$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft File: 7vvGU2P1cW1yTBF81UIh5BLZI8w.mft (raw, json) Hash identifier: j48WW/F2HT+uDc7ix4yL07Agc/K6zc7fhjtoqTEPxD4= Subject key identifier: 27:80:19:54:12:1B:0A:EF:6F:96:86:AF:40:CD:A0:8D:98:DF:EF:C7 Authority key identifier: EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC Certificate issuer: /CN=A91F2A41/serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Certificate serial: 02DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft Manifest number: 02D3 Signing time: Sat 31 May 2025 01:32:54 +0000 Manifest this update: Sat 31 May 2025 01:32:53 +0000 Manifest next update: Sat 07 Jun 2025 01:32:53 +0000 Files and hashes: 1: 7vvGU2P1cW1yTBF81UIh5BLZI8w.crl (hash: BA0pYWGTMcV9AU6GB5Vqb6mlJ4HaF1x8y4zzzy72Hpg=) 2: ABF61020E93C11ECA5406975C4F9AE02.roa (hash: pDFhcqRhca1GNa0ZmLkQpgslerwa9C5G+2JfTrt137w=) 3: ADBF1F6EE93C11ECA5406975C4F9AE02.roa (hash: qb7qUtAkoHjPv30O4ulR321GUnOwL4yDIMYd10CmtCA=) 4: 01C04C52FB8D11ECABCA1D0AC4F9AE02.roa (hash: IdffaUaBoSta1anksGvusIKN2vlycl68X+OeRcTSpcY=) 5: AD08F946E93C11ECA5406975C4F9AE02.roa (hash: 8j2o1z/nwnh5lm7+ZdnqPMHGr9wIM/IlvKvCsESoCt8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 01:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2A41, serialNumber=EEFBC65363F5716D724C117CD54221E412D923CC Validity Not Before: May 31 01:32:53 2025 GMT Not After : Jun 7 01:32:53 2025 GMT Subject: CN=683a5c46-92c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:72:22:1e:a6:7d:4d:bf:0c:86:ac:1d:96: c1:70:99:77:56:99:b3:d9:87:12:5a:75:82:c0:f1: cb:cc:9f:65:03:16:40:99:e8:90:64:47:99:0d:8f: 69:a5:cd:a3:c7:04:75:78:85:fb:da:73:6f:46:d5: 0a:03:fa:2b:99:59:79:5f:be:b3:55:24:36:97:67: 72:01:8c:a4:0d:dc:a8:e0:8a:96:06:93:11:5c:c3: 75:c5:2f:34:7c:28:04:f0:4e:e4:39:32:38:c1:ea: 83:95:db:c2:5a:7f:49:71:f5:76:9a:0a:2a:2f:a8: 0e:c2:a5:25:93:a6:ee:9d:01:45:d1:22:ef:57:7f: 1b:38:cb:f3:ee:61:82:73:60:ec:be:e5:2e:0e:08: 5b:df:c6:39:c4:34:bd:d7:c4:3c:6b:fe:49:ac:4e: b0:02:e3:ba:76:dc:43:97:be:94:9a:45:be:e2:d6: 57:70:a4:b6:d8:ce:56:4f:c7:20:16:89:ab:02:ed: f0:10:d5:63:13:a3:07:ce:f3:b3:7d:52:8a:6d:7c: 39:f9:26:c9:50:b5:bc:b7:45:2f:3e:ca:cb:2f:ce: 47:5b:ac:95:53:da:b9:a7:6c:f1:0f:bd:65:f6:3c: 07:91:03:2e:c2:7e:43:10:c7:01:a4:6e:4c:03:7d: 47:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:80:19:54:12:1B:0A:EF:6F:96:86:AF:40:CD:A0:8D:98:DF:EF:C7 X509v3 Authority Key Identifier: