$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft File: _2p8LLPdLXe95os2uoNseVip1No.mft (raw, json) Hash identifier: 7q0SIsSLhI7LieVT3g3IZhnpSU11QAChTFDx8cAqKdA= Subject key identifier: A1:19:B9:E3:5D:03:61:30:33:AF:2D:C7:B1:AA:0C:A2:53:60:D1:2D Authority key identifier: FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA Certificate issuer: /CN=A91F7506/serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft Manifest number: 01A7 Signing time: Sat 31 May 2025 02:57:29 +0000 Manifest this update: Sat 31 May 2025 02:57:28 +0000 Manifest next update: Sat 07 Jun 2025 02:57:28 +0000 Files and hashes: 1: _2p8LLPdLXe95os2uoNseVip1No.crl (hash: N8si/J8mHMRM+V+NBwhOsr8kUbC+Pd1GFotWJb0ChDQ=) 2: 6903848C20A911EEBEC77485C4F9AE02.roa (hash: oeA5QwLSLGhzBCJJCLR/tH3NWML3OhbjDPXjELI4Bqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7506, serialNumber=FF6A7C2CB3DD2D77BDE68B36BA836C7958A9D4DA Validity Not Before: May 31 02:57:28 2025 GMT Not After : Jun 7 02:57:28 2025 GMT Subject: CN=683a7018-7206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:f6:7f:5e:84:cd:92:d0:de:75:1c:56:7f: 76:0f:97:0e:43:d0:3a:1c:5c:7d:5c:0b:c6:78:d3: 6c:04:58:a1:77:04:0e:40:b6:e4:a6:73:be:d7:5b: 9d:d4:f8:f4:20:69:f6:7f:8a:b9:ca:69:10:98:0e: 6a:bd:6e:fc:a6:cd:6f:8d:64:6b:19:7a:f2:88:fe: 06:ea:4f:48:b9:f2:e0:d0:97:51:59:4a:ca:72:d8: cd:38:ac:ca:70:8f:4e:8c:cd:78:3c:e1:85:a7:ab: ab:b1:aa:a4:96:5f:ad:c3:b5:0a:e0:72:d3:48:57: 71:e2:86:dd:9d:ac:b0:1b:59:df:b3:d3:e6:c3:35: 93:3d:37:68:c0:a7:b0:bd:76:92:15:46:2d:1a:d7: 1c:93:fa:72:0c:f2:30:5d:e3:d7:25:d2:46:d3:92: 0f:b4:05:b2:df:78:1b:d5:29:85:48:2c:63:bd:64: af:d0:20:14:69:59:af:0c:77:c1:13:07:3b:00:04: 62:78:a5:9a:9f:d4:a8:af:dd:c4:61:6e:e6:e8:2b: 56:85:b4:92:d8:49:ea:1a:3b:f7:4c:64:15:d2:aa: 8e:c7:96:e8:1e:c8:7a:bb:11:3a:0f:88:fc:8f:f8: b2:42:26:aa:2c:6d:02:83:d2:8c:7c:ad:ca:b5:67: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:19:B9:E3:5D:03:61:30:33:AF:2D:C7:B1:AA:0C:A2:53:60:D1:2D X509v3 Authority Key Identifier: keyid:FF:6A:7C:2C:B3:DD:2D:77:BD:E6:8B:36:BA:83:6C:79:58:A9:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2p8LLPdLXe95os2uoNseVip1No.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7506/95542662B68311ED8A185C1DC4F9AE02/_2p8LLPdLXe95os2uoNseVip1No.