$ rpki-client -vvf rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft File: rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft (raw, json) Hash identifier: /4U9B3GPgpp6MgSleMzC2duqrXsba+oxGzkjhvuoZc8= Subject key identifier: 90:41:72:C6:1C:9D:87:C0:67:2F:71:85:E4:75:E0:C9:C3:8A:3C:E1 Authority key identifier: AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 Certificate issuer: /CN=A917138D/serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Certificate serial: 07FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft Manifest number: 07E9 Signing time: Wed 02 Jul 2025 21:18:54 +0000 Manifest this update: Wed 02 Jul 2025 21:18:53 +0000 Manifest next update: Wed 09 Jul 2025 21:18:53 +0000 Files and hashes: 1: rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl (hash: s4WEBNiWQbYvdWEUz7Yb2gA9nxy+0A5Y0kcY/SbxKX8=) 2: 7D0F62FAF3EF11EA82F3C251C4F9AE02.roa (hash: qjMMlEqEvaBO7XAFYzvleISXKC2IIZdSXJalJOe7pw0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917138D, serialNumber=AE0F0E9ED4A6706E92E10B789BAC2C625A565156 Validity Not Before: Jul 2 21:18:53 2025 GMT Not After : Jul 9 21:18:53 2025 GMT Subject: CN=6865a23e-8a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:f3:9c:1d:c8:af:80:cf:06:71:3b:84:b1: c8:0a:f6:50:51:27:20:84:29:95:3b:de:6c:9f:29: a7:95:e2:56:c8:84:e2:91:69:ee:9e:c2:a2:d9:5b: f1:65:b3:a0:29:23:8c:1f:b3:ce:c2:0c:d1:41:eb: 56:10:b2:73:61:d1:86:22:58:7d:80:60:5b:7d:f6: 63:fa:9b:63:bb:9e:ae:e7:65:ed:62:96:13:7b:d3: e0:f9:09:71:4f:4b:e8:11:32:57:9c:a0:eb:b6:a0: cb:c9:f8:12:02:d0:a0:df:a0:10:8d:24:bf:9a:b8: bc:46:fd:66:40:4a:2c:f0:8d:dd:4c:50:17:43:8b: eb:17:01:5d:ee:c2:a4:3d:c1:a6:09:77:e3:3b:a7: 33:47:26:82:77:af:3e:38:2e:4b:26:88:4e:6d:73: 4d:f8:15:71:ae:04:46:e6:ce:1f:b4:a0:66:a8:ff: 7d:4c:8d:b4:c5:12:1b:09:86:2b:48:bd:d5:63:d8: 27:b9:5d:e6:92:1b:7f:fc:0f:d5:63:93:7d:ed:97: 03:4b:3b:0a:74:9a:0c:62:57:c1:57:96:02:81:27: 8f:03:dd:db:f9:77:7e:18:76:71:fa:77:06:3f:a6: 93:01:96:13:b7:8b:76:e7:89:5c:b7:d5:1e:3b:97: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:41:72:C6:1C:9D:87:C0:67:2F:71:85:E4:75:E0:C9:C3:8A:3C:E1 X509v3 Authority Key Identifier: keyid:AE:0F:0E:9E:D4:A6:70:6E:92:E1:0B:78:9B:AC:2C:62:5A:56:51:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rg8OntSmcG6S4Qt4m6wsYlpWUVY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917138D/4F6E9318F3ED11EAA4A1D64DC4F9AE02/rg8OntSmcG6S4Qt4m6wsYlpWUVY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:03:f7:e3:a1:7c:c9:94:96:b6:72:68:eb:e8:65:0e:5d:38: 