$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: mct1OAWdgzYP+rmcED5oTCdaRCEU67/CCUBnbtyLT2g= Subject key identifier: 0E:47:B2:8A:D2:5C:48:C4:69:A1:00:C4:DF:BB:5B:5A:8D:0C:ED:62 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 018F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 018C Signing time: Sat 31 May 2025 03:14:15 +0000 Manifest this update: Sat 31 May 2025 03:14:14 +0000 Manifest next update: Sat 07 Jun 2025 03:14:14 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: iRtts/cxaWEvut0n0Bly1b6w5oLk/VJ3BoUdxvA7gKE=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:14:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 399 (0x18f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: May 31 03:14:14 2025 GMT Not After : Jun 7 03:14:14 2025 GMT Subject: CN=683a7406-1b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:53:02:23:e0:80:cd:78:4e:a0:07:75:01: ae:1e:8c:e0:16:8a:ed:7b:5b:a2:af:c4:3d:b3:6e: b0:82:c6:53:ed:79:bb:f0:15:44:b7:f5:ae:32:f2: b3:51:cc:63:e6:76:f7:58:3a:c5:c2:08:ed:b1:a4: 39:fe:29:07:40:bf:94:c3:19:f9:8b:ff:73:1e:6a: 38:80:01:11:41:d9:b7:36:c8:0a:47:74:a7:df:df: 73:8c:f7:1a:bc:ec:e9:1c:24:08:90:1e:57:9a:c9: 16:42:7b:a7:45:b8:09:2f:1c:e4:86:11:87:4c:4d: 6f:99:61:19:e6:45:8b:1d:15:38:84:08:7f:41:16: 36:55:c5:0a:90:45:b2:70:a0:20:a2:fd:50:c1:13: 05:e8:7f:1b:b1:62:ee:68:19:e7:46:a6:2e:8c:fb: 3f:48:1d:47:01:b8:d6:90:b6:41:63:c9:7b:4a:12: 77:18:c3:02:ad:f2:55:f2:a2:23:e8:17:c9:b2:71: 76:e2:65:e9:cd:43:0b:df:fb:8b:4e:a0:fe:bc:49: dc:69:25:08:a9:f6:a5:a8:6c:7e:a3:a3:f5:0f:7f: e6:c5:98:00:b9:27:e4:22:d3:b7:4d:b8:e5:a9:59: e0:a7:87:d0:b9:d7:c3:9b:1f:0e:96:4e:89:6d:10: 66:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:47:B2:8A:D2:5C:48:C4:69:A1:00:C4:DF:BB:5B:5A:8D:0C:ED:62 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:97:27:13:b5:b7:f8:73:36:4e:b3:a3:94:95:35:d5:7f:ef: b5:dc:cb:c3:2a:0f:7a:9c:77:e8:e9:54:4e:7c:9b:6f:84:0d: f3:b7:ec:08:27:5b:51:a1:c0:cc:30:55:8a:f2:8f:65:fc:4b: a5:a7:f7:2b:e0:bb:77:e8:22:a0:f5:02:eb:dd:13:09:6e:27: 61:bc:0f:de:6b:be:83:5d:95:22:d5:cc:78:a1:d7:64:c8:6a: f0:3a:e5:64:c5:b2:84:d8:18:4b:7a:e7:c0:a6:86:a5:2a:44: 7f:d7:3f:20:54:e1:de:85:2b:f4:e9:79:ce:f8:df:74:c4:ab: ec:a2:bd:ff:9e:dd:90:54:5a:f3:7c:be:34:64:4d:45:a4:72: a5:92:35:cb:e9:d6:e7:7b:43:60:65:b8:be:28:f3:ab:81:dd: 6f:f1:30:3c:1e:87:36:f8:50:e4:c9:8e:60:29:01:e7:05:d2: c8:22:4e:8c:05:bc:1b:24:9c:33:23:36:8c:75:77:d6:98:b5: 4b:27:26:f1:9b:50:bf:34:18:dd:c3:98:3a:98:62:16:10:71: b4:7b:1a:f3:fe:d8:af:84:07:72:e2:b0:2a:6c:f9:84:09:6e: 50:b5:d4:2d:ea:76:09:dd:96:af:9f:01:ff:b9:9b:b6:9b:8b: 10:d4:b2:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwNTMxMDMxNDE0WhcNMjUwNjA3MDMxNDE0WjAYMRYwFAYD VQQDEw02ODNhNzQwNi0xYjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fdTAiPggM14TqAHdQGuHozgForte1uir8Q9s26wgsZT7Xm78BVEt/WuMvKz Ucxj5nb3WDrFwgjtsaQ5/ikHQL+Uwxn5i/9zHmo4gAERQdm3NsgKR3Sn399zjPca vOzpHCQIkB5XmskWQnunRbgJLxzkhhGHTE1vmWEZ5kWLHRU4hAh/QRY2VcUKkEWy cKAgov1QwRMF6H8bsWLuaBnnRqYujPs/SB1HAbjWkLZBY8l7ShJ3GMMCrfJV8qIj 6BfJsnF24mXpzUML3/uLTqD+vEncaSUIqfalqGx+o6P1D3/mxZgAuSfkItO3Tbjl qVngp4fQudfDmx8Olk6JbRBmPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5HsorS XEjEaaEAxN+7W1qNDO1iMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMlycTtbf4czZOs6OUlTXVf++13MvDKg96nHfo6VROfJtvhA3zt+wI J1tRocDMMFWK8o9l/Eulp/cr4Lt36CKg9QLr3RMJbidhvA/ea76DXZUi1cx4oddk yGrwOuVkxbKE2BhLeufApoalKkR/1z8gVOHehSv06XnO+N90xKvsor3/nt2QVFrz fL40ZE1FpHKlkjXL6dbne0NgZbi+KPOrgd1v8TA8Hoc2+FDkyY5gKQHnBdLIIk6M BbwbJJwzIzaMdXfWmLVLJybxm1C/NBjdw5g6mGIWEHG0exrz/tivhAdy4rAqbPmE CW5QtdQt6nYJ3ZavnwH/uZu2m4sQ1LLV -----END CERTIFICATE-----Generated at Sat May 31 17:48:38 2025 by rpki-client