$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: e23swtG/lohVkSP8fcvWfyeLU/t2nEONiju7w8qG8pU= Subject key identifier: 95:C5:33:5F:E1:D5:8F:63:43:7C:A2:0C:CB:05:C5:16:67:D4:42:23 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: 70 Signing time: Thu 15 May 2025 06:14:29 +0000 Manifest this update: Thu 15 May 2025 06:14:29 +0000 Manifest next update: Thu 22 May 2025 06:14:29 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: ukMnQQx5HE5rI57R5Bz8OHZ3Mq9/gvjAzqHOCXlz39o=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 May 2025 06:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: May 15 06:14:29 2025 GMT Not After : May 22 06:14:29 2025 GMT Subject: CN=68258645-6771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:2f:6d:b1:65:1c:5b:99:d2:50:28:ac:0c: 3c:7d:c7:c8:95:ae:e4:4e:25:37:d1:1f:42:52:a7: e4:f8:27:48:f4:07:3c:7f:44:2a:35:e4:db:ea:2e: 61:07:9b:1b:e1:10:67:b3:3b:8f:1b:d3:19:56:12: 4a:31:16:79:b3:15:9a:7a:45:ac:c7:92:20:24:37: 74:79:20:59:80:6b:24:a1:88:66:39:79:3d:88:ae: 9b:d6:16:cd:c1:a7:41:37:e5:9c:86:cb:81:44:18: 72:d0:ae:5c:89:6e:93:73:98:67:9e:59:c2:a4:82: 87:f2:02:d7:de:47:7a:f8:20:44:6b:4c:57:2c:2f: b8:e0:6d:8f:c0:23:e5:97:35:f9:f3:bf:e9:2b:5e: 76:ca:67:a5:f7:0b:34:d4:7c:29:e4:ad:95:44:c5: 0f:c8:91:2a:2c:c0:69:59:84:7b:5c:ff:9c:5d:f7: 4a:96:a6:35:54:d0:0c:1c:d6:c1:38:74:ab:33:55: a9:d7:4a:a3:c7:ea:e7:d6:0f:43:c5:29:6e:c2:08: 5e:c3:a1:33:39:9c:49:f3:db:db:8d:47:57:ed:1c: 0a:0e:13:e7:55:84:b2:b0:77:27:e0:90:ed:32:7d: b3:10:0f:b7:98:5e:6a:1e:83:0b:3a:fd:a0:db:a9: b8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:33:5F:E1:D5:8F:63:43:7C:A2:0C:CB:05:C5:16:67:D4:42:23 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9b:e9:52:2e:b1:f8:94:21:3b:c6:98:27:cd:85:16:57:6a: 5b:f7:3c:be:6c:72:2a:5e:a5:76:67:86:40:4e:5f:14:ba:75: b6:19:c9:63:24:74:12:95:c9:e4:64:c5:b4:8b:2a:d1:47:66: bc:ea:a6:c0:3b:50:ae:2a:22:4c:57:1f:a6:ce:74:78:31:c3: bf:ea:0f:da:4b:cf:91:22:3a:1d:01:06:8a:13:db:0a:4a:59: 9f:bd:80:74:0a:10:52:aa:ea:ab:8f:eb:f3:a5:71:c2:8c:46: 96:47:98:9d:10:d1:46:84:f9:ba:71:da:c4:ff:2e:64:a8:31: c8:07:ef:07:1f:62:9b:cb:10:f8:2f:11:1f:b0:8c:9f:e6:da: 31:2f:3d:46:62:82:53:1f:fe:ac:56:39:e6:81:4e:90:31:9a: 71:59:82:d2:98:52:dd:38:49:6f:f3:d6:9a:42:39:68:d7:20: bf:80:cc:8b:3e:66:c0:d3:bb:3b:53:51:70:5c:1e:84:e9:fd: 0b:53:06:9d:bb:f3:37:f0:14:98:e1:91:eb:87:69:73:a8:59: f3:b8:e9:98:75:f5:c9:aa:a6:45:6a:48:0e:13:c8:95:bd:06: 78:06:55:f5:9c:01:d9:41:c3:77:c6:54:8d:f4:f6:d8:5b:4d: 58:18:c8:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 OUU1MDExMC8GA1UEBRMoRUNCNDg0MDA1NjA0NkE4QTkzMjI4NEVBNUYxRTA0NkEw MjMzMUNFOTAeFw0yNTA1MTUwNjE0MjlaFw0yNTA1MjIwNjE0MjlaMBgxFjAUBgNV BAMTDTY4MjU4NjQ1LTY3NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzFC9tsWUcW5nSUCisDDx9x8iVruROJTfRH0JSp+T4J0j0Bzx/RCo15NvqLmEH mxvhEGezO48b0xlWEkoxFnmzFZp6RazHkiAkN3R5IFmAayShiGY5eT2IrpvWFs3B p0E35ZyGy4FEGHLQrlyJbpNzmGeeWcKkgofyAtfeR3r4IERrTFcsL7jgbY/AI+WX Nfnzv+krXnbKZ6X3CzTUfCnkrZVExQ/IkSoswGlZhHtc/5xd90qWpjVU0Awc1sE4 dKszVanXSqPH6ufWD0PFKW7CCF7DoTM5nEnz29uNR1ftHAoOE+dVhLKwdyfgkO0y fbMQD7eYXmoegws6/aDbqbgnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlcUzX+HV j2NDfKIMywXFFmfUQiMwHwYDVR0jBBgwFoAU7LSEAFYEaoqTIoTqXx4EagIzHOkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5RTUwLzJERDc2MzhDOTI0 MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhP ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0xTRUFGWUVhb3FUSW9UcVh4NEVhZ0l6SE9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ5 RTUwLzJERDc2MzhDOTI0MTExRUZBNTZDQ0UyMUM0RjlBRTAyLzdMU0VBRllFYW9x VElvVHFYeDRFYWdJekhPay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJyb6VIusfiUITvGmCfNhRZXalv3PL5scipepXZnhkBOXxS6dbYZyWMk dBKVyeRkxbSLKtFHZrzqpsA7UK4qIkxXH6bOdHgxw7/qD9pLz5EiOh0BBooT2wpK WZ+9gHQKEFKq6quP6/OlccKMRpZHmJ0Q0UaE+bpx2sT/LmSoMcgH7wcfYpvLEPgv ER+wjJ/m2jEvPUZiglMf/qxWOeaBTpAxmnFZgtKYUt04SW/z1ppCOWjXIL+AzIs+ ZsDTuztTUXBcHoTp/QtTBp278zfwFJjhkeuHaXOoWfO46Zh19cmqpkVqSA4TyJW9 BngGVfWcAdlBw3fGVI309thbTVgYyNc= -----END CERTIFICATE-----Generated at Fri May 16 06:14:17 2025 by rpki-client