$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: dBjXjIB7daot1YzIlfbe28nUBI6Eizj83pNPGuIwKTQ= Subject key identifier: 60:F0:9B:E7:28:24:98:48:49:9B:F7:FF:20:6E:EA:08:96:C3:F1:E4 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: D0 Signing time: Sat 31 May 2025 05:14:33 +0000 Manifest this update: Sat 31 May 2025 05:14:33 +0000 Manifest next update: Sat 07 Jun 2025 05:14:33 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: 7jYU0wMPPVBmjsoQ3BBRbgMayQR/osYxlh3Wt2dxHmA=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: TkSH2eeRMqY94jagMtgrF0f2pi1KvzFN767qntLjkUk=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: May 31 05:14:33 2025 GMT Not After : Jun 7 05:14:33 2025 GMT Subject: CN=683a9039-909c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:c3:bb:1e:b0:06:bb:dd:00:ab:e8:4b:09: 53:77:fd:44:f5:ff:d5:ac:c0:44:68:84:7e:21:72: bc:a5:11:b4:f3:f0:c1:20:c0:9d:ae:b1:55:bb:96: b8:1e:b3:8c:59:e8:42:c7:ee:8a:0a:0b:87:d9:de: 8b:ce:d0:78:de:df:33:91:d2:7f:d4:6c:c3:48:78: 3e:d6:be:42:91:be:f7:cf:34:98:d8:fc:be:5f:41: 0b:e8:73:67:11:25:90:aa:18:3d:65:f1:e5:1e:3b: 13:ee:f0:08:41:76:c9:29:b7:c7:9e:3b:5e:ea:e7: 13:64:77:31:ab:2b:a4:d6:23:40:ab:9d:32:b2:78: 9b:33:51:6a:6e:37:64:50:e6:f4:c4:b6:ee:be:7e: d4:9a:74:02:0d:82:19:88:19:41:0f:fb:43:17:90: f0:34:30:2d:fb:12:c0:95:de:54:4c:cd:f7:91:8a: 86:e2:df:12:6e:2c:29:f4:ba:d5:0e:3a:45:9b:e4: f3:92:52:1e:17:37:ba:56:3b:a5:ce:a0:cb:fd:be: 0c:0d:f5:2b:12:a5:ee:a4:67:be:8b:81:31:08:dd: 44:e8:13:64:4a:90:b2:0a:47:ba:1c:09:34:1e:c9: 99:5f:16:5a:2d:c8:a8:94:9f:78:17:19:67:6d:8f: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:9B:E7:28:24:98:48:49:9B:F7:FF:20:6E:EA:08:96:C3:F1:E4 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:fe:ec:4e:b4:b0:f9:1a:88:1e:41:34:4d:d1:01:79:0e:fb: 1d:ba:fa:69:31:cb:61:d3:23:c7:cb:97:aa:d3:ae:0f:da:a8: b1:70:96:2c:92:99:a1:23:bd:a6:ba:f2:b9:52:47:8d:18:ce: b2:07:2f:e3:2b:91:15:ce:54:58:e7:d4:f3:2c:b4:7d:76:5f: aa:26:f0:95:86:b4:60:ca:75:4e:b1:e2:c6:b4:dd:08:db:a7: b6:cb:04:65:61:8f:8d:12:3c:b7:69:d8:1a:ec:b7:6e:e6:6c: 4d:b7:52:8c:b7:f1:ec:d4:c3:5b:f7:0b:b3:1e:e6:1c:94:e5: 0f:d3:50:8a:23:fc:4f:df:db:bb:9f:9d:b4:a0:32:38:24:2b: 21:5a:1a:e0:bd:e6:d5:98:96:de:42:e7:86:df:c0:e7:bc:b0: ac:f3:1d:2c:c2:61:94:3d:39:b8:72:79:a0:6e:94:76:01:bd: 53:81:1e:05:b8:b4:41:ca:db:95:77:4a:31:b4:e6:aa:96:cf: 67:4f:8a:9d:5c:c3:66:15:bb:fd:2d:72:c0:78:8f:a1:4d:d5: 5f:14:f8:ac:89:13:2d:d4:3f:cf:be:3d:11:08:9d:02:14:82: 0e:43:67:e0:f7:f5:e0:b7:ee:2f:19:82:da:a2:d6:33:dc:4c: cf:10:9f:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNTMxMDUxNDMzWhcNMjUwNjA3MDUxNDMzWjAYMRYwFAYD VQQDEw02ODNhOTAzOS05MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz8XDux6wBrvdAKvoSwlTd/1E9f/VrMBEaIR+IXK8pRG08/DBIMCdrrFVu5a4 HrOMWehCx+6KCguH2d6LztB43t8zkdJ/1GzDSHg+1r5Ckb73zzSY2Py+X0EL6HNn ESWQqhg9ZfHlHjsT7vAIQXbJKbfHnjte6ucTZHcxqyuk1iNAq50ysnibM1Fqbjdk UOb0xLbuvn7UmnQCDYIZiBlBD/tDF5DwNDAt+xLAld5UTM33kYqG4t8Sbiwp9LrV DjpFm+TzklIeFze6VjulzqDL/b4MDfUrEqXupGe+i4ExCN1E6BNkSpCyCke6HAk0 HsmZXxZaLciolJ94FxlnbY8/GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDwm+co JJhISZv3/yBu6giWw/HkMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ/uxOtLD5GogeQTRN0QF5DvsduvppMcth0yPHy5eq064P2qixcJYs kpmhI72muvK5UkeNGM6yBy/jK5EVzlRY59TzLLR9dl+qJvCVhrRgynVOseLGtN0I 26e2ywRlYY+NEjy3adga7Ldu5mxNt1KMt/Hs1MNb9wuzHuYclOUP01CKI/xP39u7 n520oDI4JCshWhrgvebVmJbeQueG38DnvLCs8x0swmGUPTm4cnmgbpR2Ab1TgR4F uLRBytuVd0oxtOaqls9nT4qdXMNmFbv9LXLAeI+hTdVfFPisiRMt1D/Pvj0RCJ0C FIIOQ2fg9/Xgt+4vGYLaotYz3EzPEJ/A -----END CERTIFICATE-----Generated at Sat May 31 16:27:01 2025 by rpki-client