$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: 4XzM4WGN2TZLnwiyrtFKfGtT3BRM1J4pPYzJ6x4Dj1I= Subject key identifier: 61:02:CB:47:55:D1:26:CD:6D:BC:D7:5F:A9:1A:67:57:41:1F:E7:FA Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1AEB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1AE4 Signing time: Wed 14 May 2025 16:23:23 +0000 Manifest this update: Wed 14 May 2025 16:23:22 +0000 Manifest next update: Wed 21 May 2025 16:23:22 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: Gh7zsjJo56ZuVIs4gFPoaFxUdg/+k+K86S5vYxaXyqU=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 16:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6891 (0x1aeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: May 14 16:23:22 2025 GMT Not After : May 21 16:23:22 2025 GMT Subject: CN=6824c37a-be5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5c:56:84:ee:5b:25:8c:50:83:6a:21:7d:26: 5d:1f:5b:b2:c7:e7:03:f2:ab:a0:0a:86:d9:ec:32: 59:df:36:36:32:b4:bc:f6:a5:c1:5a:7c:ac:f5:14: 56:6e:20:33:a3:a8:7c:38:75:6e:8e:97:10:38:2a: 3b:49:09:36:83:9b:b5:7d:2a:63:21:fb:07:2c:06: d6:36:ab:73:14:86:b2:b1:47:88:f8:3c:3c:e3:36: 89:a3:36:5d:f7:39:ae:6b:3b:4e:ab:bf:48:52:1f: f9:79:ec:27:27:7d:32:de:a7:f7:d4:a1:b2:f1:cc: 37:01:ac:05:29:e6:8d:1e:82:1e:c2:5d:d6:41:db: 94:53:a0:3b:85:e2:7a:da:df:c3:46:9c:e1:98:db: 6e:48:63:61:86:49:01:a0:88:b8:97:54:ab:b0:a1: 07:11:38:a5:41:bb:3c:61:d2:f1:25:02:68:0a:7c: c6:ec:44:dd:99:2e:cf:93:9c:7c:a7:ea:0d:50:f6: 1f:f4:b9:ce:57:30:14:dd:9c:44:73:d3:45:3a:32: e0:dd:af:fc:84:5c:a2:e8:dc:8b:43:e5:eb:85:98: e9:db:79:9d:2b:b6:62:1f:f9:f4:8d:54:9e:59:47: 91:e7:05:a4:aa:b7:68:12:74:66:21:d5:eb:ef:cd: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:02:CB:47:55:D1:26:CD:6D:BC:D7:5F:A9:1A:67:57:41:1F:E7:FA X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:a1:e3:97:d9:cd:ce:07:04:a7:b4:1e:f1:a2:f0:e4:a9:32: a4:ef:c9:de:9b:3e:f5:6d:d4:e4:ac:0a:cb:70:9f:9b:25:84: bf:8e:70:6b:e4:e2:de:bd:45:96:22:1e:b7:cb:96:c5:5c:ae: 01:36:c7:93:f8:46:fe:f7:8d:84:7c:56:fd:3f:2b:de:b1:73: 50:80:ce:bc:c5:27:e1:97:e1:3e:de:e1:b4:63:87:b5:42:52: 8c:db:60:be:48:bb:cb:37:a3:81:77:eb:9d:e4:89:43:e6:f4: b9:8f:98:d0:eb:35:98:5d:7a:b0:f6:a8:30:40:ab:74:61:df: 48:e0:0d:bf:8d:6c:bb:37:01:a5:8c:fa:07:75:c2:b1:d8:57: e0:b2:aa:dd:60:9c:5c:00:4f:16:10:4e:2c:68:76:83:a2:e5: 67:32:62:0e:aa:18:4e:6b:5b:39:5c:df:c7:6c:e5:73:21:0f: 14:c3:72:78:85:af:04:53:c5:ed:f2:ef:6a:d4:88:9f:73:96: db:de:ef:e2:69:be:33:76:e5:ff:41:2c:f9:e6:3c:71:bb:26: f9:44:d7:51:94:d2:62:3f:f6:ef:50:c0:a6:49:da:8b:90:bb: 0a:b8:dc:fd:3c:ea:2b:c1:a9:11:c8:51:17:4b:79:08:62:90: ba:a7:06:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUwNTE0MTYyMzIyWhcNMjUwNTIxMTYyMzIyWjAYMRYwFAYD VQQDEw02ODI0YzM3YS1iZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk1xWhO5bJYxQg2ohfSZdH1uyx+cD8qugCobZ7DJZ3zY2MrS89qXBWnys9RRW biAzo6h8OHVujpcQOCo7SQk2g5u1fSpjIfsHLAbWNqtzFIaysUeI+Dw84zaJozZd 9zmuaztOq79IUh/5eewnJ30y3qf31KGy8cw3AawFKeaNHoIewl3WQduUU6A7heJ6 2t/DRpzhmNtuSGNhhkkBoIi4l1SrsKEHETilQbs8YdLxJQJoCnzG7ETdmS7Pk5x8 p+oNUPYf9LnOVzAU3ZxEc9NFOjLg3a/8hFyi6NyLQ+XrhZjp23mdK7ZiH/n0jVSe WUeR5wWkqrdoEnRmIdXr781LJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGECy0dV 0SbNbbzXX6kaZ1dBH+f6MB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYoeOX2c3OBwSntB7xovDkqTKk78nemz71bdTkrArLcJ+bJYS/jnBr 5OLevUWWIh63y5bFXK4BNseT+Eb+942EfFb9PyvesXNQgM68xSfhl+E+3uG0Y4e1 QlKM22C+SLvLN6OBd+ud5IlD5vS5j5jQ6zWYXXqw9qgwQKt0Yd9I4A2/jWy7NwGl jPoHdcKx2FfgsqrdYJxcAE8WEE4saHaDouVnMmIOqhhOa1s5XN/HbOVzIQ8Uw3J4 ha8EU8Xt8u9q1Iifc5bb3u/iab4zduX/QSz55jxxuyb5RNdRlNJiP/bvUMCmSdqL kLsKuNz9POorwakRyFEXS3kIYpC6pwZ7 -----END CERTIFICATE-----Generated at Fri May 16 14:06:44 2025 by rpki-client