$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: oTuxZvBHwyIedDwc7Spwi7wMHr1gyN01j1/UlYYdIrs= Subject key identifier: A5:5F:25:B3:9C:1F:C2:A6:D2:BF:B0:AC:57:32:19:EC:E5:F1:B5:AA Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01BD Signing time: Tue 13 May 2025 02:19:54 +0000 Manifest this update: Tue 13 May 2025 02:19:54 +0000 Manifest next update: Tue 20 May 2025 02:19:54 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: AFbwGg14PGlyg6nvjRfxrkToClBzCmPGdYEmEGdn46I=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 449 (0x1c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: May 13 02:19:54 2025 GMT Not After : May 20 02:19:54 2025 GMT Subject: CN=6822ac4a-3674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:86:06:f0:18:b1:0f:5e:9d:b5:9a:2a:57: b1:5e:db:ba:68:de:c4:f7:51:02:2a:f5:b5:11:e9: 6b:c1:71:32:26:36:68:f3:3b:de:d7:0e:2d:89:0c: 1d:01:9a:e5:1d:33:2d:61:b0:fe:eb:24:c8:af:dc: 4c:b5:9a:fc:26:78:25:a2:96:32:fb:49:87:12:49: ba:28:c0:f5:70:e9:c8:18:c7:60:e6:79:a4:b9:6d: 52:3e:0d:0f:c7:a0:30:70:34:33:05:24:92:4c:93: c5:6d:a5:29:c2:50:73:aa:5a:f2:16:f3:d1:3d:b4: 2c:dc:b8:b9:53:41:eb:50:df:6a:2e:6e:60:a2:43: ed:9d:e3:38:a3:d1:db:c0:e4:73:ee:16:b5:66:54: f9:04:a2:94:e7:9d:41:55:cc:1e:93:ff:64:86:74: 76:14:69:c2:5c:0d:9a:71:86:09:0e:8c:ef:18:63: b8:66:05:59:fb:eb:41:95:ea:d7:df:d7:ef:9c:b4: f0:16:a0:ee:82:fc:2b:e7:32:35:44:fc:0d:20:71: 7d:91:8c:72:6f:c1:cc:16:b9:5b:cd:1c:a0:c0:23: 92:72:f7:cf:86:ae:a9:8e:0e:f3:12:7a:a8:39:56: 75:c5:0d:f7:98:ae:74:c9:e4:98:5f:78:31:b7:b0: 39:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5F:25:B3:9C:1F:C2:A6:D2:BF:B0:AC:57:32:19:EC:E5:F1:B5:AA X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:c0:92:82:91:d2:54:41:19:b2:51:f7:fc:60:a5:9c:33:ba: e7:ae:26:25:fe:b8:d4:e5:9e:b6:f3:71:af:fa:b3:d4:02:23: cd:99:e3:b9:83:d9:ca:0b:a5:11:81:d0:04:7a:e5:33:bc:d4: d2:bb:48:19:e3:8c:ee:ab:bd:ce:fd:b1:02:ba:69:6c:ff:5a: 86:a8:14:e9:c7:f9:2d:51:d0:56:0f:f2:31:c3:3c:37:c8:24: e8:1d:9c:0c:7b:b4:89:13:b1:74:5a:ca:bb:1f:86:0c:8d:f1: ea:7d:53:6f:96:59:6b:7b:90:a7:77:7a:a3:1b:d7:c2:db:3a: 1e:5e:b6:b8:ae:ea:5f:44:45:c6:cd:43:8d:68:ba:91:cc:c4: af:17:67:7a:3d:a7:fb:f6:4d:42:42:34:58:43:1d:8c:df:e4: 1d:c1:aa:77:09:47:78:d6:d5:85:7c:ee:a0:61:16:af:e2:ec: b0:e9:92:18:fa:79:81:dc:af:c6:c8:e9:2a:de:f1:a2:d6:92: 90:51:0a:e1:b9:0c:54:60:02:60:a8:5d:07:1f:37:7a:f2:34: 76:53:0f:86:82:92:b8:32:f4:e3:d4:f6:3e:31:3b:3d:d7:30: 0c:3f:02:35:ea:a8:53:af:5f:7d:c7:5f:e5:b6:09:54:a9:12: dc:78:52:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNTEzMDIxOTU0WhcNMjUwNTIwMDIxOTU0WjAYMRYwFAYD VQQDEw02ODIyYWM0YS0zNjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvCGBvAYsQ9enbWaKlexXtu6aN7E91ECKvW1EelrwXEyJjZo8zve1w4tiQwd AZrlHTMtYbD+6yTIr9xMtZr8JnglopYy+0mHEkm6KMD1cOnIGMdg5nmkuW1SPg0P x6AwcDQzBSSSTJPFbaUpwlBzqlryFvPRPbQs3Li5U0HrUN9qLm5gokPtneM4o9Hb wORz7ha1ZlT5BKKU551BVcwek/9khnR2FGnCXA2acYYJDozvGGO4ZgVZ++tBlerX 39fvnLTwFqDugvwr5zI1RPwNIHF9kYxyb8HMFrlbzRygwCOScvfPhq6pjg7zEnqo OVZ1xQ33mK50yeSYX3gxt7A5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVfJbOc H8Km0r+wrFcyGezl8bWqMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2wJKCkdJUQRmyUff8YKWcM7rnriYl/rjU5Z6283Gv+rPUAiPNmeO5 g9nKC6URgdAEeuUzvNTSu0gZ44zuq73O/bECumls/1qGqBTpx/ktUdBWD/Ixwzw3 yCToHZwMe7SJE7F0Wsq7H4YMjfHqfVNvlllre5Cnd3qjG9fC2zoeXra4rupfREXG zUONaLqRzMSvF2d6Paf79k1CQjRYQx2M3+Qdwap3CUd41tWFfO6gYRav4uyw6ZIY +nmB3K/GyOkq3vGi1pKQUQrhuQxUYAJgqF0HHzd68jR2Uw+GgpK4MvTj1PY+MTs9 1zAMPwI16qhTr199x1/ltglUqRLceFKv -----END CERTIFICATE-----Generated at Wed May 14 17:32:13 2025 by rpki-client