$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: 7tOncZaOE11XUCqniZ88Zldbhf96ndvcpuOMfM0Rv2o= Subject key identifier: DD:10:05:25:3B:28:C8:24:52:CC:CD:74:70:A3:C6:C6:CE:EC:43:15 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21AB Signing time: Fri 30 May 2025 16:05:08 +0000 Manifest this update: Fri 30 May 2025 16:05:07 +0000 Manifest next update: Fri 06 Jun 2025 16:05:07 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: Jtmr36zOB08ouyjhHH8RGN9toNKcryRi9mlrXNfBeTY=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8652 (0x21cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: May 30 16:05:07 2025 GMT Not After : Jun 6 16:05:07 2025 GMT Subject: CN=6839d734-906a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e4:dd:33:27:de:c3:ca:cc:20:5b:ce:75:5b: a0:48:be:c7:2c:49:36:99:5b:f2:89:4d:a7:09:74: af:79:6d:b2:9f:42:59:60:86:d0:f8:b9:e0:34:b0: ef:10:c0:31:40:1f:91:6b:65:0d:08:fa:95:2e:25: fa:44:2c:38:9f:34:8b:d9:c7:02:9f:87:65:72:44: ea:78:7a:93:e3:5d:ed:2a:e8:27:57:f9:7d:69:75: cb:32:f6:4d:82:1d:e1:37:20:52:04:8d:7e:7e:f5: 0a:cf:93:1a:17:f4:13:6e:8c:16:88:ad:95:19:89: 26:fc:3f:5d:76:8a:8d:17:9d:7e:ed:21:9d:fb:3a: eb:d0:cf:1b:5e:5d:e8:08:3c:af:76:50:1c:e6:cf: f6:e0:54:8d:f2:0c:ec:e0:4d:fd:bd:b7:38:56:cd: d6:40:c2:74:8c:3d:23:60:04:c3:3d:49:62:a2:c1: 3b:5c:21:76:21:1e:3d:9e:b2:52:f5:68:97:ee:87: e4:5c:c2:d7:ea:df:d8:c8:39:ed:cc:a2:45:1b:4d: 18:a0:31:01:5d:89:24:a6:13:18:8f:98:a8:e5:0f: 7a:95:00:a7:ab:0b:e5:15:74:27:53:a0:7d:95:8a: e6:48:30:72:39:c1:b5:a7:9e:e5:aa:e8:85:68:76: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:10:05:25:3B:28:C8:24:52:CC:CD:74:70:A3:C6:C6:CE:EC:43:15 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7f:49:2d:47:ba:11:cb:e1:43:eb:2a:d4:f7:98:9a:51:52: 88:a9:bf:65:bf:6f:d1:37:e9:21:4c:dc:67:29:c1:13:77:ae: 6c:8b:d8:d3:1f:6c:e3:2c:8f:c6:79:c8:f7:56:1e:44:75:15: b2:03:f3:b7:aa:37:a2:54:37:19:7b:d5:61:db:70:7d:b7:88: 2f:23:01:90:3c:cf:c3:0d:e7:53:20:98:d7:77:77:68:1f:a3: 1f:e7:0b:ab:34:ad:16:6e:25:bf:68:88:7e:9b:5a:83:0d:d6: b7:88:81:36:56:11:de:29:43:de:d2:62:e0:06:96:b7:fb:b1: fc:f9:c1:f0:cc:94:73:20:e9:66:e7:ec:1e:73:8d:12:2a:e5: 95:2f:38:33:b0:38:57:1a:44:c7:2b:c4:5d:67:05:6b:45:c7: c4:79:e0:34:45:e3:74:4e:fd:33:e7:61:51:ac:74:71:70:e3: 78:6d:7e:31:0f:16:55:ab:ec:b6:56:90:dc:2b:08:4a:f5:e2: 19:51:da:93:f3:d4:20:77:e1:27:ed:17:3d:a2:ca:14:26:8f: b3:19:6e:47:11:1a:ea:d3:a0:ff:f3:b9:df:51:f5:78:dc:e1: 2e:3d:b3:6b:86:c5:f9:e6:13:8e:da:e1:74:8e:19:6b:ea:96: 9f:5f:4a:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwNTMwMTYwNTA3WhcNMjUwNjA2MTYwNTA3WjAYMRYwFAYD VQQDEw02ODM5ZDczNC05MDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOTdMyfew8rMIFvOdVugSL7HLEk2mVvyiU2nCXSveW2yn0JZYIbQ+LngNLDv EMAxQB+Ra2UNCPqVLiX6RCw4nzSL2ccCn4dlckTqeHqT413tKugnV/l9aXXLMvZN gh3hNyBSBI1+fvUKz5MaF/QTbowWiK2VGYkm/D9ddoqNF51+7SGd+zrr0M8bXl3o CDyvdlAc5s/24FSN8gzs4E39vbc4Vs3WQMJ0jD0jYATDPUliosE7XCF2IR49nrJS 9WiX7ofkXMLX6t/YyDntzKJFG00YoDEBXYkkphMYj5io5Q96lQCnqwvlFXQnU6B9 lYrmSDByOcG1p57lquiFaHYZCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0QBSU7 KMgkUszNdHCjxsbO7EMVMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATf0ktR7oRy+FD6yrU95iaUVKIqb9lv2/RN+khTNxnKcETd65si9jT H2zjLI/Gecj3Vh5EdRWyA/O3qjeiVDcZe9Vh23B9t4gvIwGQPM/DDedTIJjXd3do H6Mf5wurNK0WbiW/aIh+m1qDDda3iIE2VhHeKUPe0mLgBpa3+7H8+cHwzJRzIOlm 5+wec40SKuWVLzgzsDhXGkTHK8RdZwVrRcfEeeA0ReN0Tv0z52FRrHRxcON4bX4x DxZVq+y2VpDcKwhK9eIZUdqT89Qgd+En7Rc9osoUJo+zGW5HERrq06D/87nfUfV4 3OEuPbNrhsX55hOO2uF0jhlr6pafX0qw -----END CERTIFICATE-----Generated at Sat May 31 16:55:08 2025 by rpki-client