$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: V/64Gx2hgvAIlPWLbWG/J35jqcXNbcFWGK4VV3aAndE= Subject key identifier: 14:47:0C:94:7D:0C:4B:99:E3:DC:FA:9C:3C:51:9E:DC:79:20:9E:6A Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 263D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 25B7 Signing time: Fri 30 May 2025 15:54:58 +0000 Manifest this update: Fri 30 May 2025 15:54:58 +0000 Manifest next update: Fri 06 Jun 2025 15:54:58 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: rSdbysfztw+RsE9u3qW3EdTSm7JJjLcU/kEX4tUCyOU=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=) 6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=) 7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=) 8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=) 9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=) 10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=) 11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:54:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9789 (0x263d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: May 30 15:54:58 2025 GMT Not After : Jun 6 15:54:58 2025 GMT Subject: CN=6839d4d2-edf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:dc:51:03:82:67:6a:61:47:ac:9b:f3:44:2b: 45:dd:e2:f9:10:32:bf:b8:8e:38:d0:c3:0a:b4:6a: e3:89:69:d7:17:7d:b8:c1:95:d3:45:d0:77:87:23: 3f:c3:ed:7a:19:ba:91:16:2d:7e:35:4d:e8:18:c5: 18:0d:cc:d2:59:b8:c9:fe:f2:3b:36:ab:53:ff:00: be:de:14:0f:8d:11:83:a2:b9:a3:ea:2c:25:c2:c7: b5:0b:5f:73:3d:97:8b:cb:c1:5b:c2:be:a8:7c:b2: 81:d0:36:e9:42:b4:bf:aa:3a:03:7b:cd:dd:dc:ab: 26:69:df:39:33:5c:a1:e8:04:b4:52:69:a7:e7:b4: c9:ef:f1:be:5c:27:c0:0e:28:43:08:cf:cb:40:21: f3:2a:7f:ac:bc:5d:18:47:cc:eb:53:90:b8:f2:2c: f5:92:78:8a:3b:85:7e:3f:45:4d:88:8e:7b:28:48: 7f:56:84:3e:d7:bd:16:07:7d:46:b8:ab:5e:69:20: 15:75:0f:ba:95:ef:1a:93:02:cf:da:3b:b7:b6:30: b2:c5:2a:9a:65:83:0e:f8:3e:0e:02:02:d2:5b:35: ca:65:75:01:10:0e:1d:59:bd:50:12:d5:7c:57:08: 0a:f7:6e:c7:9e:9c:c9:5b:91:a1:ee:81:f8:71:f0: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:47:0C:94:7D:0C:4B:99:E3:DC:FA:9C:3C:51:9E:DC:79:20:9E:6A X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:4f:dd:d6:5e:68:36:4c:3d:25:cc:a5:ce:79:80:c7:46:a6: b9:7a:38:1c:8e:e8:9b:b2:22:8c:39:cb:ab:02:c5:9a:ad:f6: 24:93:c2:b9:97:86:39:79:ba:a6:a7:12:5e:16:46:90:4b:35: e2:23:2f:a4:90:43:63:25:9c:b2:cd:48:5b:2c:b7:6c:b0:05: 13:67:80:99:d3:72:d0:db:5d:dd:75:7e:8f:60:68:4d:a1:44: 6f:65:34:bb:ee:b8:a1:0d:19:03:0f:ee:d6:5a:d9:77:de:aa: 68:ca:3f:54:2d:6b:82:ba:d4:70:a2:ee:c6:75:c8:67:95:e5: ff:f3:7d:01:a2:1c:b3:aa:3f:c7:66:ed:ae:58:79:67:e1:59: 3e:41:45:f4:2d:15:57:d0:90:e3:c0:01:7d:30:50:9c:a2:3e: 4f:48:50:c6:06:77:3d:aa:6b:75:8c:5b:af:c1:de:ee:b4:21: f2:de:be:0a:47:a9:79:fa:30:88:34:fe:39:4b:8c:73:3e:22: 1e:bb:05:bb:3a:0b:c3:54:c5:a0:b2:42:cd:23:55:9f:01:fe: 4e:75:68:ee:22:09:a6:51:34:4c:fa:e1:a9:7a:80:4c:56:05: 25:2d:f8:d8:94:c2:8d:22:f0:43:dc:7d:19:56:e0:07:35:5d: 79:ad:d0:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNTMwMTU1NDU4WhcNMjUwNjA2MTU1NDU4WjAYMRYwFAYD VQQDEw02ODM5ZDRkMi1lZGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3txRA4JnamFHrJvzRCtF3eL5EDK/uI440MMKtGrjiWnXF324wZXTRdB3hyM/ w+16GbqRFi1+NU3oGMUYDczSWbjJ/vI7NqtT/wC+3hQPjRGDormj6iwlwse1C19z PZeLy8Fbwr6ofLKB0DbpQrS/qjoDe83d3Ksmad85M1yh6AS0Ummn57TJ7/G+XCfA DihDCM/LQCHzKn+svF0YR8zrU5C48iz1kniKO4V+P0VNiI57KEh/VoQ+170WB31G uKteaSAVdQ+6le8akwLP2ju3tjCyxSqaZYMO+D4OAgLSWzXKZXUBEA4dWb1QEtV8 VwgK927HnpzJW5Gh7oH4cfBM4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRHDJR9 DEuZ49z6nDxRntx5IJ5qMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhT93WXmg2TD0lzKXOeYDHRqa5ejgcjuibsiKMOcurAsWarfYkk8K5 l4Y5ebqmpxJeFkaQSzXiIy+kkENjJZyyzUhbLLdssAUTZ4CZ03LQ213ddX6PYGhN oURvZTS77rihDRkDD+7WWtl33qpoyj9ULWuCutRwou7GdchnleX/830Bohyzqj/H Zu2uWHln4Vk+QUX0LRVX0JDjwAF9MFCcoj5PSFDGBnc9qmt1jFuvwd7utCHy3r4K R6l5+jCINP45S4xzPiIeuwW7OgvDVMWgskLNI1WfAf5OdWjuIgmmUTRM+uGpeoBM VgUlLfjYlMKNIvBD3H0ZVuAHNV15rdDn -----END CERTIFICATE-----Generated at Sat May 31 17:10:18 2025 by rpki-client