$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft File: RLx47eY9W2Ire6wDs0mWsv5C4yc.mft (raw, json) Hash identifier: fze5+sd4FPaho60oaQub7T/1JVfE98gjhWLUorDTyf4= Subject key identifier: 7C:66:87:AD:BB:16:DF:27:7F:52:EB:A0:3E:2E:CE:B5:B7:CC:91:B6 Authority key identifier: 44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 Certificate issuer: /CN=A913B7C7/serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft Manifest number: 7A Signing time: Thu 03 Jul 2025 06:58:07 +0000 Manifest this update: Thu 03 Jul 2025 06:58:07 +0000 Manifest next update: Thu 10 Jul 2025 06:58:07 +0000 Files and hashes: 1: RLx47eY9W2Ire6wDs0mWsv5C4yc.crl (hash: Mbj8L9YTj5qIkbADy+JbudlZ3JIF+AJg+f9K9u3h+jw=) 2: 0A18EF4A9D9C11EFBAF0D76AC4F9AE02.roa (hash: CckqoSL6Kl8ijND7YWEunm6CSbx21plf0BMP2SCxoy0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=44BC78EDE63D5B622B7BAC03B34996B2FE42E327 Validity Not Before: Jul 3 06:58:07 2025 GMT Not After : Jul 10 06:58:07 2025 GMT Subject: CN=686629ff-6b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:52:7c:0c:18:0c:47:3e:ce:9a:0e:02:54: 3b:04:14:7b:c0:a7:bf:e1:e6:bc:07:ab:16:0c:1c: 32:e9:a0:2e:a4:17:b1:45:e9:e2:5f:fb:88:46:02: 1d:1e:c2:7d:72:72:32:72:c2:a0:21:fe:66:10:89: 74:7e:62:bb:3f:4c:5c:57:0e:67:14:6e:2b:19:0e: 58:46:7d:c3:81:d0:54:4c:48:99:b7:0a:42:89:89: 2a:8e:c7:3f:1c:68:96:71:b1:ca:2e:2a:3d:33:f8: 6b:96:8a:6a:1d:f0:1b:fe:6a:bd:be:b9:aa:e8:08: 83:a8:72:94:1c:b9:c8:79:23:a4:fd:fe:9c:e6:7f: f4:5b:46:3f:cb:54:33:78:6b:c3:f6:96:fa:7d:a2: 71:e0:10:be:88:a0:b6:a9:71:6f:69:05:f0:81:40: d0:de:f3:13:3d:2a:9c:04:4d:f0:52:69:bd:5d:54: f1:d1:d6:56:12:d7:ee:0d:9f:51:b0:e1:21:c7:7e: 35:d6:30:62:b9:6c:6d:4e:8f:7f:f1:3d:0f:7b:05: 22:2a:bf:9d:cd:43:b0:1a:0d:2f:3e:4a:93:2f:19: cd:5d:30:5b:4b:e4:07:ac:16:d4:47:b5:74:39:ee: e1:cb:b6:e2:fc:43:6b:76:90:af:26:bb:75:65:72: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:66:87:AD:BB:16:DF:27:7F:52:EB:A0:3E:2E:CE:B5:B7:CC:91:B6 X509v3 Authority Key Identifier: keyid:44:BC:78:ED:E6:3D:5B:62:2B:7B:AC:03:B3:49:96:B2:FE:42:E3:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RLx47eY9W2Ire6wDs0mWsv5C4yc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/A24511469D9B11EF86050469C4F9AE02/RLx47eY9W2Ire6wDs0mWsv5C4yc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:85:90:c0:77:84:c9:43:93:68:86:60:3f:dd:60:52:17:ec: 