$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: 30/aIXgk1O3CAKAeb901a2dj8Uycj4XVJvzk6T2rzWI= Subject key identifier: 97:4B:85:83:DF:61:AF:E3:43:94:BA:81:72:4B:9D:1F:E1:1E:E9:4E Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 05F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 05E9 Signing time: Fri 30 May 2025 23:14:17 +0000 Manifest this update: Fri 30 May 2025 23:14:16 +0000 Manifest next update: Fri 06 Jun 2025 23:14:16 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: 83vSHpn1g9VjfawKVmgu2YH5TQI6jjhZvL02iTMdg84=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: okKowtfia94t5qx7MGTZQGLAEYnC4fX+ZpQbsyMhCVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1527 (0x5f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: May 30 23:14:16 2025 GMT Not After : Jun 6 23:14:16 2025 GMT Subject: CN=683a3bc8-3c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:0e:58:0a:a6:a2:a4:00:c3:ce:39:e4:da: 91:f3:67:c1:5a:3b:01:24:33:a0:bf:ce:fa:79:c3: 72:17:a7:44:1f:3f:8b:77:79:1c:4c:47:62:8f:33: 5d:66:c9:71:ef:50:99:94:30:7e:68:e1:f0:d5:58: 5f:ad:43:58:c0:d8:2b:b7:ac:5f:6f:13:1e:10:14: 53:fb:cd:98:04:82:cf:2f:e3:1b:68:8d:49:a1:8b: 81:8f:a0:4e:9d:e9:f2:d9:45:28:6b:c9:f1:5d:9c: d4:54:59:77:37:61:ab:d0:cc:2e:ee:f5:1c:85:d7: f7:f8:61:34:5c:1a:67:ec:97:d6:11:ab:f3:f1:2f: 77:e2:b8:54:54:8d:6e:4c:8d:3e:4c:21:a6:d3:0f: 0f:b2:63:3b:dc:88:2f:7c:94:3a:d4:a0:84:01:df: 2f:28:6d:7c:9c:d3:8e:65:f8:62:2c:6f:ed:77:c7: 49:0c:13:51:d0:4b:bc:93:ce:18:d5:2b:ee:8d:4c: 25:aa:bb:cb:6b:2d:c2:2c:81:84:00:ba:46:c7:d7: b6:a0:c7:bd:1c:19:0a:07:f9:9d:7b:c0:5b:a4:1e: 31:f8:f3:77:8e:3c:e7:84:0e:16:03:cb:7a:47:2e: d4:56:6c:8b:2e:86:2a:a5:97:0b:85:7b:82:64:15: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:85:83:DF:61:AF:E3:43:94:BA:81:72:4B:9D:1F:E1:1E:E9:4E X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a3:54:de:c1:0e:2b:2f:a4:0b:2e:f9:74:4c:1e:fe:e9:c3: 91:24:e0:9f:83:49:22:62:19:8f:38:d4:33:ed:e0:46:c1:19: bf:f3:48:6e:3c:ac:b6:1d:16:f8:86:75:29:83:c1:a2:4a:0e: 96:e2:e6:9b:a7:92:63:f5:48:b3:29:2f:df:fa:cd:50:d5:c9: 22:8b:02:52:4f:e3:bb:0c:36:2c:52:84:49:57:62:55:a9:65: 62:d4:2e:a6:d7:bd:47:f0:f9:02:b3:c6:4a:f7:a4:dd:90:49: 89:61:42:a8:c1:1e:13:7a:67:3e:d1:05:cf:da:8e:c2:a1:6c: ff:1c:47:98:f2:ee:35:a9:7b:59:b6:07:36:1d:2f:24:f4:e8: 8b:d8:cd:8d:89:e4:cf:1d:09:f2:bc:e9:1e:18:0b:dd:79:24: c3:00:9b:39:54:eb:43:38:95:00:d5:1d:61:56:fd:94:ff:00: f5:a7:76:d4:9e:f4:15:ce:d8:11:6f:63:9b:89:a7:81:b3:5a: 85:2d:c5:76:4d:c0:3b:1f:8b:49:77:f4:ba:1a:bf:89:03:ea: 1c:7d:24:01:24:a0:92:5b:d4:50:79:a7:ee:da:a0:99:4f:5e: ea:b1:c1:8c:1a:7f:18:bb:c6:e3:d8:88:3e:40:83:1e:02:45: d4:23:d8:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUwNTMwMjMxNDE2WhcNMjUwNjA2MjMxNDE2WjAYMRYwFAYD VQQDEw02ODNhM2JjOC0zYzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwTUOWAqmoqQAw8455NqR82fBWjsBJDOgv876ecNyF6dEHz+Ld3kcTEdijzNd Zslx71CZlDB+aOHw1VhfrUNYwNgrt6xfbxMeEBRT+82YBILPL+MbaI1JoYuBj6BO neny2UUoa8nxXZzUVFl3N2Gr0Mwu7vUchdf3+GE0XBpn7JfWEavz8S934rhUVI1u TI0+TCGm0w8PsmM73IgvfJQ61KCEAd8vKG18nNOOZfhiLG/td8dJDBNR0Eu8k84Y 1SvujUwlqrvLay3CLIGEALpGx9e2oMe9HBkKB/mde8BbpB4x+PN3jjznhA4WA8t6 Ry7UVmyLLoYqpZcLhXuCZBVCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJdLhYPf Ya/jQ5S6gXJLnR/hHulOMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOo1TewQ4rL6QLLvl0TB7+6cORJOCfg0kiYhmPONQz7eBGwRm/80hu PKy2HRb4hnUpg8GiSg6W4uabp5Jj9UizKS/f+s1Q1ckiiwJST+O7DDYsUoRJV2JV qWVi1C6m171H8PkCs8ZK96TdkEmJYUKowR4Temc+0QXP2o7CoWz/HEeY8u41qXtZ tgc2HS8k9OiL2M2NieTPHQnyvOkeGAvdeSTDAJs5VOtDOJUA1R1hVv2U/wD1p3bU nvQVztgRb2ObiaeBs1qFLcV2TcA7H4tJd/S6Gr+JA+ocfSQBJKCSW9RQeafu2qCZ T17qscGMGn8Yu8bj2Ig+QIMeAkXUI9id -----END CERTIFICATE-----Generated at Sat May 31 16:55:08 2025 by rpki-client