$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: hOGfZ+bJpgFqBkjzbnTRl9Pq4nehaqOeJnBoDt+82+E= Subject key identifier: 55:AB:F2:A0:7E:43:4E:5A:03:DC:52:46:67:4B:40:AC:ED:CF:C1:70 Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 0294 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 028D Signing time: Thu 03 Jul 2025 02:03:30 +0000 Manifest this update: Thu 03 Jul 2025 02:03:29 +0000 Manifest next update: Thu 10 Jul 2025 02:03:29 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: SFwBFFcbXavrqLINcfPwV7rYS8Zh4AuOrkm3CN5VBIY=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: Pomp25euWUzW6bLzCINDqzM6FpJj6K+BUv6uncbVybw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 660 (0x294) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Jul 3 02:03:29 2025 GMT Not After : Jul 10 02:03:29 2025 GMT Subject: CN=6865e4f1-2011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f6:6f:60:1a:93:9f:5d:ae:dd:ed:fd:7f:e0: b9:e8:6b:e9:60:c8:00:6f:44:53:b2:3c:75:29:5a: 60:52:a0:95:00:5b:4d:8c:b6:f0:45:f2:de:6c:0f: 50:f8:d4:7d:8b:a7:fc:26:91:c0:0b:41:ca:26:c7: d5:c5:04:0b:ba:0e:e1:11:8f:27:51:5f:36:81:5a: 84:54:02:26:d3:57:be:32:00:54:8c:c5:e2:41:3c: 99:71:bb:fc:01:0d:60:dd:c0:f6:f9:17:06:c1:e4: 9b:8e:08:f7:96:5a:96:a2:b5:6e:e8:73:74:92:61: d9:a3:14:9a:e6:36:ce:c0:53:2d:49:77:1b:fe:b6: 66:3c:0d:2e:b5:2c:9b:6b:7a:72:10:f3:02:7c:58: 8e:b3:98:2f:05:2e:89:57:08:4e:78:51:0b:fe:ad: 16:66:73:ef:8a:48:8b:5b:dd:4b:b1:20:ee:8a:7f: 7f:be:54:9d:47:c1:b1:df:5c:e9:70:c1:8c:79:f9: f9:25:99:f4:ff:f8:f3:89:3d:50:2b:eb:5c:19:3c: 4c:d5:13:e3:8b:9a:74:90:90:e7:51:d3:bb:38:60: 48:98:11:ea:41:12:4b:42:21:3e:47:c6:11:22:45: 24:01:a2:d8:38:fa:bc:6e:ca:f8:46:68:50:0b:70: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AB:F2:A0:7E:43:4E:5A:03:DC:52:46:67:4B:40:AC:ED:CF:C1:70 X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:89:3f:73:ca:92:3a:23:c3:50:6e:8a:9d:95:db:37:95:9f: 90:36:12:c8:05:7d:7e:30:7f:47:4a:54:77:6d:d0:3e:b9:91: 88:8b:c4:c4:00:3e:e1:60:d6:5d:f8:ca:29:ee:7d:e5:ab:41: 50:d4:27:c8:91:64:c9:cf:1a:19:61:a8:89:d3:90:41:59:c8: 4c:49:c3:e6:66:37:c4:ed:72:37:96:89:34:14:68:cb:1e:0e: 07:00:3b:a1:c8:2f:ae:8c:4b:51:51:e4:90:e4:22:90:63:b4: 71:33:d4:88:c6:18:fe:63:6e:71:d3:e2:65:08:9a:6e:5c:24: 14:59:34:51:94:fe:2e:f3:42:b9:7a:e3:0d:18:bb:f7:73:47: ec:7f:bb:b2:d6:f6:4e:aa:6a:61:cc:3c:69:06:e9:1f:b2:43: 18:59:d7:62:bb:81:83:90:c9:ff:62:8d:4d:ed:9a:89:af:b3: 41:69:f8:4f:ac:b9:4b:6b:c0:3c:6e:18:b2:5e:55:e9:19:3c: 38:21:75:9d:ad:be:63:2c:08:d0:11:e9:67:c4:7a:a0:74:3e: 5a:0c:0f:bc:a7:9d:45:9c:00:21:3c:b5:a5:c2:42:7b:b1:27: df:bb:78:83:54:9c:45:c6:c6:90:c9:bc:5c:36:c7:19:c8:74: 23:ce:11:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUwNzAzMDIwMzI5WhcNMjUwNzEwMDIwMzI5WjAYMRYwFAYD VQQDEw02ODY1ZTRmMS0yMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/ZvYBqTn12u3e39f+C56GvpYMgAb0RTsjx1KVpgUqCVAFtNjLbwRfLebA9Q +NR9i6f8JpHAC0HKJsfVxQQLug7hEY8nUV82gVqEVAIm01e+MgBUjMXiQTyZcbv8 AQ1g3cD2+RcGweSbjgj3llqWorVu6HN0kmHZoxSa5jbOwFMtSXcb/rZmPA0utSyb a3pyEPMCfFiOs5gvBS6JVwhOeFEL/q0WZnPvikiLW91LsSDuin9/vlSdR8Gx31zp cMGMefn5JZn0//jziT1QK+tcGTxM1RPji5p0kJDnUdO7OGBImBHqQRJLQiE+R8YR IkUkAaLYOPq8bsr4RmhQC3DFEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWr8qB+ Q05aA9xSRmdLQKztz8FwMB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATiT9zypI6I8NQboqdlds3lZ+QNhLIBX1+MH9HSlR3bdA+uZGIi8TE AD7hYNZd+Mop7n3lq0FQ1CfIkWTJzxoZYaiJ05BBWchMScPmZjfE7XI3lok0FGjL Hg4HADuhyC+ujEtRUeSQ5CKQY7RxM9SIxhj+Y25x0+JlCJpuXCQUWTRRlP4u80K5 euMNGLv3c0fsf7uy1vZOqmphzDxpBukfskMYWddiu4GDkMn/Yo1N7ZqJr7NBafhP rLlLa8A8bhiyXlXpGTw4IXWdrb5jLAjQEelnxHqgdD5aDA+8p51FnAAhPLWlwkJ7 sSffu3iDVJxFxsaQybxcNscZyHQjzhFl -----END CERTIFICATE-----Generated at Thu Jul 3 09:11:56 2025 by rpki-client