$ rpki-client -vvf rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft File: x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft (raw, json) Hash identifier: Z8hYg7leNJuEfd4nPuVGXdaJdyU4Q2kDFXzyVH8uAsw= Subject key identifier: 42:1D:66:CF:3A:D1:91:D9:0D:E0:6B:E7:12:78:10:F3:1F:C0:97:F0 Authority key identifier: C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB Certificate issuer: /CN=A9155675/serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft Manifest number: 01DD Signing time: Sat 31 May 2025 02:23:50 +0000 Manifest this update: Sat 31 May 2025 02:23:49 +0000 Manifest next update: Sat 07 Jun 2025 02:23:49 +0000 Files and hashes: 1: x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl (hash: JSKCiogI19BzmMCZRqJtHMi8WptOLOsZWkAsUJhMIy8=) 2: B8370F3A5E6011EDB5361D3BC4F9AE02.roa (hash: 2v1fNj4a/xWl8aWsyyllbFfz3S6+MQv77E5w5OZvxxo=) 3: B788702E5E6011EDB5361D3BC4F9AE02.roa (hash: GrunRdOPzVgoKdklWpjxOZFACret6qIAPie8FS/bKnw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:23:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155675, serialNumber=C7B1309D00872D0666396B4C23D8EF5C312C6BEB Validity Not Before: May 31 02:23:49 2025 GMT Not After : Jun 7 02:23:49 2025 GMT Subject: CN=683a6836-3c93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:88:0a:15:c7:7a:86:6b:75:ff:dd:ea:68: e5:0c:01:d7:2f:fb:77:54:1e:8e:08:87:64:78:0c: b2:93:42:22:27:cc:2d:6b:c1:c2:8d:93:03:f0:c4: cc:b4:2e:6f:42:44:ba:14:c5:1f:d0:9c:1b:c3:86: 3d:45:b6:61:aa:8c:fb:c7:6d:f8:d7:47:f8:30:53: c0:59:34:65:36:a6:8c:6a:5d:87:c7:70:94:c2:d4: 3a:48:b0:df:88:3e:7a:37:ae:57:ba:cd:21:96:4a: cc:2f:7a:3f:5a:70:b7:dd:b3:92:9a:67:ca:e0:77: c5:8c:3f:00:e2:0b:ae:42:3d:e9:b2:0e:bf:8c:0a: 33:b4:3b:3c:21:fa:41:5a:9c:70:6e:e1:28:24:50: fb:fa:10:5a:bf:c8:44:ea:62:f4:06:6b:b6:f1:bc: 6f:14:ab:ab:c2:eb:05:28:6a:ab:f2:0d:31:18:2f: 9c:22:05:1a:fd:d7:77:7e:f1:89:b2:6c:52:38:06: 4f:f2:d6:7c:3d:ee:3c:98:ce:a2:2c:a2:87:1e:2e: d5:1e:f7:1d:9d:52:b2:4e:f3:56:55:68:5f:05:c8: 5c:f7:51:dd:ff:f3:11:aa:eb:09:05:28:8f:15:eb: 4a:75:45:9a:58:74:23:d0:aa:54:a1:f2:49:f0:ab: ae:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1D:66:CF:3A:D1:91:D9:0D:E0:6B:E7:12:78:10:F3:1F:C0:97:F0 X509v3 Authority Key Identifier: keyid:C7:B1:30:9D:00:87:2D:06:66:39:6B:4C:23:D8:EF:5C:31:2C:6B:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7EwnQCHLQZmOWtMI9jvXDEsa-s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155675/6D11F5785E5C11ED9DDDD21DC4F9AE02/x7EwnQCHLQZmOWtMI9jvXDEsa-s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:5e:6d:59:9f:a9:86:4f:50:fc:2c:15:c3:20:9e:1f:89:06: 