$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: 4/n4Uy47YjsZlijAPVTh6iBlQVrO6oD/vYIJUMPjVBY= Subject key identifier: AD:35:16:13:26:39:C1:5E:A1:72:9C:24:3D:9B:E1:D9:64:A5:F9:C0 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 0189 Signing time: Sat 31 May 2025 03:26:13 +0000 Manifest this update: Sat 31 May 2025 03:26:13 +0000 Manifest next update: Sat 07 Jun 2025 03:26:13 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: GZB8mwIWuk5YFDbU5FtgsZRCj0WCSgT/lgzpinuPb2w=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 0tzqO1CmigPSpz/MhhBtA7Y+BKnfbYyMKy+tv5IkgiA=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: NKujXUGh0X/SkT7+y791gsNwYlUiCMjNSQHbtD/TZ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 03:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: May 31 03:26:13 2025 GMT Not After : Jun 7 03:26:13 2025 GMT Subject: CN=683a76d5-0070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3b:4a:1f:25:6c:98:ff:82:12:54:ec:0d:f3: 81:23:54:86:79:38:69:72:81:58:32:78:91:c9:66: 92:3f:b1:b1:89:47:29:0f:41:44:e6:43:9d:28:bf: 19:31:1d:81:41:77:73:a7:ac:22:e3:9f:13:ee:3b: 1d:ce:de:59:ef:33:c7:c3:89:b0:fd:d5:b4:f9:32: 64:6f:9d:74:a3:0d:4f:3d:06:71:78:0f:e7:ba:7e: 98:78:ef:25:54:d3:b1:be:65:65:26:52:1e:cb:e5: 44:db:b3:01:3e:b4:f0:d6:f8:6d:da:c1:8b:a1:56: 05:cb:98:cb:ba:ea:d7:d8:f7:62:5e:f8:7a:e6:bf: 50:1b:1b:8f:84:d8:b0:96:00:08:05:20:e1:92:9f: 58:24:29:33:ee:52:e4:4a:08:e2:ef:14:0f:57:22: 62:6f:68:45:cc:0e:18:d3:df:f9:17:33:65:7b:20: b6:8d:94:03:9b:07:52:8a:bc:ce:78:38:dd:ff:2b: d2:4d:34:b1:b2:a4:2d:60:4a:1e:95:b4:32:ee:6a: 6d:50:1b:34:a8:af:ff:c0:5b:04:cc:a1:f7:7a:06: 38:c9:88:53:5d:06:21:e0:c6:c7:3e:6b:43:cb:5e: 1d:c9:e9:c2:d8:c9:94:ab:e1:fb:37:bd:7e:9e:70: 24:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:35:16:13:26:39:C1:5E:A1:72:9C:24:3D:9B:E1:D9:64:A5:F9:C0 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1b:83:a7:c5:e3:c9:e1:83:52:e0:1d:ed:25:b9:5b:e8:a3: f6:2d:7b:e2:da:d6:55:a9:a3:c9:ff:25:5c:c5:ed:9e:0a:f1: e0:b5:b5:59:7a:99:38:d8:74:6c:42:d9:9a:7d:44:67:68:5a: 47:bc:72:68:74:21:46:73:7e:a4:14:b0:e6:c4:20:58:15:92: 4a:34:ad:04:09:88:e4:7f:2e:14:7a:75:e0:f4:a8:e9:35:45: 55:45:a6:53:29:ae:57:c0:e1:7c:15:65:cc:4e:55:01:b4:68: 62:9d:a8:f2:53:f3:8d:33:a0:cd:29:17:fb:43:1d:11:89:89: 3d:06:41:f6:7f:e3:16:48:32:4f:b1:88:74:c6:34:44:a6:22: f9:ae:6a:11:96:aa:bd:86:c6:40:ab:97:b1:25:96:20:10:cc: bb:c2:2b:5a:1d:b2:58:ed:3c:dc:ff:9b:dc:1a:02:04:d7:d7: c2:1f:a9:2d:ef:1f:59:51:9d:58:15:d5:cf:05:76:bd:0f:4d: 41:e6:40:d8:44:01:60:bd:0c:b0:fd:ea:0d:54:3a:2c:8c:0b: 1d:24:1e:3d:7f:97:37:55:af:6d:37:7d:af:d1:f5:83:05:44: 0d:91:32:90:02:44:87:a7:8c:ee:89:6a:85:5a:de:44:4d:f5: 09:c7:7b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUwNTMxMDMyNjEzWhcNMjUwNjA3MDMyNjEzWjAYMRYwFAYD VQQDEw02ODNhNzZkNS0wMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjtKHyVsmP+CElTsDfOBI1SGeThpcoFYMniRyWaSP7GxiUcpD0FE5kOdKL8Z MR2BQXdzp6wi458T7jsdzt5Z7zPHw4mw/dW0+TJkb510ow1PPQZxeA/nun6YeO8l VNOxvmVlJlIey+VE27MBPrTw1vht2sGLoVYFy5jLuurX2PdiXvh65r9QGxuPhNiw lgAIBSDhkp9YJCkz7lLkSgji7xQPVyJib2hFzA4Y09/5FzNleyC2jZQDmwdSirzO eDjd/yvSTTSxsqQtYEoelbQy7mptUBs0qK//wFsEzKH3egY4yYhTXQYh4MbHPmtD y14dyenC2MmUq+H7N71+nnAkZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK01FhMm OcFeoXKcJD2b4dlkpfnAMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8G4OnxePJ4YNS4B3tJblb6KP2LXvi2tZVqaPJ/yVcxe2eCvHgtbVZ epk42HRsQtmafURnaFpHvHJodCFGc36kFLDmxCBYFZJKNK0ECYjkfy4UenXg9Kjp NUVVRaZTKa5XwOF8FWXMTlUBtGhinajyU/ONM6DNKRf7Qx0RiYk9BkH2f+MWSDJP sYh0xjREpiL5rmoRlqq9hsZAq5exJZYgEMy7witaHbJY7Tzc/5vcGgIE19fCH6kt 7x9ZUZ1YFdXPBXa9D01B5kDYRAFgvQyw/eoNVDosjAsdJB49f5c3Va9tN32v0fWD BUQNkTKQAkSHp4zuiWqFWt5ETfUJx3uQ -----END CERTIFICATE-----Generated at Sat May 31 16:38:58 2025 by rpki-client