$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: k98RT570UTbWWVdPyYc+kXCrFj0YqT13p/Ex5a8lvio= Subject key identifier: 43:57:21:C0:EE:0D:A2:0D:9C:E9:C9:E2:F2:AA:FE:BA:0F:75:32:6C Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: DA Signing time: Fri 13 Jun 2025 04:31:36 +0000 Manifest this update: Fri 13 Jun 2025 04:31:35 +0000 Manifest next update: Fri 20 Jun 2025 04:31:35 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: qgHqUanP72BLOfr3o0BA+ah4kWJExYnkWP3LgYN2qQg=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: k1Tx0d7v2/DVXjcDjxa6UxUVJhpfspXydcHWpQGiFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Jun 13 04:31:35 2025 GMT Not After : Jun 20 04:31:35 2025 GMT Subject: CN=684ba9a7-3c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:0d:99:c4:47:8e:3d:9e:ac:ae:bf:73:1b: f7:01:c1:00:33:b6:61:ec:f5:12:99:14:4d:8e:ee: 4d:a0:4b:e6:a7:85:47:01:c6:3b:d3:3c:ba:eb:56: 13:64:50:fc:6b:93:a5:9c:be:ab:d3:24:b6:ef:97: d4:d9:4f:82:4c:a4:f5:de:5b:64:35:6d:b1:da:16: e8:c2:a3:0b:1d:66:aa:b9:28:29:67:e1:5c:bc:48: 19:34:76:52:6e:7f:a3:01:2d:a4:95:34:cd:5e:49: 53:7f:3c:44:7c:33:f8:0e:01:66:ad:71:21:53:58: 83:60:3f:31:90:66:d7:d4:e6:4d:b9:b6:a4:dd:3f: b5:7b:39:c0:ca:99:99:c6:ec:60:6b:27:7c:16:b6: 62:80:7c:d2:63:9f:58:6c:e9:ba:0a:f8:58:e6:a9: 09:cb:52:7c:31:ac:de:24:e5:3a:59:21:0e:74:df: ac:3f:1d:8d:b7:f8:79:48:29:aa:99:d6:b8:12:90: 12:1b:0a:26:74:d0:85:b1:15:80:65:79:61:ab:1a: 0e:d4:d8:3d:a7:5c:4c:78:1e:be:94:98:5c:54:3d: a1:5e:bb:32:35:3d:6c:b8:7d:e1:43:5a:5f:64:98: b1:f5:04:f1:f9:9d:5e:b5:81:28:fc:94:b8:10:b1: e1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:21:C0:EE:0D:A2:0D:9C:E9:C9:E2:F2:AA:FE:BA:0F:75:32:6C X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:ee:ce:9c:cf:57:7a:18:01:96:4b:5b:4f:98:25:ee:56: 85:35:29:4d:d5:d1:73:6b:93:b7:4e:d7:21:3f:e0:d4:41:ee: f6:c4:ea:49:a7:6d:e5:6e:2e:35:b4:6c:1b:2c:2b:b1:4c:a8: 81:f9:61:a3:c8:a4:52:8a:43:bb:b0:cc:1e:41:be:85:6d:c7: c8:8f:79:7e:76:55:9c:58:cc:ab:02:eb:92:d4:0a:69:de:92: ea:d6:26:7e:37:98:13:8d:de:4d:41:cb:82:5c:1f:34:3c:ac: a4:e4:b7:0a:62:c0:ec:6a:4b:0c:d9:4a:62:7f:d0:73:70:be: 1d:1c:6f:bb:a2:a1:48:c9:de:d2:89:f3:72:4b:0a:f6:e7:00: c9:82:07:7b:81:f1:f9:7a:81:62:83:1d:d0:73:37:ab:c4:06: c4:91:c0:cc:94:90:be:da:39:dd:9b:8e:22:90:fe:46:ff:35: 5b:34:57:7b:90:e4:5b:dd:35:97:e1:a7:c9:bd:07:77:97:25: fe:cf:82:97:b6:f0:a3:a3:5e:1b:68:dd:f6:e7:07:f6:53:e2: 0c:bf:a7:33:94:fc:9e:7a:ae:07:cc:c5:99:d5:ee:0c:3f:f7: 87:ff:35:3d:7e:20:3a:d1:7b:c6:d6:22:8a:b3:71:3a:8e:ff: 65:09:f1:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNjEzMDQzMTM1WhcNMjUwNjIwMDQzMTM1WjAYMRYwFAYD VQQDEw02ODRiYTlhNy0zYzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA15ENmcRHjj2erK6/cxv3AcEAM7Zh7PUSmRRNju5NoEvmp4VHAcY70zy661YT ZFD8a5OlnL6r0yS275fU2U+CTKT13ltkNW2x2hbowqMLHWaquSgpZ+FcvEgZNHZS bn+jAS2klTTNXklTfzxEfDP4DgFmrXEhU1iDYD8xkGbX1OZNubak3T+1eznAypmZ xuxgayd8FrZigHzSY59YbOm6CvhY5qkJy1J8MazeJOU6WSEOdN+sPx2Nt/h5SCmq mda4EpASGwomdNCFsRWAZXlhqxoO1Ng9p1xMeB6+lJhcVD2hXrsyNT1suH3hQ1pf ZJix9QTx+Z1etYEo/JS4ELHhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENXIcDu DaINnOnJ4vKq/roPdTJsMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2bu7OnM9XehgBlktbT5gl7laFNSlN1dFza5O3TtchP+DUQe72xOpJ p23lbi41tGwbLCuxTKiB+WGjyKRSikO7sMweQb6FbcfIj3l+dlWcWMyrAuuS1App 3pLq1iZ+N5gTjd5NQcuCXB80PKyk5LcKYsDsaksM2Upif9BzcL4dHG+7oqFIyd7S ifNySwr25wDJggd7gfH5eoFigx3QczerxAbEkcDMlJC+2jndm44ikP5G/zVbNFd7 kORb3TWX4afJvQd3lyX+z4KXtvCjo14baN325wf2U+IMv6czlPyeeq4HzMWZ1e4M P/eH/zU9fiA60XvG1iKKs3E6jv9lCfHu -----END CERTIFICATE-----Generated at Sat Jun 14 18:38:20 2025 by rpki-client