$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json) Hash identifier: Sl0IYSrQZozNB8yGffLW5lzXJVTI7y6yWRhT/6xn+bg= Subject key identifier: 90:FA:B3:69:87:F9:FE:32:70:A8:7E:08:2B:27:36:82:D5:EC:FB:BB Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Certificate serial: 1954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft Manifest number: 193C Signing time: Wed 02 Jul 2025 16:33:02 +0000 Manifest this update: Wed 02 Jul 2025 16:33:01 +0000 Manifest next update: Wed 09 Jul 2025 16:33:01 +0000 Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: s1ISCstIrU1NWtWG/ej1H+uDORT2zuhZrv1LkCN+DM4=) 2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: Sg59bb6TS945kizZVcpiIEs7ksqDtH0V0nZ6fh7OSKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6484 (0x1954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Validity Not Before: Jul 2 16:33:01 2025 GMT Not After : Jul 9 16:33:01 2025 GMT Subject: CN=68655f3d-7d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c3:fb:40:fe:48:f5:e3:35:0b:69:f4:09:d5: 0d:1b:dd:38:dc:39:99:a2:04:4f:36:98:f6:44:ef: c1:2e:8c:be:7c:45:d9:cc:39:a7:76:e3:e0:4f:25: f4:92:98:54:0e:27:a4:79:56:75:ee:fb:1c:46:d2: 2d:57:6c:4d:66:dc:81:5b:9d:32:64:0b:30:e9:f1: c6:21:03:07:e9:51:e1:54:60:9f:aa:92:9c:bb:23: 77:e7:03:ad:1b:8e:40:be:28:85:af:d8:2e:90:08: 6e:5c:ba:32:b8:32:5d:e6:69:e7:28:20:76:8e:f9: 6e:6b:3f:4f:ed:a1:00:b6:fc:d3:50:cd:8b:6c:df: a8:a5:1a:c0:de:ea:44:b1:e3:7b:80:c0:41:c8:02: fc:e5:80:4e:c8:96:cf:aa:72:6c:2d:03:45:87:fe: f2:cc:59:40:92:f0:9d:90:63:11:47:78:29:3f:2b: da:cb:54:5a:66:49:87:27:80:5e:3a:f8:96:76:61: 56:d0:06:d3:6a:46:13:88:aa:b0:23:b3:c8:50:c9: aa:02:36:f5:77:a2:9a:b3:5a:98:24:0f:41:02:20: 6a:ac:58:41:24:7b:bd:da:0f:e1:58:4c:5e:1d:a1: bf:03:52:ee:d5:20:4c:a2:53:5b:92:10:c4:00:9b: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FA:B3:69:87:F9:FE:32:70:A8:7E:08:2B:27:36:82:D5:EC:FB:BB X509v3 Authority Key Identifier: keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:6a:f1:a0:9d:f0:45:24:01:51:fb:0f:63:a1:3a:b1:a1:d7: 6a:5b:ce:de:0c:e8:95:27:ef:01:90:70:36:4e:8a:20:cb:cc: d1:a6:19:6b:c2:f3:b6:c5:e2:f7:10:e0:19:91:f7:fb:8f:6f: 25:39:c5:07:fb:96:88:bd:c9:6b:08:97:0f:6c:a6:77:f6:30: fc:04:9b:f3:7c:8e:79:d6:82:bc:2a:5a:36:43:b8:88:58:9f: 35:62:10:cb:92:12:26:0e:53:21:d2:94:05:ae:ce:cd:8f:08: 41:74:97:72:6f:1f:08:27:79:34:60:3f:b6:5a:aa:61:c3:1b: 36:d6:da:7e:9c:e4:76:2e:4f:48:6c:bd:71:db:cb:1d:fe:ab: 4d:1e:62:48:8f:d5:d5:f0:b9:14:7c:c9:a7:9c:bd:88:7f:1f: 3a:49:b4:c6:27:cb:af:57:93:78:7c:86:cc:fd:6b:78:58:09: 23:05:8b:98:83:96:bf:25:68:6b:4a:dc:c5:18:2d:38:7d:6b: 72:83:80:36:8d:85:51:17:03:22:89:89:10:8d:08:e5:77:48: f6:73:c0:f6:f5:95:97:7f:6b:ef:88:f3:42:e4:dd:b2:eb:73: d4:46:9a:e7:05:08:a7:9a:fe:94:36:2c:9f:b3:4a:07:17:76: ed:37:dc:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3 RTg2NUMzODQwHhcNMjUwNzAyMTYzMzAxWhcNMjUwNzA5MTYzMzAxWjAYMRYwFAYD VQQDEw02ODY1NWYzZC03ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6MP7QP5I9eM1C2n0CdUNG9043DmZogRPNpj2RO/BLoy+fEXZzDmnduPgTyX0 kphUDiekeVZ17vscRtItV2xNZtyBW50yZAsw6fHGIQMH6VHhVGCfqpKcuyN35wOt G45AviiFr9gukAhuXLoyuDJd5mnnKCB2jvluaz9P7aEAtvzTUM2LbN+opRrA3upE seN7gMBByAL85YBOyJbPqnJsLQNFh/7yzFlAkvCdkGMRR3gpPyvay1RaZkmHJ4Be OviWdmFW0AbTakYTiKqwI7PIUMmqAjb1d6Kas1qYJA9BAiBqrFhBJHu92g/hWExe HaG/A1Lu1SBMolNbkhDEAJsZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJD6s2mH +f4ycKh+CCsnNoLV7Pu7MB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj YkpqSXpNV2FyM04taGx3NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoavGgnfBFJAFR+w9joTqxoddqW87eDOiVJ+8BkHA2Toogy8zRphlr wvO2xeL3EOAZkff7j28lOcUH+5aIvclrCJcPbKZ39jD8BJvzfI551oK8Klo2Q7iI WJ81YhDLkhImDlMh0pQFrs7NjwhBdJdybx8IJ3k0YD+2Wqphwxs21tp+nOR2Lk9I bL1x28sd/qtNHmJIj9XV8LkUfMmnnL2Ifx86SbTGJ8uvV5N4fIbM/Wt4WAkjBYuY g5a/JWhrStzFGC04fWtyg4A2jYVRFwMiiYkQjQjld0j2c8D29ZWXf2vviPNC5N2y 63PURprnBQinmv6UNiyfs0oHF3btN9x+ -----END CERTIFICATE-----Generated at Thu Jul 3 18:32:14 2025 by rpki-client