$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: c8Voz+QhGUkNMO+DjKXIKlSPXsEevhPqkEQqqKcuuVE= Subject key identifier: 72:73:D4:03:A8:B6:83:9E:68:A8:25:2D:34:77:6C:98:0E:DA:6D:AE Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1AE5 Signing time: Wed 18 Jun 2025 16:19:57 +0000 Manifest this update: Wed 18 Jun 2025 16:19:57 +0000 Manifest next update: Wed 25 Jun 2025 16:19:57 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: JCbfeeHwOhHF0pbKxjt3GMSdnRAkBbqEdsSgYSlWiNs=) 2: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: LOoxZWeDgU2+wusXufQ94pg+OOkfT8j3WfNTQznwf90=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: LUrVRFHpHNZiTqSy0L8SOTOMfbUQlb1OEo2uN/0dmZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 16:19:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6926 (0x1b0e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Jun 18 16:19:57 2025 GMT Not After : Jun 25 16:19:57 2025 GMT Subject: CN=6852e72d-c42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ac:01:bf:da:6b:41:0e:c9:d6:4e:77:f6:b5: 79:7e:5c:1a:79:fe:00:45:ff:41:43:c1:9a:8e:26: 3e:4f:ca:34:b4:4a:18:37:f1:90:7b:37:62:32:2b: ba:28:51:00:12:42:e8:4a:80:90:46:63:38:96:bf: 7b:28:61:74:50:52:eb:f4:fa:e2:51:0b:bb:cf:d3: 14:de:c6:eb:52:ef:0e:d3:37:b7:d1:49:e2:93:4a: 4f:6c:08:54:bf:0a:85:2c:cd:41:41:52:a3:6f:c1: 98:2a:de:02:82:29:0b:5b:46:22:c9:f3:a1:03:bb: 49:d0:da:86:f7:52:26:cd:43:03:2e:fd:3a:f5:c3: 04:47:5c:b3:f7:c2:dd:1c:0d:dc:dd:64:69:48:98: 1d:5a:b9:0d:e7:7b:d3:e2:56:ad:c2:94:95:41:b0: 06:9a:2f:ea:2d:8a:89:7b:50:af:40:ba:8d:eb:06: 08:a7:0b:a5:90:33:dd:4c:e6:0f:68:ed:bf:21:fd: 48:72:73:0f:f6:95:b5:9a:ad:86:47:7d:cc:37:f9: 3f:15:d7:20:62:e6:0a:51:d3:c9:90:92:83:0f:d4: 76:70:37:52:ff:95:65:c5:bf:41:b1:ad:77:36:3c: 6a:7e:4a:4a:43:c1:e3:17:d8:6a:33:de:d7:98:5a: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:73:D4:03:A8:B6:83:9E:68:A8:25:2D:34:77:6C:98:0E:DA:6D:AE X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:d3:b9:63:92:ae:06:7d:79:66:8d:f6:4d:07:68:3e:e0:2f: e0:23:a9:17:19:b7:01:e2:bd:9d:00:f7:f9:08:fd:91:8b:26: bd:d2:c0:11:ae:fb:ac:82:bf:9a:e9:40:c1:07:20:ac:90:68: 72:c5:36:9e:ef:77:40:07:b6:5b:70:79:17:5e:57:1d:b6:6c: 18:b5:32:b7:7e:cb:10:d6:65:b0:01:35:dd:7d:35:d2:eb:d1: 6f:d6:18:2e:b7:9d:0f:de:00:d6:29:78:de:82:78:08:4b:ee: 68:d1:eb:0c:33:ef:37:06:9b:bd:b2:cc:db:5e:ba:21:52:81: 5b:5a:46:2c:0e:20:70:32:69:98:81:04:24:94:6b:4d:18:41: a5:a5:ae:3d:f3:ce:07:e3:ca:1d:45:87:b8:eb:d2:69:71:3e: 3c:98:40:16:c5:80:d8:61:0d:a5:e4:7e:66:31:3b:6b:fc:a5: a5:3d:cb:c7:03:c6:bc:b4:b7:17:83:8b:eb:0f:56:a5:77:07: 56:95:f1:fb:28:5f:09:ca:d6:b3:cd:6c:86:bb:d5:0d:a4:a5: 3d:a6:64:2c:f6:01:58:8c:f2:7e:83:95:d2:58:5a:16:11:85: de:24:93:ae:40:d8:95:b6:15:88:a9:52:49:fd:dd:fc:c5:25: 94:62:4f:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwNjE4MTYxOTU3WhcNMjUwNjI1MTYxOTU3WjAYMRYwFAYD VQQDEw02ODUyZTcyZC1jNDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KwBv9prQQ7J1k539rV5flwaef4ARf9BQ8GajiY+T8o0tEoYN/GQezdiMiu6 KFEAEkLoSoCQRmM4lr97KGF0UFLr9PriUQu7z9MU3sbrUu8O0ze30Unik0pPbAhU vwqFLM1BQVKjb8GYKt4CgikLW0YiyfOhA7tJ0NqG91ImzUMDLv069cMER1yz98Ld HA3c3WRpSJgdWrkN53vT4latwpSVQbAGmi/qLYqJe1CvQLqN6wYIpwulkDPdTOYP aO2/If1IcnMP9pW1mq2GR33MN/k/FdcgYuYKUdPJkJKDD9R2cDdS/5Vlxb9Bsa13 NjxqfkpKQ8HjF9hqM97XmFr14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHJz1AOo toOeaKglLTR3bJgO2m2uMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAm07ljkq4GfXlmjfZNB2g+4C/gI6kXGbcB4r2dAPf5CP2Riya90sAR rvusgr+a6UDBByCskGhyxTae73dAB7ZbcHkXXlcdtmwYtTK3fssQ1mWwATXdfTXS 69Fv1hgut50P3gDWKXjegngIS+5o0esMM+83Bpu9sszbXrohUoFbWkYsDiBwMmmY gQQklGtNGEGlpa49884H48odRYe469JpcT48mEAWxYDYYQ2l5H5mMTtr/KWlPcvH A8a8tLcXg4vrD1aldwdWlfH7KF8JytazzWyGu9UNpKU9pmQs9gFYjPJ+g5XSWFoW EYXeJJOuQNiVthWIqVJJ/d38xSWUYk8q -----END CERTIFICATE-----Generated at Thu Jun 19 19:35:02 2025 by rpki-client