$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: 1itbEunK1Woqf1cE8k/OQKttbMkhQtvnr9WEhxvxaU4= Subject key identifier: B7:EB:6A:D7:B9:E5:B2:ED:1C:D9:D2:F0:FA:4F:29:BF:E3:C2:69:16 Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: BF Signing time: Fri 25 Apr 2025 04:52:55 +0000 Manifest this update: Fri 25 Apr 2025 04:52:54 +0000 Manifest next update: Fri 02 May 2025 04:52:54 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: g/9yCiFWSyNLhBFfa4f82r3TYrfOzxrDAYg2Vh96Dbc=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: TkSH2eeRMqY94jagMtgrF0f2pi1KvzFN767qntLjkUk=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: AVG8UOICPIOwfxF6CejSjbDjEsfHRJtOVBJAR9mZ1BQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Apr 25 04:52:54 2025 GMT Not After : May 2 04:52:54 2025 GMT Subject: CN=680b1526-a149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:60:d7:80:44:c1:d1:90:dd:03:5b:1d:e3: 1e:ab:87:15:21:28:fd:16:29:73:0f:72:b9:d8:42: a0:82:d6:e8:49:dc:4d:a8:24:24:02:ea:c0:b7:8b: 9e:0e:94:f3:d8:78:79:7b:3c:77:c5:6e:c0:9b:b4: e3:b9:25:03:59:f5:80:7f:8d:d9:b4:02:f2:69:f9: 54:cc:4d:28:77:e5:82:8d:b9:13:88:83:0b:18:07: 65:8c:3d:76:4e:7a:ff:61:e7:e2:c7:66:98:c8:f7: 48:6d:ff:79:d4:bc:df:76:be:b4:3e:a5:98:80:fe: 4f:5b:ad:e0:e1:0a:31:ab:d6:61:4b:9a:0c:82:e1: a8:17:6a:8d:d3:32:95:0e:3c:92:dc:23:ec:54:1c: 8d:c4:71:7f:d4:5a:70:bc:11:2a:3d:64:b5:b8:4e: bb:11:4b:84:90:3b:ee:bc:65:27:01:82:22:57:46: df:a0:f7:ff:c7:44:35:75:71:21:b9:ab:0d:21:66: 03:ec:e4:b8:30:4a:60:b0:59:21:98:44:a7:bd:94: 9c:db:16:d3:c5:7a:41:36:d3:8a:49:68:e5:ab:41: d0:52:b4:72:b2:63:ce:10:e3:4a:4a:5b:ce:be:df: 83:27:f2:51:e3:6f:ce:9a:15:f8:91:77:e3:ee:df: 81:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:EB:6A:D7:B9:E5:B2:ED:1C:D9:D2:F0:FA:4F:29:BF:E3:C2:69:16 X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d0:79:35:6e:ef:e5:56:d7:f8:9e:0f:69:37:d1:35:65:19: cd:9f:7d:65:c6:8f:d8:a9:49:61:1e:42:57:75:20:ae:2f:2a: 60:08:20:7f:6f:75:fa:e2:11:2e:6e:7a:4a:cc:62:65:ff:2e: 6d:f1:4a:eb:01:3d:39:ae:1c:32:bb:78:fc:0e:81:7d:41:04: dc:98:f3:55:f1:cb:93:55:a7:24:55:0e:fb:02:d3:54:1c:0e: 99:37:12:a5:d3:d5:55:ea:7e:62:67:07:2e:e8:15:f1:f7:f4: 81:f1:8a:85:2b:59:6e:ae:c5:fc:fd:e1:66:4d:97:6c:06:96: d7:d0:ec:6e:74:82:a1:91:fa:d9:de:48:06:d8:64:41:c0:0b: f9:8b:20:55:6e:ca:a6:5c:ac:a1:55:cf:db:cc:0a:d8:d5:69: 58:ef:bc:75:43:79:d7:31:96:bb:43:b1:1c:05:54:a5:24:36: 8e:8f:e7:6b:1f:3d:43:a8:e4:eb:37:c1:d6:43:24:4f:6c:7f: 61:50:01:f5:40:87:38:08:6e:0f:f6:30:80:9d:1f:1d:56:37: d8:9a:6c:cb:46:88:78:52:76:e3:3a:7b:56:cd:6d:4e:8c:d1: d7:3e:bf:ee:05:c4:64:52:c8:da:5d:97:cb:9d:be:de:4d:55: 09:0a:4f:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNDI1MDQ1MjU0WhcNMjUwNTAyMDQ1MjU0WjAYMRYwFAYD VQQDEw02ODBiMTUyNi1hMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq8dg14BEwdGQ3QNbHeMeq4cVISj9FilzD3K52EKggtboSdxNqCQkAurAt4ue DpTz2Hh5ezx3xW7Am7TjuSUDWfWAf43ZtALyaflUzE0od+WCjbkTiIMLGAdljD12 Tnr/Yefix2aYyPdIbf951Lzfdr60PqWYgP5PW63g4Qoxq9ZhS5oMguGoF2qN0zKV DjyS3CPsVByNxHF/1FpwvBEqPWS1uE67EUuEkDvuvGUnAYIiV0bfoPf/x0Q1dXEh uasNIWYD7OS4MEpgsFkhmESnvZSc2xbTxXpBNtOKSWjlq0HQUrRysmPOEONKSlvO vt+DJ/JR42/OmhX4kXfj7t+BUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfrate5 5bLtHNnS8PpPKb/jwmkWMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO0Hk1bu/lVtf4ng9pN9E1ZRnNn31lxo/YqUlhHkJXdSCuLypgCCB/ b3X64hEubnpKzGJl/y5t8UrrAT05rhwyu3j8DoF9QQTcmPNV8cuTVackVQ77AtNU HA6ZNxKl09VV6n5iZwcu6BXx9/SB8YqFK1lursX8/eFmTZdsBpbX0OxudIKhkfrZ 3kgG2GRBwAv5iyBVbsqmXKyhVc/bzArY1WlY77x1Q3nXMZa7Q7EcBVSlJDaOj+dr Hz1DqOTrN8HWQyRPbH9hUAH1QIc4CG4P9jCAnR8dVjfYmmzLRoh4UnbjOntWzW1O jNHXPr/uBcRkUsjaXZfLnb7eTVUJCk/O -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:08 2025 by rpki-client