$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft File: 7bwZ_qH8tmtPqgoil27hNQs32-s.mft (raw, json) Hash identifier: ik3Ch+jAz8rgzgbKmry5d8W259xaSJNQHe1siMP7tjg= Subject key identifier: 5F:B1:45:34:F0:0D:A8:59:8D:3C:3B:29:04:F9:D6:A1:18:6E:E7:8D Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB Certificate issuer: /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft Manifest number: 1F Signing time: Sat 31 May 2025 07:28:03 +0000 Manifest this update: Sat 31 May 2025 07:28:02 +0000 Manifest next update: Sat 07 Jun 2025 07:28:02 +0000 Files and hashes: 1: 7bwZ_qH8tmtPqgoil27hNQs32-s.crl (hash: z3sB77k3Mczfd4mvWW+HBZ7b9VOxxwZSnwWzWBI2Xa8=) 2: DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa (hash: YKV/U+PooarTthEs+eyt4mbIMbu1go/l4voLZ2DzYhw=) 3: 27AB5E0E1FAF11F0AB8F0B87C4F9AE02.roa (hash: oaE4p5hJkp4+nLCmgu91heGRJg3fBe+drWuPnIXpClQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB Validity Not Before: May 31 07:28:02 2025 GMT Not After : Jun 7 07:28:02 2025 GMT Subject: CN=683aaf82-8f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:18:fc:72:9f:e2:76:8c:9e:9d:cb:47:77:31: 84:cf:00:73:b3:db:a4:63:77:56:76:fd:af:27:d5: c4:91:1d:df:ee:6c:6a:ec:92:0e:aa:46:37:ae:90: 0d:e4:c3:99:f3:04:bf:62:fd:99:77:18:57:e4:3f: 94:5b:74:00:08:5b:9b:5f:f7:51:31:c2:d4:1c:b9: f3:60:42:15:8f:b0:6c:7b:05:ba:48:b3:99:b4:16: e4:8d:5a:b7:b5:2d:61:17:b5:5b:3e:60:2b:d8:e9: 0c:60:59:aa:87:79:62:16:c3:97:bb:6f:12:72:e5: fe:0e:ef:f4:10:76:b6:b8:90:8c:62:58:22:41:64: 99:d2:fc:db:eb:6e:d1:90:91:54:6b:54:b0:7a:27: 8b:a2:35:c8:d3:a0:86:81:e5:8f:ea:2b:47:a4:1e: fb:3f:90:79:b3:df:8d:49:01:04:91:7f:7e:af:a7: 89:26:72:c7:e4:b5:59:0c:4d:6a:9b:a2:ea:3c:f4: 0a:db:44:bc:74:c3:d5:b7:b6:20:d6:79:92:2c:8a: 2c:30:2b:7a:62:75:91:f8:c6:3e:b4:d6:e0:a7:1f: 2a:0b:ca:8e:28:9e:88:59:6b:14:d1:8b:c5:29:11: 1d:16:dc:f9:2c:2e:e9:bb:06:a7:c0:e5:a2:a5:cf: e3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:B1:45:34:F0:0D:A8:59:8D:3C:3B:29:04:F9:D6:A1:18:6E:E7:8D X509v3 Authority Key Identifier: keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:b7:08:44:57:fb:a9:7e:75:c7:78:2a:97:2d:c2:67:15:40: 9c:9d:fc:4c:ab:9f:b1:f3:3f:d6:28:4a:2a:a2:da:0e:90:f0: d1:dd:00:54:40:03:2d:ae:05:12:a4:c9:69:be:b4:f3:38:67: 