$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft File: 7Wa7QNEhumPFhZepP-d5xx0zF7s.mft (raw, json) Hash identifier: rojS68I+1hKBTnPrT8Ko04ZJziLnvy52edGNEaFFA+M= Subject key identifier: D9:88:94:C5:8F:5C:69:91:4F:E7:21:FD:56:10:69:C0:41:D3:6C:84 Authority key identifier: ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB Certificate issuer: /CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Certificate serial: 1831 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft Manifest number: 1828 Signing time: Fri 16 May 2025 16:44:09 +0000 Manifest this update: Fri 16 May 2025 16:44:08 +0000 Manifest next update: Fri 23 May 2025 16:44:08 +0000 Files and hashes: 1: 7Wa7QNEhumPFhZepP-d5xx0zF7s.crl (hash: i+w5sX4k0Fzz9bw7AVl2UIqe9O2mfq33bqYyyfVMTKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 16:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6193 (0x1831) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D8BE, serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB Validity Not Before: May 16 16:44:08 2025 GMT Not After : May 23 16:44:08 2025 GMT Subject: CN=68276b59-e01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ae:19:00:c1:b3:e9:71:27:34:c7:13:b7:af: c3:61:25:a1:c1:7d:bc:81:64:87:64:f0:ff:11:e8: f9:0c:34:68:e4:6e:86:27:1b:45:b9:fe:16:cb:45: 13:66:71:4e:dd:d2:c2:79:a4:a5:aa:cc:89:27:d9: 59:48:d7:31:9c:ef:a5:c0:3b:86:3f:49:d8:c3:4b: a8:ee:54:f5:66:dd:62:10:da:0d:ad:71:c0:a7:dc: da:0d:07:29:9c:8d:d1:b1:76:e5:97:f3:3c:4c:84: 01:5f:78:33:47:0c:5a:9d:19:ab:19:da:3b:5b:05: b8:a1:43:71:9b:c9:07:f9:71:7d:ed:ab:42:4a:85: a9:69:0b:66:2a:03:79:39:8c:47:d9:7b:68:1a:39: 74:4c:0c:3e:12:a6:b5:3b:58:5c:66:1a:0c:26:d6: 88:f0:62:12:1d:83:a7:56:4c:13:c9:8b:b0:9a:c2: b5:6c:f6:16:f8:e7:e5:91:a2:86:39:fb:cc:e9:fa: df:6c:54:14:5f:9f:ba:0c:ec:df:e3:d9:cd:e0:3b: 80:51:f7:26:d3:7d:ab:3c:36:8f:1c:7d:3d:c8:0f: b3:49:46:c2:bc:71:96:ab:99:56:91:5c:29:1d:4a: ed:de:ff:35:23:52:90:f9:15:70:5a:d0:18:e3:1d: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:88:94:C5:8F:5C:69:91:4F:E7:21:FD:56:10:69:C0:41:D3:6C:84 X509v3 Authority Key Identifier: keyid:ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:a3:ee:e4:14:1b:eb:e3:02:ee:0c:39:06:d9:6c:b6:37:e9: f4:f8:bc:86:ff:ce:56:05:11:12:67:0c:b6:30:0e:01:eb:b6: d4:ec:79:10:ee:74:2f:06:b6:36:a6:fd:a7:64:44:4a:29:c3: 4b:9c:9e:a4:c4:21:42:7f:af:3b:17:52:0c:a8:3c:84:fb:5f: 56:3c:33:63:8f:70:49:f2:13:5f:97:10:81:f7:d1:f9:04:06: 57:7f:6f:e5:93:50:20:9f:43:78:24:aa:15:c1:5e:ec:a2:2a: 1d:14:bd:cf:9a:69:83:3c:ae:2d:78:1f:69:0c:35:6e:a7:fb: 05:0b:e2:50:8f:2f:6c:06:36:24:52:db:84:c3:f0:9f:5d:28: ca:09:33:c5:ba:f0:dc:d9:c6:b0:03:50:60:f3:01:e1:10:b9: fe:6a:53:c4:27:d6:83:3b:58:13:8e:3d:c3:fe:6a:62:b9:92: e7:a8:ed:69:d2:49:c9:cb:07:a0:b7:9f:5a:3d:70:8a:e3:52: cc:3a:1e:ee:eb:62:82:10:e1:77:bc:54:50:5c:70:04:f5:dc: 79:94:33:96:87:0d:b7:7e:42:b9:79:1f:2b:d5:74:b2:bd:d6: 72:6d:05:ab:e5:34:1e:1b:06:82:07:92:91:b6:29:ee:59:c2: b3:84:69:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGDEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ4QkUxMTAvBgNVBAUTKEVENjZCQjQwRDEyMUJBNjNDNTg1OTdBOTNGRTc3OUM3 MUQzMzE3QkIwHhcNMjUwNTE2MTY0NDA4WhcNMjUwNTIzMTY0NDA4WjAYMRYwFAYD VQQDEw02ODI3NmI1OS1lMDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwK4ZAMGz6XEnNMcTt6/DYSWhwX28gWSHZPD/Eej5DDRo5G6GJxtFuf4Wy0UT ZnFO3dLCeaSlqsyJJ9lZSNcxnO+lwDuGP0nYw0uo7lT1Zt1iENoNrXHAp9zaDQcp nI3RsXbll/M8TIQBX3gzRwxanRmrGdo7WwW4oUNxm8kH+XF97atCSoWpaQtmKgN5 OYxH2XtoGjl0TAw+Eqa1O1hcZhoMJtaI8GISHYOnVkwTyYuwmsK1bPYW+OflkaKG OfvM6frfbFQUX5+6DOzf49nN4DuAUfcm032rPDaPHH09yA+zSUbCvHGWq5lWkVwp HUrt3v81I1KQ+RVwWtAY4x0KlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmIlMWP XGmRT+ch/VYQacBB02yEMB8GA1UdIwQYMBaAFO1mu0DRIbpjxYWXqT/neccdMxe7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhCRS83RDA1MjIwOEFE QUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVtUEZoWmVwUC1kNXh4MHpG N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdXYTdRTkVodW1QRmhaZXBQLWQ1eHgwekY3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDhCRS83RDA1MjIwOEFEQUQxMUU3OTg0MkZFMTNDNEY5QUUwMi83V2E3UU5FaHVt UEZoWmVwUC1kNXh4MHpGN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBo+7kFBvr4wLuDDkG2Wy2N+n0+LyG/85WBRESZwy2MA4B67bU7HkQ 7nQvBrY2pv2nZERKKcNLnJ6kxCFCf687F1IMqDyE+19WPDNjj3BJ8hNflxCB99H5 BAZXf2/lk1Agn0N4JKoVwV7soiodFL3PmmmDPK4teB9pDDVup/sFC+JQjy9sBjYk UtuEw/CfXSjKCTPFuvDc2cawA1Bg8wHhELn+alPEJ9aDO1gTjj3D/mpiuZLnqO1p 0knJywegt59aPXCK41LMOh7u62KCEOF3vFRQXHAE9dx5lDOWhw23fkK5eR8r1XSy vdZybQWr5TQeGwaCB5KRtinuWcKzhGl4 -----END CERTIFICATE-----Generated at Sat May 17 00:10:28 2025 by rpki-client