$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft File: J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json) Hash identifier: We9OMU5vaPzoQmRfGJYZYsBEaTgClZZG1NH11AT3j8M= Subject key identifier: B3:1D:2C:39:D1:13:BE:CE:A2:48:53:A1:B1:6D:91:3B:4C:29:0B:80 Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 Certificate issuer: /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft Manifest number: 05A8 Signing time: Wed 02 Jul 2025 23:29:29 +0000 Manifest this update: Wed 02 Jul 2025 23:29:29 +0000 Manifest next update: Wed 09 Jul 2025 23:29:29 +0000 Files and hashes: 1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: 4W2R4W/N98uoAk/qz8Y4xjLleI6rEcxi8tGDoGcx1SU=) 2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: ZEf3tktj8tsQa/GPBkU/T2j5p4mzyySZpNdpL6R/nPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Validity Not Before: Jul 2 23:29:29 2025 GMT Not After : Jul 9 23:29:29 2025 GMT Subject: CN=6865c0d9-2b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:28:bf:b0:30:30:fe:60:be:22:2a:55:b9: 20:5e:06:91:45:c6:6e:9d:d0:04:cd:48:3d:1b:b8: 32:54:05:43:89:a4:db:f6:da:c6:ab:6b:06:a0:2e: 52:3a:3b:98:eb:78:b6:ee:99:3f:16:a7:63:ed:96: 5a:f8:08:e0:ea:cd:e3:b4:b9:e4:9e:0d:be:5c:7a: 66:4f:fc:0f:06:8f:87:60:8b:d3:6d:d1:64:18:c1: 3c:3c:44:d8:91:49:60:88:38:ba:20:fb:40:10:af: 7c:4f:3d:5e:8c:29:a8:cc:b1:04:65:06:4f:a1:02: 22:34:82:31:03:b3:58:5b:73:d5:9d:35:58:d7:72: 4a:e5:0c:d7:7f:66:5b:85:dc:00:b4:a9:a3:86:c1: 0d:c3:6e:61:ee:1c:a4:0f:c5:1a:f9:50:a1:c6:2e: 24:09:99:f8:e3:bf:18:85:45:19:b4:4f:fd:91:b3: 7e:82:75:30:87:6e:2a:69:dc:fc:40:f9:67:58:19: 0a:e0:1a:ec:37:d5:cc:55:9e:2c:c9:54:16:13:ba: 14:8c:19:66:87:74:2c:4f:c8:ae:5b:4f:b3:e6:91: 97:a6:ad:a0:c3:fa:6a:a4:5f:55:6f:a2:96:37:ce: ce:e7:18:1e:18:3e:d5:5a:60:19:20:be:c4:23:c4: de:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:2C:39:D1:13:BE:CE:A2:48:53:A1:B1:6D:91:3B:4C:29:0B:80 X509v3 Authority Key Identifier: keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:32:e3:df:55:1d:bc:b6:22:d7:00:42:69:f7:d7:1b:ec:81: bd:81:8f:52:52:5a:3f:60:3b:48:18:f4:82:3d:ba:63:71:7c: d7:de:b8:11:21:6e:46:c9:9b:70:7d:28:56:04:0c:f8:f5:cf: 93:06:2c:a2:42:57:47:7f:5f:21:29:07:8d:5a:83:22:59:45: 84:c3:f1:10:4d:aa:b5:53:ca:00:e8:17:8c:1a:bd:6b:1c:f5: cb:e0:f7:65:b6:da:fe:36:42:d8:b9:69:cd:29:86:53:21:01: 41:0b:83:d0:48:ab:ec:97:c3:b9:13:e2:b3:4f:9d:a6:5e:2c: 66:12:1a:f2:54:65:be:6e:01:52:85:ef:6c:c6:c1:64:aa:76: 5a:46:4b:b8:b0:aa:a9:cb:65:bc:b2:36:5e:ee:65:dc:c8:51: 1e:10:52:5c:e0:3e:97:b2:b3:1b:2d:11:78:dd:27:38:8e:dc: 42:4d:5c:7f:43:e2:ec:88:f1:7a:2b:5b:fd:93:f1:64:9e:9d: 7e:60:49:d4:83:89:6f:cb:df:b0:14:c2:96:59:f5:23:ef:79: 86:82:72:c3:24:d7:ce:16:bb:39:6e:88:6a:d2:09:de:6c:e1: c5:db:c0:ce:5b:23:43:a9:3b:7f:75:21:82:d7:0a:89:42:b5: 99:4c:59:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4NEYxMTAvBgNVBAUTKDI3QjdBQThFNTExRTcwRDhBMzBCQjM2RDAyQ0FGMDg1 NzkwQzk5QzMwHhcNMjUwNzAyMjMyOTI5WhcNMjUwNzA5MjMyOTI5WjAYMRYwFAYD VQQDEw02ODY1YzBkOS0yYjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxREov7AwMP5gviIqVbkgXgaRRcZundAEzUg9G7gyVAVDiaTb9trGq2sGoC5S OjuY63i27pk/Fqdj7ZZa+Ajg6s3jtLnkng2+XHpmT/wPBo+HYIvTbdFkGME8PETY kUlgiDi6IPtAEK98Tz1ejCmozLEEZQZPoQIiNIIxA7NYW3PVnTVY13JK5QzXf2Zb hdwAtKmjhsENw25h7hykD8Ua+VChxi4kCZn4478YhUUZtE/9kbN+gnUwh24qadz8 QPlnWBkK4BrsN9XMVZ4syVQWE7oUjBlmh3QsT8iuW0+z5pGXpq2gw/pqpF9Vb6KW N87O5xgeGD7VWmAZIL7EI8TerwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMdLDnR E77OokhTobFtkTtMKQuAMB8GA1UdIwQYMBaAFCe3qo5RHnDYowuzbQLK8IV5DJnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg0Ri85MzA4NUM4MEQ3 QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNOaWpDN050QXNyd2hYa01t Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0o3ZXFqbEVlY05pakM3TnRBc3J3aFhrTW1jTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjg0Ri85MzA4NUM4MEQ3QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNO aWpDN050QXNyd2hYa01tY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqMuPfVR28tiLXAEJp99cb7IG9gY9SUlo/YDtIGPSCPbpjcXzX3rgR IW5GyZtwfShWBAz49c+TBiyiQldHf18hKQeNWoMiWUWEw/EQTaq1U8oA6BeMGr1r HPXL4Pdlttr+NkLYuWnNKYZTIQFBC4PQSKvsl8O5E+KzT52mXixmEhryVGW+bgFS he9sxsFkqnZaRku4sKqpy2W8sjZe7mXcyFEeEFJc4D6XsrMbLRF43Sc4jtxCTVx/ Q+LsiPF6K1v9k/Fknp1+YEnUg4lvy9+wFMKWWfUj73mGgnLDJNfOFrs5bohq0gne bOHF28DOWyNDqTt/dSGC1wqJQrWZTFnQ -----END CERTIFICATE-----Generated at Thu Jul 3 20:04:16 2025 by rpki-client