$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: EFbJKhLlSrhWlW2gd/l7n/srYNA8fiFMAwhVtN9Iegc= Subject key identifier: F6:A3:C9:11:89:EF:71:15:87:E8:DB:54:BB:1A:69:83:64:E1:CD:85 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03C5 Signing time: Sat 31 May 2025 00:50:20 +0000 Manifest this update: Sat 31 May 2025 00:50:19 +0000 Manifest next update: Sat 07 Jun 2025 00:50:19 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: JY8moLj3ST6k3P4qqPgDXbolQRADrrvFwHdfKKIPenM=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: May 31 00:50:19 2025 GMT Not After : Jun 7 00:50:19 2025 GMT Subject: CN=683a524b-0fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:cc:de:91:e3:4a:57:58:23:d0:ea:b7:5f: b2:b4:e9:9e:4b:29:52:c8:ca:d5:f3:df:7f:3e:96: bf:80:42:c0:fd:75:7b:c0:20:07:cc:cd:4d:b8:f3: 27:c6:8a:51:b4:e9:b1:b7:d7:52:67:f4:18:7c:18: 3f:1e:b4:e3:f4:04:64:11:35:57:2f:b9:3d:f8:43: 75:af:02:9b:46:7b:74:de:47:17:bd:e3:1a:8f:d2: cc:b7:d4:11:17:52:4c:aa:5d:02:c6:40:07:82:f9: 71:a0:1f:86:7a:e0:81:c1:7c:a4:10:02:90:44:3d: d3:17:c8:39:1e:82:ac:59:12:d1:55:2e:14:b8:75: f5:7e:00:8b:40:2b:e9:6d:3a:04:b6:e9:8f:cc:12: 5e:9c:42:10:1b:9a:61:e3:55:a6:64:2c:79:25:89: 1a:13:d9:0d:41:47:0e:8f:2f:ba:91:eb:85:c2:29: f8:1b:a2:ff:f6:59:84:37:a6:35:77:0f:cb:af:66: 15:19:fa:64:f2:1d:fb:76:33:02:da:5f:af:dc:a7: 3f:59:2f:4f:cf:da:8c:8e:85:54:48:a3:08:97:4c: 24:77:aa:3a:a2:84:ca:38:27:fc:d9:0f:9d:26:a2: 9f:95:9b:11:8e:30:dc:0e:c3:7c:9a:c0:60:85:9b: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A3:C9:11:89:EF:71:15:87:E8:DB:54:BB:1A:69:83:64:E1:CD:85 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:19:9e:e8:a0:ea:8e:d1:10:47:3c:dc:ce:15:12:b0:0b:f5: 19:85:97:31:10:91:a3:a0:d5:00:9d:31:aa:f9:b1:2e:8c:91: 94:5d:42:88:e7:f2:74:19:c4:81:18:fe:c2:90:02:ea:b3:53: f3:0d:6b:55:d9:9d:82:bf:7d:9f:0f:fc:e9:f0:f8:60:ba:42: 95:4d:7a:e4:c0:d6:eb:2c:de:e8:6d:ce:a8:92:7f:98:7d:7d: 6c:54:9a:0d:0b:34:be:c7:5e:be:5b:45:fa:cb:02:44:bb:1c: 00:93:72:27:6c:74:05:13:0a:f7:7e:24:e8:68:d5:80:d2:f2: 78:d3:26:a5:b0:6b:a1:fc:e3:bb:08:40:06:f8:37:57:1b:21: 1f:f0:84:8a:ae:b0:13:0b:6c:7e:1f:32:b0:99:0d:47:00:ce: 25:9f:98:99:7e:a5:c3:ef:d4:01:fa:e3:fb:d0:f4:34:ce:dc: 1c:68:49:0f:5c:4d:68:43:33:c7:1d:30:72:a7:c3:12:f3:46: da:27:43:c0:25:2d:1b:ad:53:3b:72:7c:e5:64:cf:d5:ac:11: 09:15:d2:fc:9e:62:bb:69:b8:c6:1d:07:95:97:81:f9:11:5f: 34:df:18:31:9b:71:d6:aa:1c:69:11:c6:88:a4:fd:11:76:87: 06:85:14:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwNTMxMDA1MDE5WhcNMjUwNjA3MDA1MDE5WjAYMRYwFAYD VQQDEw02ODNhNTI0Yi0wZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2zM3pHjSldYI9Dqt1+ytOmeSylSyMrV899/Ppa/gELA/XV7wCAHzM1NuPMn xopRtOmxt9dSZ/QYfBg/HrTj9ARkETVXL7k9+EN1rwKbRnt03kcXveMaj9LMt9QR F1JMql0CxkAHgvlxoB+GeuCBwXykEAKQRD3TF8g5HoKsWRLRVS4UuHX1fgCLQCvp bToEtumPzBJenEIQG5ph41WmZCx5JYkaE9kNQUcOjy+6keuFwin4G6L/9lmEN6Y1 dw/Lr2YVGfpk8h37djMC2l+v3Kc/WS9Pz9qMjoVUSKMIl0wkd6o6ooTKOCf82Q+d JqKflZsRjjDcDsN8msBghZvw/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPajyRGJ 73EVh+jbVLsaaYNk4c2FMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcGZ7ooOqO0RBHPNzOFRKwC/UZhZcxEJGjoNUAnTGq+bEujJGUXUKI 5/J0GcSBGP7CkALqs1PzDWtV2Z2Cv32fD/zp8PhgukKVTXrkwNbrLN7obc6okn+Y fX1sVJoNCzS+x16+W0X6ywJEuxwAk3InbHQFEwr3fiToaNWA0vJ40yalsGuh/OO7 CEAG+DdXGyEf8ISKrrATC2x+HzKwmQ1HAM4ln5iZfqXD79QB+uP70PQ0ztwcaEkP XE1oQzPHHTByp8MS80baJ0PAJS0brVM7cnzlZM/VrBEJFdL8nmK7abjGHQeVl4H5 EV803xgxm3HWqhxpEcaIpP0RdocGhRQs -----END CERTIFICATE-----Generated at Sat May 31 17:08:51 2025 by rpki-client