$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: petbP6rhNwQj/t6i3KN6xgEtpCZx4QGHH1CH94Z/2pg= Subject key identifier: 64:96:1F:AD:2B:63:42:3F:A6:E6:76:20:35:80:8C:F8:33:99:D0:97 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 06FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 06F3 Signing time: Fri 30 May 2025 22:10:52 +0000 Manifest this update: Fri 30 May 2025 22:10:51 +0000 Manifest next update: Fri 06 Jun 2025 22:10:51 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: ptfMPrEWtWKIHfyKI8AgpvfgNpAPNeVYTDhJG8+ITxY=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1791 (0x6ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: May 30 22:10:51 2025 GMT Not After : Jun 6 22:10:51 2025 GMT Subject: CN=683a2ceb-353f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:b5:38:f7:25:cc:df:c7:74:81:c7:3c:ea:78: 06:48:8c:f5:52:17:e6:18:94:61:4b:3e:0b:74:90: 87:8d:d1:14:37:fd:b9:9c:b4:1e:c0:4d:b1:e5:3b: 5e:c1:27:6e:b3:39:fa:c5:87:60:5a:ff:ba:e5:f8: 0f:03:1b:45:0e:f0:ea:eb:49:cf:17:af:34:06:64: 35:c8:72:62:3c:18:97:20:5f:28:0a:7e:1a:fe:83: 3c:2b:fb:58:9f:31:45:af:52:b8:29:f7:9d:da:44: 15:ba:dd:50:c1:96:0d:ce:b2:07:03:d5:d7:ea:aa: 42:5e:23:87:45:f4:d1:a7:46:87:c0:4f:6b:c1:7c: 7f:93:c9:c0:22:3a:6e:a5:62:f0:c8:77:54:a9:5f: 58:c8:3c:6a:8a:f0:3b:46:8c:c2:d7:ec:ce:78:15: a1:21:4d:04:75:f0:2d:c1:0c:2d:42:b8:46:2c:9b: 00:14:41:6c:f6:25:59:41:1e:3f:b8:1b:01:8b:9d: 4d:11:39:f9:73:d2:c0:e3:26:9b:8a:b9:02:a5:4e: 9c:e7:fa:64:25:54:6b:85:61:ac:7f:fc:2b:fe:84: 0e:e0:8a:bc:d9:1a:e6:5d:8f:c8:60:f3:dc:48:45: de:c0:50:f8:97:68:69:4d:e2:48:70:b6:e0:0a:73: 2f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:1F:AD:2B:63:42:3F:A6:E6:76:20:35:80:8C:F8:33:99:D0:97 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:9b:6b:3e:18:ea:63:2d:bb:2b:1b:fe:55:91:a1:92:f4:05: a1:1a:2a:a2:2e:88:fd:e9:3a:4f:c2:bc:4a:d6:97:90:d8:b3: 22:f8:39:e4:b2:39:60:6b:19:5d:64:db:17:7e:a5:b6:74:4c: 5c:c9:db:79:a2:34:2c:37:b4:02:32:ff:d3:e7:a5:22:71:5c: 4c:ba:9e:cd:fb:da:c5:8e:c7:40:23:d6:bb:1c:16:40:f9:42: ac:e6:d9:b6:85:0b:f1:34:55:9d:13:ce:f7:50:31:3c:e2:9f: de:4c:7e:47:15:5d:8a:bb:6e:ec:93:1f:f4:e0:13:bc:1d:35: 15:2f:ee:05:ca:8b:eb:95:09:41:af:74:60:6e:01:95:ad:5a: 4d:ac:d4:0e:f9:1b:df:8d:b8:81:78:e8:e6:26:1c:ae:8c:bb: 14:cf:89:4c:6b:28:35:9e:2a:e5:47:8b:c1:f0:f1:0e:e4:88: 68:af:d2:bc:5a:11:4c:af:1c:12:bc:62:be:8e:2b:53:a9:34: 46:84:58:f2:6b:61:60:f7:9a:73:23:e0:8c:e7:47:9a:b8:4f: 6f:d0:f7:c6:6b:39:b3:95:33:36:e0:80:1b:33:14:6b:b2:3c: 35:1c:b9:83:ed:7f:7f:a6:30:26:a4:e1:f2:6f:a8:f0:c1:25: ce:6d:d2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwNTMwMjIxMDUxWhcNMjUwNjA2MjIxMDUxWjAYMRYwFAYD VQQDEw02ODNhMmNlYi0zNTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+LU49yXM38d0gcc86ngGSIz1UhfmGJRhSz4LdJCHjdEUN/25nLQewE2x5Tte wSduszn6xYdgWv+65fgPAxtFDvDq60nPF680BmQ1yHJiPBiXIF8oCn4a/oM8K/tY nzFFr1K4Kfed2kQVut1QwZYNzrIHA9XX6qpCXiOHRfTRp0aHwE9rwXx/k8nAIjpu pWLwyHdUqV9YyDxqivA7RozC1+zOeBWhIU0EdfAtwQwtQrhGLJsAFEFs9iVZQR4/ uBsBi51NETn5c9LA4yabirkCpU6c5/pkJVRrhWGsf/wr/oQO4Iq82RrmXY/IYPPc SEXewFD4l2hpTeJIcLbgCnMvewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSWH60r Y0I/puZ2IDWAjPgzmdCXMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9m2s+GOpjLbsrG/5VkaGS9AWhGiqiLoj96TpPwrxK1peQ2LMi+Dnk sjlgaxldZNsXfqW2dExcydt5ojQsN7QCMv/T56UicVxMup7N+9rFjsdAI9a7HBZA +UKs5tm2hQvxNFWdE873UDE84p/eTH5HFV2Ku27skx/04BO8HTUVL+4FyovrlQlB r3RgbgGVrVpNrNQO+RvfjbiBeOjmJhyujLsUz4lMayg1nirlR4vB8PEO5Ihor9K8 WhFMrxwSvGK+jitTqTRGhFjya2Fg95pzI+CM50eauE9v0PfGazmzlTM24IAbMxRr sjw1HLmD7X9/pjAmpOHyb6jwwSXObdLx -----END CERTIFICATE-----Generated at Sat May 31 17:54:55 2025 by rpki-client