$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: GupfjQmxmgoHWe/4qAkbiW1IqxVEzonj1/B91GQ6OMI= Subject key identifier: 37:DA:7D:48:14:F4:64:4B:97:2A:B6:5D:49:92:90:FC:4B:42:90:B0 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 07E8 Signing time: Mon 30 Jun 2025 21:11:50 +0000 Manifest this update: Mon 30 Jun 2025 21:11:50 +0000 Manifest next update: Mon 07 Jul 2025 21:11:50 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 0EoWYRL/AM8oFf8ku2IG2x6l/wAG75CPZLI3YdPlWgY=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: CyHrVj1UIxTmkHUnWq5JYlTSppmsSZAZAIYgcE9IyY4=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: 3Hi3qHebz75olBYvl7sFul5/x4z+usSMAu2fmKYpx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Jun 30 21:11:50 2025 GMT Not After : Jul 7 21:11:50 2025 GMT Subject: CN=6862fd96-5ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bc:af:bb:f6:e0:7f:cf:bc:22:85:a5:59:9f: 06:73:b7:65:0a:65:24:43:de:d6:5a:32:ea:ee:84: 83:c9:b5:3c:99:47:64:c7:9d:e4:82:9b:cf:73:15: 99:1f:36:3f:67:59:d6:ad:72:90:74:b8:1c:15:18: f2:fa:8e:d8:e6:3b:bc:96:43:98:30:bf:9a:2a:ab: 8e:48:d4:44:b4:16:83:d8:0d:81:82:73:39:c4:87: c5:a6:48:bd:15:b6:c3:9a:a1:e1:db:03:96:6e:0f: 70:86:cc:bc:8c:bf:32:5e:c6:67:c6:f9:7f:81:75: 45:18:8d:e0:c8:92:c0:14:de:b7:f5:4d:b9:07:54: bb:e8:a8:a2:dd:a1:15:4a:bc:a8:4e:34:8d:da:5a: d4:89:8b:b2:50:b4:42:64:39:a2:a5:0e:d2:ff:8e: af:ad:06:90:4e:46:fa:9a:6a:b0:76:8f:78:58:99: d5:fc:39:8d:c4:d3:cb:f7:8c:a2:05:49:a4:9f:8b: 99:5f:0a:8c:a1:b8:35:f5:c8:ab:27:9f:56:7a:ea: de:c0:cf:af:73:0c:89:33:3c:84:80:68:13:a9:34: 2d:06:ac:cc:45:1b:91:33:b6:62:5d:ef:b1:5d:a7: df:e3:84:1e:a1:8c:2d:86:ac:5b:fa:e0:25:f5:3b: ac:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DA:7D:48:14:F4:64:4B:97:2A:B6:5D:49:92:90:FC:4B:42:90:B0 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6b:6b:57:a6:2a:8b:2d:d8:e2:7d:4c:c7:ff:32:d3:34:e2: a5:49:eb:20:5f:8f:c7:d8:b4:7b:ac:c3:96:aa:00:2d:f7:3d: 0f:02:8b:b0:d4:8d:06:e1:bd:ee:d9:12:a9:34:9f:4f:9c:3a: 83:4f:29:61:dc:d6:58:65:b5:09:15:22:76:bd:c0:af:d4:14: 87:95:be:e0:ff:cf:74:ea:45:b1:53:88:32:32:0a:b3:0a:c0: e0:da:3c:40:55:a3:d5:aa:f2:b4:47:3e:f9:f5:a2:01:74:6c: d6:72:96:a2:28:d2:3a:17:1c:d8:2f:86:69:87:74:ba:b1:2a: f2:56:06:c1:48:f9:86:87:15:0d:36:8d:06:02:fd:1c:ff:40: ce:18:0b:a5:1c:84:a1:4a:8a:9d:8d:3c:a7:1a:7d:d8:1e:a6: 64:9e:87:ca:c6:1a:e1:2d:e2:14:29:30:77:83:d8:af:d6:84: 84:5a:39:b5:28:82:22:9e:7d:bc:e1:1e:08:46:d4:89:3b:6f: 03:15:95:d6:7f:a5:29:d6:73:9e:57:1e:8c:04:c1:65:82:94: a5:e9:dc:14:ea:9d:f2:51:6f:da:8e:93:e1:db:c8:0f:6c:e8: 00:56:e8:fe:eb:13:15:aa:91:42:3b:f2:3b:6e:ae:e8:5f:b0: aa:0d:cc:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUwNjMwMjExMTUwWhcNMjUwNzA3MjExMTUwWjAYMRYwFAYD VQQDEw02ODYyZmQ5Ni01ZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwbyvu/bgf8+8IoWlWZ8Gc7dlCmUkQ97WWjLq7oSDybU8mUdkx53kgpvPcxWZ HzY/Z1nWrXKQdLgcFRjy+o7Y5ju8lkOYML+aKquOSNREtBaD2A2BgnM5xIfFpki9 FbbDmqHh2wOWbg9whsy8jL8yXsZnxvl/gXVFGI3gyJLAFN639U25B1S76Kii3aEV SryoTjSN2lrUiYuyULRCZDmipQ7S/46vrQaQTkb6mmqwdo94WJnV/DmNxNPL94yi BUmkn4uZXwqMobg19cirJ59WeurewM+vcwyJMzyEgGgTqTQtBqzMRRuRM7ZiXe+x Xaff44QeoYwthqxb+uAl9TuseQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfafUgU 9GRLlyq2XUmSkPxLQpCwMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCea2tXpiqLLdjifUzH/zLTNOKlSesgX4/H2LR7rMOWqgAt9z0PAouw 1I0G4b3u2RKpNJ9PnDqDTylh3NZYZbUJFSJ2vcCv1BSHlb7g/8906kWxU4gyMgqz CsDg2jxAVaPVqvK0Rz759aIBdGzWcpaiKNI6FxzYL4Zph3S6sSryVgbBSPmGhxUN No0GAv0c/0DOGAulHIShSoqdjTynGn3YHqZknofKxhrhLeIUKTB3g9iv1oSEWjm1 KIIinn284R4IRtSJO28DFZXWf6Up1nOeVx6MBMFlgpSl6dwU6p3yUW/ajpPh28gP bOgAVuj+6xMVqpFCO/I7bq7oX7CqDcwW -----END CERTIFICATE-----Generated at Wed Jul 2 22:25:09 2025 by rpki-client