$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: enWGn9d+AiDYhJ+IaJKv0HSyn+iT3ncqqobTyYjz4sY= Subject key identifier: 0D:D7:51:E2:9F:1B:7D:51:DC:03:2A:3B:98:55:77:52:79:07:4F:2F Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1AFF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1AD8 Signing time: Fri 30 May 2025 16:30:00 +0000 Manifest this update: Fri 30 May 2025 16:29:59 +0000 Manifest next update: Fri 06 Jun 2025 16:29:59 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: vC9FJhwi/sAabba7ZIAebs2wAh8RLXHVBIJEdwhzFHg=) 2: DC3B90E4520011ECA6088714C4F9AE02.roa (hash: tVOP8LyZJ77JRBIkUucA79A27boRokWrzqFOTarPZXk=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: HcXFJpDWZcmR/k4nnUkzVGlWv0kfSW5A6hP7Nj80qKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 16:29:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6911 (0x1aff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: May 30 16:29:59 2025 GMT Not After : Jun 6 16:29:59 2025 GMT Subject: CN=6839dd07-5831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b7:5f:f3:97:3f:b7:75:16:22:42:58:20:de: 7a:b1:1a:e2:24:32:b9:ed:5d:1d:3c:f1:2f:79:67: b2:7f:bf:6d:5b:95:85:b6:36:21:ad:9e:05:e6:f9: 12:3a:b2:2d:c6:d6:f4:c1:ba:ec:2e:32:4f:f3:4c: 7f:d4:37:14:99:09:5e:98:59:df:ee:72:8f:c1:a9: a8:5b:85:99:36:a8:dd:23:9c:ce:02:87:43:12:02: 57:a4:16:91:28:47:a6:d5:b5:31:1c:d1:1d:98:13: b9:aa:b7:5b:af:e9:40:c7:c0:a8:bc:8a:a7:c8:66: 40:f3:b7:4d:f9:61:35:b9:a1:e5:cd:2a:4b:b7:95: 12:45:c6:19:3e:c9:9b:c0:94:f9:dd:63:19:eb:ac: f7:34:70:60:5c:98:f1:82:a9:c9:c6:1f:27:99:78: 03:3d:22:67:be:ac:a7:08:e3:7c:0f:f2:25:81:1b: 98:d4:c8:d3:19:02:5a:7f:28:83:fa:35:a7:5f:95: 44:e0:c4:54:83:6e:a8:99:81:00:34:b3:2c:b7:0b: cd:7e:7b:59:0b:89:89:69:b5:d9:ed:cb:de:b4:ec: 2e:ca:ea:1d:de:4f:fc:9e:56:10:a2:d5:94:c2:45: d2:5a:c0:08:ae:25:e1:fb:9e:f8:ca:35:09:5e:fb: 37:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D7:51:E2:9F:1B:7D:51:DC:03:2A:3B:98:55:77:52:79:07:4F:2F X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:c6:d5:48:34:72:6e:6a:69:d8:aa:95:94:38:4a:48:56:25: 5d:0d:38:41:76:31:82:7d:82:36:f7:be:57:c8:7b:20:ab:9b: 5e:6f:c9:3f:07:11:f9:51:45:95:bb:16:6a:11:98:9a:a1:76: 13:c9:72:01:64:5e:d6:8d:b0:1f:43:f0:a7:15:27:0b:bd:23: 5a:fa:b0:9a:d1:d2:52:65:7a:61:82:ea:46:20:37:80:1d:6f: ec:60:f9:81:c9:04:f5:59:e0:dd:ce:8a:81:10:75:c9:aa:b1: 08:ed:34:cd:23:4a:2f:12:d0:a4:df:2a:9a:a8:7f:30:7a:e5: 8c:12:67:5d:39:f4:e8:1a:6e:25:a7:76:75:1b:c4:40:4b:ac: 23:07:74:0d:e5:30:44:23:bc:1a:fb:f8:98:53:15:74:b4:30: 81:d0:42:3d:05:aa:fc:91:8f:19:93:a3:c0:98:ed:58:69:f6: 4e:b3:46:39:02:32:42:76:e7:67:b7:5e:05:d2:6e:e0:ac:00: 14:d1:ee:a4:3a:40:e5:6a:47:bb:e7:22:ed:f2:ee:33:88:4c: ae:7f:7d:a4:60:44:6f:49:86:b1:84:1e:ea:1a:e5:aa:81:a3: c5:b9:6a:38:8e:53:7d:ea:67:d1:2d:d4:97:2f:d1:8e:0b:99: 4b:d0:d0:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwNTMwMTYyOTU5WhcNMjUwNjA2MTYyOTU5WjAYMRYwFAYD VQQDEw02ODM5ZGQwNy01ODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrdf85c/t3UWIkJYIN56sRriJDK57V0dPPEveWeyf79tW5WFtjYhrZ4F5vkS OrItxtb0wbrsLjJP80x/1DcUmQlemFnf7nKPwamoW4WZNqjdI5zOAodDEgJXpBaR KEem1bUxHNEdmBO5qrdbr+lAx8CovIqnyGZA87dN+WE1uaHlzSpLt5USRcYZPsmb wJT53WMZ66z3NHBgXJjxgqnJxh8nmXgDPSJnvqynCON8D/IlgRuY1MjTGQJafyiD +jWnX5VE4MRUg26omYEANLMstwvNfntZC4mJabXZ7cvetOwuyuod3k/8nlYQotWU wkXSWsAIriXh+574yjUJXvs3jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3XUeKf G31R3AMqO5hVd1J5B08vMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGxtVINHJuamnYqpWUOEpIViVdDThBdjGCfYI2975XyHsgq5teb8k/ BxH5UUWVuxZqEZiaoXYTyXIBZF7WjbAfQ/CnFScLvSNa+rCa0dJSZXphgupGIDeA HW/sYPmByQT1WeDdzoqBEHXJqrEI7TTNI0ovEtCk3yqaqH8weuWMEmddOfToGm4l p3Z1G8RAS6wjB3QN5TBEI7wa+/iYUxV0tDCB0EI9Bar8kY8Zk6PAmO1YafZOs0Y5 AjJCdudnt14F0m7grAAU0e6kOkDlake75yLt8u4ziEyuf32kYERvSYaxhB7qGuWq gaPFuWo4jlN96mfRLdSXL9GOC5lL0NCi -----END CERTIFICATE-----Generated at Sat May 31 16:59:21 2025 by rpki-client