$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: /7AvcT9xO9vCb7gxxZn9SiMaMzLiAodMgluL/i86wCw= Subject key identifier: 7B:D4:C6:3E:DF:EC:C0:4A:35:57:70:62:D8:6F:90:C3:83:70:01:56 Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: E0 Signing time: Sat 31 May 2025 05:06:20 +0000 Manifest this update: Sat 31 May 2025 05:06:19 +0000 Manifest next update: Sat 07 Jun 2025 05:06:19 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: q5AgIQvUKQTaq8Mdd18xWSDUoQkhGH3N99qCCkclEdw=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:06:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: May 31 05:06:19 2025 GMT Not After : Jun 7 05:06:19 2025 GMT Subject: CN=683a8e4c-cd8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:81:d8:df:14:88:39:9a:e9:fa:00:23:ea: 73:cb:65:2e:1a:72:52:71:2a:ee:a0:bc:94:cb:60: 03:2d:9b:ba:e2:bd:9b:d6:60:c6:82:42:2a:65:be: 70:f7:9d:a4:ef:d3:a3:df:8c:ea:73:52:07:1d:07: 1c:0a:78:c5:e6:98:33:ce:d2:5c:33:be:74:d8:eb: 0f:53:f6:76:cb:83:87:53:74:8a:ad:25:f8:41:ba: 71:7a:a5:f0:19:9d:dc:a4:fe:03:df:4e:2d:20:00: 61:31:75:19:84:03:be:51:24:59:39:56:b0:69:68: 57:40:38:3a:ad:ed:d3:a2:e2:dc:b8:f4:30:4d:ac: 3d:23:23:47:41:9f:76:38:6c:ce:42:20:5f:d3:40: 5a:68:39:4a:47:00:5f:ae:d1:2c:f2:44:bc:45:c1: 4c:e3:f5:d9:02:c0:f4:2a:23:2f:d4:09:f3:91:94: f7:d0:00:1c:6f:6d:72:a0:d7:65:e4:5c:98:1b:89: 8a:cc:68:16:5a:e1:34:73:95:88:b6:f7:4c:7a:97: 55:cd:86:4b:06:29:66:eb:57:86:3b:34:4b:70:29: 95:1c:75:09:42:6c:18:ac:a0:5a:da:8d:83:01:a5: 39:c3:85:82:0f:01:e4:6b:3c:85:26:bc:ce:11:ec: 33:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D4:C6:3E:DF:EC:C0:4A:35:57:70:62:D8:6F:90:C3:83:70:01:56 X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:30:c1:69:76:d7:0f:12:a4:38:23:ce:f3:2f:6b:3a:8f:5b: f9:23:83:01:85:42:ad:8a:01:ac:68:7f:57:43:0d:57:dd:3a: 97:12:21:5d:43:91:80:b2:e5:11:4d:7d:fc:40:bd:48:b5:a1: b9:2f:60:3f:55:46:5c:1a:d8:9b:81:f0:e1:67:d3:91:fc:1b: 13:b3:30:d1:2c:a7:d8:1b:4f:97:1f:a0:0c:70:82:5e:7d:92: b6:1c:f6:d2:82:4c:54:f5:4c:94:0e:4f:3a:71:26:d7:d1:10: ad:98:5b:fb:50:55:7e:e5:85:79:b3:61:09:cb:a6:de:a9:83: 16:b1:a0:a9:b2:16:80:33:84:64:9a:9d:b5:78:5f:5c:6d:a8: 96:ac:7d:42:5b:60:91:e1:de:ec:4c:8a:99:96:43:9c:a6:41: e3:cf:3d:5b:07:1b:77:87:03:53:10:69:96:49:bc:85:32:21: 04:47:b5:6f:b2:13:a5:74:e5:0d:29:f7:b7:08:b7:8c:27:a5: a7:4b:05:63:32:1f:fd:0a:a5:99:1b:98:14:ef:cc:a1:5c:4c: 7b:06:d9:eb:51:55:fa:e6:46:4c:c1:4b:e1:e1:98:d5:98:c4: 84:36:f8:2c:c4:2d:a6:5f:ef:54:b5:9b:5e:9a:9d:e6:42:2e: ec:f8:6d:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwNTMxMDUwNjE5WhcNMjUwNjA3MDUwNjE5WjAYMRYwFAYD VQQDEw02ODNhOGU0Yy1jZDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRyB2N8UiDma6foAI+pzy2UuGnJScSruoLyUy2ADLZu64r2b1mDGgkIqZb5w 952k79Oj34zqc1IHHQccCnjF5pgzztJcM7502OsPU/Z2y4OHU3SKrSX4QbpxeqXw GZ3cpP4D304tIABhMXUZhAO+USRZOVawaWhXQDg6re3TouLcuPQwTaw9IyNHQZ92 OGzOQiBf00BaaDlKRwBfrtEs8kS8RcFM4/XZAsD0KiMv1AnzkZT30AAcb21yoNdl 5FyYG4mKzGgWWuE0c5WItvdMepdVzYZLBilm61eGOzRLcCmVHHUJQmwYrKBa2o2D AaU5w4WCDwHkazyFJrzOEewzMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvUxj7f 7MBKNVdwYthvkMODcAFWMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTMMFpdtcPEqQ4I87zL2s6j1v5I4MBhUKtigGsaH9XQw1X3TqXEiFd Q5GAsuURTX38QL1ItaG5L2A/VUZcGtibgfDhZ9OR/BsTszDRLKfYG0+XH6AMcIJe fZK2HPbSgkxU9UyUDk86cSbX0RCtmFv7UFV+5YV5s2EJy6beqYMWsaCpshaAM4Rk mp21eF9cbaiWrH1CW2CR4d7sTIqZlkOcpkHjzz1bBxt3hwNTEGmWSbyFMiEER7Vv shOldOUNKfe3CLeMJ6WnSwVjMh/9CqWZG5gU78yhXEx7BtnrUVX65kZMwUvh4ZjV mMSENvgsxC2mX+9UtZtemp3mQi7s+G3K -----END CERTIFICATE-----Generated at Sat May 31 16:42:58 2025 by rpki-client