1a:08:4e:72:9a:59:ea:78:3c:8a:ad:d2:ff:c6:55:c3:bc:71: 30:84:28:93:c5:e6:3d:9e:9b:c1:a4:b2:e0:4b:cd:cb:42:1b: bd:cd:f4:6f:b2:ce:2f:75:c5:de:16:a4:14:5a:4b:ca:db:3f: 4c:0c:8d:57:29:ae:85:e8:53:63:3b:a5:52:b3:31:28:0a:22: a6:2e:94:ab:37:b8:32:be:14:ef:29:01:98:73:8d:f7:df:e5: 1e:34:55:db:d5:86:f3:ae:2b:63:4d:ed:41:3b:c4:3b:b1:12: ee:57:83:97:c2:76:df:62:a4:83:37:76:68:52:8b:35:a2:83: ec:4a:00:c3:ba:91:37:15:76:39:c2:cd:e4:49:f9:de:be:43: ac:ad:d3:c8:fe:48:dc:8c:d9:f2:55:71:c1:e9:b2:cb:0d:73: 5e:95:34:93:60:80:7f:cd:e0:d6:9d:52:e8:78:9c:d5:60:d4: 4f:99:51:42:ad:ac:72:5c:67:43:d1:11:28:fc:86:22:a3:a8: 99:61:b3:a5:8c:c2:71:7d:03:bc:a2:57:df:86:c1:49:4d:2f: be:9c:c7:64:a3:b0:f8:29:6f:76:43:fd:6e:9f:3b:eb:48:de: 93:3d:cc:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzEzOEQxMTAvBgNVBAUTKEFFMEYwRTlFRDRBNjcwNkU5MkUxMEI3ODlCQUMyQzYy NUE1NjUxNTYwHhcNMjUwNzAyMjExODUzWhcNMjUwNzA5MjExODUzWjAYMRYwFAYD VQQDEw02ODY1YTIzZS04YTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztvznB3Ir4DPBnE7hLHICvZQUScghCmVO95snymnleJWyITikWnunsKi2Vvx ZbOgKSOMH7POwgzRQetWELJzYdGGIlh9gGBbffZj+ptju56u52XtYpYTe9Pg+Qlx T0voETJXnKDrtqDLyfgSAtCg36AQjSS/mri8Rv1mQEos8I3dTFAXQ4vrFwFd7sKk PcGmCXfjO6czRyaCd68+OC5LJohObXNN+BVxrgRG5s4ftKBmqP99TI20xRIbCYYr SL3VY9gnuV3mkht//A/VY5N97ZcDSzsKdJoMYlfBV5YCgSePA93b+Xd+GHZx+ncG P6aTAZYTt4t254lct9UeO5dZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBBcsYc nYfAZy9xheR14MnDijzhMB8GA1UdIwQYMBaAFK4PDp7UpnBukuELeJusLGJaVlFW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTM4RC80RjZFOTMxOEYz RUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNHNlM0UXQ0bTZ3c1lscFdV VlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JnOE9udFNtY0c2UzRRdDRtNndzWWxwV1VWWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTM4RC80RjZFOTMxOEYzRUQxMUVBQTRBMUQ2NERDNEY5QUUwMi9yZzhPbnRTbWNH NlM0UXQ0bTZ3c1lscFdVVlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9A/fjoXzJlJa2cmjr6GUOXTgaCE5ymlnqeDyKrdL/xlXDvHEwhCiT xeY9npvBpLLgS83LQhu9zfRvss4vdcXeFqQUWkvK2z9MDI1XKa6F6FNjO6VSszEo CiKmLpSrN7gyvhTvKQGYc4333+UeNFXb1YbzritjTe1BO8Q7sRLuV4OXwnbfYqSD N3ZoUos1ooPsSgDDupE3FXY5ws3kSfnevkOsrdPI/kjcjNnyVXHB6bLLDXNelTST YIB/zeDWnVLoeJzVYNRPmVFCraxyXGdD0REo/IYio6iZYbOljMJxfQO8olffhsFJ TS++nMdko7D4KW92Q/1unzvrSN6TPcxX -----END CERTIFICATE-----Generated at Thu Jul 3 10:20:39 2025 by rpki-client