$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: BsG0m62v6iaoFT1tfEMfrx5AREJYuZmylR1paEGuFp4= Subject key identifier: 1A:7E:AE:0C:4D:47:CA:A6:D1:36:BC:10:87:A0:EB:8F:09:8B:C2:94 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 0473 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0468 Signing time: Sat 31 May 2025 00:22:49 +0000 Manifest this update: Sat 31 May 2025 00:22:49 +0000 Manifest next update: Sat 07 Jun 2025 00:22:49 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: sNCbrNdYjRGNZM7FX/+fuFgTIPZI5AHlFDOJVmx9yA4=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1139 (0x473) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: May 31 00:22:49 2025 GMT Not After : Jun 7 00:22:49 2025 GMT Subject: CN=683a4bd9-c471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:3c:8d:e4:c6:1e:f3:d7:56:d0:6c:e0:1c: fe:4b:ee:b8:64:0d:51:15:8b:35:c2:45:f8:0e:bd: c2:18:37:16:8e:ec:97:dd:56:7c:be:e7:d6:33:49: fc:54:07:07:2a:e7:21:e5:c4:14:91:eb:fc:16:63: e7:58:44:57:a5:94:ef:03:3c:54:b7:d4:1d:48:99: 4e:34:de:76:be:51:24:c6:88:9d:97:44:45:ce:ae: d6:10:d8:70:2f:06:12:df:2f:a4:43:f8:6e:8a:92: ac:d9:a9:51:47:18:27:01:49:46:63:1f:05:7f:24: 65:94:a8:0a:ea:00:e8:74:e0:33:9d:2b:c8:05:e4: 97:b9:ad:37:97:cb:10:56:c9:22:ad:ae:a4:44:19: 9b:93:19:8b:97:74:19:86:67:e3:e9:e9:2b:c8:a2: d7:7f:18:cb:d2:4c:b4:5f:fd:65:8b:56:2f:90:af: 3c:be:8f:59:32:12:90:eb:7a:a4:85:cb:94:57:4f: ce:3b:80:5a:ba:e3:75:cc:4c:48:13:b0:e5:6a:29: 44:7d:5a:5d:28:94:65:c2:b2:3c:18:71:05:74:bb: bf:20:50:4f:c1:af:b5:09:95:3a:1c:7c:f3:1b:ce: a5:ee:99:15:4d:ef:0c:5e:4d:90:e0:09:c6:35:8c: 92:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7E:AE:0C:4D:47:CA:A6:D1:36:BC:10:87:A0:EB:8F:09:8B:C2:94 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6f:8a:d2:0d:f1:6f:c9:0a:d8:cc:64:12:02:f3:80:ea:5e: dc:6c:49:9c:40:a4:d0:0a:f7:68:89:35:ff:54:29:1d:54:ec: 78:30:8e:a9:9b:35:60:c5:d6:e0:10:a5:a7:9a:e6:43:c8:23: 75:cd:97:a4:89:e3:80:67:5d:05:95:ba:45:a4:ce:a0:c2:d7: 1f:92:1a:73:3d:75:f3:60:66:22:8f:cf:5f:23:f7:96:ff:e8: 05:23:dd:02:89:ae:fb:bd:97:06:99:2b:55:4a:ea:13:48:cd: 09:de:41:9c:30:95:3e:00:c8:22:6b:93:ef:27:0d:7c:a3:68: 4b:10:91:5d:d9:ad:fc:e9:4b:87:1c:61:5a:7e:d3:8d:69:37: 7b:a6:73:3e:a4:d8:e1:71:66:c7:ea:6e:1e:b6:ed:42:cc:61: f6:e9:bc:5e:0c:53:64:12:ce:8e:19:0b:f7:2c:25:56:ba:f5: c0:41:c3:5f:de:14:eb:0e:3a:2a:4c:aa:69:71:5a:78:40:af: 04:b0:9e:43:0a:9c:68:9b:f6:e0:0e:f8:40:90:df:53:33:be: 6e:a2:85:a0:17:7e:3f:1f:de:39:56:1a:f9:f3:6a:b9:f3:1d: 6c:d8:1c:e3:67:2a:0e:df:91:17:45:38:e1:38:4d:de:fd:6c: dd:11:91:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUwNTMxMDAyMjQ5WhcNMjUwNjA3MDAyMjQ5WjAYMRYwFAYD VQQDEw02ODNhNGJkOS1jNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwDI8jeTGHvPXVtBs4Bz+S+64ZA1RFYs1wkX4Dr3CGDcWjuyX3VZ8vufWM0n8 VAcHKuch5cQUkev8FmPnWERXpZTvAzxUt9QdSJlONN52vlEkxoidl0RFzq7WENhw LwYS3y+kQ/huipKs2alRRxgnAUlGYx8FfyRllKgK6gDodOAznSvIBeSXua03l8sQ Vskira6kRBmbkxmLl3QZhmfj6ekryKLXfxjL0ky0X/1li1YvkK88vo9ZMhKQ63qk hcuUV0/OO4BauuN1zExIE7DlailEfVpdKJRlwrI8GHEFdLu/IFBPwa+1CZU6HHzz G86l7pkVTe8MXk2Q4AnGNYySiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBp+rgxN R8qm0Ta8EIeg648Ji8KUMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPb4rSDfFvyQrYzGQSAvOA6l7cbEmcQKTQCvdoiTX/VCkdVOx4MI6p mzVgxdbgEKWnmuZDyCN1zZekieOAZ10FlbpFpM6gwtcfkhpzPXXzYGYij89fI/eW /+gFI90Cia77vZcGmStVSuoTSM0J3kGcMJU+AMgia5PvJw18o2hLEJFd2a386UuH HGFaftONaTd7pnM+pNjhcWbH6m4etu1CzGH26bxeDFNkEs6OGQv3LCVWuvXAQcNf 3hTrDjoqTKppcVp4QK8EsJ5DCpxom/bgDvhAkN9TM75uooWgF34/H945Vhr582q5 8x1s2BzjZyoO35EXRTjhOE3e/WzdEZHj -----END CERTIFICATE-----Generated at Sat May 31 15:55:05 2025 by rpki-client