$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: lbZuNNsGZt1RZ6g6baBgxsoe6x8mGJl39lYCM8OgP3o= Subject key identifier: B6:45:23:F2:1D:D8:F6:2D:B1:66:ED:3C:F4:F6:9A:7F:86:5B:DA:29 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 7F Signing time: Sat 31 May 2025 06:17:26 +0000 Manifest this update: Sat 31 May 2025 06:17:25 +0000 Manifest next update: Sat 07 Jun 2025 06:17:25 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: gmOab7T3gok5EQX8SdvGrZ4cP0tcfzvb2HlHyjfB4vs=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: May 31 06:17:25 2025 GMT Not After : Jun 7 06:17:25 2025 GMT Subject: CN=683a9ef6-7224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:9b:e1:e3:ee:27:1a:80:6c:6f:b2:b5:af: 91:45:39:d1:e4:35:e2:e0:5b:39:9f:f3:ab:f7:6d: 85:19:ec:14:4e:7d:a8:4d:97:59:d2:d0:2a:a5:09: bd:e2:89:2a:4a:63:b8:46:8f:fa:b8:c8:3e:60:38: ad:ce:9f:82:9e:85:2c:e0:75:d5:6a:32:29:c6:40: f3:6a:a9:e4:31:c6:21:3e:da:1a:89:14:b9:31:e8: 09:f4:ef:9a:99:e6:4b:83:04:bb:0a:55:e3:43:c4: 3e:9a:11:f0:31:3a:1d:0c:8c:3c:cc:c2:e0:cf:89: b1:0e:6f:bb:89:eb:c8:50:04:47:65:f5:2f:92:00: bd:0d:d7:b5:d8:97:43:15:32:d3:63:83:7a:b8:fe: 3d:c2:32:f1:ca:bd:a5:fc:f6:7d:65:09:0c:8b:03: e0:3b:d9:ef:9f:59:28:09:ca:e8:72:ee:fd:ad:39: 6c:5e:69:a7:c8:0c:e0:0c:e3:51:77:a9:2d:0e:42: c0:81:c9:df:cb:5d:ec:e0:9d:af:b1:71:13:f9:52: 5f:fd:45:92:f9:d7:17:c7:e4:4e:ac:85:f3:24:28: fe:59:1b:7c:e1:6d:d8:90:07:cd:10:01:7b:c2:84: 71:96:87:ff:1d:17:63:b1:0a:02:d4:65:0a:e3:18: 3b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:45:23:F2:1D:D8:F6:2D:B1:66:ED:3C:F4:F6:9A:7F:86:5B:DA:29 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:56:d4:1d:3d:8d:d9:ba:12:05:2f:ce:d8:ab:d0:35:01:86: 90:5f:1c:59:91:90:fd:b8:d8:fe:1f:23:28:ea:83:92:35:89: 32:c3:d1:ce:f8:d2:ff:b2:a7:20:51:43:12:ac:2c:17:06:fb: f6:b1:78:37:a2:cc:e5:d1:7e:c6:21:2a:ae:62:20:5a:36:dc: 0f:36:67:19:a4:68:0b:8d:4d:91:60:9e:15:f3:9f:4b:ad:62: b6:6c:b7:25:de:49:56:42:11:6a:66:c3:5f:20:dd:fc:3b:03: ff:5c:b4:84:3f:86:28:ad:56:19:72:45:75:3c:e9:1f:e6:3a: 5a:0e:2c:de:ba:e4:0b:53:38:45:af:b7:d7:41:6b:14:1c:f0: a2:85:c6:83:11:b9:db:b8:d7:2b:5b:08:e2:5c:8e:72:9f:d4: 29:33:34:32:a7:c5:1b:55:89:fa:27:ab:c4:57:49:31:3f:84: 2c:ca:e6:4b:8b:c7:01:89:ee:73:8f:16:d3:33:e4:b0:84:bb: fc:7b:19:ba:27:26:b6:2b:40:c1:66:00:55:cf:10:eb:56:4a: bc:db:70:91:f0:d3:58:ba:18:fa:37:79:e9:91:a3:cb:e6:d9: de:c0:1f:cb:17:68:67:ce:5b:bc:28:04:23:9b:28:0b:91:fe: ab:f1:68:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUwNTMxMDYxNzI1WhcNMjUwNjA3MDYxNzI1WjAYMRYwFAYD VQQDEw02ODNhOWVmNi03MjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw2b4ePuJxqAbG+yta+RRTnR5DXi4Fs5n/Or922FGewUTn2oTZdZ0tAqpQm9 4okqSmO4Ro/6uMg+YDitzp+CnoUs4HXVajIpxkDzaqnkMcYhPtoaiRS5MegJ9O+a meZLgwS7ClXjQ8Q+mhHwMTodDIw8zMLgz4mxDm+7ievIUARHZfUvkgC9Dde12JdD FTLTY4N6uP49wjLxyr2l/PZ9ZQkMiwPgO9nvn1koCcrocu79rTlsXmmnyAzgDONR d6ktDkLAgcnfy13s4J2vsXET+VJf/UWS+dcXx+ROrIXzJCj+WRt84W3YkAfNEAF7 woRxlof/HRdjsQoC1GUK4xg7jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZFI/Id 2PYtsWbtPPT2mn+GW9opMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrVtQdPY3ZuhIFL87Yq9A1AYaQXxxZkZD9uNj+HyMo6oOSNYkyw9HO +NL/sqcgUUMSrCwXBvv2sXg3oszl0X7GISquYiBaNtwPNmcZpGgLjU2RYJ4V859L rWK2bLcl3klWQhFqZsNfIN38OwP/XLSEP4YorVYZckV1POkf5jpaDizeuuQLUzhF r7fXQWsUHPCihcaDEbnbuNcrWwjiXI5yn9QpMzQyp8UbVYn6J6vEV0kxP4QsyuZL i8cBie5zjxbTM+SwhLv8exm6Jya2K0DBZgBVzxDrVkq823CR8NNYuhj6N3npkaPL 5tnewB/LF2hnzlu8KAQjmygLkf6r8Wif -----END CERTIFICATE-----Generated at Sat May 31 15:50:00 2025 by rpki-client