5b:9b:fe:18:c7:ad:3c:8b:bf:b0:ec:c0:8f:8a:a5:5b:3c:60: 0f:a9:f5:74:0d:1c:08:cf:c5:f6:15:23:b9:e2:63:67:83:dd: 2e:f6:0c:5d:87:38:46:ea:1d:b4:4e:92:18:3a:e0:4d:12:40: 13:e0:d9:e3:dc:d5:12:75:e6:f5:74:33:9c:1b:61:17:90:6f: 9a:26:5e:bc:d6:82:03:6f:fc:02:f3:cc:c3:bc:80:63:1a:1f: 5a:67:09:27:dc:d0:94:85:52:5a:1c:7c:5e:34:52:66:bb:bf: 83:40:be:13:aa:e2:06:c1:a1:24:34:a8:fa:81:3f:49:8a:f4: 7c:d6:13:9f:66:d7:e9:2e:1c:4e:2d:db:81:f7:82:7a:0a:ea: de:e0:ec:8e:ab:4e:db:5f:2e:df:68:16:30:11:e7:dc:c1:a7: 69:d4:8a:c7:b8:40:90:7f:6f:53:11:8a:59:8d:b6:c4:f2:11: ac:2e:84:83:07:73:a7:22:02:f7:b1:8a:f1:b4:c4:d9:21:76: d5:dc:52:8d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTRCRjExMC8GA1UEBRMoRURCQzE5RkVBMUZDQjY2QjRGQUEwQTIyOTc2RUUxMzUw QjM3REJFQjAeFw0yNTA1MzEwNzI4MDJaFw0yNTA2MDcwNzI4MDJaMBgxFjAUBgNV BAMTDTY4M2FhZjgyLThmMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNGPxyn+J2jJ6dy0d3MYTPAHOz26Rjd1Z2/a8n1cSRHd/ubGrskg6qRjeukA3k w5nzBL9i/Zl3GFfkP5RbdAAIW5tf91ExwtQcufNgQhWPsGx7BbpIs5m0FuSNWre1 LWEXtVs+YCvY6QxgWaqHeWIWw5e7bxJy5f4O7/QQdra4kIxiWCJBZJnS/NvrbtGQ kVRrVLB6J4uiNcjToIaB5Y/qK0ekHvs/kHmz341JAQSRf36vp4kmcsfktVkMTWqb ouo89ArbRLx0w9W3tiDWeZIsiiwwK3pidZH4xj601uCnHyoLyo4onohZaxTRi8Up ER0W3PksLum7BqfA5aKlz+PlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUX7FFNPAN qFmNPDspBPnWoRhu540wHwYDVR0jBBgwFoAU7bwZ/qH8tmtPqgoil27hNQs32+sw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBNEJGLzAxQkI2MDE2MTBB MjExRjA5OTZFOUQ2NUM0RjlBRTAyLzdid1pfcUg4dG10UHFnb2lsMjdoTlFzMzIt cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN2J3Wl9xSDh0bXRQcWdvaWwyN2hOUXMzMi1zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB NEJGLzAxQkI2MDE2MTBBMjExRjA5OTZFOUQ2NUM0RjlBRTAyLzdid1pfcUg4dG10 UHFnb2lsMjdoTlFzMzItcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGS3CERX+6l+dcd4KpctwmcVQJyd/Eyrn7HzP9YoSiqi2g6Q8NHdAFRA Ay2uBRKkyWm+tPM4Z1ub/hjHrTyLv7DswI+KpVs8YA+p9XQNHAjPxfYVI7niY2eD 3S72DF2HOEbqHbROkhg64E0SQBPg2ePc1RJ15vV0M5wbYReQb5omXrzWggNv/ALz zMO8gGMaH1pnCSfc0JSFUlocfF40Uma7v4NAvhOq4gbBoSQ0qPqBP0mK9HzWE59m 1+kuHE4t24H3gnoK6t7g7I6rTttfLt9oFjAR59zBp2nUise4QJB/b1MRilmNtsTy EawuhIMHc6ciAvexivG0xNkhdtXcUo0= -----END CERTIFICATE-----Generated at Sat May 31 17:41:05 2025 by rpki-client