$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: PdJ+1zNCgmC5Zs7pieOUBliJ37hsZ5wHFdLLUQ7SS28= Subject key identifier: 49:D1:60:CC:C0:52:04:9F:E2:60:2D:AC:38:0F:A3:F0:AD:46:2D:11 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 0125 Signing time: Sat 31 May 2025 04:18:42 +0000 Manifest this update: Sat 31 May 2025 04:18:41 +0000 Manifest next update: Sat 07 Jun 2025 04:18:41 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: m5k6RFjVj0DN33WTlDvoFtwW545y/M9/r3t3N/25rs0=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: D3pmccxd7HAcoRpNwl+DNJm+TOWT+mbBNl5xHiUaFnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: May 31 04:18:41 2025 GMT Not After : Jun 7 04:18:41 2025 GMT Subject: CN=683a8321-95d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:33:71:31:02:39:37:c2:16:7c:00:a4:b4:a9: f7:b6:c0:e6:50:81:15:e3:df:f4:dd:16:da:3e:f8: 42:3b:c2:25:a0:98:e9:58:50:f2:f5:a7:69:80:5a: db:ad:cf:ea:3b:52:ec:7f:24:98:6f:c5:d0:b0:6b: f2:d0:84:54:a9:2a:82:8e:6d:c5:81:8d:37:34:39: eb:b5:01:62:75:e6:c5:62:f0:fe:4a:a5:c2:d6:1e: 61:83:f3:e4:3d:ff:fc:1b:87:de:fc:c7:ef:9a:af: 36:2d:f0:ba:c1:39:9e:c1:b3:2a:78:62:cf:bd:df: f8:08:1e:d8:ec:57:27:1c:1f:e4:60:aa:02:bd:65: 06:30:de:9c:6d:d2:24:95:24:b1:75:25:4f:7c:41: 94:6c:14:c1:c1:11:96:99:30:75:98:ff:a8:55:2c: 67:b0:35:7b:21:3e:07:db:2c:eb:17:01:13:bb:3b: 38:31:ec:c6:46:16:44:d0:9c:22:dc:2f:5c:3c:3d: 6b:47:62:83:0f:8e:07:dd:e8:c8:a1:79:01:0c:0b: 93:bf:ef:2e:00:81:76:60:4a:32:94:7f:b2:2c:68: 4f:b5:24:56:ca:03:36:d6:a2:d0:12:fc:ca:5e:89: 2e:a6:be:82:91:85:cb:3d:ed:58:62:b8:f5:49:7b: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D1:60:CC:C0:52:04:9F:E2:60:2D:AC:38:0F:A3:F0:AD:46:2D:11 X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:d7:bf:27:14:a6:ca:d7:38:37:c6:1d:22:45:2d:24:52:d2: a1:47:a5:ae:b8:c9:27:f2:67:61:6d:fe:96:64:5f:0f:cb:6d: 89:8c:3f:43:d0:a8:48:ce:66:2f:82:a7:6f:24:93:43:2e:7c: b2:b2:42:bf:6b:13:b8:5e:3a:11:33:46:67:96:45:a6:31:44: 11:aa:ad:de:ad:93:80:e0:7f:e2:9c:58:b9:d2:c2:45:a9:15: 9e:fd:7d:37:83:eb:3a:63:34:47:e9:d9:b3:50:9c:dd:f9:06: 86:92:a1:40:15:70:45:39:b4:61:9b:8b:77:1e:09:01:e1:07: a4:0a:f6:eb:7f:24:15:b6:84:40:2a:67:db:db:e3:5b:5c:17: f8:04:e6:01:de:5e:39:2b:3d:36:a5:88:cd:b8:c0:49:55:14: 3c:9e:b1:84:7e:54:de:f9:9d:c5:22:b6:15:6b:b8:75:1c:01: 3f:d7:88:72:28:1b:9e:62:cc:7c:c8:56:22:6e:9c:07:31:93: 36:35:05:2e:a2:b2:56:7b:43:27:d2:7d:21:1d:5e:4d:6a:71: f1:89:71:48:38:e5:9d:c3:c1:09:d1:ea:06:fb:1c:db:d1:82: c3:f8:32:11:50:e7:fa:8c:cd:25:fe:54:08:31:42:17:f4:28: 7e:16:0c:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUwNTMxMDQxODQxWhcNMjUwNjA3MDQxODQxWjAYMRYwFAYD VQQDEw02ODNhODMyMS05NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0jNxMQI5N8IWfACktKn3tsDmUIEV49/03RbaPvhCO8IloJjpWFDy9adpgFrb rc/qO1LsfySYb8XQsGvy0IRUqSqCjm3FgY03NDnrtQFidebFYvD+SqXC1h5hg/Pk Pf/8G4fe/Mfvmq82LfC6wTmewbMqeGLPvd/4CB7Y7FcnHB/kYKoCvWUGMN6cbdIk lSSxdSVPfEGUbBTBwRGWmTB1mP+oVSxnsDV7IT4H2yzrFwETuzs4MezGRhZE0Jwi 3C9cPD1rR2KDD44H3ejIoXkBDAuTv+8uAIF2YEoylH+yLGhPtSRWygM21qLQEvzK Xokupr6CkYXLPe1YYrj1SXuViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnRYMzA UgSf4mAtrDgPo/CtRi0RMB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX178nFKbK1zg3xh0iRS0kUtKhR6WuuMkn8mdhbf6WZF8Py22JjD9D 0KhIzmYvgqdvJJNDLnyyskK/axO4XjoRM0ZnlkWmMUQRqq3erZOA4H/inFi50sJF qRWe/X03g+s6YzRH6dmzUJzd+QaGkqFAFXBFObRhm4t3HgkB4QekCvbrfyQVtoRA Kmfb2+NbXBf4BOYB3l45Kz02pYjNuMBJVRQ8nrGEflTe+Z3FIrYVa7h1HAE/14hy KBueYsx8yFYibpwHMZM2NQUuorJWe0Mn0n0hHV5NanHxiXFIOOWdw8EJ0eoG+xzb 0YLD+DIRUOf6jM0l/lQIMUIX9Ch+FgwB -----END CERTIFICATE-----Generated at Sat May 31 16:42:59 2025 by rpki-client