$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft File: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json) Hash identifier: dNj6snzebLnfgOsiLCk/FZwpTPOM0KHD5Ulw1KS8npM= Subject key identifier: 42:A3:8C:B1:FD:B1:73:55:66:06:17:36:9B:A3:10:17:AB:FE:59:33 Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 Certificate issuer: /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft Manifest number: 70 Signing time: Thu 03 Jul 2025 07:07:38 +0000 Manifest this update: Thu 03 Jul 2025 07:07:38 +0000 Manifest next update: Thu 10 Jul 2025 07:07:38 +0000 Files and hashes: 1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: sxMtrJy69d9DgbPoS79p/vMxX5ZkIFrzD2LyE0SKXiw=) 2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=) 3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=) 4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1 Validity Not Before: Jul 3 07:07:38 2025 GMT Not After : Jul 10 07:07:38 2025 GMT Subject: CN=68662c3a-d8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:55:a3:e3:cc:6d:8f:3c:92:29:b3:3c:47: aa:aa:07:95:4c:1d:1e:31:06:59:b4:55:43:d3:45: b3:a2:59:8f:12:67:6b:de:73:45:3e:9c:4a:5a:99: 99:2c:5f:aa:b6:e9:a5:bb:ff:77:4e:39:06:37:33: 0e:61:f5:ec:36:ba:68:75:df:60:42:6b:97:a5:12: 12:c0:8b:03:cd:19:5b:f6:5a:ac:78:ec:4e:e3:6d: 09:59:e6:61:80:4f:e9:f5:95:aa:ee:cd:f8:64:65: 64:6b:84:c8:0e:7b:7b:86:49:b3:a2:b5:19:c1:7d: 23:72:2a:bb:17:8c:d5:f2:27:ce:c7:b3:1e:29:69: 00:3b:f4:34:90:37:6d:51:65:5d:6e:9f:ef:19:9b: da:65:ce:f4:9f:0b:19:b8:69:2a:ac:53:8d:b9:4c: c6:da:4e:c9:fe:15:c5:66:e6:95:43:10:15:18:84: 32:d2:73:b3:2f:b0:36:f9:cc:c9:02:2e:42:e8:92: 25:c7:38:22:22:74:4f:cf:c7:fa:59:1d:09:56:ea: f6:84:49:72:60:d6:4e:da:38:47:08:40:5b:60:7c: 85:b4:a6:3a:74:8d:ff:8d:3a:5f:75:78:5b:95:83: ef:f1:fd:78:a1:2f:9e:4b:92:a2:bd:00:0b:5a:94: 5c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A3:8C:B1:FD:B1:73:55:66:06:17:36:9B:A3:10:17:AB:FE:59:33 X509v3 Authority Key Identifier: keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:27:18:c9:c5:40:b8:2d:2d:fc:37:f3:cd:9a:43:d8:fe: b5:2d:3f:35:b0:36:86:97:d9:00:d0:f4:a8:28:83:00:77:f1: 01:2f:5a:9f:b3:0b:69:6a:f1:e1:64:13:54:0f:32:49:8d:4d: 63:63:17:a4:13:2d:a4:ce:74:47:ad:4b:c3:b7:b3:02:92:3c: b4:23:20:df:75:4d:b9:97:5f:73:09:72:6e:d5:52:19:08:93: 05:cd:3a:d0:fa:d1:c3:34:e9:7c:c2:18:fd:29:44:ea:39:08: ef:70:05:c6:f1:b0:15:fa:91:e1:db:a1:29:00:04:35:6e:35: 0e:6e:72:10:cb:c4:da:55:e9:c3:b0:23:12:94:db:14:74:78: 4e:c7:6f:8c:00:bc:8b:99:df:27:3c:63:41:69:fe:4e:26:25: 02:d6:fa:ad:0f:9a:0f:4e:73:8b:94:db:3a:11:59:f8:42:c9: 6f:6e:fb:0c:65:3b:92:59:c3:59:07:09:6f:bc:17:73:9b:ea: 9e:d0:d2:b9:a0:a5:ce:50:29:af:60:23:d5:45:7f:1e:e0:e5: e8:9f:0c:18:55:98:2c:70:fc:aa:e9:a4:e9:3a:06:26:0b:d9: 3a:05:d7:69:e7:e9:e5:5d:1a:9d:44:19:c5:a3:2e:44:d0:58: bc:30:fd:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy QjEyQTExMC8GA1UEBRMoRUNGRjMyNDQwQzRFRTFEMjc5NDNDREI3MkE3RDQ5MTA2 MzQwMkRGMTAeFw0yNTA3MDMwNzA3MzhaFw0yNTA3MTAwNzA3MzhaMBgxFjAUBgNV BAMTDTY4NjYyYzNhLWQ4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC34FWj48xtjzySKbM8R6qqB5VMHR4xBlm0VUPTRbOiWY8SZ2vec0U+nEpamZks X6q26aW7/3dOOQY3Mw5h9ew2umh132BCa5elEhLAiwPNGVv2Wqx47E7jbQlZ5mGA T+n1laruzfhkZWRrhMgOe3uGSbOitRnBfSNyKrsXjNXyJ87Hsx4paQA79DSQN21R ZV1un+8Zm9plzvSfCxm4aSqsU425TMbaTsn+FcVm5pVDEBUYhDLSc7MvsDb5zMkC LkLokiXHOCIidE/Px/pZHQlW6vaESXJg1k7aOEcIQFtgfIW0pjp0jf+NOl91eFuV g+/x/XihL55LkqK9AAtalFy3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQqOMsf2x c1VmBhc2m6MQF6v+WTMwHwYDVR0jBBgwFoAU7P8yRAxO4dJ5Q823Kn1JEGNALfEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJCMTJBL0I5RDRDRjQyQUUz RDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxm RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1A4eVJBeE80ZEo1UTgyM0tuMUpFR05BTGZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJC MTJBL0I5RDRDRjQyQUUzRDExRUY5NkI3NkM2QUM0RjlBRTAyLzdQOHlSQXhPNGRK NVE4MjNLbjFKRUdOQUxmRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrQJxjJxUC4LS38N/PNmkPY/rUtPzWwNoaX2QDQ9KgogwB38QEvWp+z C2lq8eFkE1QPMkmNTWNjF6QTLaTOdEetS8O3swKSPLQjIN91TbmXX3MJcm7VUhkI kwXNOtD60cM06XzCGP0pROo5CO9wBcbxsBX6keHboSkABDVuNQ5uchDLxNpV6cOw IxKU2xR0eE7Hb4wAvIuZ3yc8Y0Fp/k4mJQLW+q0Pmg9Oc4uU2zoRWfhCyW9u+wxl O5JZw1kHCW+8F3Ob6p7Q0rmgpc5QKa9gI9VFfx7g5eifDBhVmCxw/KrppOk6BiYL 2ToF12nn6eVdGp1EGcWjLkTQWLww/cs= -----END CERTIFICATE-----Generated at Thu Jul 3 09:01:15 2025 by rpki-client