$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: OeT0oSN65cLxg6RB+2HkfDn40DR/LfKXCqBtvPU7sI4= Subject key identifier: F7:AF:BC:98:EF:44:4A:A6:4E:01:D1:57:1C:CE:65:4D:D5:23:29:9E Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: E9 Signing time: Tue 17 Jun 2025 04:22:57 +0000 Manifest this update: Tue 17 Jun 2025 04:22:56 +0000 Manifest next update: Tue 24 Jun 2025 04:22:56 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: NwmfE0Re3PMECU2RvzZwQYB9oOeDOK28N+TFGJVxa98=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Jun 17 04:22:56 2025 GMT Not After : Jun 24 04:22:56 2025 GMT Subject: CN=6850eda1-cfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f6:87:ff:fd:3e:20:5b:cf:01:83:7f:60:d7: 4b:cd:ed:09:2a:e2:30:5b:aa:51:6a:56:39:bc:a5: 3c:27:fd:7f:05:86:95:e6:0a:cc:c6:30:65:82:07: 3d:65:39:44:bf:78:0f:14:9e:cc:72:d3:d1:c4:87: f7:ca:7a:59:ee:d9:43:83:0b:88:92:9e:43:e2:24: 39:a3:30:fd:2f:0f:53:08:70:8b:92:34:a0:8a:e8: 29:71:dc:30:29:d6:fd:0c:e6:59:1d:16:67:70:6f: 79:2b:5b:f4:30:a4:0f:36:3f:0a:ca:fc:12:f0:26: 94:93:4b:70:d2:8b:a6:e5:c7:74:f6:5d:92:67:58: 21:da:31:e9:70:e4:5a:db:68:e9:18:09:f7:79:21: cf:0b:aa:21:eb:cf:a8:6f:83:ef:e3:3e:fd:d7:b9: be:d8:53:6a:fa:22:f7:01:4f:1f:17:27:c3:fb:29: 05:e9:58:77:b8:94:b8:cc:83:c1:cf:bc:32:ed:c2: c4:31:2b:8d:ca:1f:20:21:e7:9e:97:2e:8e:ae:35: 57:26:3f:b2:b0:aa:c8:18:f9:9e:d4:6d:ee:b1:58: 1f:89:05:0c:67:01:d1:d4:20:a7:f4:2d:03:7d:d9: 77:1c:3a:0f:8a:13:3b:e6:3a:c2:c6:69:b4:9e:5d: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AF:BC:98:EF:44:4A:A6:4E:01:D1:57:1C:CE:65:4D:D5:23:29:9E X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:83:a6:26:aa:0f:1d:7e:71:ce:90:a9:e1:e5:3c:e4:d7:ec: f4:2e:c5:d9:7f:6d:0d:02:dd:cc:ab:74:31:2d:67:76:f4:1e: 89:4a:ed:00:35:b5:2a:fa:ec:65:e4:81:f1:d4:01:72:b3:d6: 54:9e:39:b7:1b:b6:76:70:14:75:7d:62:68:0f:35:f9:95:ac: d1:e7:91:d1:41:d6:cc:c9:f1:13:93:a1:8b:12:63:1b:91:f3: 9d:dd:8f:a0:db:8f:ad:9b:be:3a:eb:86:51:cc:a5:3d:37:8b: b7:aa:4b:6a:ec:d2:c9:7a:2e:ca:fa:60:bc:d8:64:1f:88:ed: 17:1a:e5:26:a1:7d:2d:c0:58:a2:d8:85:10:23:84:9c:d9:60: 66:88:22:1b:98:e1:7f:65:44:8f:bf:35:8e:d6:cb:dd:09:67: 21:3e:af:cd:46:ac:c9:86:f0:8a:70:f8:64:5b:5b:1d:15:9c: 83:b1:21:e5:c1:52:8a:21:ca:ae:c1:f1:76:88:e4:8b:f9:bc: 52:71:db:a1:54:d4:6e:18:c8:3b:3e:fe:05:30:3e:7d:09:41: 72:40:52:37:cc:5b:97:2d:22:70:8c:90:6b:b1:ba:c4:1c:ce: 6a:8f:b1:18:ba:34:c3:af:99:96:4b:d4:31:3e:26:ae:40:0d: 6c:0d:7b:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwNjE3MDQyMjU2WhcNMjUwNjI0MDQyMjU2WjAYMRYwFAYD VQQDEw02ODUwZWRhMS1jZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPaH//0+IFvPAYN/YNdLze0JKuIwW6pRalY5vKU8J/1/BYaV5grMxjBlggc9 ZTlEv3gPFJ7MctPRxIf3ynpZ7tlDgwuIkp5D4iQ5ozD9Lw9TCHCLkjSgiugpcdww Kdb9DOZZHRZncG95K1v0MKQPNj8KyvwS8CaUk0tw0oum5cd09l2SZ1gh2jHpcORa 22jpGAn3eSHPC6oh68+ob4Pv4z7917m+2FNq+iL3AU8fFyfD+ykF6Vh3uJS4zIPB z7wy7cLEMSuNyh8gIeeely6OrjVXJj+ysKrIGPme1G3usVgfiQUMZwHR1CCn9C0D fdl3HDoPihM75jrCxmm0nl2YDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPevvJjv REqmTgHRVxzOZU3VIymeMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzg6Ymqg8dfnHOkKnh5Tzk1+z0LsXZf20NAt3Mq3QxLWd29B6JSu0A NbUq+uxl5IHx1AFys9ZUnjm3G7Z2cBR1fWJoDzX5lazR55HRQdbMyfETk6GLEmMb kfOd3Y+g24+tm74664ZRzKU9N4u3qktq7NLJei7K+mC82GQfiO0XGuUmoX0twFii 2IUQI4Sc2WBmiCIbmOF/ZUSPvzWO1svdCWchPq/NRqzJhvCKcPhkW1sdFZyDsSHl wVKKIcquwfF2iOSL+bxScduhVNRuGMg7Pv4FMD59CUFyQFI3zFuXLSJwjJBrsbrE HM5qj7EYujTDr5mWS9QxPiauQA1sDXuY -----END CERTIFICATE-----Generated at Wed Jun 18 05:53:24 2025 by rpki-client