$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: yB45YkZShEPj492dYXQEpv26f4ZcrQvZRQ0LDCpwR7A= Subject key identifier: 63:F6:97:55:93:65:19:37:D1:24:9A:E2:98:4C:76:82:FA:58:62:C4 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: F4 Signing time: Fri 25 Apr 2025 04:22:46 +0000 Manifest this update: Fri 25 Apr 2025 04:22:45 +0000 Manifest next update: Fri 02 May 2025 04:22:45 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: tAkjvrDYzyApgKhAw4IkWJS7U+SUzFYlJP3NGdbMiz8=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Apr 25 04:22:45 2025 GMT Not After : May 2 04:22:45 2025 GMT Subject: CN=680b0e15-c9f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:dc:bf:5b:c8:9f:3d:93:77:68:e8:1f:3a: f1:0c:fa:10:70:90:f2:ee:79:e1:1f:2f:c8:56:71: 82:f9:6a:c5:4a:6b:35:ef:10:d0:16:3f:78:6a:df: 7c:5b:b5:c6:be:58:df:37:0e:fb:14:61:ec:85:7c: 95:8f:b1:c4:19:a2:f3:bf:c7:5d:72:81:a4:cc:54: 8b:83:36:2c:78:b1:f1:1c:07:de:97:68:51:62:e0: 00:6e:9a:9b:68:07:a7:e6:18:e5:20:ac:cf:2a:2c: 05:ca:3e:03:b0:12:80:aa:a0:5f:ea:12:ba:7a:1a: 15:c3:84:a3:5e:3c:4a:fe:49:6e:48:10:f1:78:aa: 54:a5:16:9f:e8:d6:81:bf:25:fe:19:e0:e4:23:56: c4:28:97:b7:0f:9c:0c:70:34:66:ed:ca:ff:5b:0b: 3a:6b:2b:49:ea:20:e6:5f:3c:c1:b2:3c:b4:0a:e5: 42:e5:61:b8:52:b1:92:e4:f1:a0:3f:bf:14:51:e2: fd:bf:ac:5b:58:b9:cf:ee:fc:8b:21:74:55:da:bf: 8d:00:0e:9f:e8:34:cc:1a:c7:41:e1:52:ae:ed:a0: 92:b0:0d:b0:dd:ba:02:c9:42:db:a9:4e:a7:48:1c: f1:5c:82:a4:40:a5:e1:44:91:0c:fe:eb:09:03:1e: 18:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F6:97:55:93:65:19:37:D1:24:9A:E2:98:4C:76:82:FA:58:62:C4 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b0:c7:f1:57:ed:22:99:97:ba:f1:84:fb:f6:cc:40:a0:fb: aa:f2:64:e0:95:9d:31:68:f3:6e:4d:5f:da:89:d0:23:5d:37: 57:bf:48:23:aa:a6:c9:a5:02:3c:d0:9d:42:01:84:de:7d:eb: d4:66:b0:d3:18:74:b3:1e:c5:48:ec:c9:ef:d2:ea:99:bd:b6: 02:9b:81:8d:b8:11:e7:e2:99:b6:7f:ca:34:3f:02:92:25:04: 99:d7:61:b0:8c:f0:40:5d:72:5e:e5:63:ba:a4:1a:f4:37:c0: 6c:87:43:73:6a:05:22:c0:e1:b2:55:0c:90:1a:38:64:8c:e8: c2:1a:32:3a:47:9a:99:1f:e7:48:f8:92:ab:76:9b:99:21:9f: cf:ea:19:4e:e3:6a:6e:19:21:4b:d8:41:ad:18:a0:6e:69:00: bf:a5:98:ec:6b:ca:dc:72:b7:2a:f0:b2:30:bc:43:f2:8f:14: a3:41:81:8a:60:d4:62:8f:39:56:7b:38:e7:ac:b9:e8:95:ee: 8f:00:92:66:09:07:5b:27:a4:48:7c:06:c1:5c:b1:30:5a:03: ae:9e:6d:a7:46:ed:3c:c8:2c:c0:2e:ae:84:93:5f:bb:f5:b8: 93:e1:a2:ec:63:77:34:85:a9:b5:74:73:8a:00:d9:13:54:3e: 8b:5c:81:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNDI1MDQyMjQ1WhcNMjUwNTAyMDQyMjQ1WjAYMRYwFAYD VQQDEw02ODBiMGUxNS1jOWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7Xcv1vInz2Td2joHzrxDPoQcJDy7nnhHy/IVnGC+WrFSms17xDQFj94at98 W7XGvljfNw77FGHshXyVj7HEGaLzv8ddcoGkzFSLgzYseLHxHAfel2hRYuAAbpqb aAen5hjlIKzPKiwFyj4DsBKAqqBf6hK6ehoVw4SjXjxK/kluSBDxeKpUpRaf6NaB vyX+GeDkI1bEKJe3D5wMcDRm7cr/Wws6aytJ6iDmXzzBsjy0CuVC5WG4UrGS5PGg P78UUeL9v6xbWLnP7vyLIXRV2r+NAA6f6DTMGsdB4VKu7aCSsA2w3boCyULbqU6n SBzxXIKkQKXhRJEM/usJAx4Y9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGP2l1WT ZRk30SSa4phMdoL6WGLEMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOsMfxV+0imZe68YT79sxAoPuq8mTglZ0xaPNuTV/aidAjXTdXv0gj qqbJpQI80J1CAYTefevUZrDTGHSzHsVI7Mnv0uqZvbYCm4GNuBHn4pm2f8o0PwKS JQSZ12GwjPBAXXJe5WO6pBr0N8Bsh0NzagUiwOGyVQyQGjhkjOjCGjI6R5qZH+dI +JKrdpuZIZ/P6hlO42puGSFL2EGtGKBuaQC/pZjsa8rccrcq8LIwvEPyjxSjQYGK YNRijzlWezjnrLnole6PAJJmCQdbJ6RIfAbBXLEwWgOunm2nRu08yCzALq6Ek1+7 9biT4aLsY3c0ham1dHOKANkTVD6LXIFv -----END CERTIFICATE-----Generated at Sat Apr 26 05:10:10 2025 by rpki-client