$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft File: 7LW7UwpypAlWiey7FY8q5e_pElU.mft (raw, json) Hash identifier: PXsMT4bXjMMQJn5sfGwQVKVCpArLI8++TwyrE2MHcqY= Subject key identifier: 51:EE:C7:01:5D:59:D9:74:31:D2:BE:FB:7E:4C:B7:6A:E2:3D:07:CF Authority key identifier: EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 Certificate issuer: /CN=A91B9FB9/serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Certificate serial: 346F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft Manifest number: 346C Signing time: Thu 24 Apr 2025 15:09:09 +0000 Manifest this update: Thu 24 Apr 2025 15:09:08 +0000 Manifest next update: Thu 01 May 2025 15:09:08 +0000 Files and hashes: 1: 7LW7UwpypAlWiey7FY8q5e_pElU.crl (hash: J5wegfwr+c7KFU0NEY7YG/EKGZwKRkIywUsNtc0Nj2k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13423 (0x346f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9FB9, serialNumber=ECB5BB530A72A4095689ECBB158F2AE5EFE91255 Validity Not Before: Apr 24 15:09:08 2025 GMT Not After : May 1 15:09:08 2025 GMT Subject: CN=680a5415-d24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:46:5a:10:2b:eb:65:10:0b:11:e8:1b:d3:a5: 87:73:70:f9:69:1e:c8:ed:fb:5b:ac:0f:0f:ea:7c: fe:c5:f4:bc:1f:0c:62:ad:ef:5a:14:14:5a:fc:14: 36:b1:45:8b:e4:bf:3f:59:de:c7:c0:c6:5c:86:15: 09:8e:ea:3b:75:9d:1f:df:fe:82:c9:5f:ff:3b:f5: e1:31:ab:9b:87:3c:f3:93:5a:9b:05:52:09:e7:c4: a6:d8:3e:89:9e:f2:fd:97:03:08:81:6d:33:76:83: 24:73:3d:db:a3:ba:db:00:e6:6f:60:51:74:04:3d: 77:d9:d3:32:05:8f:a0:76:5d:25:01:c5:fe:83:0d: 25:72:ec:ea:c1:64:34:cd:95:d8:ac:0d:bd:38:55: c4:dc:32:aa:1b:ac:cc:21:7e:06:8e:24:38:bc:4e: 94:81:74:de:6b:0c:6d:f1:b0:d7:d0:7f:b0:ad:5c: 38:01:e8:19:6a:fa:bc:58:ac:5c:d6:f0:1e:a2:05: c0:07:64:60:b2:78:36:29:5e:35:c6:c0:1a:13:3d: a6:fc:af:15:8c:b3:93:ba:65:ec:ed:88:e1:aa:6a: 1e:7b:6d:41:8e:cc:2d:24:00:eb:01:f1:db:31:a9: 27:11:7d:a2:99:e6:d8:47:3a:97:41:22:9c:15:86: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EE:C7:01:5D:59:D9:74:31:D2:BE:FB:7E:4C:B7:6A:E2:3D:07:CF X509v3 Authority Key Identifier: keyid:EC:B5:BB:53:0A:72:A4:09:56:89:EC:BB:15:8F:2A:E5:EF:E9:12:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LW7UwpypAlWiey7FY8q5e_pElU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9FB9/2114D5681DA411E2841AF29908B02CD2/7LW7UwpypAlWiey7FY8q5e_pElU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d8:01:f5:9f:9e:72:a4:44:53:49:28:72:b3:ad:13:6c:34: aa:4d:db:6a:dc:5b:96:6c:ad:60:ac:b6:28:a3:e3:93:d5:18: 39:a2:86:a5:8a:27:21:f0:3a:a2:94:94:4a:db:9d:93:1f:fe: bd:67:3d:e6:50:06:06:bf:7c:cf:6d:55:8b:c5:2d:38:e7:28: 7e:98:4e:e2:cb:db:65:8d:bb:b5:35:d8:4c:29:33:8d:45:5b: 7b:f3:7f:5c:f5:31:dc:91:ed:57:eb:b2:d1:0d:4e:33:4a:4b: f1:a1:04:68:02:f0:a9:10:bd:a0:e3:7f:94:d6:45:9f:fb:18: 79:b4:30:4d:b2:c6:ba:07:36:7a:bf:e2:fa:bf:78:a1:6f:c7: 3d:2b:36:45:c0:f1:d2:4c:30:2d:d0:ba:9c:19:e3:88:68:5c: 40:dc:a3:d1:6b:7c:3e:a2:ba:02:af:ab:df:0d:90:1a:d1:07: 62:80:f6:85:9e:09:be:ef:ca:64:74:6d:6d:f0:79:5c:be:d7: ba:41:47:0f:80:1a:1f:a6:33:f0:e1:6e:7d:5f:bc:20:7a:ed: 67:3d:84:9d:42:a9:32:95:23:c5:04:3d:28:a4:ae:6c:ee:77: 44:b2:39:aa:42:2d:f0:9f:d0:d9:2d:dc:c9:44:f5:e6:7a:fd: 3d:c9:8a:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGQjkxMTAvBgNVBAUTKEVDQjVCQjUzMEE3MkE0MDk1Njg5RUNCQjE1OEYyQUU1 RUZFOTEyNTUwHhcNMjUwNDI0MTUwOTA4WhcNMjUwNTAxMTUwOTA4WjAYMRYwFAYD VQQDEw02ODBhNTQxNS1kMjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApEZaECvrZRALEegb06WHc3D5aR7I7ftbrA8P6nz+xfS8Hwxire9aFBRa/BQ2 sUWL5L8/Wd7HwMZchhUJjuo7dZ0f3/6CyV//O/XhMaubhzzzk1qbBVIJ58Sm2D6J nvL9lwMIgW0zdoMkcz3bo7rbAOZvYFF0BD132dMyBY+gdl0lAcX+gw0lcuzqwWQ0 zZXYrA29OFXE3DKqG6zMIX4GjiQ4vE6UgXTeawxt8bDX0H+wrVw4AegZavq8WKxc 1vAeogXAB2Rgsng2KV41xsAaEz2m/K8VjLOTumXs7Yjhqmoee21BjswtJADrAfHb MaknEX2imebYRzqXQSKcFYYb3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHuxwFd Wdl0MdK++35Mt2riPQfPMB8GA1UdIwQYMBaAFOy1u1MKcqQJVonsuxWPKuXv6RJV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUZCOS8yMTE0RDU2ODFE QTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBBbFdpZXk3Rlk4cTVlX3BF bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMVzdVd3B5cEFsV2lleTdGWThxNWVfcEVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUZCOS8yMTE0RDU2ODFEQTQxMUUyODQxQUYyOTkwOEIwMkNEMi83TFc3VXdweXBB bFdpZXk3Rlk4cTVlX3BFbFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf2AH1n55ypERTSShys60TbDSqTdtq3FuWbK1grLYoo+OT1Rg5ooal iich8DqilJRK252TH/69Zz3mUAYGv3zPbVWLxS045yh+mE7iy9tljbu1NdhMKTON RVt7839c9THcke1X67LRDU4zSkvxoQRoAvCpEL2g43+U1kWf+xh5tDBNssa6BzZ6 v+L6v3ihb8c9KzZFwPHSTDAt0LqcGeOIaFxA3KPRa3w+oroCr6vfDZAa0QdigPaF ngm+78pkdG1t8Hlcvte6QUcPgBofpjPw4W59X7wgeu1nPYSdQqkylSPFBD0opK5s 7ndEsjmqQi3wn9DZLdzJRPXmev09yYqg -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:14 2025 by rpki-client