$ rpki-client -vvf rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft File: P7w69DECztpPoPf6m9kbLWU0bW4.mft (raw, json) Hash identifier: PV2LWYCCj3kyO6v+RL7Hlwqni0UrLpz97MpHuz5xq4o= Subject key identifier: 2C:3F:84:05:2B:16:CD:05:46:95:38:0E:28:AE:68:6F:DF:FE:86:CD Authority key identifier: 3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E Certificate issuer: /CN=A9161DF8/serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Certificate serial: 0260 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft Manifest number: 0231 Signing time: Tue 01 Jul 2025 02:50:27 +0000 Manifest this update: Tue 01 Jul 2025 02:50:27 +0000 Manifest next update: Tue 08 Jul 2025 02:50:27 +0000 Files and hashes: 1: P7w69DECztpPoPf6m9kbLWU0bW4.crl (hash: +KD+i16twHmR3P9i3V7uc5gWGvRJ2K1okqWBgV1/1vs=) 2: 845D92BAFC5111EFA8505536C4F9AE02.roa (hash: b6MhCI2q2jPGB8Vadu+OAGml/y/4nQ509qbcxbzKawM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 608 (0x260) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161DF8, serialNumber=3FBC3AF43102CEDA4FA0F7FA9BD91B2D65346D6E Validity Not Before: Jul 1 02:50:27 2025 GMT Not After : Jul 8 02:50:27 2025 GMT Subject: CN=68634cf3-aff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:b6:38:0a:bc:ee:65:e6:95:2d:7e:ea:d6: 50:73:30:62:96:c7:47:58:a7:32:56:05:21:fa:4a: 50:fa:15:03:bd:51:85:7f:9f:9f:55:a2:b7:4a:ac: 75:77:28:e3:dd:f2:ee:92:c9:14:b0:f8:fd:40:18: 93:ca:71:f5:f0:5b:37:df:5f:9c:28:62:1d:87:8a: 66:d7:b7:e6:65:38:df:7e:2c:ab:60:f2:2c:cc:1b: 5b:ca:ef:71:24:0d:e0:2f:68:91:c8:d7:b9:9b:b3: b0:39:c1:0d:9a:45:0e:49:09:5c:7f:bf:f5:24:ec: 65:45:3a:67:15:f8:c0:e8:ae:d2:68:85:2c:75:fc: 52:25:25:c4:27:d3:87:95:7a:5c:59:16:1d:8f:e1: 9a:88:67:1d:b1:20:9b:ff:82:f9:fd:4a:54:08:e9: 21:d4:6a:f3:a8:58:76:43:c2:a0:a5:44:01:52:1d: f1:71:37:9b:4b:aa:ab:89:54:7c:35:85:e2:f3:8a: fa:47:4f:6b:a2:00:75:bd:86:ce:6c:d6:6e:88:b2: 2f:d8:bf:e7:33:6c:13:fe:bb:59:40:a9:62:27:98: aa:6d:f4:8e:75:57:3c:87:c4:48:2d:fe:97:6c:72: 2b:6f:6d:8c:b0:e4:69:df:09:cf:53:82:29:bc:b1: c6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3F:84:05:2B:16:CD:05:46:95:38:0E:28:AE:68:6F:DF:FE:86:CD X509v3 Authority Key Identifier: keyid:3F:BC:3A:F4:31:02:CE:DA:4F:A0:F7:FA:9B:D9:1B:2D:65:34:6D:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7w69DECztpPoPf6m9kbLWU0bW4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161DF8/26E53114550611ED9506C045C4F9AE02/P7w69DECztpPoPf6m9kbLWU0bW4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:04:d0:a9:22:e7:bf:d5:da:14:bc:67:a8:13:10:17:e6:a0: 