$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: 4aIhpp8bEgs1xHdJlFqiqfMM6L+YtkZ985H/LEyf3Yk= Subject key identifier: 46:89:17:6C:F7:EE:8A:39:38:81:38:E2:BC:6C:68:C6:10:27:0C:7C Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 3490 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 3490 Signing time: Sat 28 Jun 2025 15:02:00 +0000 Manifest this update: Sat 28 Jun 2025 15:02:00 +0000 Manifest next update: Sat 05 Jul 2025 15:02:00 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: JrWoZyMfffKAAlSWxrNlhlI2lQEm4yKlysuTPuuan4E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 15:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13456 (0x3490) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Jun 28 15:02:00 2025 GMT Not After : Jul 5 15:02:00 2025 GMT Subject: CN=686003e8-2913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:f6:00:7a:15:fd:f2:cb:d9:4c:38:b3:9a: 48:da:b4:6c:3d:ea:c4:20:ae:de:20:0f:35:a2:af: d6:74:55:9b:0c:98:10:b9:64:41:95:ce:d3:f3:fa: 1d:d1:ec:3e:f6:63:63:a9:0a:2b:2d:34:3e:27:1f: 6d:6a:63:a1:1d:29:ea:b4:9f:05:c1:3a:88:08:cc: 1d:69:f0:52:01:72:34:7a:e0:89:94:54:68:39:de: e4:41:42:e7:f5:0e:e9:f4:42:67:b0:7b:be:be:b5: c8:35:9e:87:b0:bd:13:fa:00:82:c7:12:75:e7:6f: dd:dd:ed:0c:9f:f6:24:37:83:1e:9b:e1:4a:a7:a7: 3d:e6:6c:b2:bd:30:13:bc:19:d1:46:a5:c5:82:01: 5b:7b:ca:87:7e:3b:d5:d9:a0:21:3d:27:47:43:0e: 54:81:d5:17:f1:7f:ae:ac:75:f0:84:69:5c:5d:19: d0:fd:af:54:a0:9d:1d:c9:1b:83:b4:2f:0f:d5:40: 89:41:5f:c0:4e:13:5c:fa:e0:48:d6:01:e0:d7:68: 26:4b:ac:13:c7:30:00:24:94:d2:6c:4f:43:91:d9: 90:52:16:f0:66:c4:8d:97:8a:a3:ac:90:4b:12:73: 5b:09:ca:ce:ac:a0:0b:9c:30:9e:d8:d9:57:c1:3d: a2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:89:17:6C:F7:EE:8A:39:38:81:38:E2:BC:6C:68:C6:10:27:0C:7C X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:94:6d:23:47:cf:c1:09:69:c8:0c:05:1b:40:1c:42:bc:9a: 4e:7f:f1:17:84:19:5e:65:43:7d:78:b3:36:48:69:08:40:ff: 59:08:4a:6b:03:83:b4:67:75:21:a5:a8:cf:a6:60:d5:51:c2: 88:b8:92:de:dc:46:fe:26:31:71:8e:ff:0b:db:36:cf:1a:c4: 16:c2:7e:c4:82:d5:6c:71:a4:63:0b:cb:83:2b:ed:a7:b5:f0: 57:63:6b:67:1c:1c:d1:74:8f:a9:1a:d5:be:7c:b4:63:ba:a4: a8:d3:9c:f9:b7:a6:2a:2f:26:b9:42:bf:0a:5a:98:46:da:2a: 7c:df:cc:85:b8:57:a1:aa:76:04:d9:fd:a1:d3:55:08:1b:b4: 06:74:fe:79:79:6f:02:9d:b4:a5:09:a7:32:c1:e5:1d:12:d5: 28:b6:46:dd:b5:de:89:0d:d1:ff:81:1d:1b:13:de:8c:73:65: 9e:4d:55:93:49:be:2b:e6:fb:e3:9d:6f:81:75:2f:0a:a9:d1: d5:81:ac:57:1a:42:b7:0a:64:e1:b9:f3:5d:c5:ad:ad:15:46: 24:94:07:a8:13:3a:f9:56:61:ad:c9:e1:0b:af:96:49:47:d6: d8:78:a7:02:09:24:45:4d:31:b2:41:52:32:fb:b8:f9:00:0c: fa:83:3c:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUwNjI4MTUwMjAwWhcNMjUwNzA1MTUwMjAwWjAYMRYwFAYD VQQDEw02ODYwMDNlOC0yOTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1n72AHoV/fLL2Uw4s5pI2rRsPerEIK7eIA81oq/WdFWbDJgQuWRBlc7T8/od 0ew+9mNjqQorLTQ+Jx9tamOhHSnqtJ8FwTqICMwdafBSAXI0euCJlFRoOd7kQULn 9Q7p9EJnsHu+vrXINZ6HsL0T+gCCxxJ152/d3e0Mn/YkN4Mem+FKp6c95myyvTAT vBnRRqXFggFbe8qHfjvV2aAhPSdHQw5UgdUX8X+urHXwhGlcXRnQ/a9UoJ0dyRuD tC8P1UCJQV/AThNc+uBI1gHg12gmS6wTxzAAJJTSbE9DkdmQUhbwZsSNl4qjrJBL EnNbCcrOrKALnDCe2NlXwT2ivQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaJF2z3 7oo5OIE44rxsaMYQJwx8MB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABlG0jR8/BCWnIDAUbQBxCvJpOf/EXhBleZUN9eLM2SGkIQP9ZCEpr A4O0Z3UhpajPpmDVUcKIuJLe3Eb+JjFxjv8L2zbPGsQWwn7EgtVscaRjC8uDK+2n tfBXY2tnHBzRdI+pGtW+fLRjuqSo05z5t6YqLya5Qr8KWphG2ip838yFuFehqnYE 2f2h01UIG7QGdP55eW8CnbSlCacyweUdEtUotkbdtd6JDdH/gR0bE96Mc2WeTVWT Sb4r5vvjnW+BdS8KqdHVgaxXGkK3CmThufNdxa2tFUYklAeoEzr5VmGtyeELr5ZJ R9bYeKcCCSRFTTGyQVIy+7j5AAz6gzwn -----END CERTIFICATE-----Generated at Sun Jun 29 16:41:19 2025 by rpki-client