$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: pCfGjGTvGQJwJmTSaJcj2hrzOyYz9E6/EUn70JjDmpw= Subject key identifier: 43:AC:9A:40:73:DC:D9:3F:5F:CE:FE:13:7D:B4:A3:50:B7:F6:E7:79 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 01C0 Signing time: Fri 25 Apr 2025 02:15:26 +0000 Manifest this update: Fri 25 Apr 2025 02:15:26 +0000 Manifest next update: Fri 02 May 2025 02:15:26 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: gNLU4Hf9ZwBVwWMgxeql1zBRmMk+CKFmhMpiqoejviU=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Apr 25 02:15:26 2025 GMT Not After : May 2 02:15:26 2025 GMT Subject: CN=680af03e-dea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f6:f1:d4:40:bc:5d:4a:08:75:74:42:46:39: c7:bc:f4:b7:dc:91:2f:6c:34:eb:97:cf:95:27:45: 67:bf:80:3d:61:d5:87:8c:c2:c3:9a:43:8b:0e:2f: 6f:d1:55:ec:f2:69:45:29:c4:08:b3:2f:81:e4:bd: 1a:61:9a:fb:ca:c2:35:e3:78:6b:24:e1:d1:bf:2c: 1b:94:55:26:5c:69:1c:af:e4:9e:7c:46:20:ee:1f: ea:e3:bb:a6:24:a2:95:d3:6a:dd:9d:57:c1:50:f9: da:4e:3f:c9:54:4f:8f:3e:06:07:7d:9d:8d:05:99: 6c:45:bd:39:f1:00:46:7d:15:d1:bb:54:08:10:19: 32:da:38:d3:11:02:82:cc:5d:e3:af:c5:49:13:79: 97:b2:dc:e4:dd:1d:f4:09:93:53:ab:d3:e0:d8:5f: fe:31:2e:fb:29:db:cd:ff:97:42:59:11:72:e9:8f: dc:3f:06:0f:a1:aa:b0:3a:68:48:88:6d:f1:6b:ce: 55:7a:a0:c3:14:bb:28:7d:16:ee:94:a5:ca:4f:8e: 8f:ac:c4:7a:18:5f:e8:5b:e4:eb:12:9d:c2:0f:4d: ab:ff:76:c2:81:0e:f3:5c:c2:44:52:87:6a:a4:49: 49:58:89:1c:b8:c0:f7:3a:de:12:15:6e:37:fc:86: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AC:9A:40:73:DC:D9:3F:5F:CE:FE:13:7D:B4:A3:50:B7:F6:E7:79 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:bd:15:69:7d:40:b1:12:d6:44:5a:2e:72:1d:f8:31:4d:76: 1f:85:09:ff:96:45:d6:d4:29:84:1e:f7:fe:61:9b:54:00:1b: 32:a3:78:6d:83:dd:fe:3b:76:a6:95:93:a4:3f:23:2f:d2:d3: 61:2f:b9:f0:29:a8:a1:0f:7d:61:d3:97:47:c0:ae:8b:de:df: 0d:2a:e0:31:38:bd:a3:a7:8e:33:d5:c8:40:bb:49:de:3c:0e: 3f:ba:a3:b8:37:ee:10:6f:ca:ac:da:5c:06:de:f7:bf:4d:2f: 5c:f2:1d:3d:e4:05:f7:f9:f7:bf:ce:11:27:ad:66:20:95:46: ed:fe:da:28:5b:b0:2b:8f:30:48:13:65:76:a9:e0:b4:79:94: 23:54:85:98:a6:3c:fd:5b:44:58:85:68:05:fa:8c:7a:19:fe: 47:ad:60:ac:6f:b3:62:5b:a6:40:6d:24:e8:92:94:a8:5f:f4: 19:ba:fd:1c:03:c5:c5:04:0f:cb:a4:d5:fb:20:7e:a0:16:d2: 88:f4:2d:dd:52:08:5b:fd:3b:db:aa:00:b6:12:e2:6a:1a:3a: 7c:80:fb:75:06:e9:3c:45:38:ef:04:cf:ec:4b:91:34:9e:e4: 36:c6:6a:f7:57:1b:1c:2f:b3:9f:5e:c4:2f:f9:8f:3d:73:5a: 05:15:61:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUwNDI1MDIxNTI2WhcNMjUwNTAyMDIxNTI2WjAYMRYwFAYD VQQDEw02ODBhZjAzZS1kZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPbx1EC8XUoIdXRCRjnHvPS33JEvbDTrl8+VJ0Vnv4A9YdWHjMLDmkOLDi9v 0VXs8mlFKcQIsy+B5L0aYZr7ysI143hrJOHRvywblFUmXGkcr+SefEYg7h/q47um JKKV02rdnVfBUPnaTj/JVE+PPgYHfZ2NBZlsRb058QBGfRXRu1QIEBky2jjTEQKC zF3jr8VJE3mXstzk3R30CZNTq9Pg2F/+MS77KdvN/5dCWRFy6Y/cPwYPoaqwOmhI iG3xa85VeqDDFLsofRbulKXKT46PrMR6GF/oW+TrEp3CD02r/3bCgQ7zXMJEUodq pElJWIkcuMD3Ot4SFW43/IaRCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOsmkBz 3Nk/X87+E320o1C39ud5MB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWvRVpfUCxEtZEWi5yHfgxTXYfhQn/lkXW1CmEHvf+YZtUABsyo3ht g93+O3amlZOkPyMv0tNhL7nwKaihD31h05dHwK6L3t8NKuAxOL2jp44z1chAu0ne PA4/uqO4N+4Qb8qs2lwG3ve/TS9c8h095AX3+fe/zhEnrWYglUbt/tooW7ArjzBI E2V2qeC0eZQjVIWYpjz9W0RYhWgF+ox6Gf5HrWCsb7NiW6ZAbSTokpSoX/QZuv0c A8XFBA/LpNX7IH6gFtKI9C3dUghb/TvbqgC2EuJqGjp8gPt1Buk8RTjvBM/sS5E0 nuQ2xmr3VxscL7OfXsQv+Y89c1oFFWEe -----END CERTIFICATE-----Generated at Sat Apr 26 17:02:39 2025 by rpki-client