$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: k7cxKEUz6NaXpuVTtKAcZoVebGLS4O8pAbiENB/fAvI= Subject key identifier: 93:2F:CF:DB:D0:D1:EF:24:FA:BD:72:A7:AF:68:DC:44:15:16:A0:03 Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 73 Signing time: Thu 03 Jul 2025 07:04:21 +0000 Manifest this update: Thu 03 Jul 2025 07:04:20 +0000 Manifest next update: Thu 10 Jul 2025 07:04:20 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: CaZGo61glztUGNsUJOpVZjB6pZiamsDPt6TifpWrfOE=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Jul 3 07:04:20 2025 GMT Not After : Jul 10 07:04:20 2025 GMT Subject: CN=68662b74-4c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:26:95:0c:80:e0:10:28:9d:c2:86:d9:44: 4f:33:2a:ac:af:ff:db:2b:ec:76:2e:99:45:43:1a: a4:d9:be:47:c2:2a:c3:e0:82:93:ff:9e:a0:77:cb: 3a:2a:73:20:27:a6:bf:d7:f8:17:30:cf:47:8b:1b: 33:3a:be:01:28:54:1b:c9:a6:ff:69:bd:d0:b4:6f: 4d:00:22:34:12:97:65:a7:57:ed:61:d9:ac:ec:85: 7a:2e:4a:2b:86:5b:69:53:4b:ca:d5:6b:6f:24:79: 9d:a6:47:c9:6a:c9:b7:e5:0a:58:36:9d:3b:97:b1: de:03:c0:99:6e:82:13:76:98:0d:09:76:61:af:ac: 96:c6:79:a4:b7:a1:25:32:43:74:3c:32:d6:64:5a: de:eb:89:e2:11:cb:ff:df:e3:89:9c:4a:8c:7c:25: dc:07:f5:bf:71:30:bd:6d:f9:9e:dc:db:9f:43:7e: 9d:05:60:22:3f:2c:cc:45:26:ac:17:8c:e6:1d:74: 1e:df:f3:33:ad:dd:d0:87:da:78:f3:a1:b7:75:31: bd:6a:3e:22:0c:35:a9:9f:13:ee:e4:ae:c4:8f:31: 11:1b:62:a2:00:9a:f1:58:26:3d:fd:91:5b:62:ac: 8e:6d:31:fb:0a:6a:b2:59:13:22:e8:7d:2b:b0:90: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2F:CF:DB:D0:D1:EF:24:FA:BD:72:A7:AF:68:DC:44:15:16:A0:03 X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:ee:ce:34:d6:e3:b8:4b:44:54:e6:1b:72:ee:2b:3d:fb:8e: df:af:8f:6f:01:65:08:7c:e2:74:ed:72:8d:ed:a8:ac:2e:2c: 08:a3:87:9b:d9:32:b5:74:17:83:c6:d9:f2:cf:63:66:76:bd: a5:02:7d:c1:15:df:21:c0:93:8f:a7:aa:83:db:ce:ee:ce:b9: 92:ac:11:93:4e:7c:d7:7b:a3:a0:30:ba:1c:4a:bb:b0:4b:82: a8:a2:f1:0c:f5:87:93:1f:dc:ce:21:6c:03:bc:11:ca:e7:9d: 01:ca:fa:03:3c:19:d9:60:f2:55:7f:45:f4:b5:f9:49:fa:c1: 58:43:58:7e:88:47:5e:a3:5c:b5:b0:38:b0:6d:9e:1e:f8:d3: 96:c4:4e:2a:be:63:4c:ee:3a:e4:88:80:2c:1d:82:0a:db:e3: 07:fc:28:e2:fd:63:97:b7:ba:67:0d:34:a9:5a:72:5c:91:77: 73:b3:c1:ab:3d:9c:36:ab:c4:13:d4:65:2c:ac:ef:d1:19:06: d2:62:6e:54:00:5c:fb:6d:4d:9c:e4:68:be:1d:52:96:29:c6: d6:55:dd:a7:ad:c1:a2:10:85:bc:2d:8c:f4:53:e9:44:d5:0c: 7b:80:55:94:4c:ab:3b:36:ab:18:fb:6c:52:2f:60:67:de:23: 7a:24:ed:d9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NzYyNzExMC8GA1UEBRMoMDgwRUMxNEEwMDEyNUQ5MTRDN0U2Mjg1REU5QzU2Njg5 QzU4NzJBNDAeFw0yNTA3MDMwNzA0MjBaFw0yNTA3MTAwNzA0MjBaMBgxFjAUBgNV BAMTDTY4NjYyYjc0LTRjNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2iCaVDIDgECidwobZRE8zKqyv/9sr7HYumUVDGqTZvkfCKsPggpP/nqB3yzoq cyAnpr/X+Bcwz0eLGzM6vgEoVBvJpv9pvdC0b00AIjQSl2WnV+1h2azshXouSiuG W2lTS8rVa28keZ2mR8lqybflClg2nTuXsd4DwJlughN2mA0JdmGvrJbGeaS3oSUy Q3Q8MtZkWt7rieIRy//f44mcSox8JdwH9b9xML1t+Z7c259Dfp0FYCI/LMxFJqwX jOYddB7f8zOt3dCH2njzobd1Mb1qPiIMNamfE+7krsSPMREbYqIAmvFYJj39kVti rI5tMfsKarJZEyLofSuwkGopAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUky/P29DR 7yT6vXKnr2jcRBUWoAMwHwYDVR0jBBgwFoAUCA7BSgASXZFMfmKF3pxWaJxYcqQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3NjI3L0U3RDI1Nzg2QTg5 MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNx US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ0E3QlNnQVNYWkZNZm1LRjNweFdhSnhZY3FRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM3 NjI3L0U3RDI1Nzg2QTg5MTExRUY5MjY4OEIyQkM0RjlBRTAyL0NBN0JTZ0FTWFpG TWZtS0YzcHhXYUp4WWNxUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbuzjTW47hLRFTmG3LuKz37jt+vj28BZQh84nTtco3tqKwuLAijh5vZ MrV0F4PG2fLPY2Z2vaUCfcEV3yHAk4+nqoPbzu7OuZKsEZNOfNd7o6AwuhxKu7BL gqii8Qz1h5Mf3M4hbAO8EcrnnQHK+gM8Gdlg8lV/RfS1+Un6wVhDWH6IR16jXLWw OLBtnh7405bETiq+Y0zuOuSIgCwdggrb4wf8KOL9Y5e3umcNNKlaclyRd3Ozwas9 nDarxBPUZSys79EZBtJiblQAXPttTZzkaL4dUpYpxtZV3aetwaIQhbwtjPRT6UTV DHuAVZRMqzs2qxj7bFIvYGfeI3ok7dk= -----END CERTIFICATE-----Generated at Fri Jul 4 14:28:09 2025 by rpki-client