$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: /CD15tPxYyID152/0eJFAeBcHBGJ+GLbJQRpPI34Wmo= Subject key identifier: 00:70:EB:6D:CD:06:EA:DC:2E:B7:6F:CF:1B:B0:82:D4:C5:8D:AD:90 Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 0152 Signing time: Thu 03 Jul 2025 04:17:22 +0000 Manifest this update: Thu 03 Jul 2025 04:17:22 +0000 Manifest next update: Thu 10 Jul 2025 04:17:22 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: pJkSGFY3oAQ9z898thJ5103MhVfNANoYtUVc7DcIhkI=) 2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: 1Y1b/QsKKP8Hjc1I0M3GlUj53Sw/Eb4ibtuIxI0mlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Validity Not Before: Jul 3 04:17:22 2025 GMT Not After : Jul 10 04:17:22 2025 GMT Subject: CN=68660452-57d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:eb:88:41:65:8c:84:fa:97:43:ce:73:01: 82:72:5e:4a:7f:cd:ae:e8:a2:3c:f7:c8:c1:f2:7e: 2e:8d:5b:74:cb:70:72:1c:29:bd:f7:84:f6:ca:f1: ef:89:45:88:ba:dc:35:2b:34:a9:65:09:70:3f:1a: ae:51:4e:ef:6f:ca:63:a8:79:1b:af:cc:bf:19:2f: 62:81:e3:af:4f:96:e0:49:0d:d4:26:6f:f6:54:89: d3:be:de:b3:13:d7:5a:cd:3e:a1:24:3c:2f:e1:d8: 57:78:ee:b0:39:eb:ee:62:77:11:7b:8e:49:0e:eb: ba:21:c5:73:c9:1e:29:13:ef:e7:82:87:ec:9b:c8: 07:12:5e:ed:0e:66:8a:d0:13:72:f0:10:30:a6:58: 62:3e:54:a1:74:02:d7:c5:2d:e1:06:88:e9:c3:6f: 4e:eb:7d:1b:2f:cc:4a:ed:4c:67:34:3f:76:87:b1: e0:d1:46:2c:cc:1a:93:f3:e3:14:f5:1e:39:22:8e: 5d:b7:93:5f:ff:fc:ea:aa:1c:06:b6:b2:67:47:11: 4e:6c:78:e8:66:75:a0:6d:1b:aa:03:58:b1:53:36: 03:c1:d1:9c:e3:21:b9:f6:04:31:9d:0e:4e:d1:da: fb:99:20:53:00:07:b2:31:83:29:ae:8d:1b:ed:8b: 2a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:70:EB:6D:CD:06:EA:DC:2E:B7:6F:CF:1B:B0:82:D4:C5:8D:AD:90 X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:0e:66:54:cc:db:df:0c:8d:c8:18:0c:a5:c3:63:69:17: f1:7d:ba:d0:63:09:8e:94:76:e1:7d:c9:53:98:5e:78:16:20: 29:62:98:d1:98:df:b2:14:ca:08:b6:6b:66:a3:00:64:d5:21: 4c:72:3a:66:32:9e:fb:b3:fd:70:0e:68:ac:f7:6e:d6:ba:b7: ee:a0:ba:bb:3c:e9:37:5c:2a:68:c4:9c:04:26:48:e9:cd:0d: d3:15:36:e9:13:98:fa:aa:c5:7f:98:02:20:f3:ae:50:8f:51: a0:f2:06:67:16:5e:75:e0:77:3c:44:2a:b6:74:40:15:3e:9f: cf:21:67:b2:3a:3a:cd:56:15:c0:1b:69:7f:bf:6d:e0:26:05: 6d:86:98:f3:11:cf:bf:8d:22:d6:37:24:4c:69:5b:a0:de:e9: 81:5d:9d:f0:8b:2f:91:74:0e:01:30:43:d1:91:c1:68:ab:b2: 57:37:72:24:91:17:37:21:7c:3d:ac:22:ba:07:32:fc:22:d2: c4:29:0f:59:4d:ad:eb:9e:99:49:3c:b3:fe:41:40:f0:00:27: b7:f1:90:50:58:6d:ae:29:21:e8:25:88:51:e3:31:d0:4d:39: bc:3c:00:b1:61:1c:c0:97:00:de:db:87:b5:b3:de:76:28:8e: bd:21:42:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NEYxMTAvBgNVBAUTKEVERTJGNENDNDM0NzI4Qzc5Qzg5MzkxNDE0RjZFRTAz RkI0MTY4OEMwHhcNMjUwNzAzMDQxNzIyWhcNMjUwNzEwMDQxNzIyWjAYMRYwFAYD VQQDEw02ODY2MDQ1Mi01N2Q2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqTriEFljIT6l0POcwGCcl5Kf82u6KI898jB8n4ujVt0y3ByHCm994T2yvHv iUWIutw1KzSpZQlwPxquUU7vb8pjqHkbr8y/GS9igeOvT5bgSQ3UJm/2VInTvt6z E9dazT6hJDwv4dhXeO6wOevuYncRe45JDuu6IcVzyR4pE+/ngofsm8gHEl7tDmaK 0BNy8BAwplhiPlShdALXxS3hBojpw29O630bL8xK7UxnND92h7Hg0UYszBqT8+MU 9R45Io5dt5Nf//zqqhwGtrJnRxFObHjoZnWgbRuqA1ixUzYDwdGc4yG59gQxnQ5O 0dr7mSBTAAeyMYMpro0b7YsqqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFABw623N BurcLrdvzxuwgtTFja2QMB8GA1UdIwQYMBaAFO3i9MxDRyjHnIk5FBT27gP7QWiM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk0Ri9DOTg5MDY3MjU3 QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtNZWNpVGtVRlBidUFfdEJh SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk0Ri9DOTg5MDY3MjU3QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtN ZWNpVGtVRlBidUFfdEJhSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtzw5mVMzb3wyNyBgMpcNjaRfxfbrQYwmOlHbhfclTmF54FiApYpjR mN+yFMoItmtmowBk1SFMcjpmMp77s/1wDmis927WurfuoLq7POk3XCpoxJwEJkjp zQ3TFTbpE5j6qsV/mAIg865Qj1Gg8gZnFl514Hc8RCq2dEAVPp/PIWeyOjrNVhXA G2l/v23gJgVthpjzEc+/jSLWNyRMaVug3umBXZ3wiy+RdA4BMEPRkcFoq7JXN3Ik kRc3IXw9rCK6BzL8ItLEKQ9ZTa3rnplJPLP+QUDwACe38ZBQWG2uKSHoJYhR4zHQ TTm8PACxYRzAlwDe24e1s952KI69IUIc -----END CERTIFICATE-----Generated at Thu Jul 3 10:15:25 2025 by rpki-client