$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: cmtqiFGUQ6AE8BuB+QJklP5GTF9wEYByenwYeynB4QU= Subject key identifier: 4A:7A:C7:7D:50:F5:A8:06:5A:39:E6:38:50:66:35:A2:40:CB:11:B7 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: BC Signing time: Tue 03 Jun 2025 05:39:56 +0000 Manifest this update: Tue 03 Jun 2025 05:39:55 +0000 Manifest next update: Tue 10 Jun 2025 05:39:55 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: uESvDZHsrFk6PN5+B6/0mStVYokuhhcy33bjG/HQYBg=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Jun 3 05:39:55 2025 GMT Not After : Jun 10 05:39:55 2025 GMT Subject: CN=683e8aab-5fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:c2:66:9f:01:0a:8e:b8:17:f7:ad:ef:c2: 10:f5:53:f8:08:3c:3d:6f:ee:ca:85:36:31:c1:cb: 68:8c:f3:92:4e:57:13:39:80:96:c1:40:77:68:cf: 8e:1a:62:31:bc:b3:33:6d:33:0a:bf:a6:52:e4:c6: 0b:f5:54:aa:73:16:e4:fd:da:a3:cd:e2:a2:89:aa: b5:e7:ed:cd:d5:93:8d:42:77:e9:a7:0e:6f:e9:75: eb:9a:50:43:dd:ad:3e:ad:57:58:75:84:fc:1c:03: a4:c4:f1:7d:74:a3:20:43:19:9a:24:06:b9:2d:e3: dd:1e:b1:b9:a8:37:39:8e:23:89:b3:c4:82:6c:84: 55:1d:d8:a8:f5:09:37:fa:9f:2d:6e:6d:d6:a9:e3: b2:3a:25:a6:4c:a8:c3:b1:a4:e8:be:11:e0:b9:a7: 19:79:f0:22:a3:ce:c9:14:4d:54:cd:a6:06:e7:55: 6d:bb:3d:31:18:e5:65:80:24:c0:c7:b0:2e:64:19: cb:fc:e8:01:9c:d0:9a:3f:7d:9b:44:1d:dc:09:70: de:d7:ea:dd:f9:cf:53:0b:66:40:c2:6e:75:0f:46: 57:73:7d:a8:3d:71:50:66:7a:12:0a:93:56:94:b2: 6f:d0:10:23:43:0c:88:1f:74:8d:11:18:e2:ac:af: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7A:C7:7D:50:F5:A8:06:5A:39:E6:38:50:66:35:A2:40:CB:11:B7 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f1:df:a9:8d:a1:fa:b0:91:bc:5b:e7:d5:df:62:81:c4:a1: ae:88:f4:0e:b8:a9:1f:c8:ba:4d:d6:16:72:aa:71:27:3d:1a: 71:2d:8f:bb:f8:80:6a:fc:e0:f8:94:e0:e4:c8:c2:55:8d:11: 08:e4:cc:1f:79:d6:6e:32:a9:4d:4f:32:c0:a5:d4:71:b5:15: 8e:d6:95:9f:72:53:59:c6:7f:d6:33:27:dc:9e:29:cc:5b:8e: 55:09:d7:c7:9a:e4:79:3c:86:e8:14:5c:ac:a1:d8:a3:7a:87: 12:e1:83:ea:b0:90:11:bb:32:e1:02:11:40:9d:3c:ff:1b:05: ec:22:27:f4:94:a6:88:18:d4:1b:fb:f6:53:92:02:d6:c3:1b: 05:80:6e:f4:73:5a:fc:f2:6f:3e:77:84:ab:df:98:af:8d:f0: 64:9b:ec:d2:9f:4f:4b:3c:26:0a:85:15:61:18:39:2a:f8:bd: 2a:c1:11:a7:bc:c1:d1:7e:49:a7:27:20:ee:84:c7:d4:84:46: cc:90:bf:98:4a:84:c9:9c:39:fa:27:94:4e:03:0c:f8:bc:0c: 0b:40:77:2e:53:b5:e5:ce:e3:90:63:06:d4:8f:f2:14:d2:bb: dd:d5:4c:e3:67:c7:57:d5:fa:2b:11:f2:f0:c4:2c:9c:bd:33: d0:34:d1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwNjAzMDUzOTU1WhcNMjUwNjEwMDUzOTU1WjAYMRYwFAYD VQQDEw02ODNlOGFhYi01ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9DCZp8BCo64F/et78IQ9VP4CDw9b+7KhTYxwctojPOSTlcTOYCWwUB3aM+O GmIxvLMzbTMKv6ZS5MYL9VSqcxbk/dqjzeKiiaq15+3N1ZONQnfppw5v6XXrmlBD 3a0+rVdYdYT8HAOkxPF9dKMgQxmaJAa5LePdHrG5qDc5jiOJs8SCbIRVHdio9Qk3 +p8tbm3WqeOyOiWmTKjDsaTovhHguacZefAio87JFE1UzaYG51Vtuz0xGOVlgCTA x7AuZBnL/OgBnNCaP32bRB3cCXDe1+rd+c9TC2ZAwm51D0ZXc32oPXFQZnoSCpNW lLJv0BAjQwyIH3SNERjirK9WiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEp6x31Q 9agGWjnmOFBmNaJAyxG3MB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz8d+pjaH6sJG8W+fV32KBxKGuiPQOuKkfyLpN1hZyqnEnPRpxLY+7 +IBq/OD4lODkyMJVjREI5MwfedZuMqlNTzLApdRxtRWO1pWfclNZxn/WMyfcninM W45VCdfHmuR5PIboFFysodijeocS4YPqsJARuzLhAhFAnTz/GwXsIif0lKaIGNQb +/ZTkgLWwxsFgG70c1r88m8+d4Sr35ivjfBkm+zSn09LPCYKhRVhGDkq+L0qwRGn vMHRfkmnJyDuhMfUhEbMkL+YSoTJnDn6J5ROAwz4vAwLQHcuU7XlzuOQYwbUj/IU 0rvd1UzjZ8dX1forEfLwxCycvTPQNNE4 -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:48 2025 by rpki-client