$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: AmDiYOOo7JuXdliPgU9EqRKMLrLgRTZAmfMrVSGlpLY= Subject key identifier: 22:05:93:1B:71:BB:9C:C5:68:B4:89:50:EE:41:8A:93:6E:96:9A:A5 Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 065D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0658 Signing time: Fri 30 May 2025 22:41:43 +0000 Manifest this update: Fri 30 May 2025 22:41:43 +0000 Manifest next update: Fri 06 Jun 2025 22:41:43 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: OZE46xGO9G5hxo3/AhGe6oJ8zwc57zXDDyg9o12VLI0=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: 0Vo3U2BdtOB6mX4+w3M4VNqdzFaeSWGYYn2lO8mMRcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1629 (0x65d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: May 30 22:41:43 2025 GMT Not After : Jun 6 22:41:43 2025 GMT Subject: CN=683a3427-96f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:f2:ee:33:dc:ef:40:aa:00:ad:d3:4e:e0: 37:90:49:35:31:9c:8a:fd:33:7a:b1:e2:8e:55:7e: c8:8d:20:24:58:15:a1:a1:5b:fd:a2:ac:39:49:f5: 40:ee:74:c1:53:d0:cf:a8:6a:64:68:62:fb:30:06: fb:d2:b3:74:49:20:7c:63:7b:0f:9d:73:f7:8b:9b: b5:54:e2:3c:5e:23:98:1a:73:e5:68:3c:a7:db:67: ec:5d:e3:10:96:a0:81:8c:25:5e:7f:e0:f8:43:cf: b7:cc:9a:b6:c9:90:85:06:90:2a:e5:a0:30:3e:a1: f4:fe:24:ad:73:b4:57:39:62:fe:e6:e0:e9:68:2b: d2:6c:b3:a8:fd:9c:3a:74:75:4e:3f:a4:e3:de:05: 9c:d9:e1:95:9d:48:13:7d:85:80:06:71:aa:d4:a4: 1c:e4:bc:64:f1:78:3d:0c:6f:f5:f3:b5:59:2d:d9: d1:1e:43:69:2f:1f:66:ae:0f:27:53:d4:ef:c0:c8: c9:55:fb:5f:68:f7:48:d1:61:58:1b:50:a4:89:89: 4d:5b:b3:7c:0b:63:3b:cf:bc:e1:ec:77:ce:8e:52: a9:81:50:6e:ea:4a:cf:ba:c5:97:eb:4d:8c:32:45: 9e:30:88:90:cc:ee:20:19:d5:a4:2e:21:50:2f:50: 78:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:93:1B:71:BB:9C:C5:68:B4:89:50:EE:41:8A:93:6E:96:9A:A5 X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9f:e6:b7:da:76:4a:2a:39:96:ae:f9:d4:41:f9:65:0e:ee: 16:9a:d7:24:21:86:ab:c2:d9:d2:5f:d3:99:68:34:6f:95:03: 2f:98:ae:14:e9:2d:fa:7f:35:fe:85:1e:2c:d1:1b:11:9b:28: 72:10:d2:09:4f:61:eb:c3:03:ca:9e:09:7a:1d:7e:17:9f:14: 3f:00:4d:5d:f8:d7:b3:37:2c:0e:ed:4a:1e:86:99:3f:49:15: f8:29:96:c3:f0:01:be:9b:80:46:ce:b0:c6:59:7d:ea:97:83: 51:e4:eb:9f:b8:06:27:a5:8d:7d:27:c7:aa:88:aa:14:bd:c6: d5:95:08:7d:8c:96:36:16:be:18:df:49:99:01:7f:6b:df:90: 48:b3:94:20:39:ae:2a:2e:91:c5:48:f0:2e:aa:4f:2e:3a:c2: 67:2a:5f:8a:8a:3e:66:d9:dd:3a:02:d9:27:66:03:58:ec:2e: c0:84:06:9b:90:08:73:c1:0d:a1:dd:5e:68:de:93:56:5b:6d: 48:5a:3f:58:0f:10:df:c7:0a:ac:04:16:c4:5f:1f:99:1b:8f: d6:be:5a:72:dd:ff:d7:be:b8:9b:45:7b:0c:69:bb:04:41:4f: 78:ad:3a:8d:7f:c1:31:a6:6c:b1:11:1f:b6:6a:08:51:6a:a9: f7:79:68:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBl0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwNTMwMjI0MTQzWhcNMjUwNjA2MjI0MTQzWjAYMRYwFAYD VQQDEw02ODNhMzQyNy05NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJ/y7jPc70CqAK3TTuA3kEk1MZyK/TN6seKOVX7IjSAkWBWhoVv9oqw5SfVA 7nTBU9DPqGpkaGL7MAb70rN0SSB8Y3sPnXP3i5u1VOI8XiOYGnPlaDyn22fsXeMQ lqCBjCVef+D4Q8+3zJq2yZCFBpAq5aAwPqH0/iStc7RXOWL+5uDpaCvSbLOo/Zw6 dHVOP6Tj3gWc2eGVnUgTfYWABnGq1KQc5Lxk8Xg9DG/187VZLdnRHkNpLx9mrg8n U9TvwMjJVftfaPdI0WFYG1CkiYlNW7N8C2M7z7zh7HfOjlKpgVBu6krPusWX602M MkWeMIiQzO4gGdWkLiFQL1B4YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIFkxtx u5zFaLSJUO5BipNulpqlMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdn+a32nZKKjmWrvnUQfllDu4WmtckIYarwtnSX9OZaDRvlQMvmK4U 6S36fzX+hR4s0RsRmyhyENIJT2HrwwPKngl6HX4XnxQ/AE1d+NezNywO7Uoehpk/ SRX4KZbD8AG+m4BGzrDGWX3ql4NR5OufuAYnpY19J8eqiKoUvcbVlQh9jJY2Fr4Y 30mZAX9r35BIs5QgOa4qLpHFSPAuqk8uOsJnKl+Kij5m2d06AtknZgNY7C7AhAab kAhzwQ2h3V5o3pNWW21IWj9YDxDfxwqsBBbEXx+ZG4/Wvlpy3f/XvribRXsMabsE QU94rTqNf8ExpmyxER+2aghRaqn3eWjU -----END CERTIFICATE-----Generated at Sat May 31 17:37:41 2025 by rpki-client