2a:95:02:ef:63:9a:5c:e1:b2:7c:bd:c4:f1:89:0d:f0:5e:59: ac:cb:1c:8a:02:a0:43:09:1e:c4:52:c4:34:43:6d:82:4c:36: 22:ae:65:cb:77:fa:bb:97:ee:bc:12:88:9a:4b:a8:2f:24:c9: 41:1f:01:a3:ba:43:20:55:64:77:f2:21:f4:8f:0c:cc:af:f6: f1:26:36:bb:7c:37:9c:86:82:9f:e3:74:f1:75:06:d2:87:36: 86:4d:ce:36:ba:66:3a:c5:02:f4:84:58:d7:38:56:34:f2:0b: 7d:b1:6e:bb:4f:0f:ee:ea:c8:42:b5:b5:6c:a0:8c:b9:23:33: cb:44:c2:84:26:8f:41:09:d4:f9:e1:52:c0:30:70:83:42:09: ba:1f:6e:68:d2:5a:e8:02:72:82:ca:3a:8a:6b:57:09:00:1a: 0b:44:65:2f:83:39:5f:9e:6f:2e:15:51:5c:f9:92:2b:f5:84: 6b:3d:7a:aa:39:ca:bf:8e:b8:53:6d:2f:4a:5e:55:fd:7f:c7: 65:f1:d9:03:bb:27:73:80:67:21:3e:8b:47:8b:8c:87:0f:12: 4f:c9:e9:fd:9c:ca:a4:08:50:bd:f3:bc:41:d4:33:db:24:6f: 7d:48:5c:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFERjgxMTAvBgNVBAUTKDNGQkMzQUY0MzEwMkNFREE0RkEwRjdGQTlCRDkxQjJE NjUzNDZENkUwHhcNMjUwNzAxMDI1MDI3WhcNMjUwNzA4MDI1MDI3WjAYMRYwFAYD VQQDEw02ODYzNGNmMy1hZmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA19K2OAq87mXmlS1+6tZQczBilsdHWKcyVgUh+kpQ+hUDvVGFf5+fVaK3Sqx1 dyjj3fLukskUsPj9QBiTynH18Fs331+cKGIdh4pm17fmZTjffiyrYPIszBtbyu9x JA3gL2iRyNe5m7OwOcENmkUOSQlcf7/1JOxlRTpnFfjA6K7SaIUsdfxSJSXEJ9OH lXpcWRYdj+GaiGcdsSCb/4L5/UpUCOkh1GrzqFh2Q8KgpUQBUh3xcTebS6qriVR8 NYXi84r6R09rogB1vYbObNZuiLIv2L/nM2wT/rtZQKliJ5iqbfSOdVc8h8RILf6X bHIrb22MsORp3wnPU4IpvLHGAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw/hAUr Fs0FRpU4DiiuaG/f/obNMB8GA1UdIwQYMBaAFD+8OvQxAs7aT6D3+pvZGy1lNG1u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MURGOC8yNkU1MzExNDU1 MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0cFBvUGY2bTlrYkxXVTBi VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3dzY5REVDenRwUG9QZjZtOWtiTFdVMGJXNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MURGOC8yNkU1MzExNDU1MDYxMUVEOTUwNkMwNDVDNEY5QUUwMi9QN3c2OURFQ3p0 cFBvUGY2bTlrYkxXVTBiVzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVBNCpIue/1doUvGeoExAX5qAqlQLvY5pc4bJ8vcTxiQ3wXlmsyxyK AqBDCR7EUsQ0Q22CTDYirmXLd/q7l+68EoiaS6gvJMlBHwGjukMgVWR38iH0jwzM r/bxJja7fDechoKf43TxdQbShzaGTc42umY6xQL0hFjXOFY08gt9sW67Tw/u6shC tbVsoIy5IzPLRMKEJo9BCdT54VLAMHCDQgm6H25o0lroAnKCyjqKa1cJABoLRGUv gzlfnm8uFVFc+ZIr9YRrPXqqOcq/jrhTbS9KXlX9f8dl8dkDuydzgGchPotHi4yH DxJPyen9nMqkCFC987xB1DPbJG99SFxG -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:55 2025 by rpki-client