$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: GteC6hal5d/cfFDXINiEJN53GkWbcYOkvUsVA39btvQ= Subject key identifier: A3:30:63:20:30:FA:0A:9D:95:55:2A:10:71:A1:4A:06:82:B4:4F:02 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04D7 Signing time: Thu 03 Jul 2025 00:06:22 +0000 Manifest this update: Thu 03 Jul 2025 00:06:22 +0000 Manifest next update: Thu 10 Jul 2025 00:06:22 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: tQPuw1nJHnpjBCEriDppiUc5FXfmw+VeBAoQnF6gDKc=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Jul 3 00:06:22 2025 GMT Not After : Jul 10 00:06:22 2025 GMT Subject: CN=6865c97e-d8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8d:92:d5:22:99:f2:f6:a5:ce:70:7d:94:f3: 0a:33:b1:49:61:a5:be:f7:b0:15:3d:cb:a0:fc:84: e3:14:e6:b2:75:75:80:55:6b:a0:5f:18:93:24:b9: 65:08:f0:dc:2f:29:e9:51:35:d2:97:4a:d5:87:b7: e9:39:17:97:ae:8c:33:38:21:b4:1c:ed:0f:ff:d2: a6:0b:1a:b7:f8:7b:0d:0b:0b:32:c7:ed:63:54:71: a2:2a:47:c9:cd:40:be:e5:aa:3e:a6:9b:42:49:58: 7a:3b:da:cd:00:40:f7:95:6c:90:5e:dd:af:7c:26: 08:f2:de:9b:8b:fb:89:39:33:6a:34:34:ea:4d:8e: 24:51:c3:45:3c:61:a6:69:d7:47:d9:2d:05:06:9a: be:62:3b:f1:a0:a5:97:8c:d9:39:f7:3f:f7:f2:08: 2a:6c:f5:df:4f:5a:39:f6:e5:e1:4f:fe:e2:7a:96: 3c:cc:84:0b:3b:33:e6:fa:5d:cb:a7:61:aa:40:4d: 40:0e:08:6b:3e:cb:a9:26:ce:80:29:1f:8b:34:7d: a9:49:c7:7b:c0:65:34:96:5c:40:d0:64:cc:3d:56: 48:8a:2f:46:7b:70:00:3b:44:2e:30:a7:82:03:a6: 9f:e0:e8:21:12:a8:07:a4:4a:1e:b3:76:ec:db:aa: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:30:63:20:30:FA:0A:9D:95:55:2A:10:71:A1:4A:06:82:B4:4F:02 X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:3a:bb:3f:e6:5a:af:a0:90:7b:7a:22:81:50:03:dc:ff:0e: 3e:fb:7e:15:41:78:9d:5b:26:b1:58:21:3b:62:cf:a7:5a:1b: 03:71:46:26:01:27:39:5a:fd:1c:92:1e:1d:70:eb:35:35:4a: af:74:c0:8c:58:82:d1:4d:94:96:97:c9:e0:b9:fd:0f:29:6c: 31:05:fe:20:f5:15:d3:8f:4e:93:c3:11:fd:87:59:f8:40:ba: 97:76:79:bf:91:e8:ed:88:fc:59:ad:5e:b4:00:1c:79:42:cd: 3d:5f:cc:e1:da:6a:d6:dc:1f:6c:23:b5:f5:79:54:68:14:e3: ce:6c:4a:cf:74:2d:35:26:3a:f0:e5:ca:66:71:fa:51:ba:b4: db:2c:c9:32:4a:f8:30:eb:1f:3a:8d:a7:a3:2a:c1:88:30:e7: 0d:54:14:cd:4e:56:98:fb:af:fb:22:22:f0:fd:5c:02:8a:bb: 51:b5:1b:6d:2a:7b:15:d6:78:a7:ad:19:8f:dd:9c:02:06:af: ad:13:fd:4c:9d:70:73:c6:2a:db:52:40:27:a0:8f:f1:9c:9f: d1:3d:8d:0d:cb:8b:51:a6:a0:fe:8d:e6:21:bf:fc:c2:d7:ab: ee:2b:be:cb:f1:dc:85:c9:43:95:b3:c1:78:38:cd:a3:4f:f4: e1:15:20:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwNzAzMDAwNjIyWhcNMjUwNzEwMDAwNjIyWjAYMRYwFAYD VQQDEw02ODY1Yzk3ZS1kOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArY2S1SKZ8valznB9lPMKM7FJYaW+97AVPcug/ITjFOaydXWAVWugXxiTJLll CPDcLynpUTXSl0rVh7fpOReXrowzOCG0HO0P/9KmCxq3+HsNCwsyx+1jVHGiKkfJ zUC+5ao+pptCSVh6O9rNAED3lWyQXt2vfCYI8t6bi/uJOTNqNDTqTY4kUcNFPGGm addH2S0FBpq+YjvxoKWXjNk59z/38ggqbPXfT1o59uXhT/7iepY8zIQLOzPm+l3L p2GqQE1ADghrPsupJs6AKR+LNH2pScd7wGU0llxA0GTMPVZIii9Ge3AAO0QuMKeC A6af4OghEqgHpEoes3bs26rXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMwYyAw +gqdlVUqEHGhSgaCtE8CMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsOrs/5lqvoJB7eiKBUAPc/w4++34VQXidWyaxWCE7Ys+nWhsDcUYm ASc5Wv0ckh4dcOs1NUqvdMCMWILRTZSWl8nguf0PKWwxBf4g9RXTj06TwxH9h1n4 QLqXdnm/kejtiPxZrV60ABx5Qs09X8zh2mrW3B9sI7X1eVRoFOPObErPdC01Jjrw 5cpmcfpRurTbLMkySvgw6x86jaejKsGIMOcNVBTNTlaY+6/7IiLw/VwCirtRtRtt KnsV1ninrRmP3ZwCBq+tE/1MnXBzxirbUkAnoI/xnJ/RPY0Ny4tRpqD+jeYhv/zC 16vuK77L8dyFyUOVs8F4OM2jT/ThFSCj -----END CERTIFICATE-----Generated at Thu Jul 3 05:54:51 2025 by rpki-client