$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: KSsVRRYMl5EAgqsIr9NWNTxiPzEH4+FVP6L0xEbgXTI= Subject key identifier: DD:BA:97:E7:EC:B1:74:FD:75:11:A2:5A:47:BB:59:5A:2F:8E:8B:2A Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01BF Signing time: Tue 01 Jul 2025 03:26:41 +0000 Manifest this update: Tue 01 Jul 2025 03:26:41 +0000 Manifest next update: Tue 08 Jul 2025 03:26:41 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: ShDUcyOq4APQYwMXbEEaqQvlNN8K0BtFm79WU8YZr4A=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 454 (0x1c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Jul 1 03:26:41 2025 GMT Not After : Jul 8 03:26:41 2025 GMT Subject: CN=68635571-869e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:9a:c1:a2:84:6c:5e:e4:b2:34:64:de:15: 49:1f:b2:85:bc:3a:a9:60:66:fc:fb:23:3a:48:25: 7e:b2:48:34:38:d8:c8:82:6a:6a:ef:94:11:07:85: 54:12:38:c3:89:0a:e6:43:71:56:3e:99:3c:c3:ab: dc:d0:af:87:c5:ff:ba:7b:44:3b:ae:4e:b0:47:28: 4d:6b:5d:00:84:35:7f:42:0e:17:a2:40:53:8e:27: da:a0:c0:c4:ab:2f:1a:d9:3d:25:ef:e9:0b:28:3e: 85:16:da:a0:b0:f0:00:4f:c7:8b:ae:7a:aa:7f:e1: 3e:9e:7a:d6:57:b0:44:0a:03:c5:f9:bb:15:e6:72: f4:a9:8e:c2:ce:93:47:24:23:88:f9:12:9a:84:c1: 9e:40:0b:97:16:8b:43:e7:59:5c:ad:e2:ec:37:4f: 07:f0:37:96:b2:c7:45:e2:1c:d7:c1:d0:3d:53:9c: db:63:b3:31:2e:f5:8b:60:ca:57:46:f9:a7:98:9c: 99:c7:de:3f:bf:b8:54:b1:31:8c:ea:4b:bd:f9:6c: 28:31:60:ed:22:92:3c:62:f5:a8:7c:0b:be:3f:ad: 61:97:be:3a:8b:13:d8:55:6b:93:0b:b1:ba:7d:a6: 2d:5d:3e:a9:00:dc:a5:fc:3c:94:20:ed:c3:6b:22: da:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:BA:97:E7:EC:B1:74:FD:75:11:A2:5A:47:BB:59:5A:2F:8E:8B:2A X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7f:48:f6:32:47:e2:24:c6:e5:0e:54:98:3f:9e:14:f3:2c: 3d:6a:b9:c7:1d:d5:32:cb:bb:b6:d8:c1:cd:07:39:aa:10:3c: 80:09:b1:bb:f7:2c:62:5c:ac:b2:38:4f:32:b9:e0:c1:79:48: 9e:83:1d:c0:7e:e0:a4:04:cc:97:0c:41:98:85:08:4c:5f:3f: e2:f2:93:da:46:30:f7:6f:e8:b1:82:13:b4:7c:81:62:13:2c: a3:5d:60:4f:84:76:64:b8:78:45:72:91:eb:5b:32:a0:81:62: 8c:7e:67:a5:36:d9:7e:79:e4:2b:18:7d:4b:b8:d4:d5:0c:ab: be:b8:1e:3f:83:86:1d:df:f5:5d:62:7f:67:96:3f:c4:28:f1: 4e:22:98:6b:fb:5c:9c:ec:18:9f:39:5d:47:47:79:12:1c:0c: ea:ee:ee:2f:1f:34:b9:8f:21:51:b9:80:8d:69:87:a7:8a:c7: ad:a9:3b:60:70:e3:94:68:4d:a8:e8:69:3a:1e:94:05:c7:6c: 4d:9a:6d:13:02:c7:50:a9:67:b3:f3:b7:36:a2:28:da:6d:8f: d8:72:7c:93:3e:7c:47:20:a2:e8:23:79:46:0e:fd:70:fc:67: 05:5b:33:18:80:96:81:e0:d1:5f:30:d3:9c:d6:39:02:94:cd: e2:da:5b:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwNzAxMDMyNjQxWhcNMjUwNzA4MDMyNjQxWjAYMRYwFAYD VQQDEw02ODYzNTU3MS04NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJqawaKEbF7ksjRk3hVJH7KFvDqpYGb8+yM6SCV+skg0ONjIgmpq75QRB4VU EjjDiQrmQ3FWPpk8w6vc0K+Hxf+6e0Q7rk6wRyhNa10AhDV/Qg4XokBTjifaoMDE qy8a2T0l7+kLKD6FFtqgsPAAT8eLrnqqf+E+nnrWV7BECgPF+bsV5nL0qY7CzpNH JCOI+RKahMGeQAuXFotD51lcreLsN08H8DeWssdF4hzXwdA9U5zbY7MxLvWLYMpX RvmnmJyZx94/v7hUsTGM6ku9+WwoMWDtIpI8YvWofAu+P61hl746ixPYVWuTC7G6 faYtXT6pANyl/DyUIO3DayLagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN26l+fs sXT9dRGiWke7WVovjosqMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8f0j2MkfiJMblDlSYP54U8yw9arnHHdUyy7u22MHNBzmqEDyACbG7 9yxiXKyyOE8yueDBeUiegx3AfuCkBMyXDEGYhQhMXz/i8pPaRjD3b+ixghO0fIFi EyyjXWBPhHZkuHhFcpHrWzKggWKMfmelNtl+eeQrGH1LuNTVDKu+uB4/g4Yd3/Vd Yn9nlj/EKPFOIphr+1yc7BifOV1HR3kSHAzq7u4vHzS5jyFRuYCNaYenisetqTtg cOOUaE2o6Gk6HpQFx2xNmm0TAsdQqWez87c2oijabY/YcnyTPnxHIKLoI3lGDv1w /GcFWzMYgJaB4NFfMNOc1jkClM3i2lvv -----END CERTIFICATE-----Generated at Wed Jul 2 15:20:57 2025 by rpki-client