$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: NTmMYFNRRjSb1UIyOirBJRFL58uwl3WLby5hXkxlDLg= Subject key identifier: 89:3A:E7:1A:27:82:65:E7:82:E1:10:3D:5D:C7:4D:3D:49:17:FC:36 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0AEF Signing time: Wed 04 Jun 2025 19:19:25 +0000 Manifest this update: Wed 04 Jun 2025 19:19:24 +0000 Manifest next update: Wed 11 Jun 2025 19:19:24 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: 1T+p5r27MN57jlAZMjEBHTDF03QHLPsL2v96xpx+GHM=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: CuzGm85wLiuHxUTSuvnqnZczG2t94ONHHbEKTXpyL78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:19:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Jun 4 19:19:24 2025 GMT Not After : Jun 11 19:19:24 2025 GMT Subject: CN=68409c3d-4260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:47:78:0e:b8:ba:50:00:f9:9a:cf:f3:10: 01:2f:8f:bf:e3:8c:f2:bf:68:07:73:6c:7e:86:e1: ad:d0:91:ae:f1:4b:ff:e3:2a:51:c5:15:91:e8:1d: a2:21:91:07:ab:21:be:62:c5:ba:17:fc:7d:56:64: 2e:36:40:71:17:50:39:b8:41:93:4b:af:9f:28:92: 08:b9:b2:aa:08:20:c9:42:f1:db:2c:74:ec:79:7a: b6:45:d7:26:e0:50:67:8e:6a:79:ae:69:13:29:af: 5c:3c:1d:06:4a:17:21:32:55:f5:85:03:8e:5d:15: 34:ab:01:b8:7f:12:c6:37:33:fc:07:37:58:27:de: 22:b3:44:fa:f9:75:c0:ae:1d:f5:26:b7:47:de:5f: 69:af:a1:cc:b5:c7:a4:aa:31:9c:06:31:01:d4:48: ef:7b:cd:42:41:f5:61:8f:50:0e:04:98:0e:d8:6f: 92:19:9c:c9:aa:1e:34:ea:90:1f:fd:24:a0:ac:02: 2a:73:a4:8e:ef:f4:26:4e:16:1d:20:59:e8:25:5a: 40:82:63:76:e7:2a:ee:29:52:e6:46:a5:5e:77:11: da:37:a5:d6:db:7a:4a:19:5e:e3:d7:60:ce:bc:87: e1:02:a2:3c:a1:c4:03:a3:34:12:a3:a8:3d:84:06: 63:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:3A:E7:1A:27:82:65:E7:82:E1:10:3D:5D:C7:4D:3D:49:17:FC:36 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:1a:55:e5:91:0b:58:c6:a8:b9:48:5b:af:f6:31:3a:92:93: 97:83:74:79:fc:c2:a7:c8:ef:36:2a:e9:1b:ce:1d:05:24:68: 04:d0:6d:b0:38:62:04:3a:11:94:5a:16:96:08:b4:af:19:0d: 7a:b6:5a:b9:e4:44:e6:ec:53:ff:25:0c:58:14:47:4f:de:29: d9:00:77:c5:f9:39:e3:c5:e7:ec:97:99:15:bb:39:40:fe:9a: 23:ed:ce:1f:31:54:f7:74:9a:03:99:55:d7:c2:c7:31:b3:37: 10:41:68:bf:f7:62:b6:6e:22:eb:79:a7:30:3b:f3:10:8d:84: 05:ca:ef:1e:2b:ef:ee:f0:10:df:2b:d4:fc:57:0f:41:1b:ee: a0:c1:57:ee:6d:a6:77:2d:72:37:39:71:6d:e8:23:14:72:0d: bf:06:13:55:89:33:95:ef:59:e4:e7:3e:74:1e:85:0f:28:ff: 6a:b7:ff:ae:d8:5d:a3:a5:f6:51:cd:de:1a:79:6f:0e:0f:78: b7:bf:38:59:34:16:0e:cf:37:de:00:c7:36:e8:01:1e:0d:59: 96:33:34:7d:fc:80:d2:3f:ba:76:4e:38:0e:f0:d5:ad:3e:f7: 45:c6:22:c3:9d:e1:04:12:e2:b9:7f:49:6f:67:80:27:fb:52: d4:2d:64:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUwNjA0MTkxOTI0WhcNMjUwNjExMTkxOTI0WjAYMRYwFAYD VQQDEw02ODQwOWMzZC00MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvRHeA64ulAA+ZrP8xABL4+/44zyv2gHc2x+huGt0JGu8Uv/4ypRxRWR6B2i IZEHqyG+YsW6F/x9VmQuNkBxF1A5uEGTS6+fKJIIubKqCCDJQvHbLHTseXq2Rdcm 4FBnjmp5rmkTKa9cPB0GShchMlX1hQOOXRU0qwG4fxLGNzP8BzdYJ94is0T6+XXA rh31JrdH3l9pr6HMtcekqjGcBjEB1Ejve81CQfVhj1AOBJgO2G+SGZzJqh406pAf /SSgrAIqc6SO7/QmThYdIFnoJVpAgmN25yruKVLmRqVedxHaN6XW23pKGV7j12DO vIfhAqI8ocQDozQSo6g9hAZj9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIk65xon gmXnguEQPV3HTT1JF/w2MB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGGlXlkQtYxqi5SFuv9jE6kpOXg3R5/MKnyO82Kukbzh0FJGgE0G2w OGIEOhGUWhaWCLSvGQ16tlq55ETm7FP/JQxYFEdP3inZAHfF+Tnjxefsl5kVuzlA /poj7c4fMVT3dJoDmVXXwscxszcQQWi/92K2biLreacwO/MQjYQFyu8eK+/u8BDf K9T8Vw9BG+6gwVfubaZ3LXI3OXFt6CMUcg2/BhNViTOV71nk5z50HoUPKP9qt/+u 2F2jpfZRzd4aeW8OD3i3vzhZNBYOzzfeAMc26AEeDVmWMzR9/IDSP7p2TjgO8NWt PvdFxiLDneEEEuK5f0lvZ4An+1LULWSw -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:49 2025 by rpki-client