1:02: ae:f2:df:2e:35:a9:4a:c7:6b:71:22:38:2e:18:1a: ba:ad:3f:d3:de:4e:4a:05:64:5b:8e:57:6e:82:8c: 54:5e:9c:31:f5:e5:3f:b8:b4:b2:4a:01:ff:7e:a5: d0:94:f4:a7:2a:7b:a4:e0:6a:1a:6d:ba:e5:d0:19: 75:23:1c:fe:18:e2:fa:db:31:ea:07:61:93:4d:7a: c5:6d:25:c5:05:85:a0:d5:4c:e8:b5:16:82:06:c4: b3:f3:25:47:5d:32:82:da:40:4f:06:cd:ae:97:2f: 08:8b:3a:5f:dc:4a:92:2e:63:7b:60:c9:98:b4:55: 36:e3:8f:d0:ae:1b:62:3b:b8:75:60:20:c0:6d:66: 35:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:2E:1A:69:52:FB:53:B1:17:25:2B:58:6A:B0:2A:CB:96:BB:B9:09 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:10:bf:ae:18:3c:02:48:22:f2:19:35:5a:12:e0:0b:10:d9: 74:af:02:c0:66:fc:da:1b:2e:15:9a:bc:0c:da:48:b8:f1:91: f8:b7:54:5c:13:17:55:2f:a7:29:44:35:dd:85:d3:03:d0:cb: 94:6f:27:14:fa:53:43:b6:82:3e:bc:f8:73:07:97:63:ba:56: 1c:5c:08:e6:01:55:6e:d0:36:c2:9d:40:3c:37:19:cd:19:31: 1f:36:72:f9:5d:42:e9:8a:78:18:ff:96:20:1d:84:22:af:31: 1f:fc:e8:70:dc:42:3c:f2:1b:34:ca:10:51:d0:a8:1d:ef:98: 14:5a:a5:4f:2d:3d:de:9d:95:13:e1:8f:c9:18:c2:ba:3b:1e: 07:eb:a1:bd:0e:2d:19:12:f9:37:a8:f6:dc:e4:02:37:35:8b: 46:3e:b1:61:91:99:5c:4e:87:20:eb:c1:5a:a8:a4:50:01:5a: 5c:c2:47:d9:e2:7a:ef:96:d5:3f:20:63:ec:68:81:19:0e:a2: 3d:22:77:b0:d9:8c:51:26:6b:0f:75:31:84:27:88:bf:6f:bf: 76:cf:19:26:7b:4f:f4:c5:cc:07:0c:84:6d:b9:d4:63:07:a1: 5c:70:75:7f:c3:1b:60:9c:82:8f:7c:4f:6a:cd:6a:d8:fd:04: df:79:66:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwNTMxMDUyMzMzWhcNMjUwNjA3MDUyMzMzWjAYMRYwFAYD VQQDEw02ODNhOTI1NS05N2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3y+XE3LkHVuOfkUe5J3TnZhnYqGG13KMU5vnsTHzVyJdFBAianaPrdKa9l9 J73H647vTENmwAlncoMwpVIsQ7AEWsNA0btY1c8YRHEnyXt7vnORPBmEo2YyP70T /45gVJb2f6T5S3B2SvFc4SnHYQBtZX8B0QKu8t8uNalKx2txIjguGBq6rT/T3k5K BWRbjldugoxUXpwx9eU/uLSySgH/fqXQlPSnKnuk4Goabbrl0Bl1Ixz+GOL62zHq B2GTTXrFbSXFBYWg1UzotRaCBsSz8yVHXTKC2kBPBs2uly8Iizpf3EqSLmN7YMmY tFU244/QrhtiO7h1YCDAbWY18wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUuGmlS +1OxFyUrWGqwKsuWu7kJMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnEL+uGDwCSCLyGTVaEuALENl0rwLAZvzaGy4VmrwM2ki48ZH4t1Rc ExdVL6cpRDXdhdMD0MuUbycU+lNDtoI+vPhzB5djulYcXAjmAVVu0DbCnUA8NxnN GTEfNnL5XULpingY/5YgHYQirzEf/Ohw3EI88hs0yhBR0Kgd75gUWqVPLT3enZUT 4Y/JGMK6Ox4H66G9Di0ZEvk3qPbc5AI3NYtGPrFhkZlcTocg68FaqKRQAVpcwkfZ 4nrvltU/IGPsaIEZDqI9Inew2YxRJmsPdTGEJ4i/b792zxkme0/0xcwHDIRtudRj B6FccHV/wxtgnIKPfE9qzWrY/QTfeWbp -----END CERTIFICATE-----Generated at Sat May 31 17:41:03 2025 by rpki-client