$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: e8ZXG5uxlso4eqg5cZXAwwyWAQHpxqGWoejQZIQiCv0= Subject key identifier: 67:6B:9B:58:A5:BF:22:BB:1E:75:EC:D4:A4:63:8F:D1:5E:9F:A1:2D Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 05CD Signing time: Wed 02 Jul 2025 23:24:21 +0000 Manifest this update: Wed 02 Jul 2025 23:24:20 +0000 Manifest next update: Wed 09 Jul 2025 23:24:20 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: ERRXt+v7yGRL2J/dfjEPA1rAr7KHxAB59hJCPHfcy+M=) 2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1500 (0x5dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Jul 2 23:24:20 2025 GMT Not After : Jul 9 23:24:20 2025 GMT Subject: CN=6865bfa5-b34f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:78:d2:36:9a:86:61:99:c9:73:5b:76:8c: d4:f2:86:f7:ef:46:08:41:0e:cd:e8:d1:b3:5e:41: 94:c0:cc:0a:d8:13:d2:cc:b7:48:a1:4b:58:2a:cf: d4:56:d9:b3:ef:d5:dc:02:52:1e:a1:39:ab:9a:29: 89:5a:bc:5e:e1:68:e3:ea:c3:7a:26:ac:2e:dc:7e: c6:92:00:a1:fe:86:05:d8:2c:29:57:27:52:9d:6f: c5:ee:98:53:08:10:c0:a5:48:c0:c2:48:05:e6:75: be:26:22:21:19:e8:66:d2:9a:a1:ab:dc:68:91:5e: 6c:91:a9:e3:7a:a0:f8:18:cc:69:ba:ae:cc:2d:22: a1:b6:a3:4e:89:2b:a7:f1:13:e0:c7:2f:28:de:07: 59:c9:62:f6:7e:23:18:37:07:e3:02:0f:e4:12:ed: a8:2c:f2:93:9c:a5:cc:d2:6c:a3:0f:52:64:2d:f5: 0c:47:8d:96:6e:7d:14:df:91:b3:f9:71:21:3f:46: ec:8e:67:29:80:48:9a:3b:1b:51:80:72:5e:da:8d: dc:a5:11:2e:21:29:4f:24:79:e4:85:c7:99:1c:c8: b8:e4:c9:a7:2d:5a:fb:17:33:26:45:0e:e4:77:79: fc:f7:08:ff:b8:16:d5:bd:a9:c0:34:fa:52:77:59: 74:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6B:9B:58:A5:BF:22:BB:1E:75:EC:D4:A4:63:8F:D1:5E:9F:A1:2D X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:6c:cb:9a:d8:da:f0:62:fc:22:a8:d1:33:84:a7:ea:1a:53: 8e:d3:b2:5d:43:ab:d5:59:2c:61:fc:a8:70:9b:67:f1:45:2c: a0:d2:ba:79:9d:ca:a9:90:61:37:64:f4:14:39:d2:0f:25:cd: 04:19:df:4c:9a:ff:ff:ec:7e:75:c2:a7:45:78:68:fd:f4:d2: 87:ee:14:ec:53:eb:84:91:90:b4:f2:30:01:1f:2c:75:43:b4: cb:95:d1:14:d9:f2:a7:58:81:71:1e:81:79:3b:77:b8:7f:d9: 22:f8:df:85:c3:b9:6f:64:f3:b9:8b:dd:0b:b3:92:c6:49:a0: d6:ce:0b:43:e5:2c:34:3a:6b:6f:c5:78:33:a1:18:7a:8d:3b: e6:34:b5:c7:c1:b3:f1:08:9f:cd:0d:12:0c:63:09:eb:9a:5f: fa:7a:68:f3:6e:9b:dc:15:b1:a5:a1:ab:bf:14:b9:09:22:f8: c5:56:3f:61:c8:8a:56:81:9a:44:21:eb:ea:b6:9e:48:5e:81: 3f:06:c3:43:35:d0:54:8a:e7:b3:36:e3:ec:79:3d:5d:ca:ed: cc:72:aa:e9:1d:ea:d5:d1:a8:fc:54:eb:a1:62:ba:77:ba:2b: 01:89:07:b4:f1:06:df:e7:95:86:a9:fb:29:36:39:4e:05:39: ee:b3:95:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwNzAyMjMyNDIwWhcNMjUwNzA5MjMyNDIwWjAYMRYwFAYD VQQDEw02ODY1YmZhNS1iMzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0V40jaahmGZyXNbdozU8ob370YIQQ7N6NGzXkGUwMwK2BPSzLdIoUtYKs/U Vtmz79XcAlIeoTmrmimJWrxe4Wjj6sN6Jqwu3H7GkgCh/oYF2CwpVydSnW/F7phT CBDApUjAwkgF5nW+JiIhGehm0pqhq9xokV5skanjeqD4GMxpuq7MLSKhtqNOiSun 8RPgxy8o3gdZyWL2fiMYNwfjAg/kEu2oLPKTnKXM0myjD1JkLfUMR42Wbn0U35Gz +XEhP0bsjmcpgEiaOxtRgHJe2o3cpREuISlPJHnkhceZHMi45MmnLVr7FzMmRQ7k d3n89wj/uBbVvanANPpSd1l0wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdrm1il vyK7HnXs1KRjj9Fen6EtMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5bMua2NrwYvwiqNEzhKfqGlOO07JdQ6vVWSxh/Khwm2fxRSyg0rp5 ncqpkGE3ZPQUOdIPJc0EGd9Mmv//7H51wqdFeGj99NKH7hTsU+uEkZC08jABHyx1 Q7TLldEU2fKnWIFxHoF5O3e4f9ki+N+Fw7lvZPO5i90Ls5LGSaDWzgtD5Sw0Omtv xXgzoRh6jTvmNLXHwbPxCJ/NDRIMYwnrml/6emjzbpvcFbGloau/FLkJIvjFVj9h yIpWgZpEIevqtp5IXoE/BsNDNdBUiuezNuPseT1dyu3McqrpHerV0aj8VOuhYrp3 uisBiQe08Qbf55WGqfspNjlOBTnus5Xh -----END CERTIFICATE-----Generated at Fri Jul 4 01:20:17 2025 by rpki-client