$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: 6rdEV+MEefXmaSaHxqtxUcHxN8DdgL6cIUIu2hnRG3c= Subject key identifier: FF:DF:95:6B:79:21:D3:7E:ED:50:E6:38:51:CF:F1:DE:7D:E2:CB:2F Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 0146 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 0141 Signing time: Sat 31 May 2025 04:02:12 +0000 Manifest this update: Sat 31 May 2025 04:02:11 +0000 Manifest next update: Sat 07 Jun 2025 04:02:11 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: o7cvHf3WqPTpwArFoPhZ5OJEjx+8rFzvubpCZMriAMw=) 2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: 1Y1b/QsKKP8Hjc1I0M3GlUj53Sw/Eb4ibtuIxI0mlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 326 (0x146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Validity Not Before: May 31 04:02:11 2025 GMT Not After : Jun 7 04:02:11 2025 GMT Subject: CN=683a7f43-c2a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:60:63:d3:65:02:e4:82:14:60:05:11:bf:1f: 0b:81:60:92:d9:16:92:cc:59:f2:b0:55:ca:1e:b6: 32:59:30:a2:fd:3e:a1:63:ba:43:cc:05:10:b2:31: c0:62:96:a4:1c:38:b6:11:60:34:bb:8b:8d:bd:30: 3a:52:29:4b:60:6a:f7:01:7b:db:e5:1f:8f:dd:7d: ae:18:aa:47:fa:75:62:06:bb:78:3e:86:21:da:16: 2e:d8:0f:5f:5d:7f:0b:62:e7:20:f1:33:96:70:9c: ad:66:14:40:28:e3:f6:8d:27:b3:90:40:c4:76:64: ee:54:5f:c9:1c:ed:ff:7b:f1:15:0f:c2:7f:c7:c3: 8e:98:b9:8f:5b:2e:1d:e4:68:87:56:7c:b4:f8:4d: ca:50:69:e8:d7:bc:c5:58:37:2d:67:36:4b:2e:40: ca:ac:d6:d6:5f:01:04:29:37:86:04:1d:32:57:f8: 8b:7e:56:d1:ce:44:b6:e7:76:3e:27:f1:61:79:ab: ed:ba:ef:e3:43:80:2a:8b:96:13:6f:ed:6c:49:2c: 39:76:9e:4d:f7:28:f2:b3:b8:b2:e8:93:ce:68:0b: 1c:58:e2:6d:38:73:00:0d:62:92:40:ed:79:37:71: 7f:71:62:ed:86:9b:fc:91:91:dd:da:3d:7d:b5:be: 29:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DF:95:6B:79:21:D3:7E:ED:50:E6:38:51:CF:F1:DE:7D:E2:CB:2F X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:2f:38:f1:2c:48:5c:6c:d4:2f:1c:63:bb:f4:6c:fe:88:ff: 1a:7b:a4:48:9a:50:73:ec:65:85:43:22:93:3d:83:69:b3:ad: ab:a5:c3:43:52:aa:eb:d9:29:0e:ca:2a:a9:e9:27:b6:06:83: 82:c4:8f:61:f0:cf:83:ab:14:ef:0d:54:f7:69:fa:99:e6:34: 31:c9:90:2c:d7:3d:06:c2:79:04:8f:8d:13:f3:3a:0b:dd:33: 5d:a5:7d:b9:72:7a:de:f5:22:d1:83:f5:8d:c2:60:d4:9c:a4: e0:db:a1:c6:43:e8:03:c6:f1:d9:c0:d1:73:5f:2c:05:ac:fd: 57:6f:9a:ff:d2:da:0b:c9:a7:81:46:26:fd:4c:87:79:f8:95: 38:b2:f2:43:7c:7e:46:d8:f7:ca:2d:02:85:94:41:61:7d:92: 71:a1:7d:e8:05:09:c6:75:48:8b:0f:30:f9:d6:5e:4a:8e:b2: a0:7c:97:2f:34:90:5a:7f:32:19:5b:6f:f8:e4:06:bd:1b:24: 21:2d:99:da:22:f0:d9:6b:f7:90:7b:63:b5:99:75:cc:66:ba: cf:4c:c5:32:de:dd:2d:6d:12:dd:fe:f8:a4:75:40:f1:67:8d: d3:62:62:0b:83:54:82:44:6c:05:bb:18:98:1a:d5:06:4f:c5: 85:20:bd:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NEYxMTAvBgNVBAUTKEVERTJGNENDNDM0NzI4Qzc5Qzg5MzkxNDE0RjZFRTAz RkI0MTY4OEMwHhcNMjUwNTMxMDQwMjExWhcNMjUwNjA3MDQwMjExWjAYMRYwFAYD VQQDEw02ODNhN2Y0My1jMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7GBj02UC5IIUYAURvx8LgWCS2RaSzFnysFXKHrYyWTCi/T6hY7pDzAUQsjHA YpakHDi2EWA0u4uNvTA6UilLYGr3AXvb5R+P3X2uGKpH+nViBrt4PoYh2hYu2A9f XX8LYucg8TOWcJytZhRAKOP2jSezkEDEdmTuVF/JHO3/e/EVD8J/x8OOmLmPWy4d 5GiHVny0+E3KUGno17zFWDctZzZLLkDKrNbWXwEEKTeGBB0yV/iLflbRzkS253Y+ J/Fheavtuu/jQ4Aqi5YTb+1sSSw5dp5N9yjys7iy6JPOaAscWOJtOHMADWKSQO15 N3F/cWLthpv8kZHd2j19tb4pywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/flWt5 IdN+7VDmOFHP8d594ssvMB8GA1UdIwQYMBaAFO3i9MxDRyjHnIk5FBT27gP7QWiM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk0Ri9DOTg5MDY3MjU3 QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtNZWNpVGtVRlBidUFfdEJh SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk0Ri9DOTg5MDY3MjU3QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtN ZWNpVGtVRlBidUFfdEJhSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByLzjxLEhcbNQvHGO79Gz+iP8ae6RImlBz7GWFQyKTPYNps62rpcND Uqrr2SkOyiqp6Se2BoOCxI9h8M+DqxTvDVT3afqZ5jQxyZAs1z0GwnkEj40T8zoL 3TNdpX25cnre9SLRg/WNwmDUnKTg26HGQ+gDxvHZwNFzXywFrP1Xb5r/0toLyaeB Rib9TId5+JU4svJDfH5G2PfKLQKFlEFhfZJxoX3oBQnGdUiLDzD51l5KjrKgfJcv NJBafzIZW2/45Aa9GyQhLZnaIvDZa/eQe2O1mXXMZrrPTMUy3t0tbRLd/vikdUDx Z43TYmILg1SCRGwFuxiYGtUGT8WFIL3K -----END CERTIFICATE-----Generated at Sat May 31 17:04:59 2025 by rpki-client