$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: s0tNXTY+bicXlA9XrAgihPUvuLxzQ0JBHCQibuI2miY= Subject key identifier: FA:92:F3:16:4B:5D:C0:20:2B:DC:B2:FB:A2:29:22:2A:AB:2D:32:3A Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: 5E Signing time: Sat 31 May 2025 06:43:37 +0000 Manifest this update: Sat 31 May 2025 06:43:36 +0000 Manifest next update: Sat 07 Jun 2025 06:43:36 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: bQFnLUGv7ZuFBb8fBK9W7WrQWeC+nkK8DRVDzy8uf+w=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: May 31 06:43:36 2025 GMT Not After : Jun 7 06:43:36 2025 GMT Subject: CN=683aa518-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:a4:34:ab:22:41:78:80:59:e6:39:03:ea: 2e:b5:4d:7f:49:13:fb:6c:e5:c9:0d:a9:2a:d9:1a: 3f:3c:3b:1b:47:d6:1e:1a:d6:42:72:a2:38:ec:4a: 0d:ae:0c:17:3f:43:ea:b6:be:e4:07:41:bc:81:9d: 1b:55:17:6c:4a:4f:09:81:ff:f5:9f:36:04:e1:b5: 8e:f7:4a:28:65:4a:e6:a8:3d:31:8b:0c:56:db:78: cb:d3:9d:a2:63:c5:d5:f5:ef:7f:ef:34:90:6b:c4: 36:07:0d:6e:b9:25:cd:5c:4f:ef:85:72:16:e5:98: 42:6e:5e:03:10:ad:5a:70:4b:e4:5e:c6:5d:83:da: 14:61:27:43:ff:ec:66:47:6e:70:16:09:8b:ae:98: e9:93:7e:16:3c:c6:d6:3b:2a:b4:ca:c3:9d:7e:53: 22:60:4a:38:12:ce:82:e0:c4:38:0e:a8:a6:7f:18: 31:9c:fe:e6:ff:71:f3:27:be:de:c4:da:8a:b9:97: 3c:40:0c:b0:90:2e:04:d7:0f:a2:a7:55:63:28:50: c1:9e:d0:d4:71:41:bb:03:a4:f4:23:ad:e4:ea:f7: 3f:9c:d0:92:c7:5c:75:1b:03:1e:9b:c0:9c:c3:a3: 07:07:18:9f:30:89:64:4a:d7:f8:06:f5:96:4e:fa: 0e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:92:F3:16:4B:5D:C0:20:2B:DC:B2:FB:A2:29:22:2A:AB:2D:32:3A X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:9f:f2:0b:71:01:72:6a:1b:36:04:4b:95:de:79:45:a9: 31:7b:e0:1a:44:ca:60:bc:44:46:dc:ce:18:12:f2:b3:83:4b: bb:c5:80:cb:1a:e9:35:9b:4d:4e:49:f1:17:ab:ae:cb:4e:43: 92:11:ee:c9:1a:d1:93:96:e2:c2:9b:c6:17:92:38:56:68:58: 76:0b:2e:5a:85:aa:08:6c:33:6a:01:c7:a7:0f:f7:83:d8:d0: 3a:2f:1b:fe:9a:61:c6:69:76:c8:df:e7:4d:0e:fb:1f:37:c8: 9d:e1:8d:96:cc:12:30:a2:aa:1a:10:12:23:8d:ba:10:49:5d: 5b:30:e2:05:15:28:0c:ca:37:68:4a:14:14:7d:4b:76:5a:6e: 72:cb:d9:e0:1f:b1:2a:f5:d1:d7:74:15:a2:e0:80:bb:fe:cf: 9d:1f:54:c7:71:9d:ff:42:76:98:c5:22:fa:c5:2b:28:ea:27: e7:d2:57:75:3a:1c:6e:4b:25:e5:7c:aa:65:87:9e:07:7b:a1: ab:7b:89:d4:3d:24:42:8e:dd:53:03:bc:fd:62:3a:0c:6d:43: f1:19:c5:fc:0b:2e:cb:c9:c3:46:e6:73:c3:ec:2e:9f:4d:5b: ac:5a:34:e4:64:b8:90:c0:d3:4d:82:47:87:02:61:70:8d:68: fa:a7:51:f8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTc1NzExMC8GA1UEBRMoRDNCQTQ0REE1Q0JEQzFDQzUxMjVFMkMxMDA3QjZDREI3 RERDREM4NTAeFw0yNTA1MzEwNjQzMzZaFw0yNTA2MDcwNjQzMzZaMBgxFjAUBgNV BAMTDTY4M2FhNTE4LTdkMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC07KQ0qyJBeIBZ5jkD6i61TX9JE/ts5ckNqSrZGj88OxtH1h4a1kJyojjsSg2u DBc/Q+q2vuQHQbyBnRtVF2xKTwmB//WfNgThtY73SihlSuaoPTGLDFbbeMvTnaJj xdX173/vNJBrxDYHDW65Jc1cT++FchblmEJuXgMQrVpwS+Rexl2D2hRhJ0P/7GZH bnAWCYuumOmTfhY8xtY7KrTKw51+UyJgSjgSzoLgxDgOqKZ/GDGc/ub/cfMnvt7E 2oq5lzxADLCQLgTXD6KnVWMoUMGe0NRxQbsDpPQjreTq9z+c0JLHXHUbAx6bwJzD owcHGJ8wiWRK1/gG9ZZO+g6/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+pLzFktd wCAr3LL7oikiKqstMjowHwYDVR0jBBgwFoAU07pE2ly9wcxRJeLBAHts233c3IUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzU3LzMyOTM0Q0VDQjM3 QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDdwRTJseTl3Y3hSSmVMQkFIdHMyMzNjM0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzU3LzMyOTM0Q0VDQjM3QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4 UkplTEJBSHRzMjMzYzNJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA08n/ILcQFyahs2BEuV3nlFqTF74BpEymC8REbczhgS8rODS7vFgMsa 6TWbTU5J8RerrstOQ5IR7ska0ZOW4sKbxheSOFZoWHYLLlqFqghsM2oBx6cP94PY 0DovG/6aYcZpdsjf500O+x83yJ3hjZbMEjCiqhoQEiONuhBJXVsw4gUVKAzKN2hK FBR9S3ZabnLL2eAfsSr10dd0FaLggLv+z50fVMdxnf9CdpjFIvrFKyjqJ+fSV3U6 HG5LJeV8qmWHngd7oat7idQ9JEKO3VMDvP1iOgxtQ/EZxfwLLsvJw0bmc8PsLp9N W6xaNORkuJDA002CR4cCYXCNaPqnUfg= -----END CERTIFICATE-----Generated at Sat May 31 15:04:31 2025 by rpki-client