$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: K3/4EjAsRXE245qXj4KvJygdqKv86nBwm51T6WPytX0= Subject key identifier: 90:A6:CD:EC:4B:98:CA:C9:F0:B8:DA:A2:35:38:A2:D1:BF:F2:45:B5 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0BFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0BE3 Signing time: Wed 02 Jul 2025 19:02:54 +0000 Manifest this update: Wed 02 Jul 2025 19:02:54 +0000 Manifest next update: Wed 09 Jul 2025 19:02:54 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: PQE+2VeoivJcOQQwT/m39bsw8UBU5FwuBzbB/D1h3M8=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3066 (0xbfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Jul 2 19:02:54 2025 GMT Not After : Jul 9 19:02:54 2025 GMT Subject: CN=6865825e-dcb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:b8:2b:9e:e6:ae:cc:2a:71:7e:8d:f6:e9: ad:c7:45:35:27:ba:28:60:48:bf:3a:5a:10:c8:a7: 84:e7:15:ff:42:7f:49:10:62:64:53:99:df:e1:3f: c9:b9:68:83:0b:84:a1:cc:45:03:d0:0c:b4:a7:59: 2d:c2:66:12:90:8a:fe:98:b7:6a:b7:3e:84:97:9d: e9:c6:08:61:48:e1:cd:f1:2b:c8:31:25:94:63:52: 62:e5:55:b6:fe:be:9d:bd:e0:12:ba:ff:c2:15:e1: 9d:8d:84:14:1d:8b:9b:70:82:bd:b9:41:f5:27:c1: 3e:8c:a3:75:5d:ba:57:8c:f1:52:18:3e:e9:c3:3b: d3:7e:e7:07:60:e0:e3:3a:98:d4:03:8b:5e:67:de: 58:56:cd:39:60:bf:b5:ee:03:76:b5:72:19:8e:0b: 66:12:74:46:07:19:e2:21:fa:a3:43:bc:c1:c5:d8: d4:41:d3:d8:7e:aa:09:bc:50:77:d1:ef:5e:d6:af: 6a:de:a2:bb:4e:49:72:af:1f:33:7d:8e:18:df:e5: 50:44:a5:3e:6a:da:5c:d5:1c:af:68:bb:d7:32:8e: e3:eb:88:75:ae:95:02:31:ef:9d:58:9a:71:16:d9: a4:5b:db:92:a6:2c:48:b3:25:c4:29:2d:90:f0:fb: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A6:CD:EC:4B:98:CA:C9:F0:B8:DA:A2:35:38:A2:D1:BF:F2:45:B5 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:92:3e:94:65:f0:59:2f:c7:bb:39:a0:e2:3c:46:64:56:f2: e8:35:f9:ad:ca:6c:fa:53:42:d2:3f:d5:24:1d:60:eb:f3:e4: 24:9a:81:d3:96:b7:6d:58:c2:42:38:3b:13:f3:52:b7:bd:7c: f4:87:0c:af:1b:89:85:f4:0f:ae:b7:14:10:24:4d:7b:f6:34: 53:00:af:1b:c7:c0:05:97:fd:79:22:b7:14:2f:e8:bb:78:e1: 55:bf:cd:ec:ef:e8:6d:1e:0b:29:b7:0e:2b:5c:77:62:a5:89: 36:71:e8:f8:33:91:3a:0c:31:2b:1e:38:c1:b5:ee:0a:98:45: 48:58:d7:1e:12:c4:54:d0:31:bf:48:15:79:ac:15:49:e8:5e: c3:cd:67:b2:2f:ac:f4:b2:ae:4f:36:ed:e6:b1:fa:ee:b0:b3: c5:b5:e8:b9:17:28:b4:6c:05:a4:a8:55:8c:45:91:4c:50:d3: c9:7a:98:b2:de:84:cc:4a:8f:f9:22:c0:cb:3e:c9:56:2e:ea: 52:27:cd:60:cc:05:fc:71:19:38:53:a4:98:5b:92:55:1c:a2: 28:59:fd:c8:37:f9:6c:0b:95:f5:f6:a5:12:20:52:f0:c8:46: d1:1d:f3:80:2c:ba:90:e5:14:87:9d:35:14:f5:10:4a:6c:de: 8b:20:25:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwNzAyMTkwMjU0WhcNMjUwNzA5MTkwMjU0WjAYMRYwFAYD VQQDEw02ODY1ODI1ZS1kY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxIW4K57mrswqcX6N9umtx0U1J7ooYEi/OloQyKeE5xX/Qn9JEGJkU5nf4T/J uWiDC4ShzEUD0Ay0p1ktwmYSkIr+mLdqtz6El53pxghhSOHN8SvIMSWUY1Ji5VW2 /r6dveASuv/CFeGdjYQUHYubcIK9uUH1J8E+jKN1XbpXjPFSGD7pwzvTfucHYODj OpjUA4teZ95YVs05YL+17gN2tXIZjgtmEnRGBxniIfqjQ7zBxdjUQdPYfqoJvFB3 0e9e1q9q3qK7Tklyrx8zfY4Y3+VQRKU+atpc1RyvaLvXMo7j64h1rpUCMe+dWJpx FtmkW9uSpixIsyXEKS2Q8PuRlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJCmzexL mMrJ8LjaojU4otG/8kW1MB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrkj6UZfBZL8e7OaDiPEZkVvLoNfmtymz6U0LSP9UkHWDr8+QkmoHT lrdtWMJCODsT81K3vXz0hwyvG4mF9A+utxQQJE179jRTAK8bx8AFl/15IrcUL+i7 eOFVv83s7+htHgsptw4rXHdipYk2cej4M5E6DDErHjjBte4KmEVIWNceEsRU0DG/ SBV5rBVJ6F7DzWeyL6z0sq5PNu3msfrusLPFtei5Fyi0bAWkqFWMRZFMUNPJepiy 3oTMSo/5IsDLPslWLupSJ81gzAX8cRk4U6SYW5JVHKIoWf3IN/lsC5X19qUSIFLw yEbRHfOALLqQ5RSHnTUU9RBKbN6LICUJ -----END CERTIFICATE-----Generated at Thu Jul 3 23:35:58 2025 by rpki-client