$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: yH76vnWIb60YU5j086wwkXfqcj4ijMa3Tg/7AuHomJw= Subject key identifier: 02:18:C9:9E:F2:1A:5C:52:80:E5:9B:68:6B:25:BE:46:37:44:E9:EB Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: 7D Signing time: Wed 11 Jun 2025 06:10:40 +0000 Manifest this update: Wed 11 Jun 2025 06:10:40 +0000 Manifest next update: Wed 18 Jun 2025 06:10:40 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: PkpOdgW1XcQ25wzjPRNq7SILXHXCMKZXZaSDhLwFR4A=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:10:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Jun 11 06:10:40 2025 GMT Not After : Jun 18 06:10:40 2025 GMT Subject: CN=68491de0-973e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:f4:15:34:c8:35:57:23:69:88:2e:6f:83: 9e:ae:b6:ee:f3:aa:6f:8c:ac:d8:06:0c:7d:7f:7e: 3e:5e:fb:8a:7a:c4:d9:b0:13:98:c8:7d:54:dc:61: 54:d6:9c:0f:9c:9a:07:bc:22:99:4e:7e:93:34:a1: a5:96:79:74:87:95:9b:30:1a:37:2a:a6:1c:37:54: 81:dd:1f:34:55:d6:f5:e5:d6:06:ad:86:44:12:9a: 79:99:08:1e:6f:c2:e7:09:e2:f5:59:21:41:7d:ee: 83:63:22:8f:0f:d7:d6:9c:65:21:1a:70:84:1f:29: 28:e7:f6:70:9b:d6:80:12:0d:5d:2f:82:e2:00:2d: 09:ac:ff:9d:cf:60:5b:a8:a2:46:95:c0:50:80:d8: cf:19:14:c9:8e:47:69:35:9c:eb:24:47:15:bd:36: b9:28:8d:27:60:5b:b6:ce:a8:9c:d5:d9:65:0d:53: dc:12:0d:a2:59:64:ae:56:fe:e5:ac:95:7a:01:20: 58:74:1f:a9:e2:21:2f:d4:02:62:3e:38:5e:2b:46: 71:f0:ab:fe:e0:5b:a1:41:32:5f:8c:18:eb:48:c8: aa:3b:d8:a8:7b:3c:73:e6:05:5b:75:9f:4f:c9:cd: fe:75:d9:eb:5d:90:5f:c2:08:a7:ba:b3:f2:96:8a: 84:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:18:C9:9E:F2:1A:5C:52:80:E5:9B:68:6B:25:BE:46:37:44:E9:EB X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:64:2c:07:1b:da:d4:4b:36:fb:d4:38:a1:0d:7c:39:eb:5c: a9:0a:1f:91:34:4d:01:52:6b:47:b9:ae:d7:81:d2:91:78:60: a8:df:8e:f4:2e:db:f3:2b:3d:0d:cd:2b:61:e9:64:9b:29:9d: fc:11:b1:72:e3:46:ed:93:e3:72:dc:b0:29:5c:c5:ce:62:a5: 8c:fb:bb:3e:88:76:84:7e:87:8d:20:21:dd:2e:04:3e:4b:9f: 07:2c:18:aa:74:98:a5:05:5b:b1:5a:ff:33:c4:9a:87:33:85: 80:1d:47:a5:24:70:65:94:0e:2a:e2:b8:56:8c:9b:50:21:19: 28:b1:9e:7f:67:24:da:11:6a:98:d4:86:1b:1a:cf:28:09:e8: 74:c1:84:05:ba:a2:12:c6:03:a6:a5:af:ee:7c:53:1c:8d:30: 6a:2c:c2:e7:dd:e2:95:c2:08:35:19:19:b2:47:e6:d8:f0:b0: a3:ca:de:f9:9a:d7:17:0d:cf:2f:89:35:96:c0:3a:cb:ee:f2: 92:8e:59:b6:f6:4d:c8:da:2d:48:4a:9a:d8:5b:a4:11:e3:c8: 94:a0:ef:10:e4:18:49:51:b8:b5:d7:61:7b:d5:c2:84:97:9f: 78:51:24:0d:99:38:ad:17:42:dd:d5:2e:40:81:25:5d:06:96: 84:31:ce:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUwNjExMDYxMDQwWhcNMjUwNjE4MDYxMDQwWjAYMRYwFAYD VQQDEw02ODQ5MWRlMC05NzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGf0FTTINVcjaYgub4Oerrbu86pvjKzYBgx9f34+XvuKesTZsBOYyH1U3GFU 1pwPnJoHvCKZTn6TNKGllnl0h5WbMBo3KqYcN1SB3R80Vdb15dYGrYZEEpp5mQge b8LnCeL1WSFBfe6DYyKPD9fWnGUhGnCEHyko5/Zwm9aAEg1dL4LiAC0JrP+dz2Bb qKJGlcBQgNjPGRTJjkdpNZzrJEcVvTa5KI0nYFu2zqic1dllDVPcEg2iWWSuVv7l rJV6ASBYdB+p4iEv1AJiPjheK0Zx8Kv+4FuhQTJfjBjrSMiqO9ioezxz5gVbdZ9P yc3+ddnrXZBfwginurPyloqEdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIYyZ7y GlxSgOWbaGslvkY3ROnrMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUZCwHG9rUSzb71DihDXw561ypCh+RNE0BUmtHua7XgdKReGCo3470 LtvzKz0NzSth6WSbKZ38EbFy40btk+Ny3LApXMXOYqWM+7s+iHaEfoeNICHdLgQ+ S58HLBiqdJilBVuxWv8zxJqHM4WAHUelJHBllA4q4rhWjJtQIRkosZ5/ZyTaEWqY 1IYbGs8oCeh0wYQFuqISxgOmpa/ufFMcjTBqLMLn3eKVwgg1GRmyR+bY8LCjyt75 mtcXDc8viTWWwDrL7vKSjlm29k3I2i1ISprYW6QR48iUoO8Q5BhJUbi112F71cKE l594USQNmTitF0Ld1S5AgSVdBpaEMc7+ -----END CERTIFICATE-----Generated at Thu Jun 12 09:48:34 2025 by rpki-client