$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: 7zGxUfKnjgIPG4f/ajVGpnPK3mptwUSFLt/mecIN4/Q= Subject key identifier: 81:3D:D8:78:B1:AA:39:F3:8F:5C:6B:F6:83:73:D6:14:D4:A1:D5:1D Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04BE Signing time: Mon 12 May 2025 23:38:20 +0000 Manifest this update: Mon 12 May 2025 23:38:19 +0000 Manifest next update: Mon 19 May 2025 23:38:19 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: cqCrTaYgi5fljH8DNZK5z1c6wRSa6g+LQmkFFmUd96s=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: 6texudPJbHfd6J0MPN1D5Oqp/jznw5zyBOIDtk3K0JM=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: JXwBxiGEkFaFWVz8HbHFVp2nlp17eTZBvyxAVrqYWhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:38:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: May 12 23:38:19 2025 GMT Not After : May 19 23:38:19 2025 GMT Subject: CN=6822866b-43b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:52:66:94:d0:ea:7d:3c:71:4e:41:25:ef: bd:0f:49:73:3b:63:84:05:2c:56:7d:d8:d8:5c:ea: 52:29:4d:21:38:b3:cf:8f:76:fa:2f:7a:ca:7f:76: 8e:f7:a7:ad:1b:66:d8:72:38:c6:82:a8:dd:47:e1: b7:c1:89:84:fa:66:5e:1c:1c:e9:da:d6:69:9c:9d: da:bd:61:6f:34:29:67:c0:12:34:bc:7f:61:42:95: 3d:f5:ff:01:65:52:77:ae:8b:65:02:9e:86:7c:3f: 5f:fa:33:d4:71:66:8a:e7:78:9d:e9:50:c5:cd:8c: 5e:9e:d1:4c:1f:e5:b2:08:09:45:16:d7:7a:fd:ed: 8b:2c:59:7a:51:d9:19:a6:bb:e3:fd:49:c3:66:39: 9b:ec:ad:ee:ca:0b:b8:44:c3:49:99:c8:65:65:6a: c7:74:1f:50:e9:2e:d2:c9:8b:e8:3d:c9:6c:ac:1f: 65:99:79:7e:2f:d1:38:79:14:24:11:ef:5b:a0:2e: 4d:1d:d5:c4:de:87:f6:8a:87:7c:9c:29:f7:7c:21: 86:2d:17:be:f3:f5:11:38:cc:45:27:6d:1e:82:91: ab:b4:16:a6:dd:30:a5:d5:76:96:a0:b1:0a:4a:da: 55:82:3f:1c:ae:c7:66:4d:dd:8a:e2:28:b3:d2:b0: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3D:D8:78:B1:AA:39:F3:8F:5C:6B:F6:83:73:D6:14:D4:A1:D5:1D X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:89:ea:97:21:3d:81:3f:4d:2b:7d:c3:55:8b:10:81:b9:ce: 7f:1e:1c:3b:e8:03:e0:8f:6c:ce:e9:ca:a0:c9:81:51:01:bd: 0f:af:14:30:b2:94:57:36:82:73:52:ef:d5:30:b2:d2:dc:3f: 00:93:9f:03:fb:96:53:ce:3e:31:43:ea:83:ad:58:8c:ce:bb: 3c:22:18:33:77:46:a0:d0:24:31:2f:3d:fa:43:c6:fa:06:8f: cb:85:8b:54:d4:f5:c0:3b:8c:9d:07:25:b6:04:6e:24:69:e9: c8:7a:b3:6a:68:18:9d:ee:1d:d2:bb:e7:0c:a4:22:53:36:61: 0b:91:cc:08:e6:11:d6:51:f0:13:16:8a:62:88:e0:02:5a:bc: d2:f1:93:a7:41:cd:64:d9:c4:b5:0c:23:4c:b5:bd:18:50:a6: 63:27:39:3f:03:a4:e0:20:3c:f3:3f:fd:44:d1:01:06:f7:63: c0:07:8c:ef:b0:c1:f8:4f:93:4b:49:ae:31:1c:22:ec:19:96: 95:45:40:95:ac:57:a7:a2:0f:07:8a:53:b4:34:7b:60:d3:53: c2:5e:e1:44:b1:ab:1e:f1:5d:f2:31:97:55:66:c8:7a:24:45: 8a:a7:1d:79:39:45:cf:3a:30:20:0e:e8:4a:c7:6a:37:1c:48: 8e:ae:ed:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwNTEyMjMzODE5WhcNMjUwNTE5MjMzODE5WjAYMRYwFAYD VQQDEw02ODIyODY2Yi00M2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo2dSZpTQ6n08cU5BJe+9D0lzO2OEBSxWfdjYXOpSKU0hOLPPj3b6L3rKf3aO 96etG2bYcjjGgqjdR+G3wYmE+mZeHBzp2tZpnJ3avWFvNClnwBI0vH9hQpU99f8B ZVJ3rotlAp6GfD9f+jPUcWaK53id6VDFzYxentFMH+WyCAlFFtd6/e2LLFl6UdkZ prvj/UnDZjmb7K3uygu4RMNJmchlZWrHdB9Q6S7SyYvoPclsrB9lmXl+L9E4eRQk Ee9boC5NHdXE3of2iod8nCn3fCGGLRe+8/UROMxFJ20egpGrtBam3TCl1XaWoLEK StpVgj8crsdmTd2K4iiz0rDOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIE92Hix qjnzj1xr9oNz1hTUodUdMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWieqXIT2BP00rfcNVixCBuc5/Hhw76APgj2zO6cqgyYFRAb0PrxQw spRXNoJzUu/VMLLS3D8Ak58D+5ZTzj4xQ+qDrViMzrs8Ihgzd0ag0CQxLz36Q8b6 Bo/LhYtU1PXAO4ydByW2BG4kaenIerNqaBid7h3Su+cMpCJTNmELkcwI5hHWUfAT FopiiOACWrzS8ZOnQc1k2cS1DCNMtb0YUKZjJzk/A6TgIDzzP/1E0QEG92PAB4zv sMH4T5NLSa4xHCLsGZaVRUCVrFenog8HilO0NHtg01PCXuFEsase8V3yMZdVZsh6 JEWKpx15OUXPOjAgDuhKx2o3HEiOru2x -----END CERTIFICATE-----Generated at Wed May 14 14:56:12 2025 by rpki-client