$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: hSjKdY+SQ8W7mzAony+r9P0y0zFtaE4FVSRjr9z8zfA= Subject key identifier: 1D:A0:E0:46:07:37:D7:11:36:1A:96:20:DA:F1:F6:FE:4F:DA:1C:81 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 34C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 34A4 Signing time: Fri 30 May 2025 15:21:48 +0000 Manifest this update: Fri 30 May 2025 15:21:47 +0000 Manifest next update: Fri 06 Jun 2025 15:21:47 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: RhRJzH/BALQGcHybm/8zIh9Ybi4fyiBMHiyhpyqVfFo=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13507 (0x34c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: May 30 15:21:47 2025 GMT Not After : Jun 6 15:21:47 2025 GMT Subject: CN=6839cd0c-bc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f8:6d:e0:af:bc:50:09:7a:f7:2d:94:fb:4f: a4:56:44:2e:da:1e:a7:66:26:35:bc:7d:02:49:60: 4b:26:70:aa:56:03:79:65:72:ce:ee:ad:8f:8d:e9: 33:41:2f:f6:1b:55:0c:a5:e5:c8:fa:85:39:c0:52: 6c:91:09:54:3d:1d:0e:02:e9:2a:63:17:2d:fb:e7: e1:d9:e3:b3:f7:05:2d:4d:d5:3c:21:c3:fc:82:dd: 4e:47:2e:e0:4a:d8:28:b0:b3:e9:8b:95:64:a7:7d: 4e:90:fd:2d:76:2c:24:41:c4:07:cb:8b:ac:23:d9: f8:55:32:5f:08:46:be:5a:9e:ae:bd:94:d6:16:80: 36:26:c9:06:da:b0:e1:c6:c9:1f:12:f2:c1:11:92: 47:ad:ac:05:db:ab:fb:e2:0a:53:54:09:7f:c6:8d: f5:12:8d:96:41:23:df:a8:4f:fc:c8:33:f0:bd:2e: 8d:b7:ce:a0:f2:c2:58:fc:de:e8:c6:58:aa:a5:0d: c9:48:34:95:d3:2c:00:a3:4c:78:0a:59:e8:b9:1e: 3c:08:cd:19:d0:92:91:3c:a9:77:af:e4:7f:b6:57: 94:34:2f:e0:f8:64:71:21:c8:71:19:c0:dc:b3:ba: b0:09:70:7b:7a:7f:80:79:ac:98:31:33:2d:e2:9e: 8c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:E0:46:07:37:D7:11:36:1A:96:20:DA:F1:F6:FE:4F:DA:1C:81 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fb:7f:10:9e:de:b5:9b:ed:1b:ac:09:d3:2e:fd:2b:88:b0: c7:a7:6b:17:1c:a9:34:d4:73:39:e9:83:ca:62:0f:1e:57:fd: be:0e:7c:b9:97:36:67:13:80:bf:8d:d2:df:25:c7:79:22:d6: 6a:08:42:d1:24:5b:e2:6e:34:4b:43:eb:ec:da:49:b7:b9:81: e7:98:22:44:9d:32:80:e1:2e:f2:39:0c:3a:c8:ff:fa:b3:3c: c5:b9:7c:a6:3a:50:e0:fc:d0:38:c1:2e:d7:4c:0b:b5:58:38: 40:a9:2d:87:42:63:ea:57:66:50:15:8c:90:92:8a:33:65:1a: 9a:05:ce:70:1c:c0:1e:22:6b:25:3e:38:78:af:06:dc:af:ab: c7:5e:ee:a2:2f:c5:65:0f:aa:06:79:bb:54:18:76:c8:1e:38: 76:ed:0c:9a:fc:33:33:3c:2c:4d:94:ef:0e:44:78:3e:29:75: f0:53:71:e6:07:ae:f4:56:f6:7f:cc:b3:d0:76:db:91:e3:7e: 4d:0d:cc:4f:2f:18:87:83:1d:8d:65:e5:21:b6:51:43:cf:e9: 1a:f3:78:f3:c5:42:b8:31:a3:b9:ca:bb:9b:79:5c:9a:97:49: 3b:9a:ba:f8:a0:38:cd:bb:6f:ee:00:f9:23:c1:5d:ff:11:c7: 82:33:a1:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUwNTMwMTUyMTQ3WhcNMjUwNjA2MTUyMTQ3WjAYMRYwFAYD VQQDEw02ODM5Y2QwYy1iYzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/ht4K+8UAl69y2U+0+kVkQu2h6nZiY1vH0CSWBLJnCqVgN5ZXLO7q2Pjekz QS/2G1UMpeXI+oU5wFJskQlUPR0OAukqYxct++fh2eOz9wUtTdU8IcP8gt1ORy7g StgosLPpi5Vkp31OkP0tdiwkQcQHy4usI9n4VTJfCEa+Wp6uvZTWFoA2JskG2rDh xskfEvLBEZJHrawF26v74gpTVAl/xo31Eo2WQSPfqE/8yDPwvS6Nt86g8sJY/N7o xliqpQ3JSDSV0ywAo0x4ClnouR48CM0Z0JKRPKl3r+R/tleUNC/g+GRxIchxGcDc s7qwCXB7en+AeayYMTMt4p6MfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB2g4EYH N9cRNhqWINrx9v5P2hyBMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL+38Qnt61m+0brAnTLv0riLDHp2sXHKk01HM56YPKYg8eV/2+Dny5 lzZnE4C/jdLfJcd5ItZqCELRJFvibjRLQ+vs2km3uYHnmCJEnTKA4S7yOQw6yP/6 szzFuXymOlDg/NA4wS7XTAu1WDhAqS2HQmPqV2ZQFYyQkoozZRqaBc5wHMAeImsl Pjh4rwbcr6vHXu6iL8VlD6oGebtUGHbIHjh27Qya/DMzPCxNlO8ORHg+KXXwU3Hm B670VvZ/zLPQdtuR435NDcxPLxiHgx2NZeUhtlFDz+ka83jzxUK4MaO5yrubeVya l0k7mrr4oDjNu2/uAPkjwV3/EceCM6HB -----END CERTIFICATE-----Generated at Sat May 31 16:42:00 2025 by rpki-client