$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft File: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft (raw, json) Hash identifier: je/LiTZom6OfLwYGQ2H4C1LdAz+n6hM52AdDRZysmvk= Subject key identifier: F2:08:A2:8F:07:77:8A:F3:17:42:38:5A:EE:A3:08:06:30:B5:76:67 Authority key identifier: EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46 Certificate issuer: /CN=A91C0FF9/serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46 Certificate serial: 0669 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft Manifest number: 0664 Signing time: Fri 30 May 2025 22:38:45 +0000 Manifest this update: Fri 30 May 2025 22:38:45 +0000 Manifest next update: Fri 06 Jun 2025 22:38:45 +0000 Files and hashes: 1: 7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl (hash: wAxWxJhcSymFZVdDmLpis2CB1N2YnfKb2Aj/uBncb08=) 2: 98536A8A8D1811EBA3DEC15BC4F9AE02.roa (hash: yBiHe4ubd0Yaxe8iEusni96SzNhOMH8U/S+1PM3373k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FF9, serialNumber=EEFD3E86AF74F9483464016B934FC3EF14C82D46 Validity Not Before: May 30 22:38:45 2025 GMT Not After : Jun 6 22:38:45 2025 GMT Subject: CN=683a3375-2a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3d:bb:3e:63:26:73:a5:53:18:2f:0e:bc:de: 9a:cb:bb:fc:a8:b7:ac:2b:fa:ca:9e:73:67:a4:a7: a4:5f:ab:5e:84:af:55:e0:1b:75:7d:93:cb:b6:de: ae:bc:ac:57:1c:01:12:9f:4b:73:9b:96:99:25:56: 06:56:34:26:41:99:50:d8:be:80:d8:65:a1:9f:50: 6b:c9:7a:29:04:54:e9:f0:1c:f1:5b:e8:b5:df:4d: 46:dd:d4:79:6f:57:8b:fe:ac:3f:37:43:62:cb:01: 58:36:57:41:dc:df:2b:26:ce:f3:b9:f8:54:0e:1c: aa:38:21:ad:99:09:06:74:75:b8:08:d5:99:bb:c1: 05:42:bb:dc:fb:5a:5d:23:54:19:ab:32:af:6a:26: 00:2a:53:04:08:6c:f5:cc:d6:43:58:a2:8a:9c:50: 4e:f4:23:56:3b:cb:be:54:f1:30:34:4c:16:ee:ea: dc:f6:13:c7:7d:84:f0:fc:c6:12:a3:fd:7f:9c:5a: b0:b9:69:38:60:cf:22:d9:0d:d2:0c:28:9c:d9:be: 72:86:94:18:8b:40:06:da:e7:11:3a:00:1f:4a:f6: 05:25:68:c3:26:3c:a6:cb:e0:8d:c8:ba:66:c2:ac: c8:e8:8c:7d:18:53:86:36:31:d8:be:e0:b1:67:0b: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:08:A2:8F:07:77:8A:F3:17:42:38:5A:EE:A3:08:06:30:B5:76:67 X509v3 Authority Key Identifier: keyid:EE:FD:3E:86:AF:74:F9:48:34:64:01:6B:93:4F:C3:EF:14:C8:2D:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7v0-hq90-Ug0ZAFrk0_D7xTILUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FF9/DD6A765080CE11EB93501868C4F9AE02/7v0-hq90-Ug0ZAFrk0_D7xTILUY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:13:f7:e7:fc:34:da:f0:e5:8f:7c:d6:d7:fe:7f:c2:0d:a5: 