$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: V55K2yltDQI1ZG9oSHz7ht6qdgRaan3DcYtWWe9KbhE= Subject key identifier: 29:76:55:6A:8D:66:30:19:5C:C2:9E:62:05:01:86:4A:68:FF:B6:F8 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04C6 Signing time: Sat 31 May 2025 00:01:26 +0000 Manifest this update: Sat 31 May 2025 00:01:25 +0000 Manifest next update: Sat 07 Jun 2025 00:01:25 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: 3TNIJ9gatTrkf12oMiNVPVXPT0VwXMSJr44Pl9WuUAc=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1228 (0x4cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: May 31 00:01:25 2025 GMT Not After : Jun 7 00:01:25 2025 GMT Subject: CN=683a46d6-c607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b6:91:d5:fa:0a:ab:e5:8e:0a:16:10:dd:0a: f6:7f:c3:04:4b:1f:d9:71:1d:d6:44:64:63:cb:97: c5:11:79:b2:14:be:cb:3d:7f:17:c2:3f:d1:54:c6: cb:c7:a6:e5:fd:ec:ed:9f:7a:d1:0b:f8:f5:a5:e9: 31:7f:59:25:28:37:14:60:f7:f1:09:5a:8d:cc:6d: 11:fd:47:98:ac:ad:36:ef:6f:47:d2:57:33:8b:ff: a7:7b:af:14:1e:0c:9f:22:62:5e:5e:79:c1:de:5f: d7:ba:80:a8:37:32:1e:c2:0c:86:93:01:ad:2a:1c: c6:bc:bf:aa:cb:e0:7a:50:3e:18:10:b8:0a:15:45: f6:8b:30:a1:35:a4:dd:79:c3:de:62:7d:80:c1:87: d7:fe:7c:ef:74:7a:c6:a6:42:c7:15:eb:ab:7b:0a: b5:24:d3:1b:8a:aa:c9:44:8d:de:1f:f2:33:d6:8c: 1d:9d:b4:1a:c2:17:83:b0:74:73:2c:a6:4f:bd:2d: 42:8d:2d:ec:de:a8:99:7c:ed:9c:ad:6b:85:11:fe: 1a:53:c7:c7:19:4f:ee:57:4d:55:f0:b7:6f:5c:79: 7d:3c:fc:39:6b:18:70:76:24:b7:d1:ce:fb:46:59: ca:f1:6a:fe:52:4b:28:57:cc:58:eb:b0:59:34:20: ce:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:76:55:6A:8D:66:30:19:5C:C2:9E:62:05:01:86:4A:68:FF:B6:F8 X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:d6:c4:91:c9:19:8c:64:f1:6f:70:dc:44:d9:5e:42:62:e6: 8d:fd:48:3f:a3:a8:c4:9c:bf:43:22:47:19:c2:54:62:83:8d: 0e:cb:0c:a9:67:7f:fe:a9:6c:8f:b9:66:47:42:c0:7f:84:1b: c9:b0:72:35:40:26:d2:c0:d9:62:48:3c:d0:00:d4:11:69:48: 3d:bd:f4:52:e5:b8:2e:31:da:36:5c:f6:0e:80:33:94:5e:ee: c6:96:97:43:aa:d6:1d:85:6a:06:74:83:9e:4e:09:a6:a1:f3: 88:ad:72:56:56:00:53:7f:63:b1:60:b8:b9:04:6e:ea:7f:2a: 7c:ed:44:01:80:45:48:ea:ff:63:68:7b:df:4f:d8:67:97:d5: 85:69:4a:e2:8b:6a:94:a4:e6:fe:00:b4:0d:92:35:80:42:b3: 66:ea:58:17:b2:db:8b:8e:c2:6b:c3:0a:4b:b0:01:a9:bd:36: 2c:64:4e:0b:c4:d5:68:9d:7f:68:4f:c7:6c:6b:bc:71:d9:50: e2:f9:a3:5b:43:40:98:ad:bd:07:3e:09:5a:2b:7d:06:66:6c: 33:b7:4e:39:cf:48:1a:3d:6f:dd:fa:4d:09:46:b5:f0:ef:ef: c0:e9:db:39:f8:5e:82:d0:f0:2e:6d:9f:de:f7:c9:b6:83:f6: 4e:90:62:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwNTMxMDAwMTI1WhcNMjUwNjA3MDAwMTI1WjAYMRYwFAYD VQQDEw02ODNhNDZkNi1jNjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbaR1foKq+WOChYQ3Qr2f8MESx/ZcR3WRGRjy5fFEXmyFL7LPX8Xwj/RVMbL x6bl/eztn3rRC/j1pekxf1klKDcUYPfxCVqNzG0R/UeYrK02729H0lczi/+ne68U HgyfImJeXnnB3l/XuoCoNzIewgyGkwGtKhzGvL+qy+B6UD4YELgKFUX2izChNaTd ecPeYn2AwYfX/nzvdHrGpkLHFeurewq1JNMbiqrJRI3eH/Iz1owdnbQawheDsHRz LKZPvS1CjS3s3qiZfO2crWuFEf4aU8fHGU/uV01V8LdvXHl9PPw5axhwdiS30c77 RlnK8Wr+UksoV8xY67BZNCDO0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCl2VWqN ZjAZXMKeYgUBhkpo/7b4MB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl1sSRyRmMZPFvcNxE2V5CYuaN/Ug/o6jEnL9DIkcZwlRig40Oywyp Z3/+qWyPuWZHQsB/hBvJsHI1QCbSwNliSDzQANQRaUg9vfRS5bguMdo2XPYOgDOU Xu7GlpdDqtYdhWoGdIOeTgmmofOIrXJWVgBTf2OxYLi5BG7qfyp87UQBgEVI6v9j aHvfT9hnl9WFaUrii2qUpOb+ALQNkjWAQrNm6lgXstuLjsJrwwpLsAGpvTYsZE4L xNVonX9oT8dsa7xx2VDi+aNbQ0CYrb0HPglaK30GZmwzt045z0gaPW/d+k0JRrXw 7+/A6ds5+F6C0PAubZ/e98m2g/ZOkGJZ -----END CERTIFICATE-----Generated at Sat May 31 17:24:44 2025 by rpki-client