$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft File: rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json) Hash identifier: tzdl5iPvYfJWmnVh5DnCYH9TmnmYGPxIF/vjnNC0gwI= Subject key identifier: FA:16:3C:35:03:F6:47:08:D8:61:23:F0:7D:01:D4:B6:09:D7:5F:F2 Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 Certificate issuer: /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Certificate serial: 07B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft Manifest number: 07AB Signing time: Thu 24 Apr 2025 21:00:58 +0000 Manifest this update: Thu 24 Apr 2025 21:00:57 +0000 Manifest next update: Thu 01 May 2025 21:00:57 +0000 Files and hashes: 1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: G5EHSCGLRbsCJXZnZFdbiIysQIW6iPXPzDuNT0HYyQM=) 2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1968 (0x7b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1 Validity Not Before: Apr 24 21:00:57 2025 GMT Not After : May 1 21:00:57 2025 GMT Subject: CN=680aa68a-756e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2a:56:ad:78:f3:a7:a9:eb:72:9d:cf:a7:7d: 43:a2:31:d9:b9:9c:8a:cb:b1:b1:fa:36:32:ad:08: 71:c4:f1:d8:33:32:12:0b:02:7f:0c:2b:b7:9e:a4: b9:3e:e9:31:64:97:4d:70:df:01:6a:d4:f6:5c:ae: 36:57:6f:95:e0:df:ac:0b:df:ef:52:c0:12:44:e6: d9:79:fd:b2:29:8d:69:89:0e:5c:7f:78:83:7d:d8: 15:62:96:c1:e3:1f:3e:df:1a:af:a7:e1:3b:b5:e2: e8:c0:43:c3:e1:28:15:d3:fd:f1:d0:ce:90:94:2d: 31:d8:30:ac:0b:bf:a7:63:55:34:a0:a5:01:18:97: 6c:a5:c8:12:8d:34:2c:aa:ae:9f:17:62:5c:a0:de: 12:f0:4b:82:3b:9e:05:ca:26:c6:cd:11:39:29:dd: 82:d9:9b:ae:39:f5:00:84:0a:fb:29:c9:94:15:cd: eb:77:2f:e2:97:75:ce:5b:68:fc:86:d1:fe:6c:bc: 45:5d:97:d2:dc:d7:e3:36:72:26:9f:3f:b0:68:32: 1e:b3:d2:9e:51:89:b0:12:21:f4:d8:67:a2:0c:a9: 34:aa:27:2e:e1:a2:89:ad:10:65:06:f7:36:ce:78: 0e:67:a1:81:44:27:ad:c4:26:e9:e7:e5:0e:31:02: 4f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:16:3C:35:03:F6:47:08:D8:61:23:F0:7D:01:D4:B6:09:D7:5F:F2 X509v3 Authority Key Identifier: keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:c6:46:68:05:0d:d4:be:2a:32:3b:8c:e9:08:d7:f5:56:fa: 79:fb:92:80:11:84:ed:69:5c:e6:58:6a:9e:77:bb:2e:e6:ab: 97:6a:7a:fe:33:ca:75:a5:d3:0e:8c:11:61:dd:b1:d9:50:e5: b0:29:fe:2d:6b:71:88:31:35:5f:26:86:24:c2:1a:30:72:e9: d7:a1:8d:a2:1a:69:da:88:9e:fd:c9:a2:d9:20:ec:cc:8f:81: 9d:d5:0a:44:9a:7f:bf:ad:4b:a2:a9:fb:74:4e:fb:7e:bf:5d: 38:60:74:3a:ad:e6:04:4d:8d:d3:09:83:7a:0e:77:d8:a7:60: 74:c6:b3:e5:34:f2:f9:b7:2b:14:63:6e:29:7b:48:78:4b:0b: 33:b4:64:ab:07:2c:cd:e0:03:24:88:1f:94:bc:c4:57:d6:59: 51:b5:b9:3d:01:54:62:9a:2e:56:66:9d:73:63:16:eb:80:45: 2d:5f:67:70:02:d5:33:80:55:8c:bc:af:bc:6a:a5:6f:e9:66: 97:67:ed:12:16:88:ae:d5:43:f9:d4:60:43:1b:95:c8:7a:92: df:86:9d:7d:18:b3:f9:a3:15:aa:65:83:27:4c:3d:26:13:80: 3d:fe:31:11:79:8b:7b:b2:3b:36:f6:e6:51:a1:8b:c8:3c:44: 76:d5:0c:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz Q0I5QTg4QTEwHhcNMjUwNDI0MjEwMDU3WhcNMjUwNTAxMjEwMDU3WjAYMRYwFAYD VQQDEw02ODBhYTY4YS03NTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ypWrXjzp6nrcp3Pp31DojHZuZyKy7Gx+jYyrQhxxPHYMzISCwJ/DCu3nqS5 PukxZJdNcN8BatT2XK42V2+V4N+sC9/vUsASRObZef2yKY1piQ5cf3iDfdgVYpbB 4x8+3xqvp+E7teLowEPD4SgV0/3x0M6QlC0x2DCsC7+nY1U0oKUBGJdspcgSjTQs qq6fF2JcoN4S8EuCO54FyibGzRE5Kd2C2ZuuOfUAhAr7KcmUFc3rdy/il3XOW2j8 htH+bLxFXZfS3NfjNnImnz+waDIes9KeUYmwEiH02GeiDKk0qicu4aKJrRBlBvc2 zngOZ6GBRCetxCbp5+UOMQJPBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoWPDUD 9kcI2GEj8H0B1LYJ11/yMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5 N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTREMS83QkQyMUFGRUY5N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdf TXMzWFBQenM4RjA4dWFpS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKxkZoBQ3UvioyO4zpCNf1Vvp5+5KAEYTtaVzmWGqed7su5quXanr+ M8p1pdMOjBFh3bHZUOWwKf4ta3GIMTVfJoYkwhowcunXoY2iGmnaiJ79yaLZIOzM j4Gd1QpEmn+/rUuiqft0Tvt+v104YHQ6reYETY3TCYN6DnfYp2B0xrPlNPL5tysU Y24pe0h4SwsztGSrByzN4AMkiB+UvMRX1llRtbk9AVRimi5WZp1zYxbrgEUtX2dw AtUzgFWMvK+8aqVv6WaXZ+0SFoiu1UP51GBDG5XIepLfhp19GLP5oxWqZYMnTD0m E4A9/jEReYt7sjs29uZRoYvIPER21QzH -----END CERTIFICATE-----Generated at Sat Apr 26 13:03:16 2025 by rpki-client