$ rpki-client -vvf rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft File: cPp5EccBLljvn7BaVaTOb7Bgm88.mft (raw, json) Hash identifier: OJxGJVfLRRrQ2fjFfVnKMkZCKwYJLO2bi8a4hIh6lVg= Subject key identifier: 0E:87:FA:D9:FD:B3:C7:D6:62:E8:9F:8C:E8:6D:DE:54:56:27:F3:94 Authority key identifier: 70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF Certificate issuer: /CN=A9119465/serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft Manifest number: B7 Signing time: Tue 01 Jul 2025 06:39:14 +0000 Manifest this update: Tue 01 Jul 2025 06:39:13 +0000 Manifest next update: Tue 08 Jul 2025 06:39:13 +0000 Files and hashes: 1: cPp5EccBLljvn7BaVaTOb7Bgm88.crl (hash: E65NhTum/b4snzjmkXZibhYXviJet9FXnm9ycfCZ9Us=) 2: F0C7266245D811EF9D851624C4F9AE02.roa (hash: SZIMeYcJUuIC8rNtcwaM/lfCvbj4vLmNtyjgG3i25mE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119465, serialNumber=70FA7911C7012E58EF9FB05A55A4CE6FB0609BCF Validity Not Before: Jul 1 06:39:13 2025 GMT Not After : Jul 8 06:39:13 2025 GMT Subject: CN=68638291-cd7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:79:43:74:a1:94:88:45:1d:de:03:47:1e:6b: a4:45:7e:58:a9:b6:fc:d4:d2:67:7d:98:cc:c3:7a: f3:cd:0a:f5:1a:3c:5e:1c:ed:57:ff:71:08:d7:b3: 84:e4:2c:03:a5:5f:23:d6:e7:63:59:1e:7e:e5:37: ca:af:22:6a:d1:12:89:10:10:6e:f8:1a:64:b0:05: 61:6b:81:13:a5:f7:a2:45:6e:1a:df:0f:09:ce:9f: 9b:ef:84:75:b8:fc:96:b1:0a:1c:af:82:1c:b6:bc: 9e:ba:54:ba:27:61:cf:10:ec:f5:1d:b9:a9:56:75: e8:da:a9:5e:b5:b2:5b:ce:3e:d5:80:9a:2f:35:06: 09:9c:1a:cc:55:85:96:46:2c:d3:fe:eb:d8:95:56: b8:31:c5:8a:07:4c:68:20:dc:1a:c2:6e:97:7c:03: f8:63:8c:d4:b5:e8:e2:2e:7e:29:3b:43:2d:66:f5: 39:0d:97:19:2c:8c:31:17:ee:24:49:e8:2c:90:ca: 31:06:f5:72:ed:1c:24:d6:58:f8:4c:73:cb:3e:7c: 7b:ea:60:d9:4e:d9:96:a7:70:b0:58:35:ea:df:61: f9:a9:7d:42:bd:0b:b1:58:01:40:6e:86:35:eb:ff: c4:c8:3d:ae:30:d6:ec:39:ba:86:bd:64:07:c8:42: 6b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:FA:D9:FD:B3:C7:D6:62:E8:9F:8C:E8:6D:DE:54:56:27:F3:94 X509v3 Authority Key Identifier: keyid:70:FA:79:11:C7:01:2E:58:EF:9F:B0:5A:55:A4:CE:6F:B0:60:9B:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPp5EccBLljvn7BaVaTOb7Bgm88.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119465/DC368AC2452D11EFADED634CC4F9AE02/cPp5EccBLljvn7BaVaTOb7Bgm88.