$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: O4ume3H8S+MqiSxruV+jghIXwTzvQLMUlSFd8VZF89U= Subject key identifier: 72:51:06:94:22:C0:6A:03:4B:0F:AB:96:88:7B:5C:58:2C:D5:82:2E Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: C1 Signing time: Fri 13 Jun 2025 04:50:02 +0000 Manifest this update: Fri 13 Jun 2025 04:50:01 +0000 Manifest next update: Fri 20 Jun 2025 04:50:01 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: UgZh6gWl8IHKzTszGVSyH3AmiJKZz2mSoHp3byrcfZ8=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Jun 13 04:50:01 2025 GMT Not After : Jun 20 04:50:01 2025 GMT Subject: CN=684badfa-96fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:dc:52:0d:e6:75:0e:83:75:0e:5d:d1:11: a2:13:87:73:01:66:3e:96:f2:ac:8f:38:8b:11:8f: 1d:64:2f:f5:c0:a7:fe:2d:ea:54:1f:3e:db:44:2c: 1e:d3:8d:90:aa:dc:37:ea:94:2b:51:05:66:8b:6f: d2:dd:66:68:d4:74:42:9d:a5:56:57:81:53:e3:31: 95:a1:bc:0b:b4:30:78:a7:9f:64:0b:46:10:73:de: f4:cd:e6:e5:b0:68:29:d5:af:bc:58:42:c8:63:5b: 87:69:c3:1b:9b:f4:09:6f:e1:11:08:fa:13:f0:1b: ce:f8:79:72:90:77:44:b6:d5:9d:83:37:45:59:c7: cc:82:35:74:f1:3d:c2:f0:41:52:bc:96:4d:08:e8: 00:62:f0:5a:20:cb:0b:ef:2c:de:aa:9a:35:41:a9: d7:83:e7:1e:a0:19:35:33:83:77:35:a9:05:6b:21: bb:3c:69:ac:c8:e1:ea:e9:8e:2c:ae:91:11:57:05: dc:0d:c1:08:ac:41:b3:e1:46:0a:0e:20:51:f8:0d: 64:93:51:b8:ba:95:4b:4b:63:7b:01:df:cb:c3:77: ca:24:63:c8:82:d2:9f:1c:e2:2d:af:73:cb:e0:37: 89:26:5f:88:b3:6e:59:1a:e5:6c:f3:1e:95:13:9e: fb:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:51:06:94:22:C0:6A:03:4B:0F:AB:96:88:7B:5C:58:2C:D5:82:2E X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:0a:10:d7:d4:c0:7a:4e:ba:6a:c1:ef:21:71:92:3f:01: d3:00:d8:fe:ad:6e:ba:4c:98:5f:cf:19:3d:e7:66:31:a6:8e: da:1e:3e:b8:13:76:45:57:e9:b0:ce:57:00:1f:15:4f:91:c7: b8:74:6b:69:1f:7b:a8:97:8a:54:1d:a6:11:dc:ae:a3:8e:3c: 2a:bb:45:d7:c9:ca:9b:b6:fc:04:f9:fb:89:e0:98:98:26:9a: 4e:ee:c6:ed:05:df:e7:5d:e3:4c:db:83:ab:3b:b8:69:0f:ba: 2b:e4:a6:d8:bc:c1:87:98:f6:58:3e:1f:85:16:37:1c:05:45: 50:32:3f:04:52:60:e4:23:12:fd:b1:5b:15:ac:a9:86:d8:83: f2:9a:c8:9b:56:d6:f5:5c:ea:5f:76:63:8c:8e:fb:a2:ae:95: b7:a0:ad:0f:87:ed:73:2f:69:6c:6d:fc:df:61:a9:ff:87:0e: 1d:20:77:7e:25:7d:58:6e:99:8c:3f:89:f9:cc:44:65:4b:70: b2:56:45:e4:aa:57:f5:68:f4:b9:65:9c:53:37:2e:0d:c3:ac: ce:a5:ab:57:a9:65:dc:d1:48:76:96:63:19:64:89:db:4e:fb: b4:97:27:ba:69:a1:d8:d9:46:ba:d1:e4:00:73:c4:a4:38:73: 02:56:fe:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwNjEzMDQ1MDAxWhcNMjUwNjIwMDQ1MDAxWjAYMRYwFAYD VQQDEw02ODRiYWRmYS05NmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA443cUg3mdQ6DdQ5d0RGiE4dzAWY+lvKsjziLEY8dZC/1wKf+LepUHz7bRCwe 042Qqtw36pQrUQVmi2/S3WZo1HRCnaVWV4FT4zGVobwLtDB4p59kC0YQc970zebl sGgp1a+8WELIY1uHacMbm/QJb+ERCPoT8BvO+HlykHdEttWdgzdFWcfMgjV08T3C 8EFSvJZNCOgAYvBaIMsL7yzeqpo1QanXg+ceoBk1M4N3NakFayG7PGmsyOHq6Y4s rpERVwXcDcEIrEGz4UYKDiBR+A1kk1G4upVLS2N7Ad/Lw3fKJGPIgtKfHOItr3PL 4DeJJl+Is25ZGuVs8x6VE577zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJRBpQi wGoDSw+rloh7XFgs1YIuMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVFwoQ19TAek66asHvIXGSPwHTANj+rW66TJhfzxk952Yxpo7aHj64 E3ZFV+mwzlcAHxVPkce4dGtpH3uol4pUHaYR3K6jjjwqu0XXycqbtvwE+fuJ4JiY JppO7sbtBd/nXeNM24OrO7hpD7or5KbYvMGHmPZYPh+FFjccBUVQMj8EUmDkIxL9 sVsVrKmG2IPymsibVtb1XOpfdmOMjvuirpW3oK0Ph+1zL2lsbfzfYan/hw4dIHd+ JX1YbpmMP4n5zERlS3CyVkXkqlf1aPS5ZZxTNy4Nw6zOpatXqWXc0Uh2lmMZZInb Tvu0lye6aaHY2Ua60eQAc8SkOHMCVv4g -----END CERTIFICATE-----Generated at Sat Jun 14 19:33:18 2025 by rpki-client