$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: wy6aMQU18gl6Dl8BHwJJVEv2jiz62gaum48GWWhlT9A= Subject key identifier: 07:54:12:DA:F6:9F:8A:52:43:6C:76:6E:C1:4C:5F:F1:FE:EA:35:3E Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C44 Signing time: Fri 30 May 2025 18:39:36 +0000 Manifest this update: Fri 30 May 2025 18:39:36 +0000 Manifest next update: Fri 06 Jun 2025 18:39:36 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: oBZTsFVG1BP1EyojGiuV9smxMDtZBEXu670SkfD+210=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3150 (0xc4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: May 30 18:39:36 2025 GMT Not After : Jun 6 18:39:36 2025 GMT Subject: CN=6839fb68-1e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:15:f1:1e:f9:24:54:bd:39:b6:2b:86:7e:4b: 4c:5e:80:74:21:c5:30:fe:98:2a:17:e0:d0:c8:09: a9:f9:e9:b2:5d:c7:ad:03:ec:72:e7:4b:f8:af:23: 47:db:72:3a:e1:ed:6c:9c:c7:58:83:f7:46:c3:80: 5d:f9:fb:e7:92:6d:ee:ad:61:31:b1:7d:c6:49:75: cc:9e:15:d1:b3:89:56:81:25:99:b6:aa:ba:f2:6c: 01:1e:79:c2:50:93:7f:3c:2a:b1:74:8d:42:ea:08: d6:aa:f9:62:6b:b3:71:74:1b:af:81:7f:5e:a9:b7: f3:07:3b:0d:33:65:3a:8e:03:af:56:37:f3:73:cf: 00:0a:95:0e:f4:b4:fe:35:47:90:bb:e0:9e:d3:21: 7e:45:da:d3:0a:65:e7:e8:f2:9c:9d:65:f6:64:cf: db:13:99:27:a4:1e:70:75:cc:09:0e:de:e7:5b:d8: de:e2:22:5e:44:55:c4:75:64:2c:43:53:d6:e9:e4: 52:d2:ee:d7:0f:27:be:61:a6:76:cb:bd:87:e1:07: d7:a0:cc:52:f1:d1:34:9f:f6:30:df:c8:49:3c:26: b0:e0:1c:42:26:40:0f:74:99:cd:b8:b3:bf:e3:82: 8b:c0:00:07:5b:e6:5e:29:04:3f:2d:0d:21:5b:07: 62:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:54:12:DA:F6:9F:8A:52:43:6C:76:6E:C1:4C:5F:F1:FE:EA:35:3E X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:8c:f0:e4:48:bc:dc:65:1e:c0:7e:3e:6c:46:56:d9:bf:7f: 8e:b3:f3:3b:e8:ec:ad:b6:76:52:d3:ce:53:2c:b2:b7:01:85: a4:d7:76:41:9f:34:c5:ac:83:dd:45:54:9e:85:97:9b:21:18: 09:17:78:73:79:1a:83:0d:24:a2:a2:76:85:12:cd:25:75:46: 09:a9:19:f6:89:a8:a3:ec:1f:11:40:c6:e3:54:b4:8b:cc:1b: 94:42:65:55:e8:25:5c:71:06:0a:30:f5:c2:cc:6b:46:ad:06: 36:03:18:25:a6:c9:6b:06:1f:0a:a3:62:a6:9f:8c:2a:01:94: b3:95:53:8c:38:b6:89:a6:6a:dc:10:6a:aa:18:85:7f:05:bc: 6f:3a:fe:c8:3e:d4:b2:ba:aa:b8:71:3d:10:1e:97:23:7f:4f: f0:7d:cc:7f:ab:42:90:04:52:8b:c5:f0:95:e6:ad:04:a8:3f: 85:df:65:97:8f:0a:d8:9b:0e:01:98:a5:9c:93:f7:a9:a1:99: e2:79:18:6f:7b:8c:a8:88:01:6d:32:08:71:67:29:d1:6b:00: e5:30:dc:5a:8f:cf:e4:3b:97:aa:a8:95:c5:57:7a:2d:31:18: c7:1e:2d:7e:fa:88:ca:0f:7e:53:a0:80:29:1e:18:57:83:eb: 08:2c:be:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUwNTMwMTgzOTM2WhcNMjUwNjA2MTgzOTM2WjAYMRYwFAYD VQQDEw02ODM5ZmI2OC0xZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4RXxHvkkVL05tiuGfktMXoB0IcUw/pgqF+DQyAmp+emyXcetA+xy50v4ryNH 23I64e1snMdYg/dGw4Bd+fvnkm3urWExsX3GSXXMnhXRs4lWgSWZtqq68mwBHnnC UJN/PCqxdI1C6gjWqvlia7NxdBuvgX9eqbfzBzsNM2U6jgOvVjfzc88ACpUO9LT+ NUeQu+Ce0yF+RdrTCmXn6PKcnWX2ZM/bE5knpB5wdcwJDt7nW9je4iJeRFXEdWQs Q1PW6eRS0u7XDye+YaZ2y72H4QfXoMxS8dE0n/Yw38hJPCaw4BxCJkAPdJnNuLO/ 44KLwAAHW+ZeKQQ/LQ0hWwdiywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdUEtr2 n4pSQ2x2bsFMX/H+6jU+MB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBajPDkSLzcZR7Afj5sRlbZv3+Os/M76OyttnZS085TLLK3AYWk13ZB nzTFrIPdRVSehZebIRgJF3hzeRqDDSSionaFEs0ldUYJqRn2iaij7B8RQMbjVLSL zBuUQmVV6CVccQYKMPXCzGtGrQY2AxglpslrBh8Ko2Kmn4wqAZSzlVOMOLaJpmrc EGqqGIV/BbxvOv7IPtSyuqq4cT0QHpcjf0/wfcx/q0KQBFKLxfCV5q0EqD+F32WX jwrYmw4BmKWck/epoZnieRhve4yoiAFtMghxZynRawDlMNxaj8/kO5eqqJXFV3ot MRjHHi1++ojKD35ToIApHhhXg+sILL6F -----END CERTIFICATE-----Generated at Sat May 31 17:01:12 2025 by rpki-client