$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft File: MO7z6BnpmwANZl9r1ZSvpMYiai4.mft (raw, json) Hash identifier: jfz8/b+JDS6IgCjMlSkiyyttmHQZraHxPShnJM43xqM= Subject key identifier: 8F:AA:48:01:66:DD:E1:8B:AD:3B:32:C4:CA:6A:5E:F9:D6:87:0E:EA Authority key identifier: 30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E Certificate issuer: /CN=A91D5D9F/serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft Manifest number: 0207 Signing time: Sat 31 May 2025 02:12:35 +0000 Manifest this update: Sat 31 May 2025 02:12:34 +0000 Manifest next update: Sat 07 Jun 2025 02:12:34 +0000 Files and hashes: 1: MO7z6BnpmwANZl9r1ZSvpMYiai4.crl (hash: xMQ+UyXQqGQ5qlDsx8411Rh1wQGn0/zaP73ryYxzkZw=) 2: D7803F3A3A5511EDB9410C50C4F9AE02.roa (hash: 5RvSp27bzJLpaJnE9Vp9OHr3zH1Dq7i1O2ke5dqvusQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5D9F, serialNumber=30EEF3E819E99B000D665F6BD594AFA4C6226A2E Validity Not Before: May 31 02:12:34 2025 GMT Not After : Jun 7 02:12:34 2025 GMT Subject: CN=683a6593-feac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:e9:b8:f2:db:d0:3d:7a:c9:57:ea:1a:84: 67:cb:0a:dc:68:dc:e6:6c:79:b1:9c:df:ba:6f:ec: d5:d7:4d:f0:63:1b:e0:1a:b6:6a:a0:db:a1:67:21: 83:f6:dd:6f:6d:63:ab:cf:ea:0d:56:84:d6:db:9f: 99:e6:67:fe:bc:6d:fe:51:d7:ed:d1:31:97:ef:46: fe:6c:20:98:27:26:51:cd:dd:0b:0a:e8:2e:22:d3: 19:b6:12:fd:9f:4e:c3:fa:71:ca:91:9f:11:31:4b: ad:5d:4f:dc:60:4d:b8:23:89:0f:02:7d:72:a7:df: 13:ff:1c:cb:3e:1a:6d:8a:67:c6:18:b0:bf:26:a4: da:b5:4d:9f:21:83:60:52:79:ca:3a:87:42:3c:c3: 04:3e:99:79:94:e4:18:91:39:66:96:03:3b:48:1b: e2:de:1a:3b:eb:f1:5c:ac:45:d1:65:97:3b:99:7b: 1e:29:a1:21:bc:62:f3:43:4d:b5:fc:7f:5b:5b:21: a0:6e:23:92:99:34:e5:7e:6e:b7:4c:eb:2f:d6:f8: 07:cd:62:a4:8a:51:6c:3c:d3:3c:56:10:23:b2:da: c6:04:da:51:7b:8b:6a:ea:7b:20:f0:41:4a:61:87: ba:2a:9f:ab:1b:02:23:ea:2b:e9:1f:b7:89:c2:f1: 30:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AA:48:01:66:DD:E1:8B:AD:3B:32:C4:CA:6A:5E:F9:D6:87:0E:EA X509v3 Authority Key Identifier: keyid:30:EE:F3:E8:19:E9:9B:00:0D:66:5F:6B:D5:94:AF:A4:C6:22:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MO7z6BnpmwANZl9r1ZSvpMYiai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5D9F/926F333E3A4F11EDB7B6AE20C4F9AE02/MO7z6BnpmwANZl9r1ZSvpMYiai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3a:d8:ac:72:2c:dd:34:48:18:c5:37:c7:d7:bd:d9:3c:c3: