$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: oBZULdcriDsvIXj+zWKr5nlD43Ms4ARi/9d2dJ9zh0Q= Subject key identifier: 57:E8:BB:84:65:7D:D6:2A:11:FF:93:B0:E1:13:53:D1:C3:D3:43:79 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0D9E Signing time: Wed 14 May 2025 18:03:16 +0000 Manifest this update: Wed 14 May 2025 18:03:15 +0000 Manifest next update: Wed 21 May 2025 18:03:15 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: TIjsW+XYmn/3BEpONy9ZEUB9dJg0P1X9fu6r+2922uY=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3490 (0xda2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: May 14 18:03:15 2025 GMT Not After : May 21 18:03:15 2025 GMT Subject: CN=6824dae4-ac73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3c:0b:c4:a3:72:e1:32:1c:ae:40:d8:5b:12: 67:d3:41:8a:9b:3b:71:e4:59:ae:3c:a7:0f:8e:7b: b7:07:29:a6:a5:43:61:a1:60:85:8e:d3:3e:f2:70: 78:5e:ae:a9:db:2e:82:41:d9:c6:9d:18:fb:07:4c: 7e:ed:dc:6a:a8:79:21:50:da:dd:a3:6a:eb:f6:ac: eb:d8:a0:94:7b:f7:5e:6f:11:64:08:ca:63:28:92: c4:7c:54:c7:47:11:2e:4b:c5:5f:ea:74:de:38:8e: 44:5c:6a:bc:a0:be:62:1d:bc:32:ef:b5:5b:33:61: 62:93:53:82:aa:6c:ef:fc:1f:19:07:e7:b0:29:46: 66:29:8f:cc:9c:67:a6:62:7a:99:f1:21:33:a5:aa: dd:30:15:bf:7d:cb:47:b4:61:cd:cb:38:3a:cd:78: 58:13:af:17:64:e3:6d:20:c2:06:4e:a2:a7:ed:a8: cd:65:b8:6f:c4:fa:54:8d:94:6a:19:92:a4:3d:30: be:ce:f7:c1:0c:c1:66:53:2f:fd:27:69:8b:92:02: 04:e7:04:ba:86:ca:3f:89:5a:3b:ee:14:5c:8b:76: 79:43:5c:2b:eb:90:3e:2a:8d:d6:04:0e:b4:2c:86: a0:83:9d:9f:88:13:9f:83:f0:07:57:ac:91:4d:48: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E8:BB:84:65:7D:D6:2A:11:FF:93:B0:E1:13:53:D1:C3:D3:43:79 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d6:ee:7a:2a:e9:92:74:7f:f1:22:e3:5f:df:41:23:9d:af: bf:fb:f4:ad:cc:c1:8d:ae:76:d3:55:b1:bf:57:4f:46:a1:bf: b3:30:00:f2:3a:a2:74:b4:c6:08:dd:97:db:1f:01:ac:f4:db: f7:e2:3b:ce:f6:3d:51:be:16:5b:d2:ef:20:d3:ba:79:3e:e3: de:bf:0f:c6:09:74:2a:e5:9c:25:12:ec:cd:46:23:fc:fe:a4: 4d:ba:6e:d6:ec:74:82:86:3a:8d:7f:86:8c:7f:41:84:43:31: ab:9e:58:4e:35:7f:68:85:27:ec:09:8f:c9:6b:62:00:eb:c2: 5c:f4:4c:f8:c2:20:42:53:20:34:2b:1d:57:18:05:ba:d9:07: 64:e5:23:7c:98:c1:8d:ad:d9:6b:6f:80:48:7b:75:85:e3:9f: 0b:e4:a5:86:e9:83:13:c2:c2:01:0a:6f:85:bd:e7:c8:43:a4: 36:69:bf:34:86:ad:6e:92:93:74:0b:43:03:8f:08:d9:53:a2: 96:a2:25:c5:e6:11:83:85:94:a4:fd:fe:80:8d:f9:3d:55:46: cb:24:5d:4c:17:5d:e7:85:a7:f5:56:47:7d:79:c3:43:92:73: 65:8a:de:6c:bf:1d:13:cb:57:6b:76:1a:69:ab:fc:07:ca:cb: 02:c3:c2:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwNTE0MTgwMzE1WhcNMjUwNTIxMTgwMzE1WjAYMRYwFAYD VQQDEw02ODI0ZGFlNC1hYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3jwLxKNy4TIcrkDYWxJn00GKmztx5FmuPKcPjnu3BymmpUNhoWCFjtM+8nB4 Xq6p2y6CQdnGnRj7B0x+7dxqqHkhUNrdo2rr9qzr2KCUe/debxFkCMpjKJLEfFTH RxEuS8Vf6nTeOI5EXGq8oL5iHbwy77VbM2Fik1OCqmzv/B8ZB+ewKUZmKY/MnGem YnqZ8SEzpardMBW/fctHtGHNyzg6zXhYE68XZONtIMIGTqKn7ajNZbhvxPpUjZRq GZKkPTC+zvfBDMFmUy/9J2mLkgIE5wS6hso/iVo77hRci3Z5Q1wr65A+Ko3WBA60 LIagg52fiBOfg/AHV6yRTUgGnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfou4Rl fdYqEf+TsOETU9HD00N5MB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK1u56KumSdH/xIuNf30Ejna+/+/StzMGNrnbTVbG/V09Gob+zMADy OqJ0tMYI3ZfbHwGs9Nv34jvO9j1RvhZb0u8g07p5PuPevw/GCXQq5ZwlEuzNRiP8 /qRNum7W7HSChjqNf4aMf0GEQzGrnlhONX9ohSfsCY/Ja2IA68Jc9Ez4wiBCUyA0 Kx1XGAW62Qdk5SN8mMGNrdlrb4BIe3WF458L5KWG6YMTwsIBCm+FvefIQ6Q2ab80 hq1ukpN0C0MDjwjZU6KWoiXF5hGDhZSk/f6Ajfk9VUbLJF1MF13nhaf1Vkd9ecND knNlit5svx0Ty1drdhppq/wHyssCw8IA -----END CERTIFICATE-----Generated at Thu May 15 09:02:08 2025 by rpki-client