$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: NI09/lWYgCC/ziYBK9Ep2vxkRMunfJaDIkF+Rryypm4= Subject key identifier: 92:63:AA:91:A4:4D:33:BE:9F:80:CB:61:2D:5A:70:94:B8:5E:37:86 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 5A Signing time: Tue 13 May 2025 06:21:24 +0000 Manifest this update: Tue 13 May 2025 06:21:24 +0000 Manifest next update: Tue 20 May 2025 06:21:24 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: U1b96b9CJupk0fBocXWq5hkuTsekf/4PjsErp/HL0J8=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 06:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: May 13 06:21:24 2025 GMT Not After : May 20 06:21:24 2025 GMT Subject: CN=6822e4e4-6f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:8f:c7:54:1d:28:bc:6d:29:8f:6e:c7:13: 89:42:27:fe:0b:dc:66:a9:14:76:44:5e:4a:c8:08: fd:c7:79:3a:29:43:d9:d8:e8:00:76:1e:ad:68:7f: 66:dd:aa:3c:0f:12:d9:88:2b:ba:46:d2:1a:65:26: 5f:0a:bf:f2:97:2d:61:3e:05:e6:ab:f7:69:0b:9c: b9:c7:1a:18:f6:36:53:89:2d:7f:5a:06:6f:7b:8e: 44:18:4e:d1:59:22:50:b9:25:9c:ae:f0:4b:74:ca: 8c:87:6e:ba:fd:b7:36:67:bb:59:ad:a4:15:0e:a4: 6e:84:3d:f0:96:26:84:7b:b8:34:aa:6d:5d:47:92: e5:7d:d9:ca:dc:1c:56:e2:2c:f0:a9:d2:b8:d1:10: be:47:3f:95:a1:cd:ab:79:93:c7:c8:4d:4a:c1:ed: 94:08:ff:9b:31:5a:59:f3:75:b7:eb:13:c2:d7:56: 9b:ce:25:10:96:ed:51:f9:c3:87:53:8e:33:e7:e3: c1:7e:dc:0a:92:0f:59:bc:da:fd:6e:d5:2d:55:18: 38:15:02:7c:b2:88:19:3f:d5:13:73:32:e4:3b:e7: 83:6e:57:11:09:1f:ab:f1:ca:bb:a7:f4:f5:ec:a8: 09:69:86:2b:d9:01:e4:b8:63:af:34:af:1a:92:ab: ff:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:63:AA:91:A4:4D:33:BE:9F:80:CB:61:2D:5A:70:94:B8:5E:37:86 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:00:91:df:b0:b8:5b:d5:e4:64:9f:bf:fb:c1:b3:98:df:0d: 0c:4e:8b:aa:f4:37:ce:dc:b5:ab:13:c8:d7:13:ba:2a:d1:cf: 5b:bc:58:1c:92:72:4f:c2:91:30:e6:46:f4:f8:61:4f:f2:b3: cb:9d:d2:f5:d9:26:4e:39:b2:15:c1:5a:2d:8f:70:c7:a5:db: c8:c2:b5:42:50:c6:28:b2:6b:b6:1b:03:da:ec:a0:d2:7e:7e: b5:c5:3e:85:8f:28:13:f4:4c:a0:10:c3:63:3d:d0:42:67:f2: f7:ad:c4:66:8f:45:91:35:c0:c4:e9:64:1f:e3:15:12:13:1e: 7e:34:3e:3d:69:ef:0f:0f:f7:ae:1a:a2:20:fb:db:d7:ea:f8: 51:14:ab:d2:4d:9b:fa:9d:56:08:49:7d:ce:df:7f:b1:d4:4f: 1a:26:ac:9d:c8:85:f5:af:86:1c:64:1d:e4:77:b6:51:49:94: a8:f7:1a:7e:44:6a:27:aa:0e:93:e1:9c:d0:58:fb:6f:17:5e: 12:2d:c9:a3:63:c4:c2:0c:74:b4:5e:80:5b:8b:15:03:e3:74: 7c:83:42:a3:d4:c2:95:06:16:c6:26:41:c4:c5:72:0d:49:a9: 4d:cb:44:85:d7:c9:8c:f9:00:26:52:fa:e4:3e:73:56:4c:9d: 71:26:54:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzYyNzExMC8GA1UEBRMoMDgwRUMxNEEwMDEyNUQ5MTRDN0U2Mjg1REU5QzU2Njg5 QzU4NzJBNDAeFw0yNTA1MTMwNjIxMjRaFw0yNTA1MjAwNjIxMjRaMBgxFjAUBgNV BAMTDTY4MjJlNGU0LTZmNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7zY/HVB0ovG0pj27HE4lCJ/4L3GapFHZEXkrICP3HeTopQ9nY6AB2Hq1of2bd qjwPEtmIK7pG0hplJl8Kv/KXLWE+Bear92kLnLnHGhj2NlOJLX9aBm97jkQYTtFZ IlC5JZyu8Et0yoyHbrr9tzZnu1mtpBUOpG6EPfCWJoR7uDSqbV1HkuV92crcHFbi LPCp0rjREL5HP5Whzat5k8fITUrB7ZQI/5sxWlnzdbfrE8LXVpvOJRCW7VH5w4dT jjPn48F+3AqSD1m82v1u1S1VGDgVAnyyiBk/1RNzMuQ754NuVxEJH6vxyrun9PXs qAlphivZAeS4Y680rxqSq/+/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkmOqkaRN M76fgMthLVpwlLheN4YwHwYDVR0jBBgwFoAUCA7BSgASXZFMfmKF3pxWaJxYcqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NjI3L0U3RDI1Nzg2QTg5 MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0E3QlNnQVNYWkZNZm1LRjNweFdhSnhZY3FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NjI3L0U3RDI1Nzg2QTg5MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpG TWZtS0YzcHhXYUp4WWNxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEgAkd+wuFvV5GSfv/vBs5jfDQxOi6r0N87ctasTyNcTuirRz1u8WByS ck/CkTDmRvT4YU/ys8ud0vXZJk45shXBWi2PcMel28jCtUJQxiiya7YbA9rsoNJ+ frXFPoWPKBP0TKAQw2M90EJn8vetxGaPRZE1wMTpZB/jFRITHn40Pj1p7w8P964a oiD729fq+FEUq9JNm/qdVghJfc7ff7HUTxomrJ3IhfWvhhxkHeR3tlFJlKj3Gn5E aieqDpPhnNBY+28XXhItyaNjxMIMdLRegFuLFQPjdHyDQqPUwpUGFsYmQcTFcg1J qU3LRIXXyYz5ACZS+uQ+c1ZMnXEmVLo= -----END CERTIFICATE-----Generated at Wed May 14 19:42:22 2025 by rpki-client