$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: 1eV+mOu7BgkP0Keubfi8XdAlvu0Zbb/QqHHZnwhgm6Q= Subject key identifier: 65:D1:E2:D1:60:84:D7:EA:6E:BE:8B:47:41:35:84:25:5D:46:14:5E Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 0499 Signing time: Sat 31 May 2025 00:10:50 +0000 Manifest this update: Sat 31 May 2025 00:10:49 +0000 Manifest next update: Sat 07 Jun 2025 00:10:49 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: WAnNaRwUf5aHdgspAXWJL5UFnZlLOMhNDf8V1u45AoM=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: May 31 00:10:49 2025 GMT Not After : Jun 7 00:10:49 2025 GMT Subject: CN=683a490a-1d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:46:53:5c:39:f9:7d:fa:24:89:3d:b4:80:1a: b0:5b:1d:63:91:98:ca:8b:a1:4e:0d:a1:c3:87:59: 8e:61:f6:e4:14:fd:de:ca:7f:ed:5e:fc:a2:d1:04: 92:e4:fb:fe:32:ef:4a:18:68:22:88:66:7a:c0:70: 62:46:f3:53:f7:e1:aa:69:3d:55:88:23:8f:ef:e5: 43:89:2f:e4:e2:0d:bc:4d:ad:b3:33:74:d7:91:13: 20:6c:8b:57:e8:e2:d3:2f:af:d1:47:30:d2:c5:4e: 82:24:48:f0:ba:85:54:d1:1e:73:d6:3a:b2:d1:6f: 20:38:b6:8d:ee:d3:c3:e3:2d:65:05:69:1d:dd:5c: 39:d5:61:1f:60:a3:49:17:6e:02:38:43:23:0f:54: 91:1a:87:a4:47:7b:56:10:f0:72:18:6e:bc:7f:0e: 60:1c:cb:87:07:27:b3:ab:d7:db:7e:3a:78:21:d2: 5c:8e:94:cd:49:56:12:74:7c:24:be:83:02:8d:e8: 4d:83:e6:95:4a:78:5b:e4:53:4e:5a:7d:e5:e2:46: a6:09:f0:be:9f:7d:98:d7:b2:65:1a:86:8f:40:b2: 9a:01:d5:74:be:7c:63:44:61:70:cf:ae:5a:b7:9c: a3:dd:f2:7f:91:c7:a1:a6:42:52:94:21:28:d8:de: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:E2:D1:60:84:D7:EA:6E:BE:8B:47:41:35:84:25:5D:46:14:5E X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:38:54:83:d5:c5:7a:03:d4:a0:8e:23:bd:84:f9:4c:bb:79: ba:5b:e4:9a:16:f2:6b:21:1b:19:57:f0:12:04:20:56:1e:eb: 12:79:11:d4:19:54:1e:ca:be:46:ea:39:ec:3d:78:aa:b0:e1: ca:82:e8:f2:87:05:39:22:e4:7b:27:2e:1e:e9:66:d8:da:fb: 78:68:7e:0d:86:09:57:6b:30:bd:41:3e:0b:29:ad:44:7a:ed: 3d:7c:5d:14:04:2c:de:20:4c:b1:d6:e6:57:6a:77:07:73:71: ed:8f:bf:27:4d:df:38:6d:04:a3:ce:89:18:37:d9:52:83:aa: 33:e9:20:51:61:d9:1b:b7:90:e0:fd:1d:50:93:6d:22:df:d1: 05:3f:63:14:ec:dc:69:29:a2:a4:0d:c3:3a:3b:9f:cb:52:79: c0:6c:9c:18:90:79:57:0e:4c:68:da:31:cd:f9:4a:3f:e3:2d: 34:40:c1:99:b1:d2:6d:7c:a0:95:72:d3:59:b6:eb:aa:8f:ce: 9d:8c:30:72:3e:7f:34:6f:b7:3c:23:50:53:0e:7a:33:76:c5: 5c:32:3d:46:45:e5:2f:44:bf:da:99:98:36:f9:5c:1a:c1:59: 7f:b8:48:c5:6b:03:89:92:5b:9e:2c:16:b1:0f:f0:58:f8:37: bb:49:07:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwNTMxMDAxMDQ5WhcNMjUwNjA3MDAxMDQ5WjAYMRYwFAYD VQQDEw02ODNhNDkwYS0xZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEZTXDn5ffokiT20gBqwWx1jkZjKi6FODaHDh1mOYfbkFP3eyn/tXvyi0QSS 5Pv+Mu9KGGgiiGZ6wHBiRvNT9+GqaT1ViCOP7+VDiS/k4g28Ta2zM3TXkRMgbItX 6OLTL6/RRzDSxU6CJEjwuoVU0R5z1jqy0W8gOLaN7tPD4y1lBWkd3Vw51WEfYKNJ F24COEMjD1SRGoekR3tWEPByGG68fw5gHMuHByezq9fbfjp4IdJcjpTNSVYSdHwk voMCjehNg+aVSnhb5FNOWn3l4kamCfC+n32Y17JlGoaPQLKaAdV0vnxjRGFwz65a t5yj3fJ/kcehpkJSlCEo2N5aPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXR4tFg hNfqbr6LR0E1hCVdRhReMB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlOFSD1cV6A9SgjiO9hPlMu3m6W+SaFvJrIRsZV/ASBCBWHusSeRHU GVQeyr5G6jnsPXiqsOHKgujyhwU5IuR7Jy4e6WbY2vt4aH4NhglXazC9QT4LKa1E eu09fF0UBCzeIEyx1uZXancHc3Htj78nTd84bQSjzokYN9lSg6oz6SBRYdkbt5Dg /R1Qk20i39EFP2MU7NxpKaKkDcM6O5/LUnnAbJwYkHlXDkxo2jHN+Uo/4y00QMGZ sdJtfKCVctNZtuuqj86djDByPn80b7c8I1BTDnozdsVcMj1GReUvRL/amZg2+Vwa wVl/uEjFawOJklueLBaxD/BY+De7SQdF -----END CERTIFICATE-----Generated at Sat May 31 16:56:19 2025 by rpki-client