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:23:4d:b4:e6:1c:a9:e7:77:f7:27:1e:46:e9:4b:43:bd:73: 13:f9:b1:35:ba:9d:66:b4:03:e9:92:2f:f7:4d:c6:7e:6a:03: 3c:a6:06:b7:cb:99:dc:63:96:f9:eb:65:18:2f:10:b1:12:ce: c6:35:45:0e:25:0d:85:22:93:4a:df:49:88:91:a2:df:ab:77: 3a:6b:7d:23:21:ef:1b:3b:ef:d3:38:7e:ba:3e:be:8d:df:5d: 48:76:3f:66:63:e5:8d:7f:e6:9b:65:96:9d:ed:7d:a7:e0:8a: 58:00:0b:36:72:2b:39:02:ec:bd:03:ea:f5:16:fc:21:2b:d0: 45:b2:0d:be:f0:02:af:21:a3:d4:cf:29:9b:c5:e0:6b:d5:0c: 36:95:78:dc:8d:ba:1b:f2:1d:2a:6b:54:f1:9c:a4:eb:62:35: d0:04:e2:26:cb:69:23:3f:df:4f:f7:2d:46:29:26:3c:bf:1b: df:88:72:1a:20:4a:0c:28:74:25:cf:bb:93:9c:7d:cc:ff:80: c6:d4:fb:b2:69:85:de:6c:0b:2c:94:e5:a5:b3:bd:9a:a7:af: 61:9c:2d:d7:e3:a7:0b:cd:e4:fe:d3:d0:cc:63:04:ac:a3:1f: 03:1f:54:ee:a5:55:54:7e:e3:08:3a:a2:d0:8d:b5:73:87:53: 22:1e:cf:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1MDYxMTAvBgNVBAUTKEZGNkE3QzJDQjNERDJENzdCREU2OEIzNkJBODM2Qzc5 NThBOUQ0REEwHhcNMjUwNTMxMDI1NzI4WhcNMjUwNjA3MDI1NzI4WjAYMRYwFAYD VQQDEw02ODNhNzAxOC03MjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1632f16EzZLQ3nUcVn92D5cOQ9A6HFx9XAvGeNNsBFihdwQOQLbkpnO+11ud 1Pj0IGn2f4q5ymkQmA5qvW78ps1vjWRrGXryiP4G6k9IufLg0JdRWUrKctjNOKzK cI9OjM14POGFp6ursaqkll+tw7UK4HLTSFdx4obdnaywG1nfs9PmwzWTPTdowKew vXaSFUYtGtcck/pyDPIwXePXJdJG05IPtAWy33gb1SmFSCxjvWSv0CAUaVmvDHfB Ewc7AARieKWan9Sor93EYW7m6CtWhbSS2EnqGjv3TGQV0qqOx5boHsh6uxE6D4j8 j/iyQiaqLG0Cg9KMfK3KtWejvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKEZueNd A2EwM68tx7GqDKJTYNEtMB8GA1UdIwQYMBaAFP9qfCyz3S13veaLNrqDbHlYqdTa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzUwNi85NTU0MjY2MkI2 ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExYZTk1b3MydW9Oc2VWaXAx Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18ycDhMTFBkTFhlOTVvczJ1b05zZVZpcDFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzUwNi85NTU0MjY2MkI2ODMxMUVEOEExODVDMURDNEY5QUUwMi9fMnA4TExQZExY ZTk1b3MydW9Oc2VWaXAxTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDRI0205hyp53f3Jx5G6UtDvXMT+bE1up1mtAPpki/3TcZ+agM8pga3 y5ncY5b562UYLxCxEs7GNUUOJQ2FIpNK30mIkaLfq3c6a30jIe8bO+/TOH66Pr6N 311Idj9mY+WNf+abZZad7X2n4IpYAAs2cis5Auy9A+r1FvwhK9BFsg2+8AKvIaPU zymbxeBr1Qw2lXjcjbob8h0qa1TxnKTrYjXQBOImy2kjP99P9y1GKSY8vxvfiHIa IEoMKHQlz7uTnH3M/4DG1PuyaYXebAsslOWls72ap69hnC3X46cLzeT+09DMYwSs ox8DH1TupVVUfuMIOqLQjbVzh1MiHs+O -----END CERTIFICATE-----Generated at Sat May 31 16:38:05 2025 by rpki-client