13:79:d5:dd:30:77:b6:02:b6:95:b1:7a:43:70:2a:f1:e4:9e: 60:20:d5:7a:cb:16:1c:59:d0:01:51:2c:db:48:5f:70:4e:39: 42:52:cf:45:9c:43:9c:8b:6a:49:9b:85:f7:d0:16:a0:e7:18: 64:9f:57:25:3f:c5:5a:d3:01:60:61:f9:6b:33:05:01:f4:e9: 0b:5b:a1:06:35:e3:15:5f:e3:82:eb:0a:78:c8:4e:a4:11:65: a8:d1:db:1f:a0:ac:07:97:c5:5f:40:a8:2c:43:5f:93:82:64: da:81:ad:68:f6:db:dc:53:40:6a:7a:16:96:63:08:e1:ae:1d: 76:cc:45:fc:e3:9c:c5:12:15:db:c7:05:c3:f8:4e:e1:6a:aa: 9c:ee:a3:5e:2a:60:c3:f3:1b:3e:37:5c:a2:71:1f:d4:61:89: f3:60:c5:4d:ef:82:77:48:c0:6e:f7:e3:75:27:d4:ce:84:28: ec:c0:25:54:78:95:cb:82:ab:2b:9d:ea:b6:54:9f:06:ad:ee: 9c:32:13:94:3f:39:ac:03:e5:04:d2:37:b4:8f:b7:09:ee:39: 9c:88:4c:0e:54:35:a3:e6:9b:48:ea:54:d5:e9:9b:f0:51:04: 5a:f1:4c:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGRjkxMTAvBgNVBAUTKEVFRkQzRTg2QUY3NEY5NDgzNDY0MDE2QjkzNEZDM0VG MTRDODJENDYwHhcNMjUwNTMwMjIzODQ1WhcNMjUwNjA2MjIzODQ1WjAYMRYwFAYD VQQDEw02ODNhMzM3NS0yYTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuz27PmMmc6VTGC8OvN6ay7v8qLesK/rKnnNnpKekX6tehK9V4Bt1fZPLtt6u vKxXHAESn0tzm5aZJVYGVjQmQZlQ2L6A2GWhn1BryXopBFTp8BzxW+i1301G3dR5 b1eL/qw/N0NiywFYNldB3N8rJs7zufhUDhyqOCGtmQkGdHW4CNWZu8EFQrvc+1pd I1QZqzKvaiYAKlMECGz1zNZDWKKKnFBO9CNWO8u+VPEwNEwW7urc9hPHfYTw/MYS o/1/nFqwuWk4YM8i2Q3SDCic2b5yhpQYi0AG2ucROgAfSvYFJWjDJjymy+CNyLpm wqzI6Ix9GFOGNjHYvuCxZwtWxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIIoo8H d4rzF0I4Wu6jCAYwtXZnMB8GA1UdIwQYMBaAFO79PoavdPlINGQBa5NPw+8UyC1G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZGOS9ERDZBNzY1MDgw Q0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1VZzBaQUZyazBfRDd4VElM VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2MC1ocTkwLVVnMFpBRnJrMF9EN3hUSUxVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZGOS9ERDZBNzY1MDgwQ0UxMUVCOTM1MDE4NjhDNEY5QUUwMi83djAtaHE5MC1V ZzBaQUZyazBfRDd4VElMVVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRE/fn/DTa8OWPfNbX/n/CDaUTedXdMHe2AraVsXpDcCrx5J5gINV6 yxYcWdABUSzbSF9wTjlCUs9FnEOci2pJm4X30Bag5xhkn1clP8Va0wFgYflrMwUB 9OkLW6EGNeMVX+OC6wp4yE6kEWWo0dsfoKwHl8VfQKgsQ1+TgmTaga1o9tvcU0Bq ehaWYwjhrh12zEX845zFEhXbxwXD+E7haqqc7qNeKmDD8xs+N1yicR/UYYnzYMVN 74J3SMBu9+N1J9TOhCjswCVUeJXLgqsrneq2VJ8Gre6cMhOUPzmsA+UE0je0j7cJ 7jmciEwOVDWj5ptI6lTV6ZvwUQRa8Uye -----END CERTIFICATE-----Generated at Sat May 31 14:35:08 2025 by rpki-client