$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: 1dyo1j7xhdaAMpBVvzuWUsx6VJcP+H1f2d9PwUfIpiw= Subject key identifier: FE:FF:EF:29:DA:E8:CA:56:BA:D8:B4:86:7E:7C:B0:A6:56:99:02:76 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 0297 Signing time: Fri 25 Apr 2025 07:24:15 +0000 Manifest this update: Fri 25 Apr 2025 07:24:14 +0000 Manifest next update: Fri 02 May 2025 07:24:14 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: hS7EqENg35Lav6p1epyn/n42JYu0Wa1pK1eL3emPZoY=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: rCllvSopoGz8aDfU9lvXSKhRHbkj+3Ed22RiWwBDqfc=) 3: 488068CE21A611F088065429C4F9AE02.roa (hash: EKNS8/CnQlQ7MYf3O+n++oPnKdB/AFdgyRHjJoVp+tw=) 4: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: bX2GvM4twLrpOhpUXaE3dMjzmYpyVWJx7L0sV9znlKE=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: 455DCGiIcAmYhveApDA31/VkiMOYSAFDxNYnnGbSEJY=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: lOUpDRjlxbgUApviuBIHPbtPtdQ0a+j/Lmf0E0RCirU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 07:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 681 (0x2a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Apr 25 07:24:14 2025 GMT Not After : May 2 07:24:14 2025 GMT Subject: CN=680b389e-ee0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:d9:02:95:f9:d3:d1:e2:fc:47:3e:60:38: 35:51:fe:67:6e:80:f6:9b:ff:ea:79:f8:11:79:29: a2:37:88:96:ad:7d:a5:27:03:d8:4d:c2:3a:98:93: f3:56:f0:42:b9:81:29:37:e3:cd:90:48:81:3f:fa: 15:84:8f:23:dc:7d:d3:67:4d:ca:a2:3a:3b:60:6b: 1a:e0:22:82:35:b1:7a:25:f6:09:38:39:a7:09:ac: 85:9c:50:c8:e7:4f:e2:a5:2d:61:8f:15:f8:22:a4: 12:1b:cc:e6:43:ad:8f:2d:f7:fd:22:7f:24:74:b3: 12:61:58:94:03:a6:69:86:7e:46:a4:cc:6f:69:b7: b7:2b:ef:f5:a0:a0:69:7e:f8:27:2b:09:8d:a9:c8: db:76:ce:40:96:3f:ce:cf:dc:54:f3:5d:a5:f6:61: a7:7e:bb:82:4e:b9:56:8f:f1:e5:35:e9:8c:f7:7f: 0a:b6:db:bd:a9:18:6b:cb:59:61:28:6f:58:13:3d: 9e:c8:96:0e:eb:cb:4f:08:87:20:9f:8f:a6:e6:5f: fd:e9:fc:9b:6b:9b:bf:b9:b8:ab:45:50:ea:e6:85: c0:fe:da:4e:d5:a0:0b:2d:c8:e0:d2:56:a0:44:25: a8:69:04:9c:c6:7a:97:eb:db:ce:0a:f4:52:23:44: 3b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FF:EF:29:DA:E8:CA:56:BA:D8:B4:86:7E:7C:B0:A6:56:99:02:76 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:13:62:d2:d8:75:76:63:16:7b:9a:23:cb:27:ef:f7:71:8a: 53:49:2f:96:87:11:92:5e:e5:f0:cd:3b:06:3b:0f:df:2f:9a: 7f:37:81:b0:f1:33:d0:e4:17:22:4b:10:26:f4:73:92:28:02: 36:33:b2:ce:b6:dd:66:6f:86:93:79:90:d5:15:7c:b1:a6:0c: 16:7b:4d:e9:41:1a:63:bd:c1:32:0f:a8:70:86:9a:c9:81:15: 81:17:d0:18:f5:b3:f8:e1:26:ca:88:d8:9d:bf:9a:09:0a:21: 9d:47:70:82:79:ab:22:eb:02:10:d8:12:05:d3:f8:d8:a7:d1: fb:90:67:fa:8e:71:ec:d1:d0:68:7e:99:88:1c:06:8f:4c:76: 79:99:73:77:24:9c:bd:74:c7:f5:c9:8d:6e:6d:1e:22:a3:3c: 08:e3:90:bc:b7:06:e6:6d:81:06:74:94:c0:3e:43:8a:18:f0: a9:3c:93:11:73:60:f2:5e:ec:d1:51:50:77:ae:b6:21:6b:ac: 7e:e9:77:24:a3:9b:02:cd:db:80:14:cd:91:69:fa:1e:c0:9e: 93:29:1a:e1:11:ea:59:23:b1:6f:85:7d:42:8d:ec:2a:be:9a: 0e:b6:59:4e:bc:1c:c3:6a:dc:86:61:28:4c:fe:10:fb:6c:85: e0:26:29:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNDI1MDcyNDE0WhcNMjUwNTAyMDcyNDE0WjAYMRYwFAYD VQQDEw02ODBiMzg5ZS1lZTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtafZApX509Hi/Ec+YDg1Uf5nboD2m//qefgReSmiN4iWrX2lJwPYTcI6mJPz VvBCuYEpN+PNkEiBP/oVhI8j3H3TZ03Kojo7YGsa4CKCNbF6JfYJODmnCayFnFDI 50/ipS1hjxX4IqQSG8zmQ62PLff9In8kdLMSYViUA6Zphn5GpMxvabe3K+/1oKBp fvgnKwmNqcjbds5Alj/Oz9xU812l9mGnfruCTrlWj/HlNemM938Kttu9qRhry1lh KG9YEz2eyJYO68tPCIcgn4+m5l/96fyba5u/ubirRVDq5oXA/tpO1aALLcjg0lag RCWoaQScxnqX69vOCvRSI0Q7hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7/7yna 6MpWuti0hn58sKZWmQJ2MB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlE2LS2HV2YxZ7miPLJ+/3cYpTSS+WhxGSXuXwzTsGOw/fL5p/N4Gw 8TPQ5BciSxAm9HOSKAI2M7LOtt1mb4aTeZDVFXyxpgwWe03pQRpjvcEyD6hwhprJ gRWBF9AY9bP44SbKiNidv5oJCiGdR3CCeasi6wIQ2BIF0/jYp9H7kGf6jnHs0dBo fpmIHAaPTHZ5mXN3JJy9dMf1yY1ubR4iozwI45C8twbmbYEGdJTAPkOKGPCpPJMR c2DyXuzRUVB3rrYha6x+6Xcko5sCzduAFM2RafoewJ6TKRrhEepZI7FvhX1Cjewq vpoOtllOvBzDatyGYShM/hD7bIXgJinj -----END CERTIFICATE-----Generated at Sat Apr 26 17:13:34 2025 by rpki-client