$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: RdXXcUF/EAGcYDjZb90mNR/voopxgcLF2eqtZ3lAHa4= Subject key identifier: 96:7B:3C:3B:6F:C2:1B:B8:67:B6:D5:A6:EF:D8:8B:C1:AE:62:14:68 Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17C9 Signing time: Sat 28 Jun 2025 16:26:15 +0000 Manifest this update: Sat 28 Jun 2025 16:26:15 +0000 Manifest next update: Sat 05 Jul 2025 16:26:15 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: vccZcksEAzntYHL5P2wNp/WHKKqu//91NiPVigy+5y8=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: MtUOG8te7vvd8OgcyO+YgqB1a0uCeqPJKDSTrguzMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6100 (0x17d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Jun 28 16:26:15 2025 GMT Not After : Jul 5 16:26:15 2025 GMT Subject: CN=686017a7-7704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:78:1f:e3:fd:9e:5f:60:f0:e5:a3:c6:15:4f: ff:1a:43:94:c1:97:3e:4e:2e:0b:29:78:c1:c4:19: ae:51:21:02:03:e7:12:e7:9c:18:92:bd:13:54:8c: 23:6e:46:f4:12:b2:51:71:ce:7c:44:be:38:24:e3: 88:0b:a8:ab:07:6f:d6:54:43:5c:43:a6:13:73:67: 30:35:f9:75:5a:cb:14:9f:d7:ef:fe:6e:3f:37:0d: e8:f5:ea:8a:b7:92:78:6d:09:be:c8:9d:e6:ae:b9: af:d1:a9:6e:c2:24:1a:e8:af:42:94:15:b5:e5:92: 14:89:d0:c9:d4:87:e7:d8:75:b9:71:fd:9c:43:af: 2a:aa:06:51:9a:a9:58:ca:48:86:36:03:ea:72:e6: a3:11:f4:cd:f8:f9:55:f5:bb:1b:9f:2c:a9:37:d7: 0e:e2:c1:a3:9e:37:dd:ef:42:22:df:ec:27:85:f1: bd:74:56:1a:2a:76:3c:a2:ab:d5:e7:15:a1:3f:16: 63:f3:0f:6b:bc:cb:49:4e:11:ab:28:45:f2:68:7c: e2:1a:30:72:e5:93:9d:75:b9:86:59:bd:c6:1b:80: 8c:8b:49:82:b5:f7:65:7d:1c:fd:ec:d4:33:99:b8: 31:3a:b7:de:91:74:27:b5:b9:e4:3d:6d:88:ad:94: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7B:3C:3B:6F:C2:1B:B8:67:B6:D5:A6:EF:D8:8B:C1:AE:62:14:68 X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:fc:ad:7d:41:de:38:16:06:a1:e5:7c:ac:cd:74:7e:e0:38: 44:c6:a5:55:be:8e:fa:ea:5e:e4:03:ab:3b:33:6b:4f:e9:ef: 9a:34:51:ba:f5:08:0a:48:0b:a2:f3:e9:f5:d1:73:f1:41:74: 65:79:ba:68:b0:fd:2e:80:40:5b:cb:27:2f:78:dd:b6:05:9d: 05:9b:6d:22:d6:23:b7:ca:f3:34:c5:73:f9:51:c8:a1:70:3f: 1e:f0:74:e9:d9:e9:94:5b:40:34:d5:d3:21:17:fc:ef:b3:f5: fb:94:69:04:47:38:ac:b2:64:60:6a:dd:c0:ce:94:e3:0e:6b: 2a:17:de:04:7d:22:bc:5a:47:65:3b:9a:72:e4:88:59:a4:9b: 53:23:dc:72:cc:a1:a3:ab:12:62:8b:75:69:fa:a8:77:5f:29: 3b:46:46:b9:48:9e:ba:d8:bb:b2:bc:f5:cd:16:20:c7:52:a3: 78:54:37:39:56:a7:52:c9:8c:a9:8f:f4:bf:72:78:7a:1e:da: 1a:b3:af:7d:4d:74:d4:50:ac:a8:49:37:b5:c9:cc:40:1b:5a: e7:d2:f9:e7:6b:53:ae:f7:bd:03:1c:dd:ea:ae:61:66:dd:7f: 90:e2:a8:00:dd:d9:b5:69:62:5e:94:6f:44:84:32:d2:32:af: e6:dd:13:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwNjI4MTYyNjE1WhcNMjUwNzA1MTYyNjE1WjAYMRYwFAYD VQQDEw02ODYwMTdhNy03NzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13gf4/2eX2Dw5aPGFU//GkOUwZc+Ti4LKXjBxBmuUSECA+cS55wYkr0TVIwj bkb0ErJRcc58RL44JOOIC6irB2/WVENcQ6YTc2cwNfl1WssUn9fv/m4/Nw3o9eqK t5J4bQm+yJ3mrrmv0aluwiQa6K9ClBW15ZIUidDJ1Ifn2HW5cf2cQ68qqgZRmqlY ykiGNgPqcuajEfTN+PlV9bsbnyypN9cO4sGjnjfd70Ii3+wnhfG9dFYaKnY8oqvV 5xWhPxZj8w9rvMtJThGrKEXyaHziGjBy5ZOddbmGWb3GG4CMi0mCtfdlfRz97NQz mbgxOrfekXQntbnkPW2IrZS2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZ7PDtv whu4Z7bVpu/Yi8GuYhRoMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg/K19Qd44Fgah5XyszXR+4DhExqVVvo766l7kA6s7M2tP6e+aNFG6 9QgKSAui8+n10XPxQXRlebposP0ugEBbyycveN22BZ0Fm20i1iO3yvM0xXP5Ucih cD8e8HTp2emUW0A01dMhF/zvs/X7lGkERzissmRgat3AzpTjDmsqF94EfSK8Wkdl O5py5IhZpJtTI9xyzKGjqxJii3Vp+qh3Xyk7Rka5SJ662LuyvPXNFiDHUqN4VDc5 VqdSyYypj/S/cnh6Htoas699TXTUUKyoSTe1ycxAG1rn0vnna1Ou970DHN3qrmFm 3X+Q4qgA3dm1aWJelG9EhDLSMq/m3RP5 -----END CERTIFICATE-----Generated at Sun Jun 29 16:09:41 2025 by rpki-client