$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: VBGIhw/VxpHvwuhvvH7y5bT6XFuMstzjPHCDQQjoyAE= Subject key identifier: B7:F1:93:BA:06:27:EB:72:03:E6:3C:09:44:D3:06:58:97:86:16:1E Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04DF Signing time: Sat 19 Jul 2025 00:06:48 +0000 Manifest this update: Sat 19 Jul 2025 00:06:47 +0000 Manifest next update: Sat 26 Jul 2025 00:06:47 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: f+v/DjWMltkbzNAxCQCOIn2wTW/oBU0CvhcDIbBfAiw=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1253 (0x4e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Jul 19 00:06:47 2025 GMT Not After : Jul 26 00:06:47 2025 GMT Subject: CN=687ae198-f10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:f0:e0:0f:60:6e:6a:29:6d:00:5d:4c:83: e0:3f:dc:dc:aa:c5:98:42:65:0e:f0:eb:34:3a:f0: c4:23:99:4b:8a:f0:97:18:b6:3b:02:67:c6:2c:d7: 14:54:e6:b7:25:5a:a9:bd:c3:6e:da:33:09:29:d4: 76:ac:bd:ed:2a:2e:25:26:cf:09:19:47:09:a1:10: fd:08:95:0e:16:d3:fe:60:12:a8:d6:6f:2a:35:fa: 46:a6:6f:87:0e:ef:2f:9a:10:ee:b0:21:9a:67:cb: 5d:15:7f:a2:54:0b:78:54:db:0c:fe:d8:d0:e9:f8: aa:68:b9:51:ec:f3:0d:ef:6a:20:1b:19:63:72:e4: 04:15:8d:de:71:36:b2:7b:be:a6:71:14:a8:d9:96: aa:08:97:a2:b7:cf:74:01:6a:20:3b:42:d9:d8:4c: 90:54:b4:85:36:c5:ed:60:e8:3a:e3:92:dc:39:e0: e6:4d:c3:2d:91:50:ac:19:c3:dc:b0:52:17:32:f1: 66:6c:1b:b7:2f:5a:9f:c3:aa:92:27:0c:63:c9:2d: f5:3b:95:94:c1:55:ea:7c:be:e7:3e:d8:37:09:d6: e4:c4:2c:b8:bc:37:0d:c0:d4:09:be:26:a3:f8:5c: fe:de:1e:57:96:bd:10:a6:a2:57:8d:c4:28:d5:57: 03:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F1:93:BA:06:27:EB:72:03:E6:3C:09:44:D3:06:58:97:86:16:1E X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:70:34:12:06:39:70:88:4a:1a:dc:8e:58:ef:f5:11:19:b8: e1:4a:cb:f1:98:e4:9f:cf:9a:fd:13:0c:5d:cf:c5:2b:d4:08: f5:4d:85:3f:e8:c2:e5:6e:62:57:34:2a:86:e7:79:e1:f9:7a: 32:f7:47:2a:31:1b:ee:8b:33:e9:a4:f0:36:17:72:99:3e:9d: 52:9f:65:79:fb:cc:d4:06:c7:73:1b:36:5f:08:ba:0f:07:d4: f8:d5:5e:f1:8b:9d:c0:96:0c:30:3d:eb:a5:8e:c7:b1:80:4e: 08:62:8b:70:c8:b7:f4:63:84:8a:15:1c:2c:e2:32:44:8e:ee: 45:5d:98:db:b9:6e:4a:4c:3a:51:5b:e0:e6:b3:d9:59:ec:73: 2d:04:59:1c:6f:28:11:f2:79:aa:f9:51:91:5f:52:33:86:ea: 42:b9:77:c1:39:1c:6d:eb:58:42:23:dc:5a:74:66:ea:ba:fa: 98:68:2e:2c:d9:a6:32:a8:1c:5d:a6:9b:8d:80:82:d1:37:b6: 82:2e:f3:a3:7d:00:0a:f8:bc:17:15:02:74:91:63:b3:5c:95: c5:d1:e5:d2:d0:85:49:45:ca:29:9c:7e:4e:7d:a5:42:ae:93: 2f:b3:58:50:94:8d:35:c3:08:b4:ca:9c:03:9e:a5:8b:5d:65: 42:88:3a:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwNzE5MDAwNjQ3WhcNMjUwNzI2MDAwNjQ3WjAYMRYwFAYD VQQDEw02ODdhZTE5OC1mMTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1SPw4A9gbmopbQBdTIPgP9zcqsWYQmUO8Os0OvDEI5lLivCXGLY7AmfGLNcU VOa3JVqpvcNu2jMJKdR2rL3tKi4lJs8JGUcJoRD9CJUOFtP+YBKo1m8qNfpGpm+H Du8vmhDusCGaZ8tdFX+iVAt4VNsM/tjQ6fiqaLlR7PMN72ogGxljcuQEFY3ecTay e76mcRSo2ZaqCJeit890AWogO0LZ2EyQVLSFNsXtYOg645LcOeDmTcMtkVCsGcPc sFIXMvFmbBu3L1qfw6qSJwxjyS31O5WUwVXqfL7nPtg3CdbkxCy4vDcNwNQJviaj +Fz+3h5Xlr0QpqJXjcQo1VcDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfxk7oG J+tyA+Y8CUTTBliXhhYeMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhcDQSBjlwiEoa3I5Y7/URGbjhSsvxmOSfz5r9Ewxdz8Ur1Aj1TYU/ 6MLlbmJXNCqG53nh+Xoy90cqMRvuizPppPA2F3KZPp1Sn2V5+8zUBsdzGzZfCLoP B9T41V7xi53AlgwwPeuljsexgE4IYotwyLf0Y4SKFRws4jJEju5FXZjbuW5KTDpR W+Dms9lZ7HMtBFkcbygR8nmq+VGRX1IzhupCuXfBORxt61hCI9xadGbquvqYaC4s 2aYyqBxdppuNgILRN7aCLvOjfQAK+LwXFQJ0kWOzXJXF0eXS0IVJRcopnH5OfaVC rpMvs1hQlI01wwi0ypwDnqWLXWVCiDqz -----END CERTIFICATE-----Generated at Sun Jul 20 10:17:42 2025 by rpki-client