$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: cFso+KTOhnQp1QBccOEHsZ9mldbVgx0kPpB7IfyqFzQ= Subject key identifier: E3:4A:DA:EF:89:70:B7:F5:23:E5:96:D4:77:A1:FE:0A:84:9E:3F:95 Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 8F Signing time: Tue 01 Jul 2025 07:14:56 +0000 Manifest this update: Tue 01 Jul 2025 07:14:55 +0000 Manifest next update: Tue 08 Jul 2025 07:14:55 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: kyWElA3Df058mlpB1Sgk4PVcVNpNJ+coSVd8Nv9vCRo=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:14:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Jul 1 07:14:55 2025 GMT Not After : Jul 8 07:14:55 2025 GMT Subject: CN=68638aef-11f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:04:31:1c:c5:d1:dc:46:5a:db:2d:60:78: 24:f3:4a:43:01:26:e5:f6:48:28:88:45:2f:61:a2: 9b:ca:4e:a3:49:64:fb:27:d7:23:f9:f3:37:69:7e: 59:ee:5f:13:40:59:d3:07:a1:c4:04:b2:a3:ce:5f: 30:24:ee:3f:fd:08:b7:d2:83:8d:36:b0:90:1e:42: 2f:8d:65:23:33:70:b5:e7:f2:b2:25:7e:87:7d:76: 19:74:5e:22:5a:30:e1:15:ad:2f:3c:f2:a9:14:d9: f7:6e:8a:51:ac:52:7d:18:83:49:0f:93:84:66:de: 4d:aa:20:85:d8:0b:d6:51:b9:ba:25:80:1a:bd:97: 39:3c:83:52:62:27:6d:0e:37:21:3c:a1:6e:63:4f: 42:4a:80:bf:25:8e:be:cc:43:3f:50:f4:34:41:ad: 7d:44:97:ce:3a:e2:c7:06:eb:d7:27:12:0e:b6:46: a4:7a:b3:63:c5:1d:26:b8:84:0d:29:33:09:3b:2b: cd:17:3f:a0:33:e2:e7:cc:d5:98:e2:71:2a:94:92: 1a:56:6a:72:c3:7f:d3:b6:2f:7e:ab:8f:28:6e:01: aa:2c:7f:34:fb:b5:0f:46:90:8a:7c:09:29:9d:0e: 81:67:82:99:0d:bd:85:4a:b8:80:3a:47:1f:e4:99: 31:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4A:DA:EF:89:70:B7:F5:23:E5:96:D4:77:A1:FE:0A:84:9E:3F:95 X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e0:59:58:23:77:dc:18:41:8f:83:79:eb:64:06:7e:bb:92: 8c:9f:cb:1e:b0:cf:93:fe:78:6f:1c:33:54:29:59:19:30:b0: b6:10:96:f1:08:3c:20:8c:06:87:7f:23:af:a6:f8:95:dc:56: ae:4e:dc:dc:7b:d9:43:2e:9b:36:aa:d9:33:af:34:5c:11:a0: 34:54:d6:a7:c7:c4:05:ce:b2:4b:f5:dd:c3:c7:c6:cd:a3:e1: 0f:a8:3a:cc:2d:9a:c3:98:19:48:64:6c:22:4e:35:6b:1e:e8: 80:05:c6:24:af:aa:24:4c:25:8e:b0:90:a9:5b:50:84:fa:54: 2d:62:2d:1f:e5:55:02:2a:b8:61:bf:3e:4b:97:ea:4f:fa:fd: b5:ef:8a:fb:c0:4c:b7:d0:85:b6:30:ac:97:eb:cb:88:ec:09: 55:73:07:9e:6e:23:a5:8f:87:46:2e:fc:e2:52:e7:25:b2:26: aa:75:b6:1b:8f:cd:b2:91:cd:3c:d9:b6:6e:46:65:f5:1b:e9: 75:b0:09:a1:2b:cc:eb:34:3c:c7:4d:7b:28:d2:4b:1a:e9:c0: 50:dc:d7:a0:8a:5b:ad:4d:d1:7f:dc:da:dd:d0:cd:48:34:60: 40:d9:7f:69:00:96:7a:06:94:2a:17:71:75:87:ef:ef:d3:d1: 4f:62:a8:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUwNzAxMDcxNDU1WhcNMjUwNzA4MDcxNDU1WjAYMRYwFAYD VQQDEw02ODYzOGFlZi0xMWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzaMEMRzF0dxGWtstYHgk80pDASbl9kgoiEUvYaKbyk6jSWT7J9cj+fM3aX5Z 7l8TQFnTB6HEBLKjzl8wJO4//Qi30oONNrCQHkIvjWUjM3C15/KyJX6HfXYZdF4i WjDhFa0vPPKpFNn3bopRrFJ9GINJD5OEZt5NqiCF2AvWUbm6JYAavZc5PINSYidt DjchPKFuY09CSoC/JY6+zEM/UPQ0Qa19RJfOOuLHBuvXJxIOtkakerNjxR0muIQN KTMJOyvNFz+gM+LnzNWY4nEqlJIaVmpyw3/Tti9+q48obgGqLH80+7UPRpCKfAkp nQ6BZ4KZDb2FSriAOkcf5JkxHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONK2u+J cLf1I+WW1Heh/gqEnj+VMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB04FlYI3fcGEGPg3nrZAZ+u5KMn8sesM+T/nhvHDNUKVkZMLC2EJbx CDwgjAaHfyOvpviV3FauTtzce9lDLps2qtkzrzRcEaA0VNanx8QFzrJL9d3Dx8bN o+EPqDrMLZrDmBlIZGwiTjVrHuiABcYkr6okTCWOsJCpW1CE+lQtYi0f5VUCKrhh vz5Ll+pP+v2174r7wEy30IW2MKyX68uI7AlVcweebiOlj4dGLvziUuclsiaqdbYb j82ykc082bZuRmX1G+l1sAmhK8zrNDzHTXso0ksa6cBQ3NegilutTdF/3Nrd0M1I NGBA2X9pAJZ6BpQqF3F1h+/v09FPYqik -----END CERTIFICATE-----Generated at Wed Jul 2 22:18:34 2025 by rpki-client