keyid:EE:FB:C6:53:63:F5:71:6D:72:4C:11:7C:D5:42:21:E4:12:D9:23:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7vvGU2P1cW1yTBF81UIh5BLZI8w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2A41/BD4146DAE93511ECAC665452C4F9AE02/7vvGU2P1cW1yTBF81UIh5BLZI8w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:46:58:f4:7a:a8:c2:aa:c7:8a:bb:db:4a:e7:73:7c:65:83: 8c:76:64:02:fe:e9:51:a5:04:07:fa:bf:84:88:09:f0:2f:42: 55:80:14:06:fc:5f:20:55:e8:83:8e:12:34:e5:3c:a9:82:4a: 82:82:59:14:9a:64:8a:dc:12:9c:74:7d:e8:d4:28:5c:75:64: 0f:c6:94:3f:dc:ec:83:9b:42:19:77:a9:cf:a4:a2:41:ed:50: 62:32:cc:ed:39:f8:a5:1d:f5:7b:8b:47:85:e4:a6:08:4f:b5: 07:42:ea:44:e3:88:cb:dc:e5:18:ab:49:f0:b9:55:d6:5c:2d: 94:58:98:e0:a7:f0:2e:d4:d4:3b:fc:d4:ee:33:7d:f7:b6:6f: ed:54:00:39:2c:f3:4b:c7:46:61:e5:12:cf:11:77:4d:0c:fb: 7e:77:19:cf:ac:8b:06:8c:75:2b:cd:3c:8e:0b:04:6e:30:54: 5c:dd:f8:aa:5f:f7:0d:45:d2:5d:f2:58:ff:79:d6:db:bb:97: 00:95:6d:10:31:b3:0c:94:a9:7f:07:fa:73:bd:ea:8c:fe:85: 0e:41:99:52:d8:af:19:19:de:94:2b:77:58:de:39:89:20:c7: 4f:a4:14:4c:0d:db:69:10:2a:ba:a4:a2:f4:3e:34:41:81:7b: b9:54:78:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJBNDExMTAvBgNVBAUTKEVFRkJDNjUzNjNGNTcxNkQ3MjRDMTE3Q0Q1NDIyMUU0 MTJEOTIzQ0MwHhcNMjUwNTMxMDEzMjUzWhcNMjUwNjA3MDEzMjUzWjAYMRYwFAYD VQQDEw02ODNhNWM0Ni05MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutVyIh6mfU2/DIasHZbBcJl3Vpmz2YcSWnWCwPHLzJ9lAxZAmeiQZEeZDY9p pc2jxwR1eIX72nNvRtUKA/ormVl5X76zVSQ2l2dyAYykDdyo4IqWBpMRXMN1xS80 fCgE8E7kOTI4weqDldvCWn9JcfV2mgoqL6gOwqUlk6bunQFF0SLvV38bOMvz7mGC c2DsvuUuDghb38Y5xDS918Q8a/5JrE6wAuO6dtxDl76UmkW+4tZXcKS22M5WT8cg FomrAu3wENVjE6MHzvOzfVKKbXw5+SbJULW8t0UvPsrLL85HW6yVU9q5p2zxD71l 9jwHkQMuwn5DEMcBpG5MA31HwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeAGVQS Gwrvb5aGr0DNoI2Y3+/HMB8GA1UdIwQYMBaAFO77xlNj9XFtckwRfNVCIeQS2SPM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkE0MS9CRDQxNDZEQUU5 MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNXMXlUQkY4MVVJaDVCTFpJ OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd2dkdVMlAxY1cxeVRCRjgxVUloNUJMWkk4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkE0MS9CRDQxNDZEQUU5MzUxMUVDQUM2NjU0NTJDNEY5QUUwMi83dnZHVTJQMWNX MXlUQkY4MVVJaDVCTFpJOHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBERlj0eqjCqseKu9tK53N8ZYOMdmQC/ulRpQQH+r+EiAnwL0JVgBQG /F8gVeiDjhI05TypgkqCglkUmmSK3BKcdH3o1ChcdWQPxpQ/3OyDm0IZd6nPpKJB 7VBiMsztOfilHfV7i0eF5KYIT7UHQupE44jL3OUYq0nwuVXWXC2UWJjgp/Au1NQ7 /NTuM333tm/tVAA5LPNLx0Zh5RLPEXdNDPt+dxnPrIsGjHUrzTyOCwRuMFRc3fiq X/cNRdJd8lj/edbbu5cAlW0QMbMMlKl/B/pzveqM/oUOQZlS2K8ZGd6UK3dY3jmJ IMdPpBRMDdtpECq6pKL0PjRBgXu5VHgi -----END CERTIFICATE-----Generated at Sat May 31 17:36:08 2025 by rpki-client