$ rpki-client -vvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json) Hash identifier: NJx+mmswCmhee+A9yYOtf+fKr7/Ef7LS4blWhpVhSHo= Subject key identifier: AD:A9:31:CA:DB:13:D2:10:1D:B0:A7:44:D3:53:17:11:A5:95:8F:74 Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Certificate serial: 048D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft Manifest number: 0488 Signing time: Thu 24 Apr 2025 23:48:25 +0000 Manifest this update: Thu 24 Apr 2025 23:48:25 +0000 Manifest next update: Thu 01 May 2025 23:48:25 +0000 Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: 0m7qpzpYPhkZYB0nZ9M5yBgo6SENbp3dG//ZoomMTqs=) 2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 1ALWg1Qlo5IyGVR2E3WZposvdzb9mETdXX2ZGs91bhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1165 (0x48d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047 Validity Not Before: Apr 24 23:48:25 2025 GMT Not After : May 1 23:48:25 2025 GMT Subject: CN=680acdc9-1d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4d:96:f8:c8:0b:8b:a5:a9:c7:75:c0:0b:74: 0d:ac:58:cc:3e:24:e2:27:20:20:b8:9d:c3:5b:a0: bc:e4:fe:36:64:28:50:5c:a1:72:4f:e0:c2:a8:23: f6:99:61:c5:60:07:40:ae:6c:84:31:6e:45:e0:d8: 9b:89:2a:95:7e:70:41:0f:dc:55:12:1c:f4:9d:ae: fb:67:f5:1f:04:8e:df:c3:03:f3:b2:62:4f:d7:27: 67:0c:9c:95:e6:36:cf:b1:f6:3a:2f:66:f8:12:d9: db:77:78:6b:11:ee:f1:77:02:31:16:0a:31:91:71: c8:d2:97:e9:46:ba:b6:60:db:b2:43:8b:9d:bb:8e: 3f:a3:c3:48:d1:94:59:7c:69:d7:e6:97:bf:4d:c8: 9d:86:90:03:af:58:20:4a:89:2e:99:d9:dc:be:ef: a1:c0:f7:e8:bc:d4:71:d0:43:8b:90:ce:e0:c9:42: 89:96:11:60:ad:57:00:9a:c9:2a:b2:ab:30:d7:dc: b0:d9:b3:4f:a1:f7:ca:c9:a6:88:45:bd:48:61:80: 76:e5:48:16:ee:52:d8:04:a8:91:ed:e4:4b:80:e6: 84:0e:a2:b5:75:cf:b4:6e:26:08:14:6b:07:20:89: a7:c1:19:36:b0:f5:17:42:c5:40:18:e5:64:02:2a: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:31:CA:DB:13:D2:10:1D:B0:A7:44:D3:53:17:11:A5:95:8F:74 X509v3 Authority Key Identifier: keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:ca:89:2a:2e:0b:52:73:a5:09:aa:78:3c:d6:87:ab:43:92: 85:fd:ef:ae:07:01:f6:ef:c8:02:92:2a:55:f8:06:83:77:90: 57:48:f3:49:dd:ed:2b:78:81:e7:1f:30:cd:50:ce:89:a4:af: ef:cd:fe:e0:96:b2:c9:1a:83:dc:fb:e6:3e:1f:6c:6d:e3:0c: 22:88:62:58:92:30:08:50:a8:a0:22:a2:1c:b5:5c:4e:43:3d: 59:ef:7a:e7:8f:de:99:2e:aa:46:f7:91:2c:0a:a8:9b:f6:de: e0:3e:f6:fa:04:fd:f2:c9:df:07:30:a7:a5:b4:20:97:eb:af: 0a:5b:b0:5b:86:8f:6e:e6:a5:e3:37:da:5b:75:e1:db:45:a1: 59:c6:14:8a:3b:1b:e8:4d:9e:e4:6d:c4:61:50:47:e1:90:94: 79:5c:8e:48:1e:97:38:9a:65:85:7d:27:6f:e3:cf:bd:fe:70: 81:b7:01:97:f9:d0:1d:d8:a1:3b:9d:0c:05:5a:ae:6e:95:b0: 0d:3e:72:ad:f4:8b:94:9d:6a:29:a6:29:b8:e2:0b:8b:99:5c: 89:b0:af:4b:83:b2:a2:12:c7:99:23:a6:5d:f3:13:0e:71:a2: d7:05:ca:57:b1:ff:63:74:c2:22:73:f6:94:d7:41:40:a2:16: 6f:89:8a:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMwQUUxMTAvBgNVBAUTKEVFQTMzRTg2RTI4MUFEMTNEQzYyOUYzMkQ4RDUzNzYw QUUxRDAwNDcwHhcNMjUwNDI0MjM0ODI1WhcNMjUwNTAxMjM0ODI1WjAYMRYwFAYD VQQDEw02ODBhY2RjOS0xZDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3U2W+MgLi6Wpx3XAC3QNrFjMPiTiJyAguJ3DW6C85P42ZChQXKFyT+DCqCP2 mWHFYAdArmyEMW5F4NibiSqVfnBBD9xVEhz0na77Z/UfBI7fwwPzsmJP1ydnDJyV 5jbPsfY6L2b4Etnbd3hrEe7xdwIxFgoxkXHI0pfpRrq2YNuyQ4udu44/o8NI0ZRZ fGnX5pe/TcidhpADr1ggSokumdncvu+hwPfovNRx0EOLkM7gyUKJlhFgrVcAmskq sqsw19yw2bNPoffKyaaIRb1IYYB25UgW7lLYBKiR7eRLgOaEDqK1dc+0biYIFGsH IImnwRk2sPUXQsVAGOVkAirjRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK2pMcrb E9IQHbCnRNNTFxGllY90MB8GA1UdIwQYMBaAFO6jPobiga0T3GKfMtjVN2CuHQBH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzBBRS9FN0ZDMEQxNDM3 OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJSUGNZcDh5Mk5VM1lLNGRB RWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxTS1odUtCclJQY1lwOHkyTlUzWUs0ZEFFYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzBBRS9FN0ZDMEQxNDM3OEUxMUVDODQzQ0QyNDVDNEY5QUUwMi83cU0taHVLQnJS UGNZcDh5Mk5VM1lLNGRBRWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnyokqLgtSc6UJqng81oerQ5KF/e+uBwH278gCkipV+AaDd5BXSPNJ 3e0reIHnHzDNUM6JpK/vzf7glrLJGoPc++Y+H2xt4wwiiGJYkjAIUKigIqIctVxO Qz1Z73rnj96ZLqpG95EsCqib9t7gPvb6BP3yyd8HMKeltCCX668KW7Bbho9u5qXj N9pbdeHbRaFZxhSKOxvoTZ7kbcRhUEfhkJR5XI5IHpc4mmWFfSdv48+9/nCBtwGX +dAd2KE7nQwFWq5ulbANPnKt9IuUnWoppim44guLmVyJsK9Lg7KiEseZI6Zd8xMO caLXBcpXsf9jdMIic/aU10FAohZviYrq -----END CERTIFICATE-----Generated at Sat Apr 26 12:27:41 2025 by rpki-client