$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: XA7aw0VVf4Yq0/g/F8BTPZQahxwEZ5tzan6oPeYqrUA= Subject key identifier: AA:BC:D8:1E:C2:12:C7:2B:67:E1:84:AE:53:35:75:3E:3B:58:14:68 Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: D8 Signing time: Fri 13 Jun 2025 04:33:21 +0000 Manifest this update: Fri 13 Jun 2025 04:33:21 +0000 Manifest next update: Fri 20 Jun 2025 04:33:21 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: GIcB5m/PMcz45NHq6AphBH1QImoUwELOQctRdgjUfbY=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 219 (0xdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Jun 13 04:33:21 2025 GMT Not After : Jun 20 04:33:21 2025 GMT Subject: CN=684baa11-b5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f0:4a:53:aa:c1:7f:bc:98:29:7f:d3:c0:32: c7:78:4c:f7:60:39:d2:ae:3c:3f:6f:03:ac:c0:ba: 83:4f:15:5a:c2:6c:7d:a7:a8:56:2d:cb:67:1a:2a: 2e:ce:59:d8:b0:7d:da:be:76:76:68:b3:c6:95:c6: b3:31:5d:e4:37:8b:46:3c:af:99:22:ac:44:44:02: 37:1a:e1:15:ea:eb:9d:cb:5e:1c:a5:91:2e:e4:84: b4:10:7b:ef:91:16:db:9e:b5:f0:32:f9:dd:e1:b6: 1a:d5:c9:76:78:d7:0a:57:7e:d8:4e:bf:38:03:c4: c6:13:bf:cf:dd:b6:96:bd:e2:31:ee:df:01:cd:1e: 23:66:22:7a:ce:e0:ff:b4:14:4c:1f:e2:84:64:80: 9c:ab:46:38:24:0a:ad:a7:3b:5a:69:ef:0e:04:62: 3f:59:5a:51:db:bf:71:82:9f:b0:33:d9:ab:46:52: 4b:40:52:a1:d1:39:82:03:28:19:b6:ae:aa:8c:76: d4:8a:c4:6d:e5:39:a8:d7:2a:94:91:ee:64:37:65: 2f:00:4b:78:2d:d9:85:af:93:d0:22:f2:d2:1f:ab: 0e:c7:d3:0d:e3:4a:de:b4:bd:c0:93:31:94:12:08: 10:30:46:8c:40:9b:5a:63:d2:a8:9c:ed:9c:f8:02: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:D8:1E:C2:12:C7:2B:67:E1:84:AE:53:35:75:3E:3B:58:14:68 X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:33:79:7f:1c:c9:86:33:c4:18:6a:43:f7:a9:12:67:94:df: 7c:a3:5f:bd:cc:db:4f:e6:2f:88:2b:b8:c4:e9:73:9b:85:0d: 65:ff:e8:1a:d3:63:6e:93:62:0b:a2:2f:9e:64:51:21:07:03: 6a:d5:f1:d7:f6:25:00:9e:8c:3e:19:57:45:9c:60:aa:08:f3: 78:6c:72:db:0f:9c:b5:ee:b7:5e:c7:c2:82:d9:36:e2:cf:81: f7:17:a4:d7:1f:73:41:8f:57:62:36:c9:23:f7:78:93:55:86: 84:d6:49:09:1c:5f:3a:af:7c:a7:ba:77:df:39:9e:ce:ce:a3: 66:12:2b:88:16:ef:b5:65:8e:6a:b6:ed:93:5c:c7:25:4a:ae: 24:f8:ad:e3:45:3b:e0:59:c8:9a:af:2f:53:35:c2:a2:6a:64: be:30:f5:00:7f:05:e2:d7:8a:4d:0d:d5:16:07:b9:61:96:73: 8f:26:07:ce:d6:ae:c5:68:b4:b0:fb:a0:7f:a6:1d:2e:4f:66: 4b:94:15:30:c2:3d:18:d7:b8:93:e1:46:be:06:b5:aa:ef:18: 40:ef:40:61:40:c7:b0:e6:73:7e:87:5a:d9:fe:19:c3:77:ee: a9:6c:71:65:10:1b:a6:95:7d:e6:ce:ff:a9:3a:40:10:16:71: bd:28:d7:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjUwNjEzMDQzMzIxWhcNMjUwNjIwMDQzMzIxWjAYMRYwFAYD VQQDEw02ODRiYWExMS1iNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvBKU6rBf7yYKX/TwDLHeEz3YDnSrjw/bwOswLqDTxVawmx9p6hWLctnGiou zlnYsH3avnZ2aLPGlcazMV3kN4tGPK+ZIqxERAI3GuEV6uudy14cpZEu5IS0EHvv kRbbnrXwMvnd4bYa1cl2eNcKV37YTr84A8TGE7/P3baWveIx7t8BzR4jZiJ6zuD/ tBRMH+KEZICcq0Y4JAqtpztaae8OBGI/WVpR279xgp+wM9mrRlJLQFKh0TmCAygZ tq6qjHbUisRt5Tmo1yqUke5kN2UvAEt4LdmFr5PQIvLSH6sOx9MN40retL3AkzGU EggQMEaMQJtaY9KonO2c+AL0/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKq82B7C EscrZ+GErlM1dT47WBRoMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzM3l/HMmGM8QYakP3qRJnlN98o1+9zNtP5i+IK7jE6XObhQ1l/+ga 02Nuk2ILoi+eZFEhBwNq1fHX9iUAnow+GVdFnGCqCPN4bHLbD5y17rdex8KC2Tbi z4H3F6TXH3NBj1diNskj93iTVYaE1kkJHF86r3ynunffOZ7OzqNmEiuIFu+1ZY5q tu2TXMclSq4k+K3jRTvgWciary9TNcKiamS+MPUAfwXi14pNDdUWB7lhlnOPJgfO 1q7FaLSw+6B/ph0uT2ZLlBUwwj0Y17iT4Ua+BrWq7xhA70BhQMew5nN+h1rZ/hnD d+6pbHFlEBumlX3mzv+pOkAQFnG9KNfA -----END CERTIFICATE-----Generated at Sun Jun 15 04:57:54 2025 by rpki-client