$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: N1IrFZyyVgdVLtrLBcXScyOPqsGYdS7LlL54V1XyEnY= Subject key identifier: D6:C5:6B:B3:EB:D8:F0:38:5E:77:9D:4B:61:20:11:EF:6A:6E:90:2E Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0108 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0105 Signing time: Sat 31 May 2025 04:44:29 +0000 Manifest this update: Sat 31 May 2025 04:44:29 +0000 Manifest next update: Sat 07 Jun 2025 04:44:29 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: GJ4E/thQZZE8yhWwCZy547/qEqqUooBSpo+HFYvwJsE=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 264 (0x108) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: May 31 04:44:29 2025 GMT Not After : Jun 7 04:44:29 2025 GMT Subject: CN=683a892d-6f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:17:76:02:72:56:44:af:fa:db:39:b2:c9: c1:ed:2c:4e:62:9f:f8:26:46:b3:15:d7:dd:46:d6: 81:19:fc:77:46:73:3f:42:63:60:41:a0:28:2a:2a: 8e:b9:f0:8a:41:8a:8b:a4:7c:1f:be:46:6b:71:73: 80:38:53:a7:6a:d7:e1:31:94:a4:84:cb:9c:42:f4: e2:67:62:e2:a6:3d:ce:66:36:67:41:b5:2c:46:0a: 98:6c:9d:60:f6:ea:5d:79:1e:da:a4:48:c9:5c:7d: d8:bc:7f:56:21:9b:9e:19:a1:8e:0f:9a:b8:08:14: ef:24:6a:e5:6a:47:e8:ac:9a:95:83:4a:2b:5e:e6: 29:8b:93:7a:4f:92:aa:4c:a3:21:3d:3d:a9:68:58: b9:33:5b:69:b2:d6:d5:c3:e6:28:3f:ef:80:17:51: 95:ab:31:f2:81:e7:dc:24:d2:f5:2c:41:7a:06:be: 6d:5a:d1:33:79:b5:7b:9a:71:a0:89:f8:72:a9:e2: 7b:e6:5e:83:3a:13:71:10:80:6d:a9:97:6b:87:5b: c3:44:ab:a0:a5:c0:27:ec:70:e9:99:cf:8c:ab:1f: a0:68:a2:f8:8b:d6:c2:2d:57:d8:37:7a:d3:49:bf: c3:cb:c3:3d:c2:cf:ad:6e:cc:07:b1:80:57:41:06: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C5:6B:B3:EB:D8:F0:38:5E:77:9D:4B:61:20:11:EF:6A:6E:90:2E X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f5:49:57:7e:3f:d8:68:92:cf:96:dc:91:67:55:16:74:5f: e5:cd:85:f6:28:67:ed:28:9f:93:1c:2a:76:0c:a0:46:67:a0: c5:80:9c:d8:c9:38:53:b0:ef:c9:80:3d:05:01:1b:c6:64:71: 52:37:79:19:cc:83:5a:b7:64:04:1f:ef:9b:68:02:15:f8:bb: bb:33:46:15:a5:19:1b:b7:40:d2:8d:59:f1:ae:42:1e:01:32: b3:8c:35:7d:16:32:ed:0e:e1:1f:38:0b:4b:64:ac:25:76:78: 19:cf:95:b1:63:ab:51:51:6f:29:c3:ab:bc:69:c8:6e:7f:13: 76:52:c6:1b:6d:6f:35:b1:87:a6:82:54:19:f4:32:6a:43:bd: c5:fa:b0:d7:3e:6f:f6:c7:4c:aa:fc:fe:d9:3e:29:c3:bb:05: 29:42:49:8d:23:7d:87:f6:f0:b3:1d:fa:3e:03:7b:18:1a:43: 05:58:d1:e9:a9:0c:6a:c0:89:6b:b0:19:f8:27:5c:af:fd:98: 13:48:7a:5f:05:a6:40:65:13:02:20:d9:1d:5e:63:5d:3e:ce: a6:81:ea:16:50:13:aa:cb:3d:00:84:0b:9f:b5:2e:ca:e1:57: a0:b6:04:4d:e6:50:f0:dd:0f:37:20:cc:d5:88:ac:1b:18:e1: 58:cb:c7:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNTMxMDQ0NDI5WhcNMjUwNjA3MDQ0NDI5WjAYMRYwFAYD VQQDEw02ODNhODkyZC02Zjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArscXdgJyVkSv+ts5ssnB7SxOYp/4JkazFdfdRtaBGfx3RnM/QmNgQaAoKiqO ufCKQYqLpHwfvkZrcXOAOFOnatfhMZSkhMucQvTiZ2Lipj3OZjZnQbUsRgqYbJ1g 9updeR7apEjJXH3YvH9WIZueGaGOD5q4CBTvJGrlakforJqVg0orXuYpi5N6T5Kq TKMhPT2paFi5M1tpstbVw+YoP++AF1GVqzHygefcJNL1LEF6Br5tWtEzebV7mnGg ifhyqeJ75l6DOhNxEIBtqZdrh1vDRKugpcAn7HDpmc+Mqx+gaKL4i9bCLVfYN3rT Sb/Dy8M9ws+tbswHsYBXQQaf8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbFa7Pr 2PA4XnedS2EgEe9qbpAuMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs9UlXfj/YaJLPltyRZ1UWdF/lzYX2KGftKJ+THCp2DKBGZ6DFgJzY yThTsO/JgD0FARvGZHFSN3kZzINat2QEH++baAIV+Lu7M0YVpRkbt0DSjVnxrkIe ATKzjDV9FjLtDuEfOAtLZKwldngZz5WxY6tRUW8pw6u8achufxN2UsYbbW81sYem glQZ9DJqQ73F+rDXPm/2x0yq/P7ZPinDuwUpQkmNI32H9vCzHfo+A3sYGkMFWNHp qQxqwIlrsBn4J1yv/ZgTSHpfBaZAZRMCINkdXmNdPs6mgeoWUBOqyz0AhAuftS7K 4VegtgRN5lDw3Q83IMzViKwbGOFYy8ek -----END CERTIFICATE-----Generated at Sat May 31 16:25:49 2025 by rpki-client