$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: O1gfl/nsRjmTUo1tNVrjxJRQWs+mFWq5Uld75iuwVXQ= Subject key identifier: 9D:34:1A:4D:AB:26:DE:F7:29:17:BB:FA:AB:01:6F:38:AD:9C:09:3C Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 62 Signing time: Sat 31 May 2025 06:37:25 +0000 Manifest this update: Sat 31 May 2025 06:37:25 +0000 Manifest next update: Sat 07 Jun 2025 06:37:25 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: bd5SqntB/bkWTC2r6GLOYtoRVtg/7vyq/K5WZRqZJqI=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:37:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: May 31 06:37:25 2025 GMT Not After : Jun 7 06:37:25 2025 GMT Subject: CN=683aa3a5-1ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:28:10:5a:47:20:7b:5c:a8:d3:63:96:f9: 01:35:a0:80:e7:1e:81:c9:27:67:ae:df:5d:0d:68: 18:a3:e9:c2:47:48:ff:17:00:15:ee:32:49:98:fd: 08:ec:f1:9e:02:49:37:79:a0:9c:76:1e:c7:27:55: 6d:ee:2b:10:0f:13:9b:e3:6e:88:a5:94:af:02:d0: 0b:79:15:5e:cf:eb:27:fe:0f:d1:c2:08:94:ef:85: cd:09:34:b2:d8:e9:d5:5a:f1:d9:0c:6b:4e:9e:2c: a8:7d:4a:c1:89:1a:b5:b2:4f:93:15:22:00:8f:da: 12:04:47:8e:08:98:4d:14:c6:9d:0f:d0:e7:18:e7: b7:10:2e:35:8c:85:f1:c9:aa:de:a0:fc:f4:ed:a1: 1d:7f:a9:78:f1:75:b6:c8:ce:d0:f8:f2:8a:8c:12: 5f:e3:97:6c:11:34:5c:aa:5b:c1:d5:a3:09:13:e9: bf:99:d3:84:4b:bf:2d:5a:c2:ec:d3:64:a1:df:5e: 36:b5:94:d7:4c:bd:7a:ee:86:06:72:af:45:74:9a: b3:6c:96:3f:03:f4:85:85:d5:54:63:8c:87:33:74: 84:61:a1:18:35:86:c8:34:ea:91:90:ce:73:a9:11: 8d:03:8a:52:1f:3c:cf:0b:d0:ef:35:c9:3a:cf:26: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:34:1A:4D:AB:26:DE:F7:29:17:BB:FA:AB:01:6F:38:AD:9C:09:3C X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:0c:5e:b9:0f:02:25:1a:3a:16:3b:62:9e:f8:c8:1d:a6:8c: ec:3b:19:ef:bc:57:3a:35:0a:d0:45:a7:20:7f:38:5c:d3:45: 9a:42:92:83:15:42:35:1e:01:22:26:1b:0e:a1:93:a7:bf:bd: 9c:c1:a7:c9:7b:9f:0a:c0:00:c3:93:8a:19:98:c1:0f:93:76: fa:f0:0f:83:33:cc:90:c9:ff:f6:d8:df:3d:ea:96:00:58:30: e9:20:73:a7:52:0c:d1:16:45:f8:9c:20:31:89:e7:12:9b:9e: 9d:fc:3b:2e:0b:17:be:3a:1f:56:8d:89:19:61:f1:4a:4e:d0: af:8d:1d:08:fb:eb:28:68:93:56:1e:a7:bb:73:e8:f4:87:2d: c7:05:6d:45:3d:bb:ac:31:df:b3:b3:00:ae:37:15:11:dd:10: 39:55:a7:c8:97:21:3f:37:ec:59:b0:e0:64:1d:1b:7b:14:c7: b8:fd:08:d6:94:df:93:9b:f8:2b:0e:c6:ca:5e:7b:7f:47:69: ac:86:3f:e6:f0:26:09:42:c3:25:33:03:d7:78:97:55:92:dd: 89:8e:15:84:61:7e:cf:00:7f:6a:78:b8:5c:56:af:a6:29:9a: 9f:9c:83:07:02:6d:c0:e8:a9:0f:b8:7a:31:b1:94:c0:55:81: a0:9e:c5:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzYyNzExMC8GA1UEBRMoMDgwRUMxNEEwMDEyNUQ5MTRDN0U2Mjg1REU5QzU2Njg5 QzU4NzJBNDAeFw0yNTA1MzEwNjM3MjVaFw0yNTA2MDcwNjM3MjVaMBgxFjAUBgNV BAMTDTY4M2FhM2E1LTFlZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVaSgQWkcge1yo02OW+QE1oIDnHoHJJ2eu310NaBij6cJHSP8XABXuMkmY/Qjs 8Z4CSTd5oJx2HscnVW3uKxAPE5vjboillK8C0At5FV7P6yf+D9HCCJTvhc0JNLLY 6dVa8dkMa06eLKh9SsGJGrWyT5MVIgCP2hIER44ImE0Uxp0P0OcY57cQLjWMhfHJ qt6g/PTtoR1/qXjxdbbIztD48oqMEl/jl2wRNFyqW8HVowkT6b+Z04RLvy1awuzT ZKHfXja1lNdMvXruhgZyr0V0mrNslj8D9IWF1VRjjIczdIRhoRg1hsg06pGQznOp EY0DilIfPM8L0O81yTrPJhtjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnTQaTasm 3vcpF7v6qwFvOK2cCTwwHwYDVR0jBBgwFoAUCA7BSgASXZFMfmKF3pxWaJxYcqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NjI3L0U3RDI1Nzg2QTg5 MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0E3QlNnQVNYWkZNZm1LRjNweFdhSnhZY3FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NjI3L0U3RDI1Nzg2QTg5MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpG TWZtS0YzcHhXYUp4WWNxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABgMXrkPAiUaOhY7Yp74yB2mjOw7Ge+8Vzo1CtBFpyB/OFzTRZpCkoMV QjUeASImGw6hk6e/vZzBp8l7nwrAAMOTihmYwQ+TdvrwD4MzzJDJ//bY3z3qlgBY MOkgc6dSDNEWRficIDGJ5xKbnp38Oy4LF746H1aNiRlh8UpO0K+NHQj76yhok1Ye p7tz6PSHLccFbUU9u6wx37OzAK43FRHdEDlVp8iXIT837Fmw4GQdG3sUx7j9CNaU 35Ob+CsOxspee39HaayGP+bwJglCwyUzA9d4l1WS3YmOFYRhfs8Af2p4uFxWr6Yp mp+cgwcCbcDoqQ+4ejGxlMBVgaCexXk= -----END CERTIFICATE-----Generated at Sat May 31 17:18:53 2025 by rpki-client