$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: x663kdkXx5Dkjl9+QqjRlgloPvc3DW3HDO4GuU3WYAc= Subject key identifier: A9:0F:34:AE:51:CB:6D:27:DB:F1:3D:66:21:39:71:2F:D6:93:F5:0B Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0104 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: FA Signing time: Tue 03 Jun 2025 00:28:48 +0000 Manifest this update: Tue 03 Jun 2025 00:28:47 +0000 Manifest next update: Tue 10 Jun 2025 00:28:47 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: Da8sSGV8vHE0Wg76pPg5sn0lv/MR1Dtn3FYGhJT4sQI=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: 6gN0nzoFmNHVaS7tp1oD/3MNM9qt5KAUk1vZ6H1zsVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:28:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 260 (0x104) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jun 3 00:28:47 2025 GMT Not After : Jun 10 00:28:47 2025 GMT Subject: CN=683e41c0-b69d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:b6:40:4d:35:20:8a:67:4b:60:aa:93:30: 08:4c:5d:cd:35:b8:62:fe:78:67:5a:34:61:80:f6: 91:03:a0:ae:4a:cb:a9:3a:67:b1:6e:b2:1d:78:85: 07:03:5e:77:77:2d:1d:cd:f5:af:47:45:63:06:c8: ab:21:a3:28:78:d3:b4:a7:22:c3:3b:a7:da:a5:8e: 61:a4:1f:37:c8:0d:44:9f:40:ff:0c:af:1e:4d:52: 78:52:cf:48:64:cb:e9:94:f7:c4:fb:61:fe:0e:cb: c3:ab:43:ef:0d:b4:0a:34:0e:11:f2:c5:3a:2f:85: 56:5e:4d:79:48:c3:e0:43:b9:80:38:86:1a:1f:39: 6e:3c:91:82:02:95:45:60:29:f3:0e:b8:1c:47:fd: 8d:84:7a:79:58:89:d5:aa:ca:9e:c5:93:da:61:d3: c7:76:c9:1b:ab:b6:0d:b8:0e:28:44:c5:8c:b7:ac: 9c:ea:31:96:2c:f3:3c:bf:a9:a8:7e:53:fe:d9:5d: 0b:b8:d0:68:3f:3b:20:03:e1:c6:77:56:3e:b9:a9: 22:f6:dc:14:93:ce:ac:87:4c:de:eb:b4:7c:1e:d4: e9:3a:c6:3e:a5:ba:18:bb:eb:5f:61:b0:51:eb:2f: 29:7c:ff:96:bf:7a:2e:ea:1c:4a:a1:6b:62:2f:7b: c3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:0F:34:AE:51:CB:6D:27:DB:F1:3D:66:21:39:71:2F:D6:93:F5:0B X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:11:64:bc:57:5b:d4:fc:34:83:48:2d:56:ea:dc:28:f4:d1: 8f:60:3a:c8:f9:e8:26:c7:d3:2a:fb:db:54:09:74:53:79:8b: 48:7a:19:71:22:ef:42:fc:63:ab:e6:dd:62:47:c6:20:9a:f4: 56:54:08:ff:9a:6d:15:ca:d9:90:9b:40:a5:b1:1b:71:eb:13: c0:f4:d8:5c:58:43:bf:97:5e:54:77:cb:6f:0f:f9:c8:a3:5c: e9:50:39:84:e5:f5:2b:e0:4a:72:38:97:f6:23:2b:0d:22:ca: b1:8d:00:82:f7:75:7a:46:63:0c:fa:37:62:aa:bc:9b:59:3b: 09:70:e9:1c:e8:ea:22:34:8f:84:c2:e5:e8:75:d6:c9:bf:f6: 16:d9:25:4d:d3:0f:f8:d4:1c:f1:67:f5:1e:27:6e:5b:81:52: 51:78:2a:71:6d:93:4c:32:ce:b1:f7:61:6e:75:cf:1b:63:b3: 85:d2:9c:d1:02:a6:c9:7c:f9:8d:70:5c:1a:6c:03:12:af:96: e7:03:f9:bd:f5:fa:2a:10:33:86:09:4d:92:71:04:ea:68:5e: 84:08:e9:e1:38:ad:8a:44:ae:f5:cd:6d:fe:d3:8b:81:e6:8e: 89:81:90:18:06:90:8a:aa:2e:eb:fa:92:0c:b7:92:81:03:3a: d5:8b:3d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwNjAzMDAyODQ3WhcNMjUwNjEwMDAyODQ3WjAYMRYwFAYD VQQDEw02ODNlNDFjMC1iNjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJy2QE01IIpnS2CqkzAITF3NNbhi/nhnWjRhgPaRA6CuSsupOmexbrIdeIUH A153dy0dzfWvR0VjBsirIaMoeNO0pyLDO6fapY5hpB83yA1En0D/DK8eTVJ4Us9I ZMvplPfE+2H+DsvDq0PvDbQKNA4R8sU6L4VWXk15SMPgQ7mAOIYaHzluPJGCApVF YCnzDrgcR/2NhHp5WInVqsqexZPaYdPHdskbq7YNuA4oRMWMt6yc6jGWLPM8v6mo flP+2V0LuNBoPzsgA+HGd1Y+uaki9twUk86sh0ze67R8HtTpOsY+pboYu+tfYbBR 6y8pfP+Wv3ou6hxKoWtiL3vDXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkPNK5R y20n2/E9ZiE5cS/Wk/ULMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmEWS8V1vU/DSDSC1W6two9NGPYDrI+egmx9Mq+9tUCXRTeYtIehlx Iu9C/GOr5t1iR8YgmvRWVAj/mm0VytmQm0ClsRtx6xPA9NhcWEO/l15Ud8tvD/nI o1zpUDmE5fUr4EpyOJf2IysNIsqxjQCC93V6RmMM+jdiqrybWTsJcOkc6OoiNI+E wuXoddbJv/YW2SVN0w/41BzxZ/UeJ25bgVJReCpxbZNMMs6x92Fudc8bY7OF0pzR AqbJfPmNcFwabAMSr5bnA/m99foqEDOGCU2ScQTqaF6ECOnhOK2KRK71zW3+04uB 5o6JgZAYBpCKqi7r+pIMt5KBAzrViz3n -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:31 2025 by rpki-client