$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: tG8atpSs57pRr9ZskMohZcdDvgdX2X7DMPE0jtYX80A= Subject key identifier: 98:62:7F:0E:A2:D8:5F:BC:12:AD:9F:CE:6F:17:97:92:78:F1:22:E1 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01B8 Signing time: Sat 05 Jul 2025 03:30:44 +0000 Manifest this update: Sat 05 Jul 2025 03:30:43 +0000 Manifest next update: Sat 12 Jul 2025 03:30:43 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: R7gGPrZLvaLB6ZcoXXvsMLZO7BCai9avNB3w59sm0bs=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Jul 5 03:30:43 2025 GMT Not After : Jul 12 03:30:43 2025 GMT Subject: CN=68689c64-51b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:5e:a0:b2:f6:36:25:8e:e7:32:4f:87:10: 53:33:7e:54:87:e9:f4:3c:ad:32:72:ba:96:67:0d: 69:a1:1f:fc:7d:f3:14:33:b8:36:2d:48:42:e1:40: ee:aa:cf:da:32:75:11:69:b2:26:bb:da:f6:dd:27: 75:6d:8a:fd:ab:d6:47:1b:50:6b:a3:be:83:4b:10: d8:34:73:d5:63:58:97:42:40:04:ec:77:47:ad:36: 10:9a:14:d0:a1:67:04:41:2f:23:ac:3e:12:93:b4: 94:dc:f9:1e:34:02:c3:47:4c:a1:0f:de:30:54:cc: 1c:46:57:4a:82:b5:72:67:f4:8a:84:a0:a4:a7:bd: a4:da:e0:fb:e9:4d:d4:c7:cd:fd:c2:c5:16:4c:d2: ca:0d:e8:62:14:68:eb:cb:d4:cf:26:b3:72:0a:d9: b6:9f:6d:9f:71:f0:6d:47:2f:fd:0c:6b:7c:2e:27: fb:61:f1:a7:29:a0:7e:c0:cd:72:4f:cc:4e:0a:a4: 68:af:5f:25:9d:7c:62:6a:51:49:26:91:4b:c7:53: 98:7f:c8:bd:26:36:8e:2f:14:86:39:16:15:5c:2c: 5c:d5:ba:8c:56:ef:82:11:9c:07:e0:fe:31:64:1d: e4:19:a5:20:a1:67:5f:e2:23:6d:e2:c6:f8:a6:d4: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:62:7F:0E:A2:D8:5F:BC:12:AD:9F:CE:6F:17:97:92:78:F1:22:E1 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:54:c1:af:33:4b:52:07:71:71:85:72:7e:59:7c:fb:ae:10: 82:6c:fb:a2:e2:43:bd:c2:26:4f:54:9b:6b:55:64:3b:93:b3: 09:eb:74:d5:16:6a:74:0c:30:11:10:a5:76:a3:f1:4a:27:8e: 4b:e8:ea:e9:85:25:30:50:48:9c:a8:92:c4:6c:6e:bc:ec:f3: 30:4f:9b:5b:54:c4:2f:7c:0d:fc:63:07:b9:4a:78:22:14:b9: d0:a2:4e:ed:0e:28:2d:f2:9a:c8:45:76:10:45:46:ac:fd:fa: 8d:27:5b:98:77:e2:bc:88:94:99:b5:5d:82:f8:88:5c:cc:63: b4:47:07:ad:04:73:77:8d:c9:73:ad:62:40:d2:b4:11:45:68: 9a:45:d2:f7:9b:69:ef:23:2d:ff:56:e1:57:04:b5:a7:de:50: 32:c3:51:47:71:e0:56:75:c0:c1:e8:24:bd:72:39:72:bb:54: 79:83:17:97:35:b2:0b:24:da:34:66:5b:10:f9:d3:c3:84:7f: 68:4f:ce:21:12:79:fe:14:37:d2:25:c7:0a:bd:4e:76:4e:c2: 21:19:1f:1c:f6:6c:18:8b:f6:b0:a6:f6:e0:0a:a2:ac:9f:92: b4:c8:cf:bd:ef:1f:3d:64:60:9b:e2:f2:34:65:59:9c:e2:3e: e4:9e:dd:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNzA1MDMzMDQzWhcNMjUwNzEyMDMzMDQzWjAYMRYwFAYD VQQDEw02ODY4OWM2NC01MWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9VeoLL2NiWO5zJPhxBTM35Uh+n0PK0ycrqWZw1poR/8ffMUM7g2LUhC4UDu qs/aMnURabImu9r23Sd1bYr9q9ZHG1Bro76DSxDYNHPVY1iXQkAE7HdHrTYQmhTQ oWcEQS8jrD4Sk7SU3PkeNALDR0yhD94wVMwcRldKgrVyZ/SKhKCkp72k2uD76U3U x839wsUWTNLKDehiFGjry9TPJrNyCtm2n22fcfBtRy/9DGt8Lif7YfGnKaB+wM1y T8xOCqRor18lnXxialFJJpFLx1OYf8i9JjaOLxSGORYVXCxc1bqMVu+CEZwH4P4x ZB3kGaUgoWdf4iNt4sb4ptR/bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJhifw6i 2F+8Eq2fzm8Xl5J48SLhMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfVMGvM0tSB3FxhXJ+WXz7rhCCbPui4kO9wiZPVJtrVWQ7k7MJ63TV Fmp0DDAREKV2o/FKJ45L6OrphSUwUEicqJLEbG687PMwT5tbVMQvfA38Ywe5Sngi FLnQok7tDigt8prIRXYQRUas/fqNJ1uYd+K8iJSZtV2C+IhczGO0RwetBHN3jclz rWJA0rQRRWiaRdL3m2nvIy3/VuFXBLWn3lAyw1FHceBWdcDB6CS9cjlyu1R5gxeX NbILJNo0ZlsQ+dPDhH9oT84hEnn+FDfSJccKvU52TsIhGR8c9mwYi/awpvbgCqKs n5K0yM+97x89ZGCb4vI0ZVmc4j7knt1j -----END CERTIFICATE-----Generated at Mon Jul 7 03:44:48 2025 by rpki-client