$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: GwAOFE74fITx+KC+qiGZ0OIAlcng+Cng4kUGKrvfDgo= Subject key identifier: B3:FE:D7:E6:52:F5:59:47:27:9C:3E:A1:23:76:74:AE:FF:27:FE:8A Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: CF Signing time: Fri 25 Apr 2025 04:44:40 +0000 Manifest this update: Fri 25 Apr 2025 04:44:40 +0000 Manifest next update: Fri 02 May 2025 04:44:40 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: HnxQlRcLmuxAz2x/L118ezt6a78OX8HOtESUxlMcFws=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Apr 25 04:44:40 2025 GMT Not After : May 2 04:44:40 2025 GMT Subject: CN=680b1338-4581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:d6:23:01:72:0e:47:6d:61:d1:a6:45:c2: c0:fb:45:65:b5:bb:c7:ce:87:62:fb:53:28:ba:dc: 1a:5b:08:3e:73:6a:21:bb:6a:5e:65:5e:af:dd:8b: 09:98:b5:ea:79:74:41:20:c5:9a:d0:3a:e4:4b:30: c6:24:72:74:d9:58:a1:5f:5a:2a:19:0d:c3:44:a5: e6:7a:1f:d1:be:05:59:b4:1a:d8:73:f0:73:6e:85: 37:ce:63:b3:c0:57:ca:69:1d:48:d1:d0:10:3d:00: 47:f8:a8:20:f1:3c:41:ec:55:c3:5c:ce:9c:a4:83: 6b:ce:39:0b:10:26:bb:3a:69:f6:4a:5a:98:b6:21: d4:90:29:51:01:1b:28:f3:8c:6c:e0:02:30:e3:bf: e2:d2:37:0c:d6:47:c6:16:d0:6f:4d:a7:96:ba:97: 9e:03:d7:8e:35:71:7d:09:b5:ee:8e:ff:ab:a5:f4: 1b:aa:eb:7a:dc:2c:12:e5:c0:8e:c4:26:69:ae:86: ac:71:9f:88:d8:b7:a4:b8:dd:53:16:de:dc:a0:7f: 3c:c8:62:bc:d0:66:68:40:34:ca:5e:6d:70:b9:5c: f1:4d:36:0d:02:98:95:f7:e9:3e:b8:bd:a2:50:7a: a3:d5:8d:e2:a0:d1:9c:82:78:c5:ab:91:c0:4b:a2: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:D7:E6:52:F5:59:47:27:9C:3E:A1:23:76:74:AE:FF:27:FE:8A X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:a3:a7:57:2a:7d:0b:6f:94:8e:1d:fd:b9:4b:66:40:8c:8a: 1d:1d:5f:55:cb:72:b1:d4:60:b5:e7:f4:bf:a4:06:69:25:e5: 60:3f:b4:ed:52:15:e0:45:13:0a:13:01:47:f3:36:cf:16:de: f9:59:a6:fc:22:af:b8:ca:07:77:48:f9:9a:c3:ff:fd:c4:a0: 00:4f:3f:51:24:25:82:96:7c:ff:0f:3a:6c:42:48:99:33:29: 77:bf:88:f7:88:6a:ba:8e:38:31:a7:df:7b:91:30:a8:3e:1c: e5:21:55:8f:9e:22:94:cb:39:5f:fb:03:0e:5b:30:83:84:1e: 95:e9:67:16:b0:55:2c:73:a1:a9:6d:2b:46:6d:0b:72:9d:2d: 93:9d:40:ed:49:76:df:6d:9c:c0:10:e5:69:bc:2c:bf:3d:3d: a0:3d:51:24:b7:be:87:87:6e:d2:69:b5:22:82:a3:aa:b8:1c: 7e:72:b4:51:2f:c0:b0:68:71:0f:2d:34:5b:77:0a:e4:aa:d9: 5e:04:84:de:d9:d9:2a:0a:de:16:41:4c:bf:77:35:cc:8b:d1: dd:cf:e7:04:e9:bd:db:f9:70:2d:15:db:a1:70:72:30:54:ec: 52:79:79:e0:de:3d:35:eb:59:89:19:18:ae:b7:57:6f:e2:34: 3c:c6:5b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwNDI1MDQ0NDQwWhcNMjUwNTAyMDQ0NDQwWjAYMRYwFAYD VQQDEw02ODBiMTMzOC00NTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnfWIwFyDkdtYdGmRcLA+0VltbvHzodi+1MoutwaWwg+c2ohu2peZV6v3YsJ mLXqeXRBIMWa0DrkSzDGJHJ02VihX1oqGQ3DRKXmeh/RvgVZtBrYc/BzboU3zmOz wFfKaR1I0dAQPQBH+Kgg8TxB7FXDXM6cpINrzjkLECa7Omn2SlqYtiHUkClRARso 84xs4AIw47/i0jcM1kfGFtBvTaeWupeeA9eONXF9CbXujv+rpfQbqut63CwS5cCO xCZproascZ+I2LekuN1TFt7coH88yGK80GZoQDTKXm1wuVzxTTYNApiV9+k+uL2i UHqj1Y3ioNGcgnjFq5HAS6KZfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLP+1+ZS 9VlHJ5w+oSN2dK7/J/6KMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVo6dXKn0Lb5SOHf25S2ZAjIodHV9Vy3Kx1GC15/S/pAZpJeVgP7Tt UhXgRRMKEwFH8zbPFt75Wab8Iq+4ygd3SPmaw//9xKAATz9RJCWClnz/DzpsQkiZ Myl3v4j3iGq6jjgxp997kTCoPhzlIVWPniKUyzlf+wMOWzCDhB6V6WcWsFUsc6Gp bStGbQtynS2TnUDtSXbfbZzAEOVpvCy/PT2gPVEkt76Hh27SabUigqOquBx+crRR L8CwaHEPLTRbdwrkqtleBITe2dkqCt4WQUy/dzXMi9Hdz+cE6b3b+XAtFduhcHIw VOxSeXng3j0161mJGRiut1dv4jQ8xluI -----END CERTIFICATE-----Generated at Sat Apr 26 04:23:59 2025 by rpki-client