$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: qa1nlhAA5LOVvy2AW5ASjb7DtX03eTsykS04272Xwio= Subject key identifier: 6C:04:5A:DE:AA:BA:86:78:5F:77:33:2B:36:A1:45:DE:57:3B:5E:41 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 15 Signing time: Thu 03 Apr 2025 07:15:38 +0000 Manifest this update: Thu 03 Apr 2025 07:15:38 +0000 Manifest next update: Thu 10 Apr 2025 07:15:38 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: oGrmtV8BWFAEcHQzQutuOiYk5VCxr7XIu2W+zQ3fxFM=) 2: F3229F38F44511EFB636B464C4F9AE02.roa (hash: B0q4cUX8VVB8XcPWLSJob9ZUavvkIS4gZAdv8DWQNPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8 Validity Not Before: Apr 3 07:15:38 2025 GMT Not After : Apr 10 07:15:38 2025 GMT Subject: CN=67ee359a-e98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ff:ad:fa:89:58:ea:09:5a:9f:f5:98:4d:e4: 5e:16:63:dc:34:5c:50:b8:8e:fd:f8:21:3a:d5:59: c6:4f:51:27:69:9f:ee:aa:93:2c:f6:64:a2:16:e3: 28:19:c9:d6:d7:63:a6:12:5c:b7:0b:db:95:ef:de: 98:9d:91:6d:e8:83:ae:94:7d:26:56:79:c0:26:67: ee:49:3e:0a:5f:45:3e:58:54:4b:7f:9b:ba:22:c3: 5f:45:1c:65:21:96:75:a3:47:09:71:af:b9:30:95: 20:f7:57:b5:f9:ae:02:ba:01:c5:2f:7f:d4:b1:63: 4b:40:16:fa:3d:a8:b2:d4:f7:b5:df:f5:b1:92:52: 54:de:ee:01:eb:7a:a2:f4:58:0f:f9:10:10:d4:bb: c7:ce:2c:2d:d1:ec:05:16:b7:25:29:36:fd:89:e6: b2:fc:95:24:40:40:96:93:10:2e:9e:67:1c:10:be: 57:63:2c:3d:cc:0e:9f:1c:e9:a8:04:9c:a3:76:68: fb:e7:f9:7a:87:28:6e:8b:d6:77:32:76:8a:a5:7b: 6e:12:38:f9:0f:a7:6c:e7:c8:8d:92:b1:4a:a2:0f: 38:1b:4a:49:63:55:df:44:c3:dc:03:20:21:79:74: b2:fd:15:99:bf:72:fd:c8:b0:d2:c1:a0:f7:de:84: e5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:04:5A:DE:AA:BA:86:78:5F:77:33:2B:36:A1:45:DE:57:3B:5E:41 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:cf:c1:6f:bb:5c:ae:a5:c0:fa:59:c1:3f:a7:9f:e6:a8:0f: d9:b5:ac:b4:0f:e4:27:7a:89:d3:55:0f:6a:f6:a2:47:36:fa: 83:dc:a4:a4:8b:e5:a6:d1:c4:56:b0:fd:2a:a6:cd:15:9b:bf: 7a:42:ee:c5:d4:18:24:54:7f:6b:15:53:d3:19:7f:f2:03:b6: dc:dc:6b:da:84:ee:37:e2:b2:6e:68:db:60:3f:fa:e6:06:0f: ec:e8:55:ab:49:20:41:a7:2e:15:84:c5:70:cd:db:91:6f:95: b5:1c:d1:46:a0:6e:71:45:44:09:98:27:b9:2a:ec:ab:52:b4: b7:26:d0:01:75:0e:de:36:1f:bd:de:25:e4:59:7e:fa:c8:5b: f8:04:27:38:ce:e4:d8:7a:ff:a3:3e:a0:45:72:43:a1:df:f1: 72:03:c4:f7:ef:cf:60:a3:ac:84:a0:46:75:4b:e4:c8:ec:95: ab:21:3b:84:83:ce:0e:3b:23:36:a4:5d:ca:85:1b:a0:44:fa: 3b:2a:d5:4b:15:8c:d8:87:5a:ff:27:58:50:15:e5:c2:5f:70: 0d:81:c1:e4:34:13:22:55:62:c3:3f:3e:e0:ab:89:07:ef:bb: a0:3e:ab:37:ab:24:dd:77:7a:88:21:e7:f9:1c:51:b4:d2:ae: 10:9d:c2:cc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA0MDMwNzE1MzhaFw0yNTA0MTAwNzE1MzhaMBgxFjAUBgNV BAMTDTY3ZWUzNTlhLWU5OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC//636iVjqCVqf9ZhN5F4WY9w0XFC4jv34ITrVWcZPUSdpn+6qkyz2ZKIW4ygZ ydbXY6YSXLcL25Xv3pidkW3og66UfSZWecAmZ+5JPgpfRT5YVEt/m7oiw19FHGUh lnWjRwlxr7kwlSD3V7X5rgK6AcUvf9SxY0tAFvo9qLLU97Xf9bGSUlTe7gHreqL0 WA/5EBDUu8fOLC3R7AUWtyUpNv2J5rL8lSRAQJaTEC6eZxwQvldjLD3MDp8c6agE nKN2aPvn+XqHKG6L1ncydoqle24SOPkPp2znyI2SsUqiDzgbSkljVd9Ew9wDICF5 dLL9FZm/cv3IsNLBoPfehOVPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbARa3qq6 hnhfdzMrNqFF3lc7XkEwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFXPwW+7XK6lwPpZwT+nn+aoD9m1rLQP5Cd6idNVD2r2okc2+oPcpKSL 5abRxFaw/SqmzRWbv3pC7sXUGCRUf2sVU9MZf/IDttzca9qE7jfism5o22A/+uYG D+zoVatJIEGnLhWExXDN25FvlbUc0UagbnFFRAmYJ7kq7KtStLcm0AF1Dt42H73e JeRZfvrIW/gEJzjO5Nh6/6M+oEVyQ6Hf8XIDxPfvz2CjrISgRnVL5MjslashO4SD zg47IzakXcqFG6BE+jsq1UsVjNiHWv8nWFAV5cJfcA2BweQ0EyJVYsM/PuCriQfv u6A+qzerJN13eogh5/kcUbTSrhCdwsw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:45:25 2025 by rpki-client