$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft File: 7Wa7QNEhumPFhZepP-d5xx0zF7s.mft (raw, json) Hash identifier: nPdacxieQWPM+sR4CNbAJQDmXT/rDhzRbMafiALKeqY= Subject key identifier: E4:2C:86:91:55:5A:10:CF:39:EA:BA:72:BF:0A:B4:C5:73:36:CB:73 Authority key identifier: ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB Certificate issuer: /CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Certificate serial: 181E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft Manifest number: 1815 Signing time: Sat 12 Apr 2025 16:27:49 +0000 Manifest this update: Sat 12 Apr 2025 16:27:49 +0000 Manifest next update: Sat 19 Apr 2025 16:27:49 +0000 Files and hashes: 1: 7Wa7QNEhumPFhZepP-d5xx0zF7s.crl (hash: ffjq4HhW8KeJsQz1rgnrCJmT9BTiOYVwy09HngnREN4=) 2: E0CEA472AF1911E7B848027EC4F9AE02.roa (hash: bEHQ5RlG6FYkPJW/VBaHVvnbMGH7PBRnp1tsIAbJ2Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 16:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6174 (0x181e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8BE, serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Validity Not Before: Apr 12 16:27:49 2025 GMT Not After : Apr 19 16:27:49 2025 GMT Subject: CN=67fa9485-e64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:99:f8:f0:0e:2e:9d:c7:86:21:a1:35:95:b6: 4f:35:59:58:83:b1:77:d5:0e:b3:2d:b2:87:45:42: 06:e3:9d:4d:9b:5b:6f:1f:b6:c6:b6:48:45:96:e1: 46:32:d6:e1:7c:f2:56:0d:9b:6e:f1:f2:e2:54:8b: 25:ce:ab:a8:46:0c:cd:8d:d1:12:4b:ee:47:ea:66: 18:e2:5d:30:93:16:06:50:3f:00:be:7d:7f:e4:5d: 19:40:d5:d0:d7:bc:90:64:9a:b1:70:80:5e:c5:ce: f2:bd:0a:21:9d:58:08:8e:50:89:23:fc:a5:b6:a8: be:44:5a:47:3f:4d:4d:4a:61:5c:cc:e1:1d:e8:28: a7:63:7f:4b:de:3b:3d:0d:70:ff:76:61:bc:24:91: 63:5f:63:68:6f:27:28:8e:e4:80:87:ae:34:9d:56: d9:13:1a:d9:0b:1c:60:89:24:fa:92:aa:d3:14:cd: e2:4d:69:53:e2:6f:97:50:28:a4:f0:93:77:19:23: b5:43:a3:30:e2:85:fb:ba:34:b4:5f:a4:cc:cc:5e: 33:f6:f6:5e:d1:8b:ad:f7:44:73:fb:2d:70:b9:68: 5a:f6:4e:89:86:c0:e1:2c:1b:22:3f:b4:8c:05:d0: ac:5f:0f:b4:c9:c7:81:57:ad:2c:70:e5:0c:b0:e4: 74:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2C:86:91:55:5A:10:CF:39:EA:BA:72:BF:0A:B4:C5:73:36:CB:73 X509v3 Authority Key Identifier: keyid:ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:cd:2f:e2:76:c8:cc:c7:de:8e:dd:2c:1d:de:7e:0a:5c:d7: f5:f5:c7:b9:40:10:09:f1:06:41:04:c5:55:a3:ac:14:f5:42: 3e:fa:92:44:ae:c2:a3:cf:c5:b6:e3:d9:b8:65:ed:f8:c9:42: 57:db:e9:42:86:f7:ad:54:1e:ca:ce:34:27:a7:19:fb:65:7e: c2:53:03:c8:f5:6c:12:d5:d9:fc:ba:cb:8a:95:a1:a3:56:2b: b1:b7:5e:d4:21:d0:95:66:1e:01:ed:d5:56:1c:7e:47:e4:bf: 08:e6:55:00:af:a1:29:c8:62:c6:9d:74:37:49:68:aa:a8:79: 2b:f0:05:63:b8:96:23:e3:bb:ba:45:74:18:35:ed:93:12:d7: 35:93:c8:7e:05:59:de:b1:e7:93:3f:93:d7:fc:f0:91:06:a8: cd:b8:fc:b0:3d:37:01:6d:10:e7:15:5c:03:e4:b4:00:fb:3f: 32:f2:ef:a1:08:07:66:7a:fb:78:41:87:d4:ec:32:a6:4f:e1: 67:2a:c7:9a:51:3b:51:38:a4:4d:f3:21:54:19:90:a6:fa:ce: 70:f3:96:0a:df:dc:94:e6:e7:07:95:99:3e:d7:e1:25:96:f4: 46:c8:ae:08:85:b4:2c:aa:8d:a6:f7:d5:5b:48:2f:cb:35:72: 8a:7a:d4:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGB4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4QkUxMTAvBgNVBAUTKEVENjZCQjQwRDEyMUJBNjNDNTg1OTdBOTNGRTc3OUM3 MUQzMzE3QkIwHhcNMjUwNDEyMTYyNzQ5WhcNMjUwNDE5MTYyNzQ5WjAYMRYwFAYD VQQDEw02N2ZhOTQ4NS1lNjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Zn48A4unceGIaE1lbZPNVlYg7F31Q6zLbKHRUIG451Nm1tvH7bGtkhFluFG MtbhfPJWDZtu8fLiVIslzquoRgzNjdESS+5H6mYY4l0wkxYGUD8Avn1/5F0ZQNXQ 17yQZJqxcIBexc7yvQohnVgIjlCJI/yltqi+RFpHP01NSmFczOEd6CinY39L3js9 DXD/dmG8JJFjX2NobycojuSAh640nVbZExrZCxxgiST6kqrTFM3iTWlT4m+XUCik 8JN3GSO1Q6Mw4oX7ujS0X6TMzF4z9vZe0Yut90Rz+y1wuWha9k6JhsDhLBsiP7SM BdCsXw+0yceBV60scOUMsOR05QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQshpFV WhDPOeq6cr8KtMVzNstzMB8GA1UdIwQYMBaAFO1mu0DRIbpjxYWXqT/neccdMxe7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhCRS83RDA1MjIwOEFE QUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVtUEZoWmVwUC1kNXh4MHpG N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdXYTdRTkVodW1QRmhaZXBQLWQ1eHgwekY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhCRS83RDA1MjIwOEFEQUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVt UEZoWmVwUC1kNXh4MHpGN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbzS/idsjMx96O3Swd3n4KXNf19ce5QBAJ8QZBBMVVo6wU9UI++pJE rsKjz8W249m4Ze34yUJX2+lChvetVB7KzjQnpxn7ZX7CUwPI9WwS1dn8usuKlaGj Viuxt17UIdCVZh4B7dVWHH5H5L8I5lUAr6EpyGLGnXQ3SWiqqHkr8AVjuJYj47u6 RXQYNe2TEtc1k8h+BVneseeTP5PX/PCRBqjNuPywPTcBbRDnFVwD5LQA+z8y8u+h CAdmevt4QYfU7DKmT+FnKseaUTtROKRN8yFUGZCm+s5w85YK39yU5ucHlZk+1+El lvRGyK4IhbQsqo2m99VbSC/LNXKKetQN -----END CERTIFICATE-----Generated at Sun Apr 13 04:55:19 2025 by rpki-client