$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: D4aRyM0VYuH+3BYPXnfZ+kMzcVuZR9kRF76KzNgDbhw= Subject key identifier: 8A:1F:30:B9:B8:7B:B8:78:78:47:3C:B6:77:18:3C:46:FC:39:8D:A6 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 31 Signing time: Sat 31 May 2025 07:12:55 +0000 Manifest this update: Sat 31 May 2025 07:12:55 +0000 Manifest next update: Sat 07 Jun 2025 07:12:55 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: ye+tw2cBkRCPCNI5bzvElYmYjieCal1rXiQIHMcBK0Q=) 2: F3229F38F44511EFB636B464C4F9AE02.roa (hash: B0q4cUX8VVB8XcPWLSJob9ZUavvkIS4gZAdv8DWQNPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: May 31 07:12:55 2025 GMT Not After : Jun 7 07:12:55 2025 GMT Subject: CN=683aabf7-3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:c2:5a:1b:6c:0c:59:1b:7e:ae:01:73:e8: e1:f7:05:c7:e3:48:65:51:b6:11:79:5b:ba:c1:b4: ab:73:6d:06:0f:ed:7a:a0:90:f7:ec:b2:bf:3a:2a: 3f:0e:30:a9:d0:bf:22:49:90:9c:26:fa:42:cd:0d: b8:fd:ec:31:0f:93:ca:a2:5e:8e:61:c8:9d:83:dd: 82:21:a7:fa:96:21:ae:22:3c:51:0e:75:d4:82:90: f9:79:02:3e:43:44:cc:b6:8d:e7:36:59:fd:bf:9d: 9a:75:7a:51:4d:d1:a8:67:52:d7:4f:2e:91:94:07: 32:7c:b9:d2:f8:95:9c:e5:4c:ba:f6:20:d8:f6:44: 25:f3:35:36:7f:4f:6c:6f:35:86:30:41:d7:63:5d: 63:e2:61:d3:46:54:11:33:37:85:60:76:71:59:16: 85:73:9e:b0:e9:eb:4a:f1:2a:9c:b8:11:38:a1:be: 1f:6f:f5:70:b8:e7:69:77:af:b2:ce:c9:af:14:fd: 11:e6:42:59:1d:b3:26:52:7f:84:e7:94:f0:db:f4: 0b:20:8a:27:77:91:9b:80:03:66:e7:1d:cd:39:02: 78:4b:bc:10:51:1a:c2:19:7f:4d:07:c5:85:b5:51: 40:00:7e:8d:fe:00:92:c9:a6:01:8d:d4:c9:38:28: 41:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1F:30:B9:B8:7B:B8:78:78:47:3C:B6:77:18:3C:46:FC:39:8D:A6 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:3a:39:84:82:1b:8f:16:f8:55:8d:3d:20:93:a0:81:e3:d6: e6:44:f8:9e:88:71:51:45:81:76:1d:cf:96:b7:39:02:e8:2d: a1:c3:81:90:fb:9f:95:22:56:37:c9:b7:4b:d9:0a:e1:83:bf: b2:a5:4d:1d:93:8a:75:fa:92:55:d1:b2:73:41:27:9f:dd:a9: c8:e1:b7:e8:ab:82:bb:58:3d:ee:8f:92:5a:10:96:35:cb:b5: 59:99:78:66:7f:01:ba:3a:82:af:e5:56:4f:6c:6b:50:04:24: b2:ee:2c:d3:30:cd:c9:79:8c:15:f0:0d:e7:b5:8a:05:ab:3b: c9:bc:04:a5:f0:7f:95:53:d2:09:3f:31:ca:6c:1d:ab:61:b7: e9:84:86:d6:1e:5e:5c:70:6d:0c:71:47:03:0e:18:88:47:46: f8:e3:31:b2:45:eb:f6:35:7c:fc:3c:c9:57:e0:d6:c4:c6:ee: dd:c5:f2:98:0c:f4:82:a7:c3:11:7b:5f:55:da:a7:ef:ef:8f: 28:8f:67:65:88:80:96:22:e4:dc:fe:60:23:2f:10:3b:df:ae: 0a:f4:3f:09:57:bf:16:69:f8:f3:02:4a:2d:7f:99:5b:a9:cb: c4:3c:6a:2b:dd:03:1a:2a:34:46:2b:00:67:7a:4d:42:0a:cf: 09:cd:b0:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA1MzEwNzEyNTVaFw0yNTA2MDcwNzEyNTVaMBgxFjAUBgNV BAMTDTY4M2FhYmY3LTMyNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz9cJaG2wMWRt+rgFz6OH3BcfjSGVRthF5W7rBtKtzbQYP7XqgkPfssr86Kj8O MKnQvyJJkJwm+kLNDbj97DEPk8qiXo5hyJ2D3YIhp/qWIa4iPFEOddSCkPl5Aj5D RMy2jec2Wf2/nZp1elFN0ahnUtdPLpGUBzJ8udL4lZzlTLr2INj2RCXzNTZ/T2xv NYYwQddjXWPiYdNGVBEzN4VgdnFZFoVznrDp60rxKpy4ETihvh9v9XC452l3r7LO ya8U/RHmQlkdsyZSf4TnlPDb9Asgiid3kZuAA2bnHc05AnhLvBBRGsIZf00HxYW1 UUAAfo3+AJLJpgGN1Mk4KEHpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUih8wubh7 uHh4Rzy2dxg8Rvw5jaYwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAc6OYSCG48W+FWNPSCToIHj1uZE+J6IcVFFgXYdz5a3OQLoLaHDgZD7 n5UiVjfJt0vZCuGDv7KlTR2TinX6klXRsnNBJ5/dqcjht+irgrtYPe6PkloQljXL tVmZeGZ/Abo6gq/lVk9sa1AEJLLuLNMwzcl5jBXwDee1igWrO8m8BKXwf5VT0gk/ McpsHatht+mEhtYeXlxwbQxxRwMOGIhHRvjjMbJF6/Y1fPw8yVfg1sTG7t3F8pgM 9IKnwxF7X1Xap+/vjyiPZ2WIgJYi5Nz+YCMvEDvfrgr0PwlXvxZp+PMCSi1/mVup y8Q8aivdAxoqNEYrAGd6TUIKzwnNsCg= -----END CERTIFICATE-----Generated at Sat May 31 16:28:47 2025 by rpki-client