$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: kN10dcmmUnEHAHEr++7Cf+MkoUmVcmVHnVvVfVSYGOU= Subject key identifier: 1B:91:28:5F:56:15:82:C0:9C:38:C7:39:D2:7F:E6:18:6A:D8:73:2E Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 34CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 34AD Signing time: Mon 16 Jun 2025 15:18:38 +0000 Manifest this update: Mon 16 Jun 2025 15:18:37 +0000 Manifest next update: Mon 23 Jun 2025 15:18:37 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: 6QYJsQVwToR2MBOxd2J7tKc5hGAiH6WOWNkejWAAlqc=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13516 (0x34cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Jun 16 15:18:37 2025 GMT Not After : Jun 23 15:18:37 2025 GMT Subject: CN=685035cd-6f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:7a:3c:19:a6:94:d5:3a:75:60:62:4f:9a:a3: 8b:80:7b:ee:3c:95:82:27:d4:0d:ef:0a:f9:68:56: 74:09:ed:b3:96:5e:ab:68:b4:52:97:dc:a1:96:6d: 82:df:bb:0d:0d:27:6e:97:f2:a0:6e:0f:88:bc:76: b0:fb:5a:30:e5:e2:b4:a5:cc:80:27:03:76:af:72: d0:f9:28:43:11:d2:3c:0b:a2:45:91:f6:aa:dd:3d: 4d:60:32:41:63:bc:fb:01:06:5b:44:7e:8f:4e:f3: 6d:12:4e:70:5f:3d:3f:ea:31:2c:0d:29:c9:93:af: 1e:b4:a9:ad:aa:3d:59:9a:cd:a0:6a:63:26:5a:05: 49:0b:1d:f3:db:fb:d7:f1:8a:46:95:b9:78:b2:66: eb:0c:f9:e4:02:7e:0d:a6:c9:21:7f:29:ac:59:d7: 1b:25:d9:c3:4e:80:57:42:2c:12:91:93:ea:6a:4f: 38:94:89:9b:51:39:8b:d0:f0:64:72:ae:a9:24:12: bb:9a:a1:8f:c8:55:10:09:d4:3c:2d:f0:5a:53:f2: bf:4f:b2:a2:2c:82:0f:c8:6e:18:9a:b7:14:96:97: 94:cc:99:43:86:fb:f1:da:81:48:63:9d:03:72:62: 48:ff:fe:69:73:1a:b0:32:4c:63:0f:a7:e7:1b:b4: 78:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:91:28:5F:56:15:82:C0:9C:38:C7:39:D2:7F:E6:18:6A:D8:73:2E X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:41:f6:8b:a2:2c:8a:3b:aa:91:43:ed:f6:0e:2c:ea:4c:36: 58:11:d2:f8:f1:fd:05:12:6c:ab:8c:1e:c7:00:34:e5:7b:d7: b5:42:94:01:65:b8:83:6b:0e:0b:ae:c3:ae:38:04:aa:ea:43: 53:c4:a8:1a:4b:95:3f:94:dd:1d:04:d8:1f:3e:77:6e:96:d8: 1c:63:31:7a:e5:e1:f7:38:0d:5a:ba:ba:f2:55:27:91:ae:51: b8:74:00:10:72:34:f6:32:f7:b0:8f:4d:c0:49:05:a9:6b:39: 1f:a6:be:30:36:1b:50:0a:dd:c5:b6:18:58:61:e7:81:f8:a6: 11:b4:7e:1f:40:87:5d:0e:89:21:f7:48:9e:a9:1d:fa:e6:2e: cd:8c:79:b1:8f:cf:c6:3b:5d:b6:cb:e0:52:56:8d:33:d2:da: b8:19:59:ea:14:43:7c:91:c6:f0:65:1b:4c:4f:08:ac:36:f8: 6f:68:3e:d2:2a:8a:54:7f:4e:2a:cf:f6:e5:fd:a9:0b:f9:29: a6:30:1e:83:80:46:e0:42:5a:aa:35:2e:f1:28:fa:32:b6:b3: 25:81:cd:e1:d1:52:a9:84:05:08:8c:3b:43:a3:39:6c:5c:43: 01:f4:1b:24:87:64:0b:82:7f:2f:29:3d:cd:1c:6e:8b:bd:f1: c0:f8:27:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUwNjE2MTUxODM3WhcNMjUwNjIzMTUxODM3WjAYMRYwFAYD VQQDEw02ODUwMzVjZC02ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13o8GaaU1Tp1YGJPmqOLgHvuPJWCJ9QN7wr5aFZ0Ce2zll6raLRSl9yhlm2C 37sNDSdul/Kgbg+IvHaw+1ow5eK0pcyAJwN2r3LQ+ShDEdI8C6JFkfaq3T1NYDJB Y7z7AQZbRH6PTvNtEk5wXz0/6jEsDSnJk68etKmtqj1Zms2gamMmWgVJCx3z2/vX 8YpGlbl4smbrDPnkAn4NpskhfymsWdcbJdnDToBXQiwSkZPqak84lImbUTmL0PBk cq6pJBK7mqGPyFUQCdQ8LfBaU/K/T7KiLIIPyG4YmrcUlpeUzJlDhvvx2oFIY50D cmJI//5pcxqwMkxjD6fnG7R43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuRKF9W FYLAnDjHOdJ/5hhq2HMuMB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqQfaLoiyKO6qRQ+32DizqTDZYEdL48f0FEmyrjB7HADTle9e1QpQB ZbiDaw4LrsOuOASq6kNTxKgaS5U/lN0dBNgfPndultgcYzF65eH3OA1aurryVSeR rlG4dAAQcjT2Mvewj03ASQWpazkfpr4wNhtQCt3FthhYYeeB+KYRtH4fQIddDokh 90ieqR365i7NjHmxj8/GO122y+BSVo0z0tq4GVnqFEN8kcbwZRtMTwisNvhvaD7S KopUf04qz/bl/akL+SmmMB6DgEbgQlqqNS7xKPoytrMlgc3h0VKphAUIjDtDozls XEMB9Bskh2QLgn8vKT3NHG6LvfHA+Cd5 -----END CERTIFICATE-----Generated at Tue Jun 17 07:54:37 2025 by rpki-client