$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: JsWn2TZQUumT0OBq03s9oYj40UPze0QcS+uMKa5/hUk= Subject key identifier: 09:63:BB:5E:2D:D1:E4:91:EA:80:3F:C7:1D:24:34:63:64:1E:AA:4B Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 3498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 3498 Signing time: Wed 02 Jul 2025 14:16:33 +0000 Manifest this update: Wed 02 Jul 2025 14:16:32 +0000 Manifest next update: Wed 09 Jul 2025 14:16:32 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: oidaxHxnN2Hws3Zi/V/rxMWI9PJk8eutfa5QNOSgljk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:16:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13464 (0x3498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: Jul 2 14:16:32 2025 GMT Not After : Jul 9 14:16:32 2025 GMT Subject: CN=68653f40-5eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:86:ea:5e:59:31:53:23:69:b8:3d:ce:f6: b5:27:c3:2c:d1:58:69:69:bb:45:8d:c7:4f:1d:94: 76:78:23:5b:c4:65:39:b3:98:f7:25:54:70:0e:b4: 10:93:19:33:1c:b9:c3:80:e3:e4:63:6b:24:3f:42: 8a:61:ab:a6:ce:e0:3a:11:fe:d2:df:a7:08:c8:c0: fa:65:37:df:da:5e:08:85:84:8a:85:da:56:91:72: ef:d3:7d:25:d1:6c:65:00:09:07:9a:c5:40:63:25: 5e:9d:61:71:43:ce:7b:14:1c:e2:83:08:4c:84:38: eb:45:d7:ba:d1:65:f4:4e:76:4a:2b:05:8a:ec:eb: 19:c5:f4:4d:ba:ab:90:c8:39:ca:7c:7a:c2:1b:7c: e3:e6:cd:5f:b7:c8:c3:26:76:76:e2:a8:8a:52:a5: 62:76:0d:35:76:ac:6b:1b:4b:29:59:ff:28:9c:a1: 2b:4d:59:39:ec:3d:46:5f:c2:20:62:d1:48:1a:49: 13:62:f0:4a:d1:b8:47:fe:23:97:88:63:2c:8d:62: e8:f8:50:e9:33:01:a3:f6:ed:75:d3:7b:4e:97:86: a3:69:55:61:2f:45:00:b7:d7:67:bd:33:37:1b:aa: 49:96:f0:9e:c8:0b:42:79:f3:ee:ce:71:b9:13:09: 6d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:BB:5E:2D:D1:E4:91:EA:80:3F:C7:1D:24:34:63:64:1E:AA:4B X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:e2:b3:2e:90:dd:5c:4d:44:39:90:ab:d5:56:c2:92:a8:7d: bd:d5:bc:86:ec:6a:66:f2:7f:00:cd:01:25:a5:8c:23:90:fc: 94:87:fd:33:b1:4c:06:39:72:6d:ba:d7:02:90:98:30:e4:1b: 36:ba:f6:6f:6e:23:a7:a5:b9:72:f0:8f:c5:99:8a:07:20:29: 3d:c9:23:e5:5b:2d:85:c3:26:82:62:dc:df:10:ca:12:ee:5f: 99:cf:04:22:22:25:5c:8c:2d:48:85:f2:d7:95:2d:79:ba:7d: 98:36:87:ae:34:b0:e5:5a:db:0d:69:ba:81:fa:a7:22:31:2d: 3b:ae:bd:97:c2:51:0a:39:5f:fe:40:1a:1e:36:68:c6:03:6f: a5:b0:73:65:44:1b:ba:58:3a:00:f0:0c:fd:e7:a9:e5:03:99: 59:75:da:56:9e:8e:f8:0c:71:fd:ac:0c:68:cb:07:67:92:dd: bb:ed:c4:92:0a:4d:4e:b7:7b:c6:52:34:87:93:6d:c6:65:34: ca:4f:72:8c:53:0e:16:62:ad:6a:3f:97:98:18:1e:53:1b:30: a4:e0:af:94:91:2e:f5:1c:bc:a6:dc:a7:84:81:a6:71:31:e5: b9:bb:45:6d:ff:9b:b9:54:08:7e:7b:42:70:64:30:bd:86:ca: 80:93:95:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwNzAyMTQxNjMyWhcNMjUwNzA5MTQxNjMyWjAYMRYwFAYD VQQDEw02ODY1M2Y0MC01ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKGG6l5ZMVMjabg9zva1J8Ms0VhpabtFjcdPHZR2eCNbxGU5s5j3JVRwDrQQ kxkzHLnDgOPkY2skP0KKYaumzuA6Ef7S36cIyMD6ZTff2l4IhYSKhdpWkXLv030l 0WxlAAkHmsVAYyVenWFxQ857FBzigwhMhDjrRde60WX0TnZKKwWK7OsZxfRNuquQ yDnKfHrCG3zj5s1ft8jDJnZ24qiKUqVidg01dqxrG0spWf8onKErTVk57D1GX8Ig YtFIGkkTYvBK0bhH/iOXiGMsjWLo+FDpMwGj9u1103tOl4ajaVVhL0UAt9dnvTM3 G6pJlvCeyAtCefPuznG5EwltXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlju14t 0eSR6oA/xx0kNGNkHqpLMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF4rMukN1cTUQ5kKvVVsKSqH291byG7Gpm8n8AzQElpYwjkPyUh/0z sUwGOXJtutcCkJgw5Bs2uvZvbiOnpbly8I/FmYoHICk9ySPlWy2FwyaCYtzfEMoS 7l+ZzwQiIiVcjC1IhfLXlS15un2YNoeuNLDlWtsNabqB+qciMS07rr2XwlEKOV/+ QBoeNmjGA2+lsHNlRBu6WDoA8Az956nlA5lZddpWno74DHH9rAxoywdnkt277cSS Ck1Ot3vGUjSHk23GZTTKT3KMUw4WYq1qP5eYGB5TGzCk4K+UkS71HLym3KeEgaZx MeW5u0Vt/5u5VAh+e0JwZDC9hsqAk5Ug -----END CERTIFICATE-----Generated at Wed Jul 2 19:16:20 2025 by rpki-client