$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: PL8DPEH0FbLi7Oo9ozQakVoHi0bVSq5XmLEMOEgFDEc= Subject key identifier: E4:C0:F2:1D:10:98:8D:2E:57:18:24:73:73:2A:88:57:03:67:02:23 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 0744 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 0738 Signing time: Wed 02 Jul 2025 22:04:57 +0000 Manifest this update: Wed 02 Jul 2025 22:04:57 +0000 Manifest next update: Wed 09 Jul 2025 22:04:57 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: IXKlq7y/+RvntXqFvzb/cDaJsoV8tPNgTGy5aM+RHps=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: uuBWBt4HEhDV8CjrNo2I7XyyiDQqCjSA8yzYrddp5CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:04:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1860 (0x744) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Jul 2 22:04:57 2025 GMT Not After : Jul 9 22:04:57 2025 GMT Subject: CN=6865ad09-fe6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:03:59:09:b3:1b:ab:87:63:25:51:8a:d0: 5a:71:c5:cc:70:31:fc:9e:bd:e1:d7:2a:e8:92:49: d6:c4:78:df:a1:ae:a8:c7:89:5e:bc:2b:ae:74:36: 2e:08:22:6e:67:d4:d3:5e:36:7e:d9:71:71:e9:b5: 47:e2:1f:ec:c5:9c:55:bd:c0:3f:0b:ad:a2:3a:28: b3:9c:75:34:78:6e:5d:40:90:c9:6a:d4:5b:57:27: bd:eb:31:4c:83:a1:90:be:35:98:76:de:47:b0:9a: 08:a2:58:06:4d:2a:94:4b:7d:67:72:fe:34:66:73: d4:58:6e:08:a0:83:d9:0b:a3:25:59:36:29:5f:69: 61:12:5d:a5:0e:c6:03:bd:ae:16:76:44:12:f3:c2: 0e:6f:83:a4:ab:c2:5d:d6:83:5d:cb:21:51:e2:b2: 9b:c7:1a:86:bc:32:fe:6c:9a:86:61:31:59:96:7d: b7:25:6b:de:ec:42:73:d0:4e:f6:2c:33:16:cf:65: ea:b9:9c:18:af:44:64:c0:07:97:f6:c9:c6:f5:64: af:0a:bc:0e:86:e5:ec:69:14:b5:ac:28:c1:dd:73: 1a:dd:98:1f:bb:fb:10:8c:bb:c0:01:57:a0:96:f0: 34:db:d6:91:0c:3b:09:64:05:7a:f7:c5:1f:86:f3: 20:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C0:F2:1D:10:98:8D:2E:57:18:24:73:73:2A:88:57:03:67:02:23 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:51:d2:73:82:71:18:7d:47:46:6c:a8:22:aa:9c:78:66:66: 6a:fa:b9:6d:96:2c:56:c1:42:2a:13:e5:5e:5f:b9:9c:d4:31: 8e:d0:e0:dc:10:69:c2:5b:e3:f2:82:c9:d9:a3:36:69:31:c8: 6e:d1:e9:dd:44:af:20:4a:09:5a:0f:b4:92:a8:3e:4f:cb:d8: e1:fb:6c:ec:b9:fe:7a:36:8f:cf:5c:6b:76:66:ec:14:6c:38: 5f:df:d0:f4:e2:e8:4c:40:c3:10:4b:13:a8:94:9a:49:9f:ca: 46:12:96:47:24:d3:52:50:97:1c:97:b6:13:24:9a:c5:e0:ca: ef:1f:45:cd:87:1a:e9:d0:a3:26:47:b3:cb:3a:f2:22:69:91: ee:4e:6d:11:e7:69:49:d4:b7:43:41:23:4f:b8:7c:80:bc:bf: c4:6d:ae:55:b7:09:6d:59:78:41:f8:cc:84:c0:57:29:7b:48: 0b:14:b3:51:d3:f5:39:0a:72:1f:72:4a:e7:99:cc:d7:d2:b0: 61:03:b4:2f:ba:44:d8:be:e0:0e:eb:dd:f0:84:31:f1:27:c0: ec:9b:c2:69:72:6c:57:59:af:56:fb:f7:e1:6b:74:b7:75:c9: a5:59:fb:3b:8f:5a:70:60:17:61:02:7c:d0:d0:88:56:81:3d: bf:46:15:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNzAyMjIwNDU3WhcNMjUwNzA5MjIwNDU3WjAYMRYwFAYD VQQDEw02ODY1YWQwOS1mZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3IDWQmzG6uHYyVRitBaccXMcDH8nr3h1yrokknWxHjfoa6ox4levCuudDYu CCJuZ9TTXjZ+2XFx6bVH4h/sxZxVvcA/C62iOiiznHU0eG5dQJDJatRbVye96zFM g6GQvjWYdt5HsJoIolgGTSqUS31ncv40ZnPUWG4IoIPZC6MlWTYpX2lhEl2lDsYD va4WdkQS88IOb4Okq8Jd1oNdyyFR4rKbxxqGvDL+bJqGYTFZln23JWve7EJz0E72 LDMWz2XquZwYr0RkwAeX9snG9WSvCrwOhuXsaRS1rCjB3XMa3Zgfu/sQjLvAAVeg lvA029aRDDsJZAV698UfhvMg3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTA8h0Q mI0uVxgkc3MqiFcDZwIjMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5UdJzgnEYfUdGbKgiqpx4ZmZq+rltlixWwUIqE+VeX7mc1DGO0ODc EGnCW+PygsnZozZpMchu0endRK8gSglaD7SSqD5Py9jh+2zsuf56No/PXGt2ZuwU bDhf39D04uhMQMMQSxOolJpJn8pGEpZHJNNSUJccl7YTJJrF4MrvH0XNhxrp0KMm R7PLOvIiaZHuTm0R52lJ1LdDQSNPuHyAvL/Eba5VtwltWXhB+MyEwFcpe0gLFLNR 0/U5CnIfckrnmczX0rBhA7QvukTYvuAO693whDHxJ8Dsm8JpcmxXWa9W+/fha3S3 dcmlWfs7j1pwYBdhAnzQ0IhWgT2/RhU2 -----END CERTIFICATE-----Generated at Fri Jul 4 01:08:40 2025 by rpki-client