$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json) Hash identifier: eSDmxzOEvBNwoTt07rFGSZnqbYGVKHRQP/KNopE7kuE= Subject key identifier: ED:D8:63:76:48:A2:D1:80:E9:CD:22:90:DA:8E:0A:41:68:B1:86:66 Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft Manifest number: 01C3 Signing time: Fri 25 Apr 2025 02:16:23 +0000 Manifest this update: Fri 25 Apr 2025 02:16:22 +0000 Manifest next update: Fri 02 May 2025 02:16:22 +0000 Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: EYy0UCksG+OMYrkOR30DEo2LbSG58REFZf2B8qJJHM8=) 2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: Apr 25 02:16:22 2025 GMT Not After : May 2 02:16:22 2025 GMT Subject: CN=680af077-5c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:01:f2:66:82:a7:f2:79:f3:40:a2:b4:18:08: 5f:80:90:04:60:d4:f1:14:7a:e1:bb:b4:6b:b6:97: ff:de:85:08:85:3c:24:28:47:05:a2:85:1d:38:16: 0d:8e:64:bb:86:80:09:73:aa:7a:ee:ec:fc:13:d3: a9:b4:95:88:c1:1c:b3:88:1b:08:ea:9c:03:25:0a: fd:4a:3d:a3:e8:05:86:5f:53:fc:64:38:ae:7f:16: 50:54:4f:50:33:9c:d7:6a:12:62:bc:e0:6a:1c:52: 00:b9:b0:2a:0c:ec:09:e1:06:ae:a9:01:67:e1:cf: 70:c6:0b:24:3d:8f:38:6d:f3:a5:90:df:fe:f6:0b: 06:d7:f1:e2:f9:5c:dc:ac:11:ee:d3:8c:46:59:73: 0f:82:3f:7a:92:73:2c:84:b7:7a:92:a5:9b:89:c7: 0c:96:00:09:e9:63:6f:19:f3:dc:a8:9f:ce:66:3c: e4:0f:e0:cc:4c:e3:1a:f2:a3:88:eb:bf:18:6a:ae: 6d:e3:66:f0:c3:5d:1b:bb:da:ef:8a:2b:35:d1:e3: 0d:38:b1:41:4d:63:19:62:39:d1:c6:78:be:5f:1e: a1:71:f8:88:d8:3a:a3:74:6e:21:b1:a6:0b:85:b4: e0:24:7a:22:55:04:f8:c0:51:1a:a8:58:12:2e:75: e0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D8:63:76:48:A2:D1:80:E9:CD:22:90:DA:8E:0A:41:68:B1:86:66 X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:28:af:7a:45:51:f3:f3:80:c3:64:39:31:cd:a5:42:4f:3d: d8:8b:26:6e:f1:51:ab:5a:6e:97:9a:b1:e2:66:a0:81:22:f1: 9f:ef:92:03:62:1e:0d:20:91:42:5f:92:ea:f7:de:27:dc:9d: 03:48:d9:8a:0f:0c:67:9d:3c:2b:df:d8:3a:8f:4b:30:ea:da: 75:93:ca:ab:19:fc:53:39:e9:85:92:5e:af:c1:f1:01:09:19: 59:5e:e8:2f:31:1f:ce:5c:92:f4:93:f6:9f:b5:94:68:89:d6: 7b:ad:38:e8:5d:ca:f5:ae:42:8a:92:bd:81:e9:06:28:da:e7: 94:cc:0c:67:f4:b0:84:8f:48:5b:43:43:d0:84:77:1c:d4:e7: 06:d9:d4:b8:69:9d:16:1e:63:e5:a2:0e:38:79:ef:cc:06:2a: 9b:b4:84:59:7a:1b:e4:9a:0f:4a:97:7c:0b:8c:7a:44:cb:09: 1a:7f:3b:27:c7:d3:f3:7d:c9:8d:f6:64:a6:ce:c0:48:72:32: 6a:18:6e:5c:0b:67:9f:c2:d5:52:94:68:34:44:14:52:cd:93: 3b:c6:91:7d:02:d9:8d:a6:2a:6f:7b:cc:a9:0c:28:3b:13:43: e9:5a:56:b7:92:ad:07:3b:40:72:a5:30:80:52:bc:5a:0e:a5: d2:01:79:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjUwNDI1MDIxNjIyWhcNMjUwNTAyMDIxNjIyWjAYMRYwFAYD VQQDEw02ODBhZjA3Ny01YzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wHyZoKn8nnzQKK0GAhfgJAEYNTxFHrhu7Rrtpf/3oUIhTwkKEcFooUdOBYN jmS7hoAJc6p67uz8E9OptJWIwRyziBsI6pwDJQr9Sj2j6AWGX1P8ZDiufxZQVE9Q M5zXahJivOBqHFIAubAqDOwJ4QauqQFn4c9wxgskPY84bfOlkN/+9gsG1/Hi+Vzc rBHu04xGWXMPgj96knMshLd6kqWbiccMlgAJ6WNvGfPcqJ/OZjzkD+DMTOMa8qOI 678Yaq5t42bww10bu9rviis10eMNOLFBTWMZYjnRxni+Xx6hcfiI2DqjdG4hsaYL hbTgJHoiVQT4wFEaqFgSLnXgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3YY3ZI otGA6c0ikNqOCkFosYZmMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNKK96RVHz84DDZDkxzaVCTz3YiyZu8VGrWm6XmrHiZqCBIvGf75ID Yh4NIJFCX5Lq994n3J0DSNmKDwxnnTwr39g6j0sw6tp1k8qrGfxTOemFkl6vwfEB CRlZXugvMR/OXJL0k/aftZRoidZ7rTjoXcr1rkKKkr2B6QYo2ueUzAxn9LCEj0hb Q0PQhHcc1OcG2dS4aZ0WHmPlog44ee/MBiqbtIRZehvkmg9Kl3wLjHpEywkafzsn x9PzfcmN9mSmzsBIcjJqGG5cC2efwtVSlGg0RBRSzZM7xpF9AtmNpipve8ypDCg7 E0PpWla3kq0HO0BypTCAUrxaDqXSAXmP -----END CERTIFICATE-----Generated at Sat Apr 26 14:16:08 2025 by rpki-client