ba:69:21:ac:84:83:59:2c:03:86:85:0e:d8:30:59:4c:f7:43: 53:69:bc:26:90:61:d5:9b:fe:a8:2c:88:d2:7c:69:1d:1a:1f: a5:83:15:da:a4:1f:64:bb:19:00:82:b0:38:38:64:06:b5:a9: 39:de:29:e2:a1:bb:61:3f:df:20:49:db:31:0b:09:2f:28:55: 57:09:6c:d9:65:68:03:29:c3:07:3c:4b:ef:e6:2e:d3:bf:06: b6:15:88:fa:0d:13:cd:bc:e0:e7:8b:fc:9a:4e:6f:a5:93:be: 39:49:62:62:fc:b8:6e:d1:ae:9b:de:fe:15:fc:69:65:49:02: 92:db:1f:3f:94:d5:44:2d:75:03:74:e6:6a:ec:d8:61:08:e2: 83:1f:0d:46:c7:22:3b:8f:11:7e:4b:5e:7a:a1:4d:19:21:b3: 6a:88:86:72:79:6a:28:33:0c:58:0e:fc:dc:73:99:8c:bc:10: 65:6a:7c:f1:86:f8:e1:8b:6a:d3:64:43:6a:b1:59:f5:92:32: 54:39:6d:7b:c6:3a:98:bc:ec:4e:95:78:2e:d7:9c:bc:02:26: ee:6e:a0:92:d1:86:07:75:ed:ed:d3:ec:4d:4a:9b:cd:ec:28: dd:7e:56:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVEOUYxMTAvBgNVBAUTKDMwRUVGM0U4MTlFOTlCMDAwRDY2NUY2QkQ1OTRBRkE0 QzYyMjZBMkUwHhcNMjUwNTMxMDIxMjM0WhcNMjUwNjA3MDIxMjM0WjAYMRYwFAYD VQQDEw02ODNhNjU5My1mZWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK3puPLb0D16yVfqGoRnywrcaNzmbHmxnN+6b+zV103wYxvgGrZqoNuhZyGD 9t1vbWOrz+oNVoTW25+Z5mf+vG3+Udft0TGX70b+bCCYJyZRzd0LCuguItMZthL9 n07D+nHKkZ8RMUutXU/cYE24I4kPAn1yp98T/xzLPhptimfGGLC/JqTatU2fIYNg UnnKOodCPMMEPpl5lOQYkTlmlgM7SBvi3ho76/FcrEXRZZc7mXseKaEhvGLzQ021 /H9bWyGgbiOSmTTlfm63TOsv1vgHzWKkilFsPNM8VhAjstrGBNpRe4tq6nsg8EFK YYe6Kp+rGwIj6ivpH7eJwvEw6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+qSAFm 3eGLrTsyxMpqXvnWhw7qMB8GA1UdIwQYMBaAFDDu8+gZ6ZsADWZfa9WUr6TGImou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUQ5Ri85MjZGMzMzRTNB NEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13QU5abDlyMVpTdnBNWWlh aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PN3o2Qm5wbXdBTlpsOXIxWlN2cE1ZaWFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUQ5Ri85MjZGMzMzRTNBNEYxMUVEQjdCNkFFMjBDNEY5QUUwMi9NTzd6NkJucG13 QU5abDlyMVpTdnBNWWlhaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOtiscizdNEgYxTfH173ZPMO6aSGshINZLAOGhQ7YMFlM90NTabwm kGHVm/6oLIjSfGkdGh+lgxXapB9kuxkAgrA4OGQGtak53iniobthP98gSdsxCwkv KFVXCWzZZWgDKcMHPEvv5i7Tvwa2FYj6DRPNvODni/yaTm+lk745SWJi/Lhu0a6b 3v4V/GllSQKS2x8/lNVELXUDdOZq7NhhCOKDHw1GxyI7jxF+S156oU0ZIbNqiIZy eWooMwxYDvzcc5mMvBBlanzxhvjhi2rTZENqsVn1kjJUOW17xjqYvOxOlXgu15y8 AibubqCS0YYHde3t0+xNSpvN7CjdflYH -----END CERTIFICATE-----Generated at Sat May 31 16:27:52 2025 by rpki-client