41:ab:be:9b:65:89:1e:d0:10:79:61:9d:2a:31:2f:a7:4a:43: 57:11:d8:58:b2:ba:6b:2d:bc:44:a1:35:73:da:96:a3:6c:51: 9d:63:ab:40:66:8f:97:1e:6f:5a:50:4f:11:e1:e8:9d:98:af: 89:c1:2f:6e:d4:0e:57:b6:05:52:b9:93:a6:84:56:f3:59:da: 4f:6b:a3:d9:07:53:68:2c:b9:e2:d2:c0:9f:87:35:c2:f7:ac: 4f:47:52:66:ab:6a:b2:29:c8:d9:2b:60:46:03:c5:86:e1:91: cd:d8:69:be:78:d6:fa:e2:22:b6:b9:79:cd:b2:c8:6f:7e:dc: 2c:27:6d:49:ad:f5:6d:24:c0:13:54:72:bf:fd:a6:74:d3:86: f0:fc:8c:0e:5f:1a:ff:2d:02:f5:62:c7:40:e3:fd:9b:fe:1c: 6a:93:cf:4f:2a:8d:9a:1b:db:3b:81:f8:37:ee:4b:65:d8:b4: ae:e0:44:b8:b2:d3:a6:07:1d:9a:e1:2a:ca:56:a8:d8:71:e3: a3:8f:58:cf:e1:d2:27:e8:1a:d2:e6:ba:29:65:33:16:fd:d2: 88:3a:02:2b:2e:62:d9:b0:5e:3d:7b:53:0b:d3:2d:37:83:27: aa:c0:6c:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QjdDNzExMC8GA1UEBRMoNDRCQzc4RURFNjNENUI2MjJCN0JBQzAzQjM0OTk2QjJG RTQyRTMyNzAeFw0yNTA3MDMwNjU4MDdaFw0yNTA3MTAwNjU4MDdaMBgxFjAUBgNV BAMTDTY4NjYyOWZmLTZiNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0bVJ8DBgMRz7Omg4CVDsEFHvAp7/h5rwHqxYMHDLpoC6kF7FF6eJf+4hGAh0e wn1ycjJywqAh/mYQiXR+Yrs/TFxXDmcUbisZDlhGfcOB0FRMSJm3CkKJiSqOxz8c aJZxscouKj0z+GuWimod8Bv+ar2+uaroCIOocpQcuch5I6T9/pzmf/RbRj/LVDN4 a8P2lvp9onHgEL6IoLapcW9pBfCBQNDe8xM9KpwETfBSab1dVPHR1lYS1+4Nn1Gw 4SHHfjXWMGK5bG1Oj3/xPQ97BSIqv53NQ7AaDS8+SpMvGc1dMFtL5AesFtRHtXQ5 7uHLtuL8Q2t2kK8mu3Vlcji7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfGaHrbsW 3yd/UuugPi7OtbfMkbYwHwYDVR0jBBgwFoAURLx47eY9W2Ire6wDs0mWsv5C4ycw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNCN0M3L0EyNDUxMTQ2OUQ5 QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJcmU2d0RzMG1Xc3Y1QzR5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUkx4NDdlWTlXMklyZTZ3RHMwbVdzdjVDNHljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNC N0M3L0EyNDUxMTQ2OUQ5QjExRUY4NjA1MDQ2OUM0RjlBRTAyL1JMeDQ3ZVk5VzJJ cmU2d0RzMG1Xc3Y1QzR5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJaFkMB3hMlDk2iGYD/dYFIX7EGrvptliR7QEHlhnSoxL6dKQ1cR2Fiy umstvEShNXPalqNsUZ1jq0Bmj5ceb1pQTxHh6J2Yr4nBL27UDle2BVK5k6aEVvNZ 2k9ro9kHU2gsueLSwJ+HNcL3rE9HUmararIpyNkrYEYDxYbhkc3Yab541vriIra5 ec2yyG9+3CwnbUmt9W0kwBNUcr/9pnTThvD8jA5fGv8tAvVix0Dj/Zv+HGqTz08q jZob2zuB+DfuS2XYtK7gRLiy06YHHZrhKspWqNhx46OPWM/h0ifoGtLmuillMxb9 0og6AisuYtmwXj17UwvTLTeDJ6rAbPw= -----END CERTIFICATE-----Generated at Fri Jul 4 11:16:07 2025 by rpki-client