$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: lPqjFaUfoEDE2LRvEuusVVFUnUqZVBlNd9fKPB7SRrg= Subject key identifier: 81:D9:92:5C:E7:95:6D:30:E4:4F:42:69:28:17:25:99:C7:50:DE:26 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: 64 Signing time: Mon 21 Apr 2025 05:55:57 +0000 Manifest this update: Mon 21 Apr 2025 05:55:57 +0000 Manifest next update: Mon 28 Apr 2025 05:55:57 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: QAod/JzO6wGfLT3Al0h1h9anOKMkZFVedFdg0oeZ63s=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 05:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Apr 21 05:55:57 2025 GMT Not After : Apr 28 05:55:57 2025 GMT Subject: CN=6805dded-08ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:a5:97:7f:d7:df:2a:ed:82:1f:26:59:cc: 5b:1e:7d:7e:c6:1a:d9:72:9c:9f:08:ac:62:82:57: 73:df:87:34:a5:23:b2:d8:de:9a:ca:26:8a:82:63: 6f:7d:01:1d:c6:d1:a9:84:79:68:e0:1d:af:9a:04: 58:b7:84:4d:fa:5a:10:19:60:2f:2d:2b:8d:ea:ce: 3d:26:c0:95:4b:ab:cd:91:9f:32:30:bd:58:33:f8: 0c:c4:68:a9:03:0d:55:a5:01:38:1a:c4:64:19:0f: bc:aa:a0:7b:2b:18:8f:8b:26:d9:35:f4:1a:f0:11: fe:da:76:4c:42:b9:0a:f5:59:e3:ae:69:ae:5b:49: 38:f1:ba:33:df:4e:89:45:04:7a:c5:12:69:e4:b6: 04:04:0b:15:57:d9:5e:3b:20:0a:b9:8a:9b:90:c9: 78:54:b9:2a:40:43:d0:06:4a:9b:0c:cf:86:8b:5a: 49:51:fa:e4:de:e9:74:a4:28:ba:00:dc:1a:c8:6d: 6b:46:54:d3:1b:34:c8:e6:a9:f5:e8:67:48:a6:73: ae:a8:f6:2c:65:e6:e9:a0:e5:ce:cd:20:d0:36:25: c6:b7:bc:53:5e:73:2a:b2:6c:ad:16:bf:24:40:09: 02:52:3a:4a:24:a9:62:61:36:aa:1f:b1:da:a4:ad: 87:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D9:92:5C:E7:95:6D:30:E4:4F:42:69:28:17:25:99:C7:50:DE:26 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ac:00:82:05:c8:3e:61:ba:45:2c:26:10:d9:51:54:64:a3: 3f:7e:f9:25:c1:33:25:91:44:10:b1:18:8a:38:e9:5d:0d:08: 94:de:8d:2a:f2:bb:00:95:66:72:3e:5f:46:03:41:ad:28:eb: 85:ec:db:45:b3:81:4f:95:38:15:4e:c1:86:b8:4a:9e:a1:a5: ba:f6:07:37:9e:51:91:ab:1d:53:79:ec:4a:b4:21:03:20:bc: 1c:fd:26:c6:3e:f2:b3:76:64:d7:d0:6d:35:98:02:c1:f9:59: d3:5b:e8:f8:cf:c9:1a:13:a1:2b:4d:ca:f9:30:f5:aa:9c:b1: 4a:e3:60:1a:8a:04:34:10:7a:e5:37:bd:0b:10:10:b4:00:f1: e2:90:03:82:49:09:df:b7:88:16:7b:61:20:fe:9e:29:e3:c0: fd:61:44:be:43:17:b5:d7:52:dd:e4:a5:88:3f:7a:7a:2d:d6: 72:86:30:ca:05:22:0e:2a:0c:fd:36:3f:65:17:79:3e:05:00: ab:f6:1a:7b:70:09:dd:b9:49:b5:9d:c8:ac:2b:7a:9a:47:4c: 98:6f:ee:ab:7d:41:e9:cd:61:1f:18:d9:75:cf:cc:ad:de:33: 6c:5f:9a:fe:47:ec:e6:63:e5:ef:9a:84:53:3f:10:6e:1a:50: 2e:e0:c9:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUU1MDExMC8GA1UEBRMoRUNCNDg0MDA1NjA0NkE4QTkzMjI4NEVBNUYxRTA0NkEw MjMzMUNFOTAeFw0yNTA0MjEwNTU1NTdaFw0yNTA0MjgwNTU1NTdaMBgxFjAUBgNV BAMTDTY4MDVkZGVkLTA4YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYKaWXf9ffKu2CHyZZzFsefX7GGtlynJ8IrGKCV3PfhzSlI7LY3prKJoqCY299 AR3G0amEeWjgHa+aBFi3hE36WhAZYC8tK43qzj0mwJVLq82RnzIwvVgz+AzEaKkD DVWlATgaxGQZD7yqoHsrGI+LJtk19BrwEf7adkxCuQr1WeOuaa5bSTjxujPfTolF BHrFEmnktgQECxVX2V47IAq5ipuQyXhUuSpAQ9AGSpsMz4aLWklR+uTe6XSkKLoA 3BrIbWtGVNMbNMjmqfXoZ0imc66o9ixl5umg5c7NINA2Jca3vFNecyqybK0WvyRA CQJSOkokqWJhNqofsdqkrYcbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgdmSXOeV bTDkT0JpKBclmcdQ3iYwHwYDVR0jBBgwFoAU7LSEAFYEaoqTIoTqXx4EagIzHOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5RTUwLzJERDc2MzhDOTI0 MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0xTRUFGWUVhb3FUSW9UcVh4NEVhZ0l6SE9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 RTUwLzJERDc2MzhDOTI0MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9x VElvVHFYeDRFYWdJekhPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGSsAIIFyD5hukUsJhDZUVRkoz9++SXBMyWRRBCxGIo46V0NCJTejSry uwCVZnI+X0YDQa0o64Xs20WzgU+VOBVOwYa4Sp6hpbr2BzeeUZGrHVN57Eq0IQMg vBz9JsY+8rN2ZNfQbTWYAsH5WdNb6PjPyRoToStNyvkw9aqcsUrjYBqKBDQQeuU3 vQsQELQA8eKQA4JJCd+3iBZ7YSD+ninjwP1hRL5DF7XXUt3kpYg/enot1nKGMMoF Ig4qDP02P2UXeT4FAKv2GntwCd25SbWdyKwreppHTJhv7qt9QenNYR8Y2XXPzK3e M2xfmv5H7OZj5e+ahFM/EG4aUC7gyXk= -----END CERTIFICATE-----Generated at Tue Apr 22 06:22:14 2025 by rpki-client