$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: 1q/3znGqWhmcVcaqoW0JK2Ere1L2Lt5zsJSRc1/GMMM= Subject key identifier: B1:EC:C2:D2:79:4E:DB:23:27:CD:C8:01:8D:7B:E5:91:35:2B:50:2D Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0B81 Signing time: Fri 30 May 2025 19:13:28 +0000 Manifest this update: Fri 30 May 2025 19:13:27 +0000 Manifest next update: Fri 06 Jun 2025 19:13:27 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: 0l3FiES+6ea2Y7PWgj4ekX3TsEHgXOEr7KCP2X5lyPo=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2951 (0xb87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: May 30 19:13:27 2025 GMT Not After : Jun 6 19:13:27 2025 GMT Subject: CN=683a0358-43b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:b7:c1:76:84:61:a9:d3:81:10:ac:b3:7a: 3f:91:d1:c6:5e:4e:da:96:6e:b6:de:da:4c:8e:80: 76:b4:b6:b6:38:78:7b:48:89:90:92:38:81:04:5c: f0:23:c8:da:50:7a:af:12:0f:55:a4:81:cd:1d:38: 83:39:68:fa:30:d9:83:6a:62:0b:52:c4:04:df:56: bf:b0:42:82:74:f0:c6:74:ed:7d:6d:73:15:5b:1d: 02:58:fb:dc:73:82:33:32:14:95:52:5d:b7:fd:6b: b2:af:5a:d9:0a:ea:24:88:55:5c:45:df:4b:f0:2f: a7:9b:d8:31:49:67:d7:c1:27:92:88:b7:0a:70:5c: c9:78:9d:66:ec:9d:37:5b:ff:c5:87:eb:87:cf:a1: 6c:1b:35:76:ed:df:05:1c:a1:d7:ab:bf:19:f2:52: 42:c5:f8:58:1e:c0:fe:1c:80:59:7d:8c:4f:66:8b: 28:2e:01:4e:86:ee:fb:50:aa:70:a8:03:df:3c:c2: 1e:85:28:9a:3a:c2:81:cb:1f:12:82:80:97:5e:ad: 38:76:5d:5b:06:01:0b:80:2e:d1:4d:3e:73:f3:24: ae:e5:01:61:1b:1e:f9:36:ca:a8:df:cf:94:d8:10: 6a:82:10:8a:2b:37:ee:20:21:7a:96:2a:d1:f8:9b: ea:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EC:C2:D2:79:4E:DB:23:27:CD:C8:01:8D:7B:E5:91:35:2B:50:2D X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:ca:be:ab:54:f9:68:a2:41:12:8a:38:cd:b2:ff:e8:00:60: 51:9e:54:f6:90:56:18:ee:60:37:ce:a5:db:79:1e:62:59:a5: e7:90:d6:0c:da:1c:99:d4:25:32:b6:43:1f:b0:93:ff:4d:75: 6c:5e:c0:30:97:a5:4b:c3:57:9f:ee:13:a5:c8:ee:78:d7:f6: 5e:bb:b2:80:b5:ae:cd:78:1d:e4:65:df:ed:ba:1a:ca:61:c5: b1:eb:78:db:93:3b:d5:65:c2:88:e3:5b:c9:16:cb:44:b9:a1: 15:0f:ff:66:6a:df:53:02:19:9f:40:20:64:c9:61:b8:c8:a4: 06:d2:19:34:bb:30:ab:db:16:74:6d:d2:30:1c:10:81:10:d8: ab:6d:08:c5:fc:cf:7b:8e:ae:5d:98:e8:aa:ab:89:78:20:e4: b6:f4:82:1d:1b:2f:c6:76:61:e4:a8:f7:fb:39:e8:a4:a1:4e: ac:1d:65:8c:08:82:92:1a:17:ee:11:16:e7:66:bd:3e:81:29: cf:c6:55:38:77:43:95:fa:84:6c:43:49:7a:3e:cb:71:7e:3d: 01:b5:71:d8:2f:bd:68:53:73:42:c1:8c:f3:53:65:2c:74:72: 17:d8:4b:e3:50:9b:3b:b6:b5:4f:ee:79:51:ae:50:91:1b:74: e5:3a:aa:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwNTMwMTkxMzI3WhcNMjUwNjA2MTkxMzI3WjAYMRYwFAYD VQQDEw02ODNhMDM1OC00M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18W3wXaEYanTgRCss3o/kdHGXk7alm623tpMjoB2tLa2OHh7SImQkjiBBFzw I8jaUHqvEg9VpIHNHTiDOWj6MNmDamILUsQE31a/sEKCdPDGdO19bXMVWx0CWPvc c4IzMhSVUl23/Wuyr1rZCuokiFVcRd9L8C+nm9gxSWfXwSeSiLcKcFzJeJ1m7J03 W//Fh+uHz6FsGzV27d8FHKHXq78Z8lJCxfhYHsD+HIBZfYxPZosoLgFOhu77UKpw qAPfPMIehSiaOsKByx8SgoCXXq04dl1bBgELgC7RTT5z8ySu5QFhGx75Nsqo38+U 2BBqghCKKzfuICF6lirR+JvqPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHswtJ5 TtsjJ83IAY175ZE1K1AtMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGyr6rVPlookESijjNsv/oAGBRnlT2kFYY7mA3zqXbeR5iWaXnkNYM 2hyZ1CUytkMfsJP/TXVsXsAwl6VLw1ef7hOlyO541/Zeu7KAta7NeB3kZd/tuhrK YcWx63jbkzvVZcKI41vJFstEuaEVD/9mat9TAhmfQCBkyWG4yKQG0hk0uzCr2xZ0 bdIwHBCBENirbQjF/M97jq5dmOiqq4l4IOS29IIdGy/GdmHkqPf7OeikoU6sHWWM CIKSGhfuERbnZr0+gSnPxlU4d0OV+oRsQ0l6Pstxfj0BtXHYL71oU3NCwYzzU2Us dHIX2EvjUJs7trVP7nlRrlCRG3TlOqp6 -----END CERTIFICATE-----Generated at Sat May 31 15:02:52 2025 by rpki-client