$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: EqGYj7BUnGvndLM7HcTYfSrH9HQzcSIRDSd8dwMQPSI= Subject key identifier: 34:2C:50:9C:FB:E5:29:BD:01:00:57:BE:7A:C0:CD:E4:D2:A0:5C:D3 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F4A Signing time: Sat 31 May 2025 15:21:42 +0000 Manifest this update: Sat 31 May 2025 15:21:42 +0000 Manifest next update: Sat 07 Jun 2025 15:21:42 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: 2ilSasZOXfmmPZTEUDfRczklZInvXZfllaTJgmrHv5U=) 2: 05B3C1D2134511EAB2075B28C4F9AE02.roa (hash: pFx0/nN8tk37FYYMfan4l4qddU1Y7UoEXJGCdi9rZM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3927 (0xf57) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: May 31 15:21:42 2025 GMT Not After : Jun 7 15:21:42 2025 GMT Subject: CN=683b1e86-3f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:98:d0:0a:27:81:de:ed:14:9f:1a:9a:a9: 12:b6:c2:43:f9:80:4a:31:2a:79:2a:5a:1e:65:11: 8f:39:0a:60:a9:ff:20:02:c3:be:48:4b:17:60:e6: 68:35:5f:13:15:7e:a2:9d:4a:56:3d:95:fc:0e:f0: c5:f7:c6:12:80:72:cc:2c:34:33:26:3e:1e:83:e6: 59:20:06:7f:f9:d1:da:8f:21:7e:d4:dc:16:d5:d6: 0f:49:66:b8:86:e5:94:4a:73:49:7c:e7:62:0b:0d: 6c:56:e0:19:49:fa:4c:8c:76:cf:f3:8c:b1:38:9b: 58:c5:b3:d6:d3:19:8c:33:9a:c2:c4:6d:3c:3d:27: a3:0d:61:93:f0:ad:f0:0e:20:12:17:97:67:19:98: 81:6b:31:79:8c:dc:49:ee:f2:3e:df:9f:00:b1:4e: 25:be:0f:c9:3f:c7:c9:e1:17:28:03:9f:d2:33:4c: ac:2c:61:13:4d:8b:db:9e:47:9f:24:a8:aa:bd:88: 58:5c:1e:49:01:b9:36:af:25:c5:b6:09:f6:2f:98: 2d:ea:6a:09:34:f6:fe:9f:d9:3c:de:84:e1:51:01: 7b:23:71:d9:da:ce:6f:c8:9a:68:b6:20:c0:49:da: a2:26:7a:a9:af:7d:ab:c0:94:37:5b:36:3b:00:9a: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:50:9C:FB:E5:29:BD:01:00:57:BE:7A:C0:CD:E4:D2:A0:5C:D3 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c5:1f:4d:bb:44:87:58:1b:ad:a6:b8:e4:cc:da:c9:47:d4: 9f:5c:d0:10:65:56:4d:64:aa:4f:40:94:7a:a1:e5:c2:1a:58: 75:3f:00:ed:a6:42:83:74:74:e9:a0:b1:e2:51:9d:cf:b6:ce: 30:63:3f:ee:3a:fe:ad:15:cf:70:68:1c:b0:df:c0:14:14:7a: 69:59:26:81:2b:a7:43:ba:dc:ee:ed:f6:96:07:82:74:66:c1: b2:f7:f2:48:01:4c:ba:5b:ee:03:49:a6:d3:19:b5:b5:78:fb: 6a:60:e0:6c:6b:d8:67:61:c3:00:dc:09:ab:4f:24:f2:34:f8: 64:b7:5f:dd:e3:e0:50:6a:e9:8c:e9:38:06:89:72:08:c3:70: 4b:3e:fc:ad:99:9a:97:ff:2b:0a:2d:b7:6a:87:9d:07:4e:56: e9:cb:71:f5:4b:db:aa:63:55:eb:cd:1e:5a:19:6c:34:2e:f7: 7b:3b:64:76:4c:fb:17:96:c8:16:bb:28:a2:55:f8:97:7f:4e: 21:03:ec:c2:ea:6f:d6:e5:bf:02:fe:db:cf:05:af:9e:e6:53: 6b:21:c6:2d:6d:d1:52:66:8c:2a:93:70:59:1e:8e:6c:b3:59: 43:ff:5b:2f:35:2b:d1:0b:3b:0b:45:82:78:24:4b:9f:d7:92: f1:50:ff:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwNTMxMTUyMTQyWhcNMjUwNjA3MTUyMTQyWjAYMRYwFAYD VQQDEw02ODNiMWU4Ni0zZjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv7mY0Aongd7tFJ8amqkStsJD+YBKMSp5KloeZRGPOQpgqf8gAsO+SEsXYOZo NV8TFX6inUpWPZX8DvDF98YSgHLMLDQzJj4eg+ZZIAZ/+dHajyF+1NwW1dYPSWa4 huWUSnNJfOdiCw1sVuAZSfpMjHbP84yxOJtYxbPW0xmMM5rCxG08PSejDWGT8K3w DiASF5dnGZiBazF5jNxJ7vI+358AsU4lvg/JP8fJ4RcoA5/SM0ysLGETTYvbnkef JKiqvYhYXB5JAbk2ryXFtgn2L5gt6moJNPb+n9k83oThUQF7I3HZ2s5vyJpotiDA SdqiJnqpr32rwJQ3WzY7AJpENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQsUJz7 5Sm9AQBXvnrAzeTSoFzTMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtxR9Nu0SHWButprjkzNrJR9SfXNAQZVZNZKpPQJR6oeXCGlh1PwDt pkKDdHTpoLHiUZ3Pts4wYz/uOv6tFc9waByw38AUFHppWSaBK6dDutzu7faWB4J0 ZsGy9/JIAUy6W+4DSabTGbW1ePtqYOBsa9hnYcMA3AmrTyTyNPhkt1/d4+BQaumM 6TgGiXIIw3BLPvytmZqX/ysKLbdqh50HTlbpy3H1S9uqY1XrzR5aGWw0Lvd7O2R2 TPsXlsgWuyiiVfiXf04hA+zC6m/W5b8C/tvPBa+e5lNrIcYtbdFSZowqk3BZHo5s s1lD/1svNSvRCzsLRYJ4JEuf15LxUP8B -----END CERTIFICATE-----Generated at Sat May 31 17:39:21 2025 by rpki-client