$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft File: rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json) Hash identifier: KHs3QEkReLg4LX1SScA8Es9urK986VB1Y4IoXl6NbBg= Subject key identifier: 34:FD:A0:A7:BD:44:C5:27:54:24:AC:B3:E7:9A:51:A4:4B:6A:25:9D Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 Certificate issuer: /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft Manifest number: 7A Signing time: Tue 01 Jul 2025 07:29:00 +0000 Manifest this update: Tue 01 Jul 2025 07:29:00 +0000 Manifest next update: Tue 08 Jul 2025 07:29:00 +0000 Files and hashes: 1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: p3zgV039w3ZQR2ifswTJCBKi37KZDOOeOCbus8WUtj4=) 2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: 3ye2avJW3DGdXLpGllemApGuBs5Hg/Dy3+TFvLk8rE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0 Validity Not Before: Jul 1 07:29:00 2025 GMT Not After : Jul 8 07:29:00 2025 GMT Subject: CN=68638e3c-f695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:34:ec:58:e1:24:a7:c1:ab:00:7a:c6:8d: b2:d7:85:6e:b0:cc:0e:c4:5c:08:0c:bd:8c:cb:e3: 06:ba:92:b1:c0:60:84:83:e4:92:68:4d:31:78:23: b3:cf:1c:44:bd:7b:02:1d:03:31:a7:f6:30:97:d8: 13:9d:ba:81:92:49:57:46:6c:68:30:77:6d:9e:01: c0:62:68:c4:0e:e5:7f:d4:6d:ac:2a:0a:f3:79:9e: 6a:2e:8e:f1:d6:f4:a4:42:0a:89:0f:ef:a2:af:a0: f6:cc:c0:3b:66:f6:40:25:5c:11:2c:ee:74:6f:7d: f8:5a:ec:ba:24:59:3e:aa:aa:7c:21:93:9c:64:8a: 93:97:9c:68:dd:e1:e3:cb:ac:bb:19:e2:b2:81:65: 8f:0e:7d:73:61:64:b6:c7:c0:b7:d6:ed:3a:ec:fd: bf:53:74:49:fd:94:20:9d:ea:b6:7d:6a:2f:5e:4a: 08:8a:60:3e:79:5c:65:f3:90:d6:43:17:11:03:95: 6d:4c:94:76:5f:60:61:8a:48:e3:1e:06:78:4d:19: ad:08:3c:96:9a:80:ed:40:aa:49:df:8a:a9:5b:13: 7c:2f:01:cd:b0:d9:c7:89:38:7e:44:52:51:08:fa: 85:d8:6a:50:91:59:c4:93:48:b4:5b:40:d1:81:98: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:A0:A7:BD:44:C5:27:54:24:AC:B3:E7:9A:51:A4:4B:6A:25:9D X509v3 Authority Key Identifier: keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:bb:06:d7:42:0e:27:6d:dc:da:75:f2:93:93:1b:a8:73:e5: 96:70:92:cd:c6:11:db:ed:13:d9:35:71:a2:8a:da:35:4c:f5: 0a:3b:8b:79:fc:47:06:db:4c:30:e3:ae:db:6c:2b:42:b8:23: e8:73:c9:a1:1c:7c:40:5b:f4:52:ab:99:3d:f5:db:9f:a7:4e: 37:ef:63:77:96:b4:d0:d3:e3:89:1b:2d:7d:65:74:53:83:4f: 4f:97:9a:b4:2f:83:e4:3f:50:f5:45:71:7c:41:41:cf:21:be: 5f:51:08:3a:dd:f2:4b:5b:33:70:37:53:2a:fc:ae:22:3d:de: 87:68:d9:c4:d6:25:91:f9:03:03:84:84:8c:cd:83:6e:ea:29: cd:e0:44:35:41:a2:00:59:f2:da:2c:7e:a6:7c:83:a8:f9:d2: d9:fe:a1:1e:b7:ba:2f:44:30:13:b9:c3:e4:59:85:6e:ec:2c: 54:f4:1b:ae:29:75:84:8d:4a:c8:f8:75:be:5c:4e:25:63:45: 70:03:e1:04:31:3c:06:78:25:f9:d9:d5:d6:3a:9b:46:94:52: ec:ca:cc:d5:e5:89:b0:97:a8:9a:8c:f3:5b:33:3a:e9:20:33: 3a:20:3d:23:fe:11:cf:9c:47:2f:0e:76:e6:ac:b5:db:dd:67: 67:5e:2a:b4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RUE0NjExMC8GA1UEBRMoQUMyOERDMkE1NTRCNEUzMzlBMzk5Qzk2NDJCNENFMDI2 OEE4REZCMDAeFw0yNTA3MDEwNzI5MDBaFw0yNTA3MDgwNzI5MDBaMBgxFjAUBgNV BAMTDTY4NjM4ZTNjLWY2OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8PDTsWOEkp8GrAHrGjbLXhW6wzA7EXAgMvYzL4wa6krHAYISD5JJoTTF4I7PP HES9ewIdAzGn9jCX2BOduoGSSVdGbGgwd22eAcBiaMQO5X/UbawqCvN5nmoujvHW 9KRCCokP76KvoPbMwDtm9kAlXBEs7nRvffha7LokWT6qqnwhk5xkipOXnGjd4ePL rLsZ4rKBZY8OfXNhZLbHwLfW7Trs/b9TdEn9lCCd6rZ9ai9eSgiKYD55XGXzkNZD FxEDlW1MlHZfYGGKSOMeBnhNGa0IPJaagO1AqknfiqlbE3wvAc2w2ceJOH5EUlEI +oXYalCRWcSTSLRbQNGBmIrJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNP2gp71E xSdUJKyz55pRpEtqJZ0wHwYDVR0jBBgwFoAUrCjcKlVLTjOaOZyWQrTOAmio37Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFQTQ2L0RCREEyQ0M0OUMx MTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpPYU9aeVdRclRPQW1pbzM3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvckNqY0tsVkxUak9hT1p5V1FyVE9BbWlvMzdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF QTQ2L0RCREEyQ0M0OUMxMTExRUY5MkZCQTk3Q0M0RjlBRTAyL3JDamNLbFZMVGpP YU9aeVdRclRPQW1pbzM3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHq7BtdCDidt3Np18pOTG6hz5ZZwks3GEdvtE9k1caKK2jVM9Qo7i3n8 RwbbTDDjrttsK0K4I+hzyaEcfEBb9FKrmT3125+nTjfvY3eWtNDT44kbLX1ldFOD T0+XmrQvg+Q/UPVFcXxBQc8hvl9RCDrd8ktbM3A3Uyr8riI93odo2cTWJZH5AwOE hIzNg27qKc3gRDVBogBZ8tosfqZ8g6j50tn+oR63ui9EMBO5w+RZhW7sLFT0G64p dYSNSsj4db5cTiVjRXAD4QQxPAZ4JfnZ1dY6m0aUUuzKzNXlibCXqJqM81szOukg MzogPSP+Ec+cRy8OduastdvdZ2deKrQ= -----END CERTIFICATE-----Generated at Thu Jul 3 03:51:09 2025 by rpki-client