$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: kOxBTG5TbH0QJSCayokqgDznefffzGd0aFPFwc24fks= Subject key identifier: 54:D4:B6:18:CF:9B:22:47:7F:6D:6E:3A:EB:72:1A:D1:D1:76:59:52 Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: A7 Signing time: Sun 11 May 2025 04:54:53 +0000 Manifest this update: Sun 11 May 2025 04:54:52 +0000 Manifest next update: Sun 18 May 2025 04:54:52 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: tQSsOeV/CBs+pXBRz7HH0EoVFO56lgsLrT6fq2lRlcA=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: 7gIQlEaY6p9FZPwnLquANP+Ly+DUi94SCHLL5QY24Hg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: May 11 04:54:52 2025 GMT Not After : May 18 04:54:52 2025 GMT Subject: CN=68202d9c-6c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:09:6b:c2:ee:b3:35:f7:ad:fa:e2:d1:43: af:c4:b7:2a:94:5f:1d:01:5e:64:de:a4:bb:22:3c: 08:4f:e4:4c:15:f5:04:4d:ed:d8:7f:f4:43:a6:d8: 2b:5f:d2:d6:5e:03:2a:14:9a:79:13:7b:11:dd:34: 66:d2:5d:da:80:48:7f:36:e0:e0:46:e2:92:5d:48: 34:7f:ee:79:65:6d:27:1a:19:82:b3:c8:e3:99:fe: 20:a8:37:51:bb:01:f8:86:02:e1:d5:2f:6c:45:41: 5f:c1:3d:38:74:fb:91:fb:9b:76:3e:ba:1f:0b:19: fc:9d:3c:ee:c5:9f:e3:ef:8e:65:71:2d:50:37:f6: 7a:e5:b9:c2:5e:db:10:19:62:86:16:3b:24:36:a4: 5d:fb:c4:2e:4d:42:3f:3b:5d:87:be:2c:be:dc:79: 96:00:19:96:d7:10:cd:32:b0:1f:4d:93:a1:75:d3: 24:b1:68:69:e2:38:82:b0:85:ea:ac:ab:cd:aa:1f: ea:35:79:67:e2:1d:46:bc:b0:21:97:51:5c:74:d5: 88:e3:5f:4d:59:03:fc:7a:47:e9:88:b1:f2:35:45: f5:f3:6c:3c:51:e7:6e:c5:21:fa:8b:46:7b:65:90: 6b:9c:fd:bd:f6:83:27:7d:1e:e8:f0:08:83:7d:e1: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D4:B6:18:CF:9B:22:47:7F:6D:6E:3A:EB:72:1A:D1:D1:76:59:52 X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:42:3d:28:cd:a4:5a:7b:ba:d4:3b:8a:83:6f:26:62:d9:bc: 0e:d8:9a:c1:b5:86:fc:a0:40:a3:45:84:8c:c9:df:3c:fe:9b: fc:58:a6:96:e0:39:76:fa:34:95:e2:da:13:d5:05:11:46:7c: a5:4c:c7:c3:26:ee:99:fa:19:ab:cb:d7:eb:10:d1:cd:60:71: 28:3c:ed:93:2e:3c:f7:07:0e:9f:45:6f:a5:a8:a3:78:88:80: d2:8c:18:c1:35:6f:cb:7b:d8:62:2b:63:92:0b:d0:00:81:a7: cf:3b:fa:52:ce:d6:b0:48:c2:04:2c:a8:5b:27:2c:3e:fc:54: 12:83:74:fd:75:33:67:2e:7d:65:1e:e6:46:b1:24:c6:4d:62: 2d:d6:15:18:04:32:bf:ad:40:3d:b0:66:e7:76:0a:16:98:71: fc:b5:81:4b:e3:ad:1a:e7:fa:4f:ed:e6:e5:e8:ad:cd:99:8c: 86:7e:ab:2d:a0:31:5f:b3:eb:b8:30:59:50:d8:07:06:15:a0: ed:e5:09:b3:06:c9:78:0b:0a:3c:6c:fa:88:cc:68:17:42:1b: ec:1a:94:5f:40:8f:67:6a:18:35:12:65:1b:a6:a7:21:2c:69: a0:d0:63:7e:a4:70:99:39:c3:46:38:6c:a9:d4:19:ff:10:ae: c4:32:1f:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUwNTExMDQ1NDUyWhcNMjUwNTE4MDQ1NDUyWjAYMRYwFAYD VQQDEw02ODIwMmQ5Yy02YzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4CwJa8LuszX3rfri0UOvxLcqlF8dAV5k3qS7IjwIT+RMFfUETe3Yf/RDptgr X9LWXgMqFJp5E3sR3TRm0l3agEh/NuDgRuKSXUg0f+55ZW0nGhmCs8jjmf4gqDdR uwH4hgLh1S9sRUFfwT04dPuR+5t2ProfCxn8nTzuxZ/j745lcS1QN/Z65bnCXtsQ GWKGFjskNqRd+8QuTUI/O12Hviy+3HmWABmW1xDNMrAfTZOhddMksWhp4jiCsIXq rKvNqh/qNXln4h1GvLAhl1FcdNWI419NWQP8ekfpiLHyNUX182w8UeduxSH6i0Z7 ZZBrnP299oMnfR7o8AiDfeEDvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTUthjP myJHf21uOutyGtHRdllSMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpQj0ozaRae7rUO4qDbyZi2bwO2JrBtYb8oECjRYSMyd88/pv8WKaW 4Dl2+jSV4toT1QURRnylTMfDJu6Z+hmry9frENHNYHEoPO2TLjz3Bw6fRW+lqKN4 iIDSjBjBNW/Le9hiK2OSC9AAgafPO/pSztawSMIELKhbJyw+/FQSg3T9dTNnLn1l HuZGsSTGTWIt1hUYBDK/rUA9sGbndgoWmHH8tYFL460a5/pP7ebl6K3NmYyGfqst oDFfs+u4MFlQ2AcGFaDt5QmzBsl4Cwo8bPqIzGgXQhvsGpRfQI9nahg1EmUbpqch LGmg0GN+pHCZOcNGOGyp1Bn/EK7EMh+F -----END CERTIFICATE-----Generated at Sun May 11 13:52:10 2025 by rpki-client