$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft File: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft (raw, json) Hash identifier: TRpwBngnZN2r9ABcMVg66aaS9WuLhL6OKPe0dElDgrc= Subject key identifier: B9:61:C5:E9:A1:14:27:1A:75:36:53:39:18:D9:B3:9D:F0:FE:AF:56 Authority key identifier: 13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 Certificate issuer: /CN=A91FFEDB/serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft Manifest number: 01E7 Signing time: Sat 31 May 2025 02:21:25 +0000 Manifest this update: Sat 31 May 2025 02:21:25 +0000 Manifest next update: Sat 07 Jun 2025 02:21:25 +0000 Files and hashes: 1: E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl (hash: LG7uzDL1aY9kltchpgZRWSBZAhoXm0ZhO+IgZErcaKA=) 2: 26BE1334558F11EDB3A5ED4FC4F9AE02.roa (hash: SUpV5MPTH/BMBi71c7spbVUHkBTzCZVpxBmfHqDrVmM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFEDB, serialNumber=13B27FD46248F4A733D924651C940CB7F1A30609 Validity Not Before: May 31 02:21:25 2025 GMT Not After : Jun 7 02:21:25 2025 GMT Subject: CN=683a67a5-0ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:ce:2b:36:ea:ec:02:61:b4:77:cf:3b:7b: 10:97:f2:a8:6f:26:01:f9:b8:66:cc:b3:e7:ca:7c: 9c:f2:8f:24:52:67:60:d7:b8:c3:48:7e:0e:4f:b0: 67:6f:2d:8e:a8:9a:b1:f3:96:99:3d:4b:55:00:a9: 14:71:2e:81:7a:df:76:55:8d:57:04:d0:ae:f1:17: 50:8b:98:63:9a:29:67:af:d7:d5:37:ea:a2:95:de: 5e:21:30:8f:25:1b:76:22:b4:df:bd:7c:9a:b4:e7: df:b5:06:24:04:cc:ff:dd:84:bf:8b:0f:2a:02:57: 19:86:30:5b:01:f0:15:8e:8f:bc:c5:a4:05:22:a6: bd:52:20:d5:00:16:31:dd:da:0b:bb:fe:5e:dc:96: bd:6d:27:c1:8e:a1:b7:46:36:45:e9:33:37:d6:f2: 47:ee:0f:fd:63:70:3e:be:8f:15:0b:01:38:39:30: 2d:33:6c:64:c5:32:67:98:c1:7f:e7:d9:0b:35:50: ed:26:2c:7b:d7:33:a0:56:d8:4e:1b:43:af:5a:93: 9f:dc:8c:35:b0:2b:a9:53:c5:58:65:b0:16:e0:9c: 50:ee:e2:fb:c3:ab:39:46:0b:0c:ca:c5:25:f1:f5: f2:41:80:e9:f4:40:eb:80:72:46:5b:f3:ef:11:75: e9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:61:C5:E9:A1:14:27:1A:75:36:53:39:18:D9:B3:9D:F0:FE:AF:56 X509v3 Authority Key Identifier: keyid:13:B2:7F:D4:62:48:F4:A7:33:D9:24:65:1C:94:0C:B7:F1:A3:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFEDB/3EF7E9BC550211ED964B7A4AC4F9AE02/E7J_1GJI9Kcz2SRlHJQMt_GjBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7e:e5:d7:3a:20:74:fd:12:fe:78:43:22:38:3e:22:67:dd: 10:2b:d1:e5:02:8f:32:a2:61:4f:ad:9a:da:93:2b:c0:97:af: 14:2b:78:37:24:e9:25:cf:7b:b6:5e:f3:7e:58:00:ca:d8:87: e4:57:50:be:b2:a7:08:53:71:27:62:1e:dd:f0:17:8b:42:4c: a8:27:43:67:7f:ac:cd:2d:39:a3:54:5f:ae:de:32:94:98:db: 54:b3:37:63:fd:78:0e:6b:90:01:f9:27:e5:4e:25:71:f4:fd: 48:17:c1:00:9f:b4:0d:72:9b:82:4d:6d:d2:82:71:fd:88:56: 0a:43:63:d1:6a:a6:6b:65:08:26:20:1d:13:83:45:81:1a:d3: 4f:c8:69:e3:22:11:d1:13:5c:a2:08:a3:28:d1:a8:bc:00:26: 41:55:05:50:a5:8f:0b:50:60:8d:d3:6c:d8:95:84:7b:9c:1f: 34:3f:cb:b1:cb:72:c5:52:6c:ea:ea:7f:2d:60:7c:92:c2:0e: 55:e3:18:05:75:e3:c2:97:a8:14:ff:b6:58:2e:a9:e7:4d:81: d9:75:17:71:32:07:b9:b1:96:cd:02:12:5c:fe:ee:38:1a:8c: 9f:2f:69:fb:fe:11:4b:67:52:4c:ea:b3:c8:c2:80:7f:1d:c5: 00:50:be:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZFREIxMTAvBgNVBAUTKDEzQjI3RkQ0NjI0OEY0QTczM0Q5MjQ2NTFDOTQwQ0I3 RjFBMzA2MDkwHhcNMjUwNTMxMDIyMTI1WhcNMjUwNjA3MDIyMTI1WjAYMRYwFAYD VQQDEw02ODNhNjdhNS0wZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rHOKzbq7AJhtHfPO3sQl/KobyYB+bhmzLPnynyc8o8kUmdg17jDSH4OT7Bn by2OqJqx85aZPUtVAKkUcS6Bet92VY1XBNCu8RdQi5hjmilnr9fVN+qild5eITCP JRt2IrTfvXyatOfftQYkBMz/3YS/iw8qAlcZhjBbAfAVjo+8xaQFIqa9UiDVABYx 3doLu/5e3Ja9bSfBjqG3RjZF6TM31vJH7g/9Y3A+vo8VCwE4OTAtM2xkxTJnmMF/ 59kLNVDtJix71zOgVthOG0OvWpOf3Iw1sCupU8VYZbAW4JxQ7uL7w6s5RgsMysUl 8fXyQYDp9EDrgHJGW/PvEXXpUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlhxemh FCcadTZTORjZs53w/q9WMB8GA1UdIwQYMBaAFBOyf9RiSPSnM9kkZRyUDLfxowYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkVEQi8zRUY3RTlCQzU1 MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlLY3oyU1JsSEpRTXRfR2pC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U3Sl8xR0pJOUtjejJTUmxISlFNdF9HakJnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkVEQi8zRUY3RTlCQzU1MDIxMUVEOTY0QjdBNEFDNEY5QUUwMi9FN0pfMUdKSTlL Y3oyU1JsSEpRTXRfR2pCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9fuXXOiB0/RL+eEMiOD4iZ90QK9HlAo8yomFPrZrakyvAl68UK3g3 JOklz3u2XvN+WADK2IfkV1C+sqcIU3EnYh7d8BeLQkyoJ0Nnf6zNLTmjVF+u3jKU mNtUszdj/XgOa5AB+SflTiVx9P1IF8EAn7QNcpuCTW3SgnH9iFYKQ2PRaqZrZQgm IB0Tg0WBGtNPyGnjIhHRE1yiCKMo0ai8ACZBVQVQpY8LUGCN02zYlYR7nB80P8ux y3LFUmzq6n8tYHySwg5V4xgFdePCl6gU/7ZYLqnnTYHZdRdxMge5sZbNAhJc/u44 GoyfL2n7/hFLZ1JM6rPIwoB/HcUAUL5M -----END CERTIFICATE-----Generated at Sat May 31 17:11:25 2025 by rpki-client