$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: 5oSLTa7/Qlggxtk6yap53EiiWTUZTS6K+NPN+xY5rZo= Subject key identifier: 30:2E:59:A6:B1:B8:19:FA:7C:D5:3C:6C:07:6C:2E:4F:31:94:44:2E Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01C5 Signing time: Sat 31 May 2025 02:41:42 +0000 Manifest this update: Sat 31 May 2025 02:41:42 +0000 Manifest next update: Sat 07 Jun 2025 02:41:42 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: EXWXhx6NG01sYFZY6/VUpLqjQJtJeYjseg4GJvHhyz8=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 02:41:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: May 31 02:41:42 2025 GMT Not After : Jun 7 02:41:42 2025 GMT Subject: CN=683a6c66-7771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:86:c8:c5:00:1e:05:8b:75:54:25:c0:a8: e5:db:6e:0d:3a:21:07:01:e6:50:ab:d8:5f:ea:e5: df:24:cb:72:23:6f:eb:c6:1c:a0:b8:75:f9:b8:49: 9f:2d:d5:e8:c5:10:cb:8f:15:d1:6b:4f:4a:2b:de: c8:c1:8d:42:43:0f:40:75:25:cd:0f:cc:45:bc:7d: 8e:3f:a5:fc:44:d8:0c:53:a1:bf:e8:c5:1d:e2:2f: 40:94:bd:3e:e3:b3:31:86:94:37:e1:0c:a1:96:0b: 23:3c:00:72:70:45:0d:15:dd:ed:2a:e7:b6:86:58: 8b:0d:67:60:ff:dc:f3:cb:90:35:e9:8d:55:a6:71: 08:d8:fd:49:9a:34:07:52:4a:1e:1a:1a:a7:fb:2d: 6a:83:49:fe:bc:8f:0d:de:e5:f2:33:ca:a9:13:5e: c9:ce:a1:d5:7b:09:ea:33:c8:19:54:64:45:b9:d8: 99:aa:99:ae:f4:cd:ec:ca:b3:5d:75:04:98:76:16: 27:17:cb:cc:27:3e:fe:20:8e:76:34:12:8d:8c:a2: 1e:30:6e:89:1d:de:11:9a:3f:c3:12:43:28:16:71: 42:4e:e5:b9:d4:5f:52:ed:c3:d2:d9:15:d3:df:1f: 28:60:80:4c:e8:23:d0:f9:e9:86:cf:92:83:ab:76: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:2E:59:A6:B1:B8:19:FA:7C:D5:3C:6C:07:6C:2E:4F:31:94:44:2E X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:dd:4d:50:1e:28:1d:8b:ee:fe:bf:a1:67:fb:6d:50:a3:5b: 00:1c:aa:21:fa:ce:0c:86:80:f5:6d:68:cb:68:b1:aa:62:28: b9:82:6a:b9:79:a0:a8:75:1a:a1:7f:28:75:6a:3d:f2:fc:ae: 39:12:97:21:98:17:71:b5:ce:5b:5d:2a:f2:ed:15:b4:d1:0a: f1:2b:8a:a0:61:5e:cb:3f:8e:e9:81:6b:e7:ab:cf:54:f3:a9: 31:87:1f:d9:7e:ee:b0:ce:61:e6:b3:1d:7c:d1:44:ac:13:11: 76:ae:fd:64:b8:a5:da:93:f4:7c:d9:b4:69:87:02:9c:a0:1c: 1f:b5:69:e7:76:97:02:86:c1:68:86:f8:93:7e:df:c2:bc:09: a0:27:23:1f:2b:7f:9d:88:88:9c:2f:e6:ba:93:0f:3e:7b:a7: 4f:84:14:a3:d2:0e:c3:af:d0:57:41:3b:b3:2e:c8:8c:4f:30: f2:de:da:f1:91:d1:57:4f:3b:90:34:fa:34:7f:64:2f:db:01: 14:d8:b2:9a:7a:57:08:17:3b:eb:73:40:49:c1:c9:c2:e7:d7: bf:34:5f:9d:f2:32:c3:e8:e2:2e:d1:14:0e:85:90:40:9c:da: 65:f9:f0:13:e9:5b:df:4c:b0:08:b2:6d:e3:af:ac:8c:7a:e3: 41:9a:30:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNTMxMDI0MTQyWhcNMjUwNjA3MDI0MTQyWjAYMRYwFAYD VQQDEw02ODNhNmM2Ni03NzcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnVqGyMUAHgWLdVQlwKjl224NOiEHAeZQq9hf6uXfJMtyI2/rxhyguHX5uEmf LdXoxRDLjxXRa09KK97IwY1CQw9AdSXND8xFvH2OP6X8RNgMU6G/6MUd4i9AlL0+ 47MxhpQ34QyhlgsjPABycEUNFd3tKue2hliLDWdg/9zzy5A16Y1VpnEI2P1JmjQH UkoeGhqn+y1qg0n+vI8N3uXyM8qpE17JzqHVewnqM8gZVGRFudiZqpmu9M3syrNd dQSYdhYnF8vMJz7+II52NBKNjKIeMG6JHd4Rmj/DEkMoFnFCTuW51F9S7cPS2RXT 3x8oYIBM6CPQ+emGz5KDq3a3tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAuWaax uBn6fNU8bAdsLk8xlEQuMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA3U1QHigdi+7+v6Fn+21Qo1sAHKoh+s4MhoD1bWjLaLGqYii5gmq5 eaCodRqhfyh1aj3y/K45EpchmBdxtc5bXSry7RW00QrxK4qgYV7LP47pgWvnq89U 86kxhx/Zfu6wzmHmsx180USsExF2rv1kuKXak/R82bRphwKcoBwftWnndpcChsFo hviTft/CvAmgJyMfK3+diIicL+a6kw8+e6dPhBSj0g7Dr9BXQTuzLsiMTzDy3trx kdFXTzuQNPo0f2Qv2wEU2LKaelcIFzvrc0BJwcnC59e/NF+d8jLD6OIu0RQOhZBA nNpl+fAT6VvfTLAIsm3jr6yMeuNBmjAl -----END CERTIFICATE-----Generated at Sat May 31 17:26:15 2025 by rpki-client