3f:1f:1c:e1:a7:61:fa:a4:99:da:1c:ef:44:2c:da:b5:c6:a3: 13:14:2f:46:73:14:aa:6b:81:48:8c:c6:22:6b:a8:4b:af:c7: 68:8d:11:fe:0f:c3:7d:1b:f0:b6:1f:8e:39:f1:9b:0e:10:00: b2:91:bf:7b:d7:3a:96:ec:fa:a6:e5:6c:d7:0d:13:83:7d:80: 8c:a8:4c:1a:42:01:b3:12:d9:f2:c6:dd:d0:7e:e7:d6:41:21: cd:1f:ae:bc:98:79:31:ca:a8:05:d3:e2:37:f6:b5:59:bd:49: 6f:1c:d6:7c:79:6c:d0:29:a3:57:a9:ed:b6:35:57:35:c5:44: 1d:22:f2:c1:b9:f9:96:51:28:cb:fe:c4:19:e2:e1:da:21:2d: 09:ba:d6:1f:48:65:62:35:2d:b5:54:18:40:22:08:fc:61:92: 66:8b:ec:e4:1f:53:66:f5:f5:50:d0:4a:23:02:7b:f9:d2:e9: 6d:7d:8d:f8:fd:5d:bc:c8:85:34:3c:09:40:15:89:b6:7b:d5: 8c:38:91:ee:48:39:82:8e:5d:14:54:97:45:18:0c:9e:37:10: 1d:a9:2c:72:e3:04:a3:24:c3:51:7b:30:43:fe:5b:9a:20:ee: ba:c6:92:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU2NzUxMTAvBgNVBAUTKEM3QjEzMDlEMDA4NzJEMDY2NjM5NkI0QzIzRDhFRjVD MzEyQzZCRUIwHhcNMjUwNTMxMDIyMzQ5WhcNMjUwNjA3MDIyMzQ5WjAYMRYwFAYD VQQDEw02ODNhNjgzNi0zYzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SuIChXHeoZrdf/d6mjlDAHXL/t3VB6OCIdkeAyyk0IiJ8wta8HCjZMD8MTM tC5vQkS6FMUf0Jwbw4Y9RbZhqoz7x23410f4MFPAWTRlNqaMal2Hx3CUwtQ6SLDf iD56N65Xus0hlkrML3o/WnC33bOSmmfK4HfFjD8A4guuQj3psg6/jAoztDs8IfpB WpxwbuEoJFD7+hBav8hE6mL0Bmu28bxvFKurwusFKGqr8g0xGC+cIgUa/dd3fvGJ smxSOAZP8tZ8Pe48mM6iLKKHHi7VHvcdnVKyTvNWVWhfBchc91Hd//MRqusJBSiP FetKdUWaWHQj0KpUofJJ8KuuQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIdZs86 0ZHZDeBr5xJ4EPMfwJfwMB8GA1UdIwQYMBaAFMexMJ0Ahy0GZjlrTCPY71wxLGvr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTY3NS82RDExRjU3ODVF NUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExRWm1PV3RNSTlqdlhERXNh LXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3RXduUUNITFFabU9XdE1JOWp2WERFc2Etcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTY3NS82RDExRjU3ODVFNUMxMUVEOUREREQyMURDNEY5QUUwMi94N0V3blFDSExR Wm1PV3RNSTlqdlhERXNhLXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnXm1Zn6mGT1D8LBXDIJ4fiQY/Hxzhp2H6pJnaHO9ELNq1xqMTFC9G cxSqa4FIjMYia6hLr8dojRH+D8N9G/C2H4458ZsOEACykb971zqW7Pqm5WzXDROD fYCMqEwaQgGzEtnyxt3QfufWQSHNH668mHkxyqgF0+I39rVZvUlvHNZ8eWzQKaNX qe22NVc1xUQdIvLBufmWUSjL/sQZ4uHaIS0JutYfSGViNS21VBhAIgj8YZJmi+zk H1Nm9fVQ0EojAnv50ultfY34/V28yIU0PAlAFYm2e9WMOJHuSDmCjl0UVJdFGAye NxAdqSxy4wSjJMNRezBD/luaIO66xpIe -----END CERTIFICATE-----Generated at Sat May 31 17:39:19 2025 by rpki-client