$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: xXiERky8BSvvgIxeowfi2DKvk3jTFG9PTqLnO9mM4wQ= Subject key identifier: DC:04:10:94:15:36:00:4B:A6:BB:99:F0:7C:2A:BE:6C:9F:2C:9A:D0 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: 88 Signing time: Thu 03 Jul 2025 06:51:39 +0000 Manifest this update: Thu 03 Jul 2025 06:51:38 +0000 Manifest next update: Thu 10 Jul 2025 06:51:38 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: fUXnVEIg7isczCL3onhbNvyMA0i4o8Dn8VggW8rvfZQ=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Jul 3 06:51:38 2025 GMT Not After : Jul 10 06:51:38 2025 GMT Subject: CN=6866287a-afb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:40:c1:b0:6c:ef:04:26:f5:9b:7a:97:8b: 27:32:a6:2e:38:62:ae:9e:fe:03:83:f8:8b:17:4f: 8e:7a:76:26:44:4b:c3:ef:14:09:1c:55:49:cb:11: 6c:68:ef:82:76:65:47:fd:20:7f:66:e1:5b:9c:af: 92:60:94:0d:48:44:8d:ca:37:9b:05:8b:fe:f1:60: 42:6e:af:2f:9f:03:a8:e2:57:db:4f:37:da:c0:a2: 77:6d:7d:00:a4:2c:bc:89:92:cf:7c:35:8f:30:78: cd:0d:85:f5:33:8f:b6:75:0a:52:5c:82:3e:7f:a9: a4:39:c3:71:72:d4:32:37:d2:d9:78:64:49:c8:5e: 08:25:8c:b9:f3:65:ee:1a:1e:22:c4:5d:64:45:e7: 47:90:00:f7:ae:2b:a2:96:89:ab:e6:77:8f:36:de: 6a:ed:ff:a7:64:bd:87:37:be:d3:94:e6:ae:2f:90: 69:6c:a1:b6:65:cb:d9:a7:1c:80:2d:6f:b6:20:71: 80:f4:7e:ea:25:a1:a6:1f:e0:52:d2:8c:b3:62:ba: 70:f0:44:93:dd:7e:95:66:3f:15:c1:88:83:6f:af: 09:c8:ed:64:96:11:95:6e:d3:de:1e:37:83:e7:39: 92:75:f4:91:d8:46:58:61:85:2d:89:ad:88:75:bc: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:04:10:94:15:36:00:4B:A6:BB:99:F0:7C:2A:BE:6C:9F:2C:9A:D0 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:a2:32:d1:b5:5f:16:c5:4e:d3:8d:94:60:97:01:5f:84:be: 05:2c:53:20:88:b3:80:5f:36:20:36:dc:be:e1:d5:c3:71:48: 1c:4d:d8:46:38:1b:82:c7:a7:c4:41:ae:94:31:39:f4:c8:6e: 4c:bc:46:7c:78:63:ea:66:df:7b:f9:80:82:b9:9e:7e:b0:50: e7:6e:7d:2e:33:e3:07:cd:42:54:95:d3:75:42:3a:4d:21:2b: 32:6b:06:aa:ea:2c:15:de:33:1e:c9:a9:09:0b:35:dd:5d:a5: fd:4f:85:89:12:11:5a:bb:c1:76:7d:06:c3:84:f0:32:87:a9: ad:13:76:97:e8:9b:cb:27:99:cb:89:bd:81:81:9a:2a:6a:4a: 08:86:ef:8d:1e:39:5d:d3:fe:e9:fa:43:a8:bd:8a:a3:2c:53: 07:29:a7:34:ed:40:c8:2e:c8:2e:2e:1d:c9:d5:3a:ba:66:23: 30:13:34:c2:5a:17:04:d2:11:c0:b8:0b:c1:bc:33:44:60:1b: c0:f4:cd:dc:61:ca:c5:ae:3a:06:7d:29:66:93:b9:8a:33:31: f3:10:0c:c0:12:49:d5:da:45:bd:a2:e8:74:e6:74:77:64:ca: 79:b5:d5:3b:68:d5:d2:aa:0d:db:e5:55:01:25:79:24:d8:bb: f3:36:f7:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUwNzAzMDY1MTM4WhcNMjUwNzEwMDY1MTM4WjAYMRYwFAYD VQQDEw02ODY2Mjg3YS1hZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA089AwbBs7wQm9Zt6l4snMqYuOGKunv4Dg/iLF0+OenYmREvD7xQJHFVJyxFs aO+CdmVH/SB/ZuFbnK+SYJQNSESNyjebBYv+8WBCbq8vnwOo4lfbTzfawKJ3bX0A pCy8iZLPfDWPMHjNDYX1M4+2dQpSXII+f6mkOcNxctQyN9LZeGRJyF4IJYy582Xu Gh4ixF1kRedHkAD3riuilomr5nePNt5q7f+nZL2HN77TlOauL5BpbKG2ZcvZpxyA LW+2IHGA9H7qJaGmH+BS0oyzYrpw8EST3X6VZj8VwYiDb68JyO1klhGVbtPeHjeD 5zmSdfSR2EZYYYUtia2IdbwaNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwEEJQV NgBLpruZ8HwqvmyfLJrQMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIojLRtV8WxU7TjZRglwFfhL4FLFMgiLOAXzYgNty+4dXDcUgcTdhG OBuCx6fEQa6UMTn0yG5MvEZ8eGPqZt97+YCCuZ5+sFDnbn0uM+MHzUJUldN1QjpN ISsyawaq6iwV3jMeyakJCzXdXaX9T4WJEhFau8F2fQbDhPAyh6mtE3aX6JvLJ5nL ib2BgZoqakoIhu+NHjld0/7p+kOovYqjLFMHKac07UDILsguLh3J1Tq6ZiMwEzTC WhcE0hHAuAvBvDNEYBvA9M3cYcrFrjoGfSlmk7mKMzHzEAzAEknV2kW9ouh05nR3 ZMp5tdU7aNXSqg3b5VUBJXkk2LvzNvfZ -----END CERTIFICATE-----Generated at Thu Jul 3 11:08:16 2025 by rpki-client