$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: Q6qFpSXRIT1ICJPaDLBKdQP8UrtUtuqg7jSm693XMUw= Subject key identifier: 2A:B8:10:96:C8:47:F8:C6:6F:FD:09:E0:F5:68:4D:DD:FD:52:2F:47 Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 07E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 07DF Signing time: Wed 02 Jul 2025 21:19:16 +0000 Manifest this update: Wed 02 Jul 2025 21:19:15 +0000 Manifest next update: Wed 09 Jul 2025 21:19:15 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: Mm+k479tK8FXN8WxmlVMUQ0jVeor2PWBZUrD2Gi4UfE=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: GW9s3WIygsKZLnHwRZ6mSkc9+Me0q/KYVWFIK75BZGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2022 (0x7e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: Jul 2 21:19:15 2025 GMT Not After : Jul 9 21:19:15 2025 GMT Subject: CN=6865a254-33c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:8e:6d:36:7a:05:7f:58:ec:00:8b:b3:03: 7d:0f:c4:3c:b8:31:3d:03:fb:3d:41:13:5b:c7:da: 69:b9:eb:95:21:cb:fb:d4:e1:0e:dc:1f:17:1b:7f: 4f:4f:cf:eb:d2:71:33:1c:41:dc:45:28:f2:97:84: 59:eb:98:78:75:0a:3d:8e:7a:5d:77:ac:91:b7:20: 01:09:cd:a0:3a:9f:eb:f7:d0:9c:7a:73:9c:81:0a: f0:a4:36:37:2e:98:ed:90:84:a8:eb:45:f4:65:90: e8:71:80:32:90:65:37:04:94:e2:9f:4c:4d:52:7e: 68:de:fd:69:f9:45:ec:cd:eb:c7:07:bb:f3:27:36: ea:f4:6c:92:f0:f1:be:0f:a9:53:cf:c9:8d:61:81: 31:1e:a6:aa:cf:2c:af:fd:e4:52:36:5d:19:dc:1b: 8b:74:e9:15:b8:f2:90:8c:c7:f5:e7:a4:29:52:8f: 8b:59:f5:b3:d1:51:86:f1:66:87:3e:ab:be:5c:75: c7:3e:02:d6:37:03:c9:09:c3:03:d9:74:a7:17:02: f1:11:56:a3:33:c5:7f:f7:d5:ee:23:e8:16:2a:27: fe:51:e4:84:39:a3:89:f5:be:83:35:60:0d:41:ed: c9:b3:33:6f:58:41:5c:62:86:c8:54:30:87:29:48: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B8:10:96:C8:47:F8:C6:6F:FD:09:E0:F5:68:4D:DD:FD:52:2F:47 X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:7c:48:80:13:d6:55:ac:44:68:ed:92:d3:55:f6:9a:61:7e: 8c:22:94:ec:90:32:54:28:a7:91:e6:f3:8a:af:7c:72:07:10: fc:d4:b6:a0:15:a2:aa:0f:43:8b:51:51:4d:4b:c5:2c:cf:b1: 6b:f3:5c:89:5d:0c:7a:46:79:1f:f6:9b:fb:31:49:b6:b1:55: ee:90:d5:1c:1b:a6:57:6f:f9:5d:73:86:e8:a7:d5:6e:ba:81: 7a:27:d1:d0:05:69:c5:33:11:12:18:a0:8c:4f:a7:52:4a:68: d4:0d:ae:b4:24:04:94:c3:81:c9:5b:f9:52:a2:9a:2b:4c:fb: 12:f4:9c:aa:fd:ca:5f:92:59:ea:de:bb:3a:5b:72:14:da:ba: e1:9b:ed:9f:64:d0:7b:e0:30:b9:8c:b5:4d:62:19:65:6a:5f: 8e:8c:a9:85:f2:ab:e1:c8:4b:c0:13:b8:5b:56:c5:f6:ea:ed: b6:fe:12:a5:1a:8d:67:7e:45:30:94:d2:24:ed:a2:e5:f3:f4: 25:8d:5d:88:b3:98:fe:2f:a6:61:da:d4:0a:0f:14:8d:a9:c9: 36:66:9e:ba:f8:52:23:57:cc:5a:45:75:18:48:f6:be:5c:2a: 8f:aa:52:e5:85:22:90:e3:e3:a7:32:6a:20:42:73:af:c3:79: 88:f1:c2:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjUwNzAyMjExOTE1WhcNMjUwNzA5MjExOTE1WjAYMRYwFAYD VQQDEw02ODY1YTI1NC0zM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5KmObTZ6BX9Y7ACLswN9D8Q8uDE9A/s9QRNbx9ppueuVIcv71OEO3B8XG39P T8/r0nEzHEHcRSjyl4RZ65h4dQo9jnpdd6yRtyABCc2gOp/r99CcenOcgQrwpDY3 LpjtkISo60X0ZZDocYAykGU3BJTin0xNUn5o3v1p+UXszevHB7vzJzbq9GyS8PG+ D6lTz8mNYYExHqaqzyyv/eRSNl0Z3BuLdOkVuPKQjMf156QpUo+LWfWz0VGG8WaH Pqu+XHXHPgLWNwPJCcMD2XSnFwLxEVajM8V/99XuI+gWKif+UeSEOaOJ9b6DNWAN Qe3JszNvWEFcYobIVDCHKUj94QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq4EJbI R/jGb/0J4PVoTd39Ui9HMB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvfEiAE9ZVrERo7ZLTVfaaYX6MIpTskDJUKKeR5vOKr3xyBxD81Lag FaKqD0OLUVFNS8Usz7Fr81yJXQx6Rnkf9pv7MUm2sVXukNUcG6ZXb/ldc4bop9Vu uoF6J9HQBWnFMxESGKCMT6dSSmjUDa60JASUw4HJW/lSoporTPsS9Jyq/cpfklnq 3rs6W3IU2rrhm+2fZNB74DC5jLVNYhllal+OjKmF8qvhyEvAE7hbVsX26u22/hKl Go1nfkUwlNIk7aLl8/QljV2Is5j+L6Zh2tQKDxSNqck2Zp66+FIjV8xaRXUYSPa+ XCqPqlLlhSKQ4+OnMmogQnOvw3mI8cK6 -----END CERTIFICATE-----Generated at Thu Jul 3 09:47:40 2025 by rpki-client