$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: TcpvkmWabD/QRsUlr9UiHWOniJ5k+7ldJX0PJXWcMk4= Subject key identifier: 8A:FF:43:C8:AA:A0:B1:A2:C1:E9:B8:B3:FA:55:72:59:4F:A8:E6:D1 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0A8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0A84 Signing time: Fri 30 May 2025 19:47:12 +0000 Manifest this update: Fri 30 May 2025 19:47:11 +0000 Manifest next update: Fri 06 Jun 2025 19:47:11 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: h7dwl8I3/ZXYsXeJ/8LCIsYolyHdJ4wEx7rKZo1b/Vk=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2698 (0xa8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: May 30 19:47:11 2025 GMT Not After : Jun 6 19:47:11 2025 GMT Subject: CN=683a0b40-aabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ad:17:e4:79:a9:d6:97:64:80:ca:73:09:a1: 4b:ab:d3:74:e3:5b:f6:11:a6:fb:a5:99:48:a1:e9: ce:8a:ac:7d:4e:45:3a:db:e0:40:1b:cb:1d:bc:26: a6:e2:ad:c4:34:3e:3d:fd:6d:6e:dc:86:08:e3:c3: 41:41:41:dc:6b:34:18:30:c6:f8:c7:0c:ff:3a:86: 21:f8:92:c6:f6:41:d1:77:8d:ac:19:f8:d3:14:28: 11:31:39:6c:98:e9:4c:51:b0:a9:b0:1d:96:ec:90: 48:08:2a:29:3b:79:d0:1c:c3:dd:7e:06:e1:28:07: 7f:c1:fa:34:26:13:4d:27:e9:78:ec:52:62:06:86: 84:0e:80:88:74:b1:22:40:c9:27:b3:c4:37:42:da: 87:88:1a:02:ed:eb:18:e0:ac:0b:81:69:6d:2d:53: 17:16:f6:8d:fe:db:c1:68:df:06:64:41:e4:42:0c: 56:b5:2a:20:44:a9:5d:b8:a5:7d:b1:77:37:d4:2c: 0a:cb:85:d3:88:7a:8d:ab:ca:59:aa:77:b2:e8:d8: 9d:13:26:ee:58:42:78:c6:5e:a4:98:81:8f:af:8f: 67:0c:bc:da:61:41:a1:6a:ff:ab:f4:70:a4:d8:43: 83:d2:2b:9b:2a:19:12:6f:01:a7:31:f0:6d:f6:c6: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FF:43:C8:AA:A0:B1:A2:C1:E9:B8:B3:FA:55:72:59:4F:A8:E6:D1 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:1b:5e:c8:2b:05:dc:c7:78:b0:23:86:b4:ce:06:4d:4f:be: 7c:68:3b:1d:1e:ae:15:85:38:17:bf:df:2b:f8:25:13:e2:7c: 61:d3:f3:bc:fe:6a:f9:15:63:47:24:d0:5d:ef:b6:53:7d:82: 8c:bc:d0:c9:ae:39:08:69:8d:7c:3b:a4:d7:3d:b6:f4:8e:f6: 0b:b9:a1:eb:7a:43:b7:77:b2:d7:c5:93:ac:9f:97:3b:09:21: 3b:35:20:55:30:e0:ab:5d:23:7f:6f:72:eb:74:46:01:e7:d5: 80:76:56:99:e4:06:76:0c:de:43:44:2f:06:72:a0:d4:fa:54: bc:fd:49:7f:9c:3a:bd:1e:38:95:92:ad:97:ad:6c:01:b3:04: 92:d6:5b:07:01:72:ee:8c:6d:43:67:26:03:b6:0f:ac:12:c1: 08:b7:7a:06:7c:17:fb:e3:a9:bb:9f:fe:47:59:9c:6f:28:73: 96:69:7e:43:12:07:53:38:09:92:78:dd:c4:58:2a:9f:48:2e: 03:d7:61:70:66:4a:08:67:25:48:75:5a:8e:df:1a:45:04:e9: e0:ea:54:3e:2b:83:ed:be:60:00:96:d1:03:98:66:18:a5:bd: d3:63:e4:5d:08:e5:b7:e5:4c:7d:87:58:d6:e3:8f:72:29:fc: 95:b3:7d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwNTMwMTk0NzExWhcNMjUwNjA2MTk0NzExWjAYMRYwFAYD VQQDEw02ODNhMGI0MC1hYWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzK0X5Hmp1pdkgMpzCaFLq9N041v2Eab7pZlIoenOiqx9TkU62+BAG8sdvCam 4q3END49/W1u3IYI48NBQUHcazQYMMb4xwz/OoYh+JLG9kHRd42sGfjTFCgRMTls mOlMUbCpsB2W7JBICCopO3nQHMPdfgbhKAd/wfo0JhNNJ+l47FJiBoaEDoCIdLEi QMkns8Q3QtqHiBoC7esY4KwLgWltLVMXFvaN/tvBaN8GZEHkQgxWtSogRKlduKV9 sXc31CwKy4XTiHqNq8pZqney6NidEybuWEJ4xl6kmIGPr49nDLzaYUGhav+r9HCk 2EOD0iubKhkSbwGnMfBt9sbIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIr/Q8iq oLGiwem4s/pVcllPqObRMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpG17IKwXcx3iwI4a0zgZNT758aDsdHq4VhTgXv98r+CUT4nxh0/O8 /mr5FWNHJNBd77ZTfYKMvNDJrjkIaY18O6TXPbb0jvYLuaHrekO3d7LXxZOsn5c7 CSE7NSBVMOCrXSN/b3LrdEYB59WAdlaZ5AZ2DN5DRC8GcqDU+lS8/Ul/nDq9HjiV kq2XrWwBswSS1lsHAXLujG1DZyYDtg+sEsEIt3oGfBf746m7n/5HWZxvKHOWaX5D EgdTOAmSeN3EWCqfSC4D12FwZkoIZyVIdVqO3xpFBOng6lQ+K4PtvmAAltEDmGYY pb3TY+RdCOW35Ux9h1jW449yKfyVs32T -----END CERTIFICATE-----Generated at Sat May 31 17:51:41 2025 by rpki-client