$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: LCJz+YJ7i6XnrpfIFc50jVDWzVmHuA9uaGJPWdkBIKE= Subject key identifier: 48:64:37:AF:1F:0B:87:AD:0D:D1:B9:62:D7:53:FD:98:BC:54:26:43 Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B26 Signing time: Fri 30 May 2025 19:23:56 +0000 Manifest this update: Fri 30 May 2025 19:23:55 +0000 Manifest next update: Fri 06 Jun 2025 19:23:55 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: db2UF/D9zzI10gs4fIYjFvKxqNhxJ34OM0dHITPm3xY=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yUzUPNwrnnqA9y2QcEn+ohx6QfzL71Dl4zwJAGApA/o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2863 (0xb2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: May 30 19:23:55 2025 GMT Not After : Jun 6 19:23:55 2025 GMT Subject: CN=683a05cb-128f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:56:e6:a9:f2:21:31:63:47:b2:fb:51:84:66: e4:6a:24:49:4a:0b:c8:5a:2a:d9:ef:f3:9a:ee:38: 5b:d8:59:73:9b:33:b7:31:17:c4:84:9f:c2:ad:8f: bc:08:35:9b:df:79:fa:4c:1e:c1:35:4f:73:6d:27: 8f:1a:c0:55:74:87:d6:53:e7:6c:1f:3f:5c:cc:04: 8a:03:a7:ff:a7:64:62:dc:05:82:d6:55:d9:9f:f4: e0:82:91:a0:27:3e:15:c2:dd:84:0e:61:ea:88:17: 36:79:30:3a:49:38:17:cc:c0:d9:3c:91:a1:f5:4f: d5:17:c2:72:1b:ad:ed:ab:93:b3:0a:d3:35:ed:d1: 27:71:14:b1:ff:44:dd:e2:d1:b1:68:40:cd:06:8e: c1:e9:d2:c9:af:e2:00:25:2f:71:5f:2f:3d:51:24: 7a:7c:bd:f8:04:0d:47:54:ed:ab:93:71:a8:1d:91: 14:a8:80:73:97:ff:e7:a9:1e:78:cf:05:0e:01:63: 93:b9:6d:8f:73:16:1d:b8:24:e4:ec:93:49:60:64: 58:3d:30:52:e9:4d:b2:bf:ad:b0:a1:23:8d:63:23: a4:27:66:81:61:ca:1b:98:cf:59:d8:5e:e1:9d:9d: af:d3:06:3b:65:f3:35:18:3a:a2:09:14:4e:2f:0d: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:64:37:AF:1F:0B:87:AD:0D:D1:B9:62:D7:53:FD:98:BC:54:26:43 X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:0c:da:f5:b7:dc:77:28:54:67:9a:1c:66:a7:49:de:41:e0: bf:3c:28:b7:e9:a6:ce:3d:52:95:53:b3:95:43:27:9e:e7:3e: 17:83:03:f3:de:c4:be:22:0d:d7:b5:99:4a:67:8f:b0:35:31: 0f:2d:64:14:de:2a:87:d2:0e:b5:b7:34:9a:f3:ba:ce:f2:5b: 75:f3:93:22:98:73:40:08:d7:96:e9:5e:c2:f3:ef:98:21:08: ff:fa:8a:6f:0d:49:34:39:81:4f:23:25:3d:63:f1:5c:3c:ef: 17:52:59:b6:b1:31:5a:81:54:91:6c:e4:8c:68:52:5c:e2:8a: 05:b4:b9:9c:dd:8c:50:76:10:0d:28:bb:37:55:a6:a3:5a:de: 56:37:d7:d2:2a:7d:9e:9d:e5:c0:bf:08:76:a1:90:56:e9:8f: 65:30:b2:70:ac:3b:69:5f:0f:55:8c:b4:89:ff:9b:52:1f:34: a8:6d:cf:98:5c:f5:02:8e:2a:60:9b:bc:fb:9b:2d:79:d6:11: 1f:4a:12:9d:b6:6f:0e:e9:19:dc:06:20:3e:96:1d:5b:c1:22: 2d:7a:ea:43:56:5f:0a:85:eb:2d:34:df:bf:0e:36:10:8e:bb: 5c:f8:ea:ed:93:e0:92:dc:50:02:37:b0:27:63:94:9c:4f:c0: ce:5b:b8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwNTMwMTkyMzU1WhcNMjUwNjA2MTkyMzU1WjAYMRYwFAYD VQQDEw02ODNhMDVjYi0xMjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzlbmqfIhMWNHsvtRhGbkaiRJSgvIWirZ7/Oa7jhb2FlzmzO3MRfEhJ/CrY+8 CDWb33n6TB7BNU9zbSePGsBVdIfWU+dsHz9czASKA6f/p2Ri3AWC1lXZn/TggpGg Jz4Vwt2EDmHqiBc2eTA6STgXzMDZPJGh9U/VF8JyG63tq5OzCtM17dEncRSx/0Td 4tGxaEDNBo7B6dLJr+IAJS9xXy89USR6fL34BA1HVO2rk3GoHZEUqIBzl//nqR54 zwUOAWOTuW2PcxYduCTk7JNJYGRYPTBS6U2yv62woSONYyOkJ2aBYcobmM9Z2F7h nZ2v0wY7ZfM1GDqiCRROLw3OGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhkN68f C4etDdG5YtdT/Zi8VCZDMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHDNr1t9x3KFRnmhxmp0neQeC/PCi36abOPVKVU7OVQyee5z4XgwPz 3sS+Ig3XtZlKZ4+wNTEPLWQU3iqH0g61tzSa87rO8lt185MimHNACNeW6V7C8++Y IQj/+opvDUk0OYFPIyU9Y/FcPO8XUlm2sTFagVSRbOSMaFJc4ooFtLmc3YxQdhAN KLs3VaajWt5WN9fSKn2eneXAvwh2oZBW6Y9lMLJwrDtpXw9VjLSJ/5tSHzSobc+Y XPUCjipgm7z7my151hEfShKdtm8O6RncBiA+lh1bwSIteupDVl8KhestNN+/DjYQ jrtc+Ortk+CS3FACN7AnY5ScT8DOW7ip -----END CERTIFICATE-----Generated at Sat May 31 16:50:41 2025 by rpki-client