$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: rid3MO9PYNM8Gm/WMUTOvAX2WcT8wP+Dm3jqGHEHZUs= Subject key identifier: AC:1D:37:81:4D:4B:D7:C7:FE:9F:00:F1:92:A2:9B:DD:0F:62:E9:93 Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 07 Signing time: Sat 31 May 2025 07:43:16 +0000 Manifest this update: Sat 31 May 2025 07:43:15 +0000 Manifest next update: Sat 07 Jun 2025 07:43:15 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: hvRGZRyneeNHxM1a/Ms8c6dF2k05LiAyo4JIt/SvxwI=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:43:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: May 31 07:43:15 2025 GMT Not After : Jun 7 07:43:15 2025 GMT Subject: CN=683ab313-2fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:fa:7b:a7:96:19:58:6d:91:29:3a:f9:3f:0d: 11:35:34:dd:86:10:34:b8:08:38:87:3b:2b:49:f5: a9:16:7b:df:6d:b2:b6:b7:7f:64:b0:0b:f4:36:1f: 82:15:63:7a:8c:a0:dd:41:91:f1:74:44:43:2a:31: d1:3e:06:d0:06:2e:d4:15:38:b2:51:72:9f:b3:53: e2:d4:cd:43:51:69:e9:f6:fb:94:8c:f8:66:c7:c9: 8b:a0:18:f3:14:13:96:dd:f8:57:33:82:f9:0a:8e: 28:d3:0d:e5:e4:5c:62:2f:ce:c6:0d:92:08:b2:93: 1d:1c:e4:c4:a9:0f:8d:9d:5b:44:d9:4e:32:86:5c: 84:eb:b7:83:2b:20:47:37:22:2b:17:0c:4a:85:41: 7b:82:f4:84:eb:33:ac:f1:b3:96:20:99:86:33:22: 52:3b:d1:0f:9c:2e:a6:ab:64:19:36:60:ec:81:4a: 17:32:28:60:2d:11:bd:66:d8:83:1b:de:5d:49:55: c3:86:33:e6:96:64:65:b5:f1:28:6b:c4:18:35:b9: 7b:d4:58:01:6a:66:6e:34:f6:4d:d2:8d:a8:ef:15: d9:3e:cc:ab:ed:3a:b1:70:3b:93:4d:4e:ab:d7:58: 34:5e:a4:78:98:a2:d8:bc:a9:9c:2f:f8:b0:34:a8: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1D:37:81:4D:4B:D7:C7:FE:9F:00:F1:92:A2:9B:DD:0F:62:E9:93 X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:fa:d6:fd:75:6d:53:de:e4:1b:38:08:3b:b8:94:6f:d2:93: f8:37:03:7a:69:b1:3b:36:f1:1e:5e:f7:6c:9e:b6:f6:99:7f: 28:ca:38:99:05:29:e7:82:e5:4d:39:22:a5:3e:b6:6a:6a:52: 98:62:c6:9f:a4:e4:2b:be:4e:09:17:86:58:56:d7:14:68:17: a8:75:9d:d5:e2:b6:68:f9:b7:99:50:ee:7c:bc:4a:c1:0d:6f: 04:db:31:0e:bd:d3:27:57:72:b7:20:72:af:9e:47:db:c3:44: ee:56:d5:2d:b0:ba:61:29:31:89:31:54:21:15:79:dc:b3:53: df:35:21:e4:a9:48:51:f6:d8:d4:61:9d:8f:43:bc:77:95:ae: 03:eb:71:ff:ea:da:9b:06:e5:13:8f:d6:58:8f:b9:fc:c2:fb: dd:6c:2a:fa:22:78:f2:54:07:b9:32:78:fd:fc:ce:f8:f8:a8: a1:8b:c4:b3:81:9d:d5:c7:fc:f9:ff:71:c4:d9:33:da:6a:43: 0e:ac:9b:a7:64:b6:8f:b0:2a:87:95:6d:f4:ef:2c:08:18:75: e2:65:b3:29:93:c5:58:8a:62:9e:e6:b0:e9:3e:c2:e4:47:5a: 3b:0d:10:56:9c:dd:1e:a3:f4:e9:87:12:70:d9:8b:fa:5c:0a: fb:ab:0c:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTA1MzEwNzQzMTVaFw0yNTA2MDcwNzQzMTVaMBgxFjAUBgNV BAMTDTY4M2FiMzEzLTJmY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDp+nunlhlYbZEpOvk/DRE1NN2GEDS4CDiHOytJ9akWe99tsra3f2SwC/Q2H4IV Y3qMoN1BkfF0REMqMdE+BtAGLtQVOLJRcp+zU+LUzUNRaen2+5SM+GbHyYugGPMU E5bd+FczgvkKjijTDeXkXGIvzsYNkgiykx0c5MSpD42dW0TZTjKGXITrt4MrIEc3 IisXDEqFQXuC9ITrM6zxs5YgmYYzIlI70Q+cLqarZBk2YOyBShcyKGAtEb1m2IMb 3l1JVcOGM+aWZGW18ShrxBg1uXvUWAFqZm409k3SjajvFdk+zKvtOrFwO5NNTqvX WDRepHiYoti8qZwv+LA0qLJ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrB03gU1L 18f+nwDxkqKb3Q9i6ZMwHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHz61v11bVPe5Bs4CDu4lG/Sk/g3A3ppsTs28R5e92yetvaZfyjKOJkF KeeC5U05IqU+tmpqUphixp+k5Cu+TgkXhlhW1xRoF6h1ndXitmj5t5lQ7ny8SsEN bwTbMQ690ydXcrcgcq+eR9vDRO5W1S2wumEpMYkxVCEVedyzU981IeSpSFH22NRh nY9DvHeVrgPrcf/q2psG5ROP1liPufzC+91sKvoiePJUB7kyeP38zvj4qKGLxLOB ndXH/Pn/ccTZM9pqQw6sm6dkto+wKoeVbfTvLAgYdeJlsymTxViKYp7msOk+wuRH WjsNEFac3R6j9OmHEnDZi/pcCvurDMo= -----END CERTIFICATE-----Generated at Sat May 31 17:48:48 2025 by rpki-client