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:2e:6b:7b:b3:c3:53:08:da:db:f8:6d:d7:fd:43:6b:17:17: a1:20:0e:b0:e6:58:99:09:7f:41:e0:7c:4c:2b:cf:c7:97:d8: db:c1:38:41:e7:02:97:44:67:f8:10:d7:ae:2e:a1:53:12:0b: 4d:1a:b7:d2:82:6f:e0:cf:dc:6b:08:76:4e:15:1c:32:b6:69: c9:3e:14:2f:98:57:4a:1f:0a:fb:63:40:18:38:7c:1a:0c:d4: 2e:d4:5a:c4:bf:fe:85:51:53:93:92:ba:bf:59:15:61:d4:65: 66:8d:ea:c0:ad:4a:e4:fb:d7:f2:75:ba:bd:e9:f3:86:53:0c: ef:14:c6:67:7b:1d:f4:6b:64:61:bf:ec:5e:de:79:6d:b0:b1: e7:28:23:69:e0:6a:6c:16:bf:11:0e:91:41:f3:1e:b3:bf:34: bc:b9:5d:65:4d:78:13:02:4b:26:32:88:60:ef:83:80:4a:62: 61:55:12:51:1b:bf:0f:b2:57:9e:70:f3:2f:3a:33:67:b5:5b: 9d:19:82:83:74:f2:d7:29:5e:84:a8:52:04:53:4e:91:53:02: 2e:09:d3:83:10:a6:c6:4c:35:dc:a4:66:db:da:d1:6a:26:73: 84:b0:12:1f:77:a6:70:1c:e5:19:90:ce:1a:30:fd:c1:2b:f0: a5:f0:fe:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NjUxMTAvBgNVBAUTKDcwRkE3OTExQzcwMTJFNThFRjlGQjA1QTU1QTRDRTZG QjA2MDlCQ0YwHhcNMjUwNzAxMDYzOTEzWhcNMjUwNzA4MDYzOTEzWjAYMRYwFAYD VQQDEw02ODYzODI5MS1jZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6HlDdKGUiEUd3gNHHmukRX5Yqbb81NJnfZjMw3rzzQr1GjxeHO1X/3EI17OE 5CwDpV8j1udjWR5+5TfKryJq0RKJEBBu+BpksAVha4ETpfeiRW4a3w8Jzp+b74R1 uPyWsQocr4IctryeulS6J2HPEOz1HbmpVnXo2qletbJbzj7VgJovNQYJnBrMVYWW RizT/uvYlVa4McWKB0xoINwawm6XfAP4Y4zUtejiLn4pO0MtZvU5DZcZLIwxF+4k SegskMoxBvVy7Rwk1lj4THPLPnx76mDZTtmWp3CwWDXq32H5qX1CvQuxWAFAboY1 6//EyD2uMNbsObqGvWQHyEJrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6H+tn9 s8fWYuifjOht3lRWJ/OUMB8GA1UdIwQYMBaAFHD6eRHHAS5Y75+wWlWkzm+wYJvP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ2NS9EQzM2OEFDMjQ1 MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxsanZuN0JhVmFUT2I3Qmdt ODguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NQcDVFY2NCTGxqdm43QmFWYVRPYjdCZ204OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ2NS9EQzM2OEFDMjQ1MkQxMUVGQURFRDYzNENDNEY5QUUwMi9jUHA1RWNjQkxs anZuN0JhVmFUT2I3QmdtODgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATLmt7s8NTCNrb+G3X/UNrFxehIA6w5liZCX9B4HxMK8/Hl9jbwThB 5wKXRGf4ENeuLqFTEgtNGrfSgm/gz9xrCHZOFRwytmnJPhQvmFdKHwr7Y0AYOHwa DNQu1FrEv/6FUVOTkrq/WRVh1GVmjerArUrk+9fydbq96fOGUwzvFMZnex30a2Rh v+xe3nltsLHnKCNp4GpsFr8RDpFB8x6zvzS8uV1lTXgTAksmMohg74OASmJhVRJR G78PsleecPMvOjNntVudGYKDdPLXKV6EqFIEU06RUwIuCdODEKbGTDXcpGbb2tFq JnOEsBIfd6ZwHOUZkM4aMP3BK/Cl8P4Y -----END CERTIFICATE-----Generated at Tue Jul 1 22:36:48 2025 by rpki-client