$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json) Hash identifier: S3vSEqjsMDD4nAXAdz/6RYRFGbC69NTWE7JFamGiXug= Subject key identifier: 0A:C1:D7:BB:3F:04:5E:25:7A:56:41:22:36:ED:96:93:4D:D2:91:14 Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Certificate serial: 3304 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft Manifest number: 3C02 Signing time: Sat 31 May 2025 15:21:13 +0000 Manifest this update: Sat 31 May 2025 15:21:13 +0000 Manifest next update: Sat 07 Jun 2025 15:21:13 +0000 Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: GXrV3JJcuWiE7knMXiXPpDXzC+wpCbeFiPoIt/DE55k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 15:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13060 (0x3304) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Validity Not Before: May 31 15:21:13 2025 GMT Not After : Jun 7 15:21:13 2025 GMT Subject: CN=683b1e69-a2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:b0:8f:f7:59:f3:82:fe:fb:2d:8a:03:71: 69:e6:84:2d:ef:0c:cd:f9:e3:17:09:b0:6f:d9:0c: 81:48:db:92:20:3c:24:9a:0d:09:a5:f7:5d:c2:9c: 35:26:1e:e0:c5:9c:2f:44:ca:95:13:98:c9:12:84: c9:df:da:7e:4b:05:60:da:b6:27:ca:b0:d7:c8:65: f9:20:3a:92:5e:02:30:03:e2:ae:28:81:4a:4b:c6: c0:79:28:9d:a2:5d:ee:b7:79:e5:a8:79:1b:85:4d: 4c:b0:92:d4:38:87:07:cb:31:6c:a9:c7:01:52:33: 35:5f:d2:38:99:63:18:b6:df:08:05:38:14:16:75: c5:6f:3a:f3:93:b6:6b:bb:fa:eb:94:67:8d:ba:b4: e0:37:a6:ee:bc:b8:ad:21:c9:26:05:d1:d5:1d:50: 69:29:83:78:38:db:f6:f6:1d:df:bc:50:f3:00:65: 64:48:69:ba:67:28:4b:a9:75:dd:e7:70:b3:29:1e: ba:38:0f:fb:bf:77:ac:02:f2:b7:80:d4:e8:0d:c0: e3:f0:a6:84:b5:e5:40:42:93:cf:82:bd:b2:dd:83: 77:0b:0b:9c:27:84:79:03:e2:a9:0c:be:57:21:4a: 25:9d:f7:f1:b9:d0:2d:d7:3b:30:a7:18:f9:ae:67: d0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C1:D7:BB:3F:04:5E:25:7A:56:41:22:36:ED:96:93:4D:D2:91:14 X509v3 Authority Key Identifier: keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:d8:c3:53:f2:f3:7c:b9:49:61:f3:8e:8e:7f:56:93:38:e1: 4a:a2:f0:13:cb:61:ba:6c:24:d0:e1:a6:fa:53:2f:e6:38:c8: 73:be:02:a4:59:3b:e2:3d:76:b6:b9:20:55:b3:37:53:c2:27: 7e:32:34:d2:9d:48:06:0f:27:4b:b5:62:b4:7f:6e:12:0c:a2: e6:b5:2e:ef:51:c6:e8:d0:75:f9:48:af:34:4b:a6:0a:3f:b0: 98:51:cc:43:1f:a8:9f:93:27:ed:fe:1f:ea:6e:95:9d:48:d1: 01:ec:2a:28:ac:d3:42:c9:19:3a:04:42:76:26:b4:56:84:bf: ec:44:d8:10:d1:5e:4e:ac:d3:06:9e:67:eb:19:47:40:8d:ae: b6:40:f1:fa:2e:f4:9f:08:59:ff:bb:ee:cf:77:78:1a:ba:06: 46:e0:f7:2c:42:10:f1:4f:16:ef:94:05:61:0a:bc:3b:7c:53: 9d:1d:7a:44:a1:9a:3b:a0:63:da:21:82:20:cf:64:3f:67:90: 70:e7:26:f7:ea:bc:25:b8:f7:f8:c3:0b:92:fb:6d:4b:ff:54: 40:41:63:cf:d3:2e:90:f4:fc:42:94:a4:77:a2:ce:84:67:93: 73:29:41:94:74:40:ed:da:20:28:dc:4c:62:4c:05:8b:2b:85: 62:dc:6a:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKEVDOTVCOEE4NDk3MjlCQTZFRjg0MkM2MzcxQUFENEFD N0Q4RjIxRjcwHhcNMjUwNTMxMTUyMTEzWhcNMjUwNjA3MTUyMTEzWjAYMRYwFAYD VQQDEw02ODNiMWU2OS1hMmI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA43+wj/dZ84L++y2KA3Fp5oQt7wzN+eMXCbBv2QyBSNuSIDwkmg0Jpfddwpw1 Jh7gxZwvRMqVE5jJEoTJ39p+SwVg2rYnyrDXyGX5IDqSXgIwA+KuKIFKS8bAeSid ol3ut3nlqHkbhU1MsJLUOIcHyzFsqccBUjM1X9I4mWMYtt8IBTgUFnXFbzrzk7Zr u/rrlGeNurTgN6buvLitIckmBdHVHVBpKYN4ONv29h3fvFDzAGVkSGm6ZyhLqXXd 53CzKR66OA/7v3esAvK3gNToDcDj8KaEteVAQpPPgr2y3YN3CwucJ4R5A+KpDL5X IUolnffxudAt1zswpxj5rmfQhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArB17s/ BF4lelZBIjbtlpNN0pEUMB8GA1UdIwQYMBaAFOyVuKhJcpum74QsY3Gq1Kx9jyH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02YnZoQ3hqY2FyVXJIMlBJ ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdKVzRxRWx5bTZidmhDeGpjYXJVckgyUElmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02 YnZoQ3hqY2FyVXJIMlBJZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy2MNT8vN8uUlh846Of1aTOOFKovATy2G6bCTQ4ab6Uy/mOMhzvgKk WTviPXa2uSBVszdTwid+MjTSnUgGDydLtWK0f24SDKLmtS7vUcbo0HX5SK80S6YK P7CYUcxDH6ifkyft/h/qbpWdSNEB7CoorNNCyRk6BEJ2JrRWhL/sRNgQ0V5OrNMG nmfrGUdAja62QPH6LvSfCFn/u+7Pd3gaugZG4PcsQhDxTxbvlAVhCrw7fFOdHXpE oZo7oGPaIYIgz2Q/Z5Bw5yb36rwluPf4wwuS+21L/1RAQWPP0y6Q9PxClKR3os6E Z5NzKUGUdEDt2iAo3ExiTAWLK4Vi3GrF -----END CERTIFICATE-----Generated at Sat May 31 17:36:08 2025 by rpki-client