$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: U8THG1d+WFZuMHrJ1a8q44keUy6PFM0PqGQoNuQZPo8= Subject key identifier: E9:59:D5:B4:3B:0A:A3:B6:8A:DD:DA:6E:3C:CD:2B:88:C5:8A:2B:B2 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: 6E Signing time: Tue 01 Jul 2025 07:43:08 +0000 Manifest this update: Tue 01 Jul 2025 07:43:07 +0000 Manifest next update: Tue 08 Jul 2025 07:43:07 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: P96viiwBlKW4EzKBO/OK6VXVtYOafIpHvlRN9zq5NAk=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Jul 1 07:43:07 2025 GMT Not After : Jul 8 07:43:07 2025 GMT Subject: CN=6863918b-674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:9a:15:66:31:98:15:f7:4d:7e:b2:86:2c: 4e:1b:f1:de:39:ac:d6:e3:95:9b:19:eb:f2:da:8f: e7:80:33:ab:c9:97:44:30:01:ef:a0:f4:60:bb:29: ca:41:45:06:ab:4b:9a:4a:f4:a8:a4:81:d0:00:7d: 7e:d1:bc:e3:35:51:b4:0a:e6:44:2f:ea:db:2d:e5: 7b:6f:ca:d6:43:c8:5b:92:fd:ab:36:76:5d:d8:0f: 59:28:a9:84:40:b3:9e:40:61:05:af:0d:2b:2e:4f: 4c:d0:28:ad:6e:15:57:53:bf:67:06:fd:5a:6b:e6: f2:70:01:96:69:65:c9:50:11:8f:b6:56:ce:45:33: 17:19:a6:8b:77:54:b7:65:4c:b3:e2:b3:39:fd:4e: 16:6e:cc:34:3c:8c:82:10:48:e8:70:4d:34:f6:9d: e7:45:d9:9a:ed:55:ef:24:9e:88:83:21:e1:82:95: a2:9f:8b:ab:78:43:6c:d1:b2:a7:5f:22:1a:a8:91: 5f:de:15:30:1c:c6:86:fc:ed:aa:16:73:c9:88:11: 4f:92:32:8f:ec:56:c9:e3:06:93:73:e3:3c:af:1a: 89:a3:80:42:29:fa:ce:6a:40:30:c7:09:2e:55:78: c2:d4:14:81:6a:ff:2f:11:fe:c7:2c:57:9c:c8:e5: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:59:D5:B4:3B:0A:A3:B6:8A:DD:DA:6E:3C:CD:2B:88:C5:8A:2B:B2 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a3:ab:50:e1:26:9b:a3:54:2d:39:f1:95:9c:8e:02:42:4c: 5d:3f:ad:43:b7:10:98:0e:f4:8e:76:99:46:2b:0e:44:92:2c: 54:22:b8:89:ec:d6:6b:57:ee:30:b9:2d:54:48:32:51:f2:2d: 28:d2:e5:97:f9:6b:d1:1d:0e:26:67:f4:76:7e:22:93:19:c6: 52:5c:c0:e1:49:27:5e:50:1d:90:03:a6:84:7e:50:8a:bd:24: af:04:1b:48:38:53:78:69:84:ff:92:44:53:46:cc:3e:0b:92: 0a:90:a6:98:f4:36:fb:ae:c6:2f:f6:b5:97:5a:a8:c1:8c:c2: f0:40:ec:1e:72:3e:09:25:35:4d:3c:a8:74:07:08:94:b1:4e: 55:12:ef:ab:0a:78:73:03:03:1d:6b:88:02:88:57:f2:a4:1c: 9e:33:e3:05:aa:1f:58:f6:d4:c6:2c:8c:01:d6:87:da:d1:a3: f3:c8:89:fd:02:92:02:12:f7:d9:6d:e6:64:29:6f:70:26:a0: d4:9c:bf:18:72:a3:05:ab:b4:29:8d:ff:8d:07:6c:18:89:83: ca:44:f5:66:f7:23:33:45:33:0a:9e:c0:b4:d9:ac:c9:9d:81: 34:21:46:27:66:e2:f7:4f:ac:e6:2c:7e:1a:a5:55:83:a2:2f: 39:d6:92:b0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTc1NzExMC8GA1UEBRMoRDNCQTQ0REE1Q0JEQzFDQzUxMjVFMkMxMDA3QjZDREI3 RERDREM4NTAeFw0yNTA3MDEwNzQzMDdaFw0yNTA3MDgwNzQzMDdaMBgxFjAUBgNV BAMTDTY4NjM5MThiLTY3NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChTpoVZjGYFfdNfrKGLE4b8d45rNbjlZsZ6/Laj+eAM6vJl0QwAe+g9GC7KcpB RQarS5pK9KikgdAAfX7RvOM1UbQK5kQv6tst5XtvytZDyFuS/as2dl3YD1koqYRA s55AYQWvDSsuT0zQKK1uFVdTv2cG/Vpr5vJwAZZpZclQEY+2Vs5FMxcZpot3VLdl TLPiszn9ThZuzDQ8jIIQSOhwTTT2nedF2ZrtVe8knoiDIeGClaKfi6t4Q2zRsqdf IhqokV/eFTAcxob87aoWc8mIEU+SMo/sVsnjBpNz4zyvGomjgEIp+s5qQDDHCS5V eMLUFIFq/y8R/scsV5zI5Yw3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6VnVtDsK o7aK3dpuPM0riMWKK7IwHwYDVR0jBBgwFoAU07pE2ly9wcxRJeLBAHts233c3IUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzU3LzMyOTM0Q0VDQjM3 QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDdwRTJseTl3Y3hSSmVMQkFIdHMyMzNjM0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzU3LzMyOTM0Q0VDQjM3QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4 UkplTEJBSHRzMjMzYzNJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG+jq1DhJpujVC058ZWcjgJCTF0/rUO3EJgO9I52mUYrDkSSLFQiuIns 1mtX7jC5LVRIMlHyLSjS5Zf5a9EdDiZn9HZ+IpMZxlJcwOFJJ15QHZADpoR+UIq9 JK8EG0g4U3hphP+SRFNGzD4LkgqQppj0Nvuuxi/2tZdaqMGMwvBA7B5yPgklNU08 qHQHCJSxTlUS76sKeHMDAx1riAKIV/KkHJ4z4wWqH1j21MYsjAHWh9rRo/PIif0C kgIS99lt5mQpb3AmoNScvxhyowWrtCmN/40HbBiJg8pE9Wb3IzNFMwqewLTZrMmd gTQhRidm4vdPrOYsfhqlVYOiLznWkrA= -----END CERTIFICATE-----Generated at Tue Jul 1 19:47:27 2025 by rpki-client