$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft File: l0tKVlSG4EjQwXaY1yJ2cM88mac.mft (raw, json) Hash identifier: EiD4PIhumDhLnDoaDnhdjsgZ5TUeTyLk7oaLif2JqMo= Subject key identifier: 7C:CC:50:34:F7:B1:A4:3D:EA:32:AB:C7:4F:D5:6E:99:57:03:1F:3E Authority key identifier: 97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 Certificate issuer: /CN=A916069A/serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft Manifest number: 7B Signing time: Thu 03 Jul 2025 06:56:11 +0000 Manifest this update: Thu 03 Jul 2025 06:56:10 +0000 Manifest next update: Thu 10 Jul 2025 06:56:10 +0000 Files and hashes: 1: l0tKVlSG4EjQwXaY1yJ2cM88mac.crl (hash: wD9rL3vZVkTzbza7EE6lU0mQIj4jVqeeYoWD7Uk0Hfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=974B4A565486E048D0C17698D7227670CF3C99A7 Validity Not Before: Jul 3 06:56:10 2025 GMT Not After : Jul 10 06:56:10 2025 GMT Subject: CN=6866298b-4bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:4a:bd:bc:e4:ed:d9:1e:b7:85:53:11:82: 45:11:3e:c3:b1:f6:1e:87:6c:07:91:d8:2f:f4:cf: 87:c1:44:89:d1:0e:97:c4:31:a9:52:1f:31:ff:67: d1:ff:c4:b0:59:5b:99:98:1d:a2:7d:ed:eb:41:4a: c5:bd:82:d6:2a:a3:9c:2e:fc:f3:04:4c:4b:96:6b: 4f:02:23:ea:56:7e:29:a8:3d:52:35:6d:91:51:b7: 8c:66:e8:5f:bd:84:0f:3b:9d:4b:f8:16:db:bf:36: 4f:9c:f2:e9:df:15:4c:d3:20:5d:0b:f7:d7:3e:1b: 41:09:e8:75:20:33:27:1b:ec:08:48:a3:2f:6b:56: 17:8d:ac:62:59:6d:24:61:cd:ef:c2:68:27:62:13: c0:5b:77:aa:1c:09:9e:5c:b1:bc:78:3d:19:04:67: 6a:85:5a:e5:b4:88:33:80:97:ae:7a:67:de:a1:16: 9f:69:1c:c4:65:22:a6:81:ba:c9:7e:28:56:44:d1: 5e:01:65:d6:f8:d6:42:a2:fe:72:4a:e6:af:2f:20: 9e:ba:5d:5c:77:a0:77:00:4c:82:e5:7c:10:bc:67: 65:22:aa:f0:e6:69:88:a6:97:ed:47:f0:5f:9e:67: c5:0c:df:b4:b1:70:c1:5e:c0:ed:0a:31:97:84:b1: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:50:34:F7:B1:A4:3D:EA:32:AB:C7:4F:D5:6E:99:57:03:1F:3E X509v3 Authority Key Identifier: keyid:97:4B:4A:56:54:86:E0:48:D0:C1:76:98:D7:22:76:70:CF:3C:99:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0tKVlSG4EjQwXaY1yJ2cM88mac.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/36D5D62C9BF011EF81C90267C4F9AE02/l0tKVlSG4EjQwXaY1yJ2cM88mac.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:a8:66:b8:72:3d:21:e3:30:ea:64:05:a4:a0:14:b9:e0: c5:a3:60:ec:dc:30:dd:a9:b4:2f:6e:22:d4:e2:51:65:a6:1e: 50:53:f0:58:e9:25:b9:3e:62:aa:20:47:22:4c:d6:c1:5b:0a: 87:19:d6:71:7a:17:e8:0f:eb:f1:10:e8:98:f4:86:eb:ce:70: a2:21:aa:75:c5:8b:ff:b3:24:6b:88:d7:dd:fe:70:f6:11:4f: ba:1f:83:ba:63:2a:a3:85:26:de:e7:82:42:f1:16:50:32:20: 91:39:bb:df:6f:6c:ab:0a:8e:d6:1b:6e:bf:c0:47:4a:9c:cd: bb:85:c0:e6:f8:0d:85:9e:ce:a3:8d:cf:af:13:4a:b3:30:3f: 2a:eb:75:21:5e:ae:37:27:9d:ed:40:0b:44:ac:ec:9b:20:57: 0e:de:e9:08:a5:49:22:16:b0:85:12:44:62:7a:4d:a9:cd:11: 13:99:49:75:e4:59:bb:9c:25:10:a4:a0:ae:53:04:98:33:55: f6:26:68:11:6d:71:06:85:b5:24:7f:c6:93:9f:b4:f1:77:12: 53:69:7f:e1:9e:18:8a:6a:be:83:ea:2a:84:c3:9d:ab:b2:eb: 54:52:7f:b2:68:bd:ea:d4:e6:b8:af:c7:ad:5b:d8:c8:69:6e: 33:cf:7c:9a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MDY5QTExMC8GA1UEBRMoOTc0QjRBNTY1NDg2RTA0OEQwQzE3Njk4RDcyMjc2NzBD RjNDOTlBNzAeFw0yNTA3MDMwNjU2MTBaFw0yNTA3MTAwNjU2MTBaMBgxFjAUBgNV BAMTDTY4NjYyOThiLTRiZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtg0q9vOTt2R63hVMRgkURPsOx9h6HbAeR2C/0z4fBRInRDpfEMalSHzH/Z9H/ xLBZW5mYHaJ97etBSsW9gtYqo5wu/PMETEuWa08CI+pWfimoPVI1bZFRt4xm6F+9 hA87nUv4Ftu/Nk+c8unfFUzTIF0L99c+G0EJ6HUgMycb7AhIoy9rVheNrGJZbSRh ze/CaCdiE8Bbd6ocCZ5csbx4PRkEZ2qFWuW0iDOAl656Z96hFp9pHMRlIqaBusl+ KFZE0V4BZdb41kKi/nJK5q8vIJ66XVx3oHcATILlfBC8Z2UiqvDmaYiml+1H8F+e Z8UM37SxcMFewO0KMZeEsVVhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfMxQNPex pD3qMqvHT9VumVcDHz4wHwYDVR0jBBgwFoAUl0tKVlSG4EjQwXaY1yJ2cM88macw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwNjlBLzM2RDVENjJDOUJG MDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVqUXdYYVkxeUoyY004OG1h Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDB0S1ZsU0c0RWpRd1hhWTF5SjJjTTg4bWFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw NjlBLzM2RDVENjJDOUJGMDExRUY4MUM5MDI2N0M0RjlBRTAyL2wwdEtWbFNHNEVq UXdYYVkxeUoyY004OG1hYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ5bqGa4cj0h4zDqZAWkoBS54MWjYOzcMN2ptC9uItTiUWWmHlBT8Fjp Jbk+YqogRyJM1sFbCocZ1nF6F+gP6/EQ6Jj0huvOcKIhqnXFi/+zJGuI193+cPYR T7ofg7pjKqOFJt7ngkLxFlAyIJE5u99vbKsKjtYbbr/AR0qczbuFwOb4DYWezqON z68TSrMwPyrrdSFerjcnne1AC0Ss7JsgVw7e6QilSSIWsIUSRGJ6TanNEROZSXXk WbucJRCkoK5TBJgzVfYmaBFtcQaFtSR/xpOftPF3ElNpf+GeGIpqvoPqKoTDnauy 61RSf7JoverU5rivx61b2MhpbjPPfJo= -----END CERTIFICATE-----Generated at Fri Jul 4 15:26:33 2025 by rpki-client