$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: vOcA332UzNMGTMhtXXfrVYgkgwIg40Mz76PKOjK9pZI= Subject key identifier: 0A:7D:9E:97:9D:56:84:98:E2:9B:F7:58:93:D6:BB:64:D9:20:24:C4 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 02B1 Signing time: Fri 13 Jun 2025 01:03:07 +0000 Manifest this update: Fri 13 Jun 2025 01:03:06 +0000 Manifest next update: Fri 20 Jun 2025 01:03:06 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: aJj8o1eflR62M1XxmIeROUgERRZBlNQaC79bJ52OUvI=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: rCllvSopoGz8aDfU9lvXSKhRHbkj+3Ed22RiWwBDqfc=) 3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: bX2GvM4twLrpOhpUXaE3dMjzmYpyVWJx7L0sV9znlKE=) 4: EBF3EF123A2911F09F97AA47C4F9AE02.roa (hash: NHQgyn9MrNq1g/omGCRMq2I0Uiy6dz0ptIaB3+XylPM=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: 455DCGiIcAmYhveApDA31/VkiMOYSAFDxNYnnGbSEJY=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: lOUpDRjlxbgUApviuBIHPbtPtdQ0a+j/Lmf0E0RCirU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 708 (0x2c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jun 13 01:03:06 2025 GMT Not After : Jun 20 01:03:06 2025 GMT Subject: CN=684b78ca-2b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:12:ea:f8:93:3e:db:d0:cb:cf:74:46:43:a0: bf:07:b7:73:85:33:22:fe:e2:08:28:0c:05:ab:49: 67:28:32:ac:28:05:d1:7c:6a:7a:cf:7f:00:fb:cd: 61:a0:be:c0:7e:bd:4f:87:78:4c:e3:ee:5f:3c:b2: 75:e2:e7:e7:c0:58:20:30:7e:45:ab:63:95:88:98: 7c:87:0c:6a:d3:99:76:48:3a:56:32:7d:ef:71:3b: 61:8f:a4:e2:1e:46:f5:97:66:50:86:8e:33:fc:57: de:1e:6e:9d:f5:da:95:4d:bb:a2:64:db:27:8c:c0: bc:5e:32:45:8e:8c:83:09:02:78:26:13:8e:75:83: 53:f3:81:9b:36:71:a4:ac:3e:46:93:b2:d6:45:56: e8:70:ce:95:5c:35:06:56:82:80:54:cf:d3:6e:de: a3:38:62:9b:8c:79:4a:cc:ae:35:9a:9f:06:90:37: 29:5f:2e:6c:8d:38:7f:7a:9f:05:38:6d:b2:0f:7b: 90:1d:78:86:61:a9:cc:0e:c7:ce:e4:e9:2a:67:fc: 12:fd:dc:a9:bf:b1:7f:27:07:58:f3:cf:2b:57:98: a9:2c:b2:3f:70:5a:f8:a9:66:6e:22:77:8f:d6:00: a5:64:08:68:58:1e:53:9e:2d:91:b5:d4:79:7e:48: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:9E:97:9D:56:84:98:E2:9B:F7:58:93:D6:BB:64:D9:20:24:C4 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:82:16:64:5c:7a:9f:21:45:8d:72:fd:8f:27:a6:d4:2d:b3: e6:9f:72:ef:0d:16:c3:38:c4:98:f8:5d:e3:37:db:95:da:e8: c7:dc:35:54:6e:95:84:f7:66:b1:e4:a9:ab:13:9a:61:07:26: 02:64:5d:37:71:4e:3f:3d:75:33:62:d6:5e:a5:39:76:12:ae: d8:75:fd:f3:49:b0:88:6c:36:0c:ae:6a:f4:e7:db:21:61:37: 37:4d:ab:9d:46:20:1f:fc:e4:d1:e7:26:2e:ef:44:e8:0a:5d: 70:f4:cf:ca:76:c3:6b:20:9e:d1:66:70:06:7d:9f:90:27:8d: 96:3d:42:1f:cf:a2:76:44:ee:8b:97:1f:0c:64:00:35:4b:43: 62:0b:0c:7e:eb:62:df:4f:6d:76:91:53:9a:9c:4a:38:f1:b4: ce:71:03:60:2b:76:54:8e:3c:57:ee:1a:70:a6:d2:c2:71:f9: 51:aa:c1:84:19:91:40:8d:d6:76:d3:44:96:06:c5:90:1d:48: 39:75:e9:50:77:57:9b:71:42:8b:93:0b:92:2c:89:fc:11:36: f6:01:50:25:6e:b8:f4:38:b4:86:8e:63:72:90:f3:86:94:d4: fe:5d:7a:cf:8e:78:8c:88:d1:22:2d:de:04:a1:65:61:80:5e: b2:28:8a:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNjEzMDEwMzA2WhcNMjUwNjIwMDEwMzA2WjAYMRYwFAYD VQQDEw02ODRiNzhjYS0yYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhLq+JM+29DLz3RGQ6C/B7dzhTMi/uIIKAwFq0lnKDKsKAXRfGp6z38A+81h oL7Afr1Ph3hM4+5fPLJ14ufnwFggMH5Fq2OViJh8hwxq05l2SDpWMn3vcTthj6Ti Hkb1l2ZQho4z/FfeHm6d9dqVTbuiZNsnjMC8XjJFjoyDCQJ4JhOOdYNT84GbNnGk rD5Gk7LWRVbocM6VXDUGVoKAVM/Tbt6jOGKbjHlKzK41mp8GkDcpXy5sjTh/ep8F OG2yD3uQHXiGYanMDsfO5OkqZ/wS/dypv7F/JwdY888rV5ipLLI/cFr4qWZuIneP 1gClZAhoWB5Tni2RtdR5fkhycQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAp9nped VoSY4pv3WJPWu2TZICTEMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlghZkXHqfIUWNcv2PJ6bULbPmn3LvDRbDOMSY+F3jN9uV2ujH3DVU bpWE92ax5KmrE5phByYCZF03cU4/PXUzYtZepTl2Eq7Ydf3zSbCIbDYMrmr059sh YTc3TaudRiAf/OTR5yYu70ToCl1w9M/KdsNrIJ7RZnAGfZ+QJ42WPUIfz6J2RO6L lx8MZAA1S0NiCwx+62LfT212kVOanEo48bTOcQNgK3ZUjjxX7hpwptLCcflRqsGE GZFAjdZ200SWBsWQHUg5delQd1ebcUKLkwuSLIn8ETb2AVAlbrj0OLSGjmNykPOG lNT+XXrPjniMiNEiLd4EoWVhgF6yKIoF -----END CERTIFICATE-----Generated at Sat Jun 14 19:35:15 2025 by rpki-client