$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft File: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft (raw, json) Hash identifier: vfIfNWBBZmQufJd2QQWYeQKaplpY0TqVuN/S2RgLKkc= Subject key identifier: A6:74:BE:51:BE:C1:49:DF:B5:EE:26:DF:46:AC:6E:77:63:89:41:70 Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 Certificate issuer: /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Certificate serial: 0A0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft Manifest number: 09D2 Signing time: Wed 02 Jul 2025 20:19:37 +0000 Manifest this update: Wed 02 Jul 2025 20:19:36 +0000 Manifest next update: Wed 09 Jul 2025 20:19:36 +0000 Files and hashes: 1: 7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl (hash: 3eN4P3xqFPnTe6V9eZ+5kFmZIb9N5cvOKs7dqT3mB1s=) 2: D411F96C532E11EFB0B63E60C4F9AE02.roa (hash: jzzWgD3HRpvAEJBXK/vfne+ihxsbOdjQU7WB0KMRVgw=) 3: 0A627D5653AD11EF94BC7F0BC4F9AE02.roa (hash: ZT22vRI1IQ1BmtH9ALydP3ilyhXOSnuc69Bf2IwyKlI=) 4: A2120E06FD7F11EFA8C89755C4F9AE02.roa (hash: 2Hvw21rvCVCh8S0/7oApM9oB0Qgb7ulGPIHYlQU89cU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2573 (0xa0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146944, serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4 Validity Not Before: Jul 2 20:19:36 2025 GMT Not After : Jul 9 20:19:36 2025 GMT Subject: CN=68659458-233c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:de:3b:cf:dc:38:a4:cd:f5:a9:f8:88:25:0b: a1:d7:52:0f:aa:0d:b4:dd:c1:dd:50:0f:d2:bb:18: 92:3a:12:95:b8:9e:f4:48:ab:ba:fd:f7:62:71:ab: 53:4a:17:d1:65:ab:71:ce:d2:68:9e:d1:a3:00:e4: 28:4f:7d:db:4d:30:54:13:31:d8:8b:0b:4d:ae:9c: c0:ed:f1:18:c8:4f:1f:5c:64:90:56:6c:26:a7:d9: f6:90:9a:81:cb:a8:35:c3:f9:a2:ec:47:a8:16:69: 50:68:09:d5:e0:7e:33:42:75:0b:7f:30:14:51:4f: 1c:e8:d2:be:91:89:da:e3:d6:61:70:f3:8d:be:b1: a9:d5:97:89:6e:39:a8:12:58:c4:ae:41:e9:0a:e8: d8:cf:70:11:21:59:38:de:f7:02:23:df:5d:cd:7b: 65:57:14:cd:82:83:86:fe:e6:92:2c:26:8d:c6:87: 5b:a3:b4:94:2f:a4:5a:4d:f0:2a:74:f6:c4:44:ce: d9:ce:01:8d:53:07:e4:c0:d8:ea:98:a7:30:9b:df: 88:00:7c:29:45:6e:84:90:4f:ab:2c:5c:90:48:44: 83:89:b8:27:bc:41:63:d0:41:c1:1b:9a:02:af:9b: 95:df:ec:4e:46:84:05:b5:8e:1f:e2:b6:b3:56:3e: 18:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:74:BE:51:BE:C1:49:DF:B5:EE:26:DF:46:AC:6E:77:63:89:41:70 X509v3 Authority Key Identifier: keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:fd:5e:31:09:f3:2e:64:19:74:dc:7d:d2:9b:58:98:81:0a: e3:15:9f:24:28:20:58:0b:86:48:bd:79:3f:d8:06:85:d4:c0: af:bf:c7:1c:c9:ad:34:c7:21:71:69:65:84:0c:84:a9:7d:cf: 09:35:58:39:f6:47:2b:2d:7f:50:d6:dd:6e:42:a3:2e:e3:7d: 36:61:0b:00:9d:28:cd:30:4e:52:b8:e2:05:47:31:ca:80:cf: 29:32:ba:b8:11:d2:d5:3d:49:60:7f:01:0b:63:97:ca:03:95: db:49:37:9d:3e:98:f3:9a:bf:ff:26:34:ca:b9:7c:c6:6e:d7: 68:21:4a:13:31:60:52:e2:40:1f:35:67:8a:46:ad:ed:c8:8d: df:28:51:c7:c4:3e:90:08:c5:af:26:be:cd:de:9f:d2:25:4d: 59:02:1c:0c:9f:3d:84:32:62:e9:aa:d0:0a:08:04:57:2e:fc: 82:cf:d5:b8:b1:2b:d1:81:a2:b7:d3:f9:85:bf:80:b3:29:e7: 1c:39:3d:a1:39:7f:a2:ec:58:d6:bb:68:88:92:a4:87:60:90: 66:78:f4:6e:54:fa:3d:56:3e:3f:68:86:e4:d8:ef:73:15:82: 9c:26:a4:73:2d:8d:c7:52:3c:88:f8:93:7e:52:43:bd:1c:51: c0:a5:fd:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY5NDQxMTAvBgNVBAUTKEVEMUY5NThDQjYwNEI1NzZFODIyMTRCNENGM0NDMEZF NjIwRUY5RjQwHhcNMjUwNzAyMjAxOTM2WhcNMjUwNzA5MjAxOTM2WjAYMRYwFAYD VQQDEw02ODY1OTQ1OC0yMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0d47z9w4pM31qfiIJQuh11IPqg203cHdUA/SuxiSOhKVuJ70SKu6/fdicatT ShfRZatxztJontGjAOQoT33bTTBUEzHYiwtNrpzA7fEYyE8fXGSQVmwmp9n2kJqB y6g1w/mi7EeoFmlQaAnV4H4zQnULfzAUUU8c6NK+kYna49ZhcPONvrGp1ZeJbjmo EljErkHpCujYz3ARIVk43vcCI99dzXtlVxTNgoOG/uaSLCaNxodbo7SUL6RaTfAq dPbERM7ZzgGNUwfkwNjqmKcwm9+IAHwpRW6EkE+rLFyQSESDibgnvEFj0EHBG5oC r5uV3+xORoQFtY4f4razVj4YJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKZ0vlG+ wUnfte4m30asbndjiUFwMB8GA1UdIwQYMBaAFO0flYy2BLV26CIUtM88wP5iDvn0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Njk0NC80M0JEMUM2RThF OTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRYYm9JaFMwenp6QV9tSU8t ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSLVZqTFlFdFhib0loUzB6enpBX21JTy1mUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk0NC80M0JEMUM2RThFOTUxMUVBQTlENzNBMkVDNEY5QUUwMi83Ui1WakxZRXRY Ym9JaFMwenp6QV9tSU8tZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH/V4xCfMuZBl03H3Sm1iYgQrjFZ8kKCBYC4ZIvXk/2AaF1MCvv8cc ya00xyFxaWWEDISpfc8JNVg59kcrLX9Q1t1uQqMu4302YQsAnSjNME5SuOIFRzHK gM8pMrq4EdLVPUlgfwELY5fKA5XbSTedPpjzmr//JjTKuXzGbtdoIUoTMWBS4kAf NWeKRq3tyI3fKFHHxD6QCMWvJr7N3p/SJU1ZAhwMnz2EMmLpqtAKCARXLvyCz9W4 sSvRgaK30/mFv4CzKeccOT2hOX+i7FjWu2iIkqSHYJBmePRuVPo9Vj4/aIbk2O9z FYKcJqRzLY3HUjyI+JN+UkO9HFHApf0u -----END CERTIFICATE-----Generated at Thu Jul 3 17:57:23 2025 by rpki-client