$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: 4QpEMQn7gfyoHpVdgsV3Vq/Hn9X5vIseNbM7kKNlajQ= Subject key identifier: 40:53:A2:EB:93:30:52:0E:E9:DE:D2:6D:F0:80:43:83:98:33:56:10 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0335 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 032F Signing time: Sat 31 May 2025 01:18:19 +0000 Manifest this update: Sat 31 May 2025 01:18:18 +0000 Manifest next update: Sat 07 Jun 2025 01:18:18 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: UJ2uR5gzSitfKZFtXhVmpvAxsnsajmq4UbDUqTiSeX0=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: z4vQqgZhpqZXS+GtFlO73cYGprnonSTGtg6l7U/hdMg=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: m3FNoE8x/APaB37yvI31cS5HnGrXCqQFoxWPhTaz/1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:18:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 821 (0x335) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: May 31 01:18:18 2025 GMT Not After : Jun 7 01:18:18 2025 GMT Subject: CN=683a58db-4d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a7:d9:6c:09:94:29:e4:17:14:7f:60:41:92: 0f:91:51:7a:2f:6c:b9:1e:3c:41:2f:a2:18:d2:47: f5:ea:6a:92:cf:3b:30:9d:45:24:2f:c2:e5:22:28: c5:b9:6d:92:f6:01:c1:c7:eb:ee:5f:91:2a:3c:91: 3b:30:b9:91:cb:5c:2f:17:4b:2d:b8:0c:ff:77:df: 5e:e9:02:4b:1a:85:22:6c:09:53:c8:fb:29:2a:40: 92:01:d1:96:f9:db:a5:29:99:af:2f:ba:98:9d:c5: 67:a0:41:ac:08:9e:93:0e:b5:aa:a4:ca:97:1c:e0: 66:11:35:9d:8c:92:ab:f1:93:c6:73:53:b5:c9:30: 2a:41:b6:5a:c5:48:68:86:ce:79:91:58:48:fb:3b: 45:66:fd:19:c5:b0:6e:32:ea:4e:6d:55:94:76:17: 84:50:6c:a7:5a:91:c7:ce:1c:c3:ad:3a:86:eb:f0: c3:f1:16:35:45:f3:ac:55:06:8f:2f:74:56:11:fe: 3f:2d:bc:a4:f7:d2:ad:42:3a:2e:18:30:6d:b3:7e: 2f:15:e9:39:80:18:59:88:5b:cb:5d:0a:f9:22:03: cb:a6:3f:01:9a:f2:9d:d9:75:98:dd:6b:56:3f:df: ee:4c:7e:94:77:06:d7:c2:4a:01:11:c4:0e:ad:97: 68:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:53:A2:EB:93:30:52:0E:E9:DE:D2:6D:F0:80:43:83:98:33:56:10 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:eb:e7:57:1b:66:c4:e4:a6:d5:d4:a6:58:78:28:c1:69:22: 2d:7b:ff:f6:a0:5c:54:42:45:12:81:5b:f1:bf:00:f0:fa:42: 76:00:48:59:b2:f4:bc:67:55:3c:fb:d8:f1:12:c8:5e:30:dc: 03:9b:d3:fa:d4:b1:01:bb:ed:6d:49:e2:a2:f4:94:a9:54:13: f3:d0:90:d1:00:dc:f2:26:0d:57:1e:83:a4:27:ca:ad:e6:f2: e1:ef:f1:c6:2e:eb:24:5e:00:2d:4c:e5:2a:31:7a:a6:e0:fc: 00:7d:3a:65:e3:33:27:d8:b0:70:46:49:30:e4:58:61:a9:d9: b7:cf:ff:c3:68:97:14:ec:04:47:6d:8d:40:14:da:c1:01:9a: 9d:64:c9:d6:68:64:b0:61:c0:19:da:11:7b:0c:12:fb:20:6a: 1f:d4:f6:6d:1b:87:f0:a7:a6:54:66:c2:0c:8e:ec:1a:db:8c: d4:e7:8b:91:db:46:12:b3:de:0b:e3:15:53:ff:18:e9:5e:e7: 55:f9:7f:60:db:4a:64:af:7b:a2:e0:d2:45:4c:02:2a:c1:64: 12:2a:f8:f4:b2:80:f1:1c:d3:84:36:32:d9:c9:e8:97:d7:da: 52:5f:66:bb:01:6b:4e:5b:55:46:e9:88:d0:52:9b:24:5b:a1: af:60:66:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwNTMxMDExODE4WhcNMjUwNjA3MDExODE4WjAYMRYwFAYD VQQDEw02ODNhNThkYi00ZDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3qfZbAmUKeQXFH9gQZIPkVF6L2y5HjxBL6IY0kf16mqSzzswnUUkL8LlIijF uW2S9gHBx+vuX5EqPJE7MLmRy1wvF0stuAz/d99e6QJLGoUibAlTyPspKkCSAdGW +dulKZmvL7qYncVnoEGsCJ6TDrWqpMqXHOBmETWdjJKr8ZPGc1O1yTAqQbZaxUho hs55kVhI+ztFZv0ZxbBuMupObVWUdheEUGynWpHHzhzDrTqG6/DD8RY1RfOsVQaP L3RWEf4/Lbyk99KtQjouGDBts34vFek5gBhZiFvLXQr5IgPLpj8BmvKd2XWY3WtW P9/uTH6UdwbXwkoBEcQOrZdoWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBTouuT MFIO6d7SbfCAQ4OYM1YQMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN6+dXG2bE5KbV1KZYeCjBaSIte//2oFxUQkUSgVvxvwDw+kJ2AEhZ svS8Z1U8+9jxEsheMNwDm9P61LEBu+1tSeKi9JSpVBPz0JDRANzyJg1XHoOkJ8qt 5vLh7/HGLuskXgAtTOUqMXqm4PwAfTpl4zMn2LBwRkkw5Fhhqdm3z//DaJcU7ARH bY1AFNrBAZqdZMnWaGSwYcAZ2hF7DBL7IGof1PZtG4fwp6ZUZsIMjuwa24zU54uR 20YSs94L4xVT/xjpXudV+X9g20pkr3ui4NJFTAIqwWQSKvj0soDxHNOENjLZyeiX 19pSX2a7AWtOW1VG6YjQUpskW6GvYGaW -----END CERTIFICATE-----Generated at Sat May 31 16:45:50 2025 by rpki-client