$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: m9J259abxxgSF3O0q2C2NOebfWvlwb2PtRBv7RH0dOE= Subject key identifier: E6:40:AA:F1:47:17:FA:E8:E7:8B:F0:CE:A6:FA:CF:67:93:7C:C3:9D Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 44 Signing time: Sun 29 Jun 2025 06:29:35 +0000 Manifest this update: Sun 29 Jun 2025 06:29:35 +0000 Manifest next update: Sun 06 Jul 2025 06:29:35 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: AP7X9TXVQYOMIDgAictPuWZ0jrSyw5hH5SnZu/fx8Qw=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Jun 29 06:29:35 2025 GMT Not After : Jul 6 06:29:35 2025 GMT Subject: CN=6860dd4f-3978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3b:ae:dd:71:81:ee:a3:45:b8:5b:6a:4a:93: 7f:c3:0e:1d:a3:b0:04:08:43:75:35:09:4d:db:9e: b1:df:70:61:e3:51:fd:2b:4d:f9:6b:04:dd:39:b4: 4b:cb:42:6f:36:c5:f4:bb:f2:3e:cb:06:e5:11:fc: 05:97:6f:23:df:2a:83:8d:3d:97:36:be:c9:8c:28: 5e:9f:50:ab:14:b3:27:fa:c0:7b:c0:4c:d9:31:87: c3:7b:7f:fc:b7:d5:e4:c5:54:9a:c9:1b:d5:fa:22: c7:ec:ab:2b:50:56:75:9a:1b:33:d5:44:31:85:ef: 41:34:f3:12:b8:c8:e5:7d:6b:c0:e8:28:f7:20:f6: 82:ee:86:9b:f2:96:ae:cc:33:97:6b:36:08:f4:e8: d6:0a:26:30:80:e5:cd:69:ee:40:c1:51:96:4f:02: d5:27:42:98:27:8d:35:ef:69:4e:25:a0:b6:de:5a: 55:d0:cb:f8:ed:e9:1e:4b:86:94:ff:f5:c6:dd:f2: c0:cb:cf:03:85:40:fc:ea:33:51:d8:9c:f6:eb:72: 0b:db:c0:da:6a:3e:d8:f3:a9:30:82:eb:a6:28:4e: c2:a9:9d:45:b9:0e:26:08:6f:56:a7:3f:02:1b:d0: 8d:2f:6a:48:c4:e3:bd:8d:59:d0:92:21:de:39:69: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:AA:F1:47:17:FA:E8:E7:8B:F0:CE:A6:FA:CF:67:93:7C:C3:9D X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:78:1d:b2:4c:f4:89:09:18:63:f8:a7:6a:84:55:17:db:65: cd:4e:ff:06:5e:b4:f2:e4:0d:69:1a:b4:41:f2:97:51:e9:ea: 31:cc:12:bd:86:eb:a7:eb:49:a3:d4:5b:53:1e:a7:cd:87:ae: c2:f1:6a:c4:1d:5f:b3:cd:4c:a5:d1:d4:3b:50:24:5a:16:e5: ed:ff:2e:6d:7e:98:65:67:07:63:e9:2a:50:b8:97:21:cb:a1: d5:c3:20:ef:e0:00:dc:e0:08:a6:a6:23:c3:29:f3:e9:fe:c5: 1f:e7:16:68:ed:5f:09:b9:66:94:6e:f2:aa:e2:3f:0d:14:f9: f1:39:12:0f:fd:28:2e:d7:e8:44:8c:02:a7:64:11:34:ed:bf: d5:8c:05:3b:61:4f:79:b7:fd:ff:d3:b7:63:9f:74:9c:40:89: 9d:52:2c:c2:7c:ff:22:67:76:df:9f:33:04:0d:4d:bb:09:62: 91:4d:06:9b:80:7f:80:71:f9:4f:1f:33:8a:e3:c6:3b:66:5d: 02:80:7b:df:35:03:c9:3e:05:36:a0:e8:18:39:58:1b:fb:4a: af:9c:c1:0e:6a:18:83:5c:0b:91:a6:f0:f4:36:d9:89:ed:eb: 6f:39:80:88:47:d1:fd:4d:3f:c2:8e:92:f7:b3:4b:57:f8:6d: b9:21:02:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA2MjkwNjI5MzVaFw0yNTA3MDYwNjI5MzVaMBgxFjAUBgNV BAMTDTY4NjBkZDRmLTM5NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9O67dcYHuo0W4W2pKk3/DDh2jsAQIQ3U1CU3bnrHfcGHjUf0rTflrBN05tEvL Qm82xfS78j7LBuUR/AWXbyPfKoONPZc2vsmMKF6fUKsUsyf6wHvATNkxh8N7f/y3 1eTFVJrJG9X6IsfsqytQVnWaGzPVRDGF70E08xK4yOV9a8DoKPcg9oLuhpvylq7M M5drNgj06NYKJjCA5c1p7kDBUZZPAtUnQpgnjTXvaU4loLbeWlXQy/jt6R5LhpT/ 9cbd8sDLzwOFQPzqM1HYnPbrcgvbwNpqPtjzqTCC66YoTsKpnUW5DiYIb1anPwIb 0I0vakjE472NWdCSId45aVkvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5kCq8UcX +ujni/DOpvrPZ5N8w50wHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABl4HbJM9IkJGGP4p2qEVRfbZc1O/wZetPLkDWkatEHyl1Hp6jHMEr2G 66frSaPUW1Mep82HrsLxasQdX7PNTKXR1DtQJFoW5e3/Lm1+mGVnB2PpKlC4lyHL odXDIO/gANzgCKamI8Mp8+n+xR/nFmjtXwm5ZpRu8qriPw0U+fE5Eg/9KC7X6ESM AqdkETTtv9WMBTthT3m3/f/Tt2OfdJxAiZ1SLMJ8/yJndt+fMwQNTbsJYpFNBpuA f4Bx+U8fM4rjxjtmXQKAe981A8k+BTag6Bg5WBv7Sq+cwQ5qGINcC5Gm8PQ22Ynt 6285gIhH0f1NP8KOkvezS1f4bbkhAv4= -----END CERTIFICATE-----Generated at Sun Jun 29 13:49:47 2025 by rpki-client