$ rpki-client -vvf rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft File: IdPtIffN68fQDxu3oJURuVze_iM.mft (raw, json) Hash identifier: XpPwj7JYgg0uMe79YCvWUOgdVeaX2mHPDF3kv2sfnAU= Subject key identifier: 86:10:82:23:49:06:4A:9A:41:AB:88:1B:11:5C:0D:22:69:93:79:2C Authority key identifier: 21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 Certificate issuer: /CN=A917336A/serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft Manifest number: A7 Signing time: Tue 01 Jul 2025 06:50:25 +0000 Manifest this update: Tue 01 Jul 2025 06:50:25 +0000 Manifest next update: Tue 08 Jul 2025 06:50:25 +0000 Files and hashes: 1: IdPtIffN68fQDxu3oJURuVze_iM.crl (hash: YN3jAimWDagB6cptvc5njnpPX0svyDvR2+Bn4FD3WsA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 06:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917336A, serialNumber=21D3ED21F7CDEBC7D00F1BB7A09511B95CDEFE23 Validity Not Before: Jul 1 06:50:25 2025 GMT Not After : Jul 8 06:50:25 2025 GMT Subject: CN=68638531-e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:19:62:18:8b:2f:8d:56:f3:36:1b:c4:9e: 00:d4:8b:97:23:82:29:2f:01:5b:23:21:f7:f1:9b: b5:8e:9c:1d:ed:5a:f7:51:82:e5:e3:69:ac:6c:f9: 68:35:70:43:63:6d:68:c0:28:b3:51:d2:e2:aa:e2: 73:45:06:c4:fb:83:8f:f2:0d:5f:be:9f:84:d8:93: f4:db:97:cd:0a:f0:c5:ea:9e:ea:d1:74:1d:d4:cb: 61:3d:5d:c3:47:3c:27:77:31:9b:9e:b9:af:ae:91: ac:ca:a5:d6:f3:9b:c9:ad:e9:7c:8d:ce:d4:a4:8c: 9a:c7:9c:a1:6b:37:fa:fa:17:69:36:e5:c0:bc:57: cc:15:35:0f:42:b1:8f:bc:a7:21:4d:0b:4a:8d:db: e8:79:cb:e7:1d:bc:2d:69:84:6d:18:3a:b7:94:da: 4a:40:51:71:ca:ad:e3:6a:4c:73:5e:6d:11:4d:70: f7:b8:9e:47:9f:a8:f6:c4:42:01:1b:65:38:1c:9a: 32:ad:4a:67:7b:c5:7a:d8:de:db:98:40:c9:2d:91: 55:db:69:98:de:cb:37:75:f6:4b:f4:2c:71:10:fa: 37:01:bc:a9:58:e3:fb:f2:09:7b:6f:2c:2e:32:c6: ef:aa:0d:e9:15:b9:c5:2e:40:a5:16:21:85:d9:bf: cc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:10:82:23:49:06:4A:9A:41:AB:88:1B:11:5C:0D:22:69:93:79:2C X509v3 Authority Key Identifier: keyid:21:D3:ED:21:F7:CD:EB:C7:D0:0F:1B:B7:A0:95:11:B9:5C:DE:FE:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IdPtIffN68fQDxu3oJURuVze_iM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917336A/8F5A93565AEA11EF94E93D6EC4F9AE02/IdPtIffN68fQDxu3oJURuVze_iM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:22:8f:42:87:cc:c4:c0:25:ce:b9:af:b2:45:07:0c:69:f5: 8e:cc:30:0a:1c:2f:b8:01:9f:69:fc:66:4d:a9:cc:a0:e8:1d: f1:85:67:2f:51:8f:b5:44:89:84:d1:f0:e2:bc:e9:8a:c7:25: 79:0a:3b:fe:21:28:b9:50:a6:3f:f2:72:5c:92:5e:b6:c8:8f: 1d:df:dd:19:20:3a:ea:ec:d5:1a:bf:ef:53:fd:04:b0:6c:2e: 8d:fe:ca:40:d6:65:19:2a:98:89:b9:2f:cb:53:2f:1d:8c:27: 72:4d:7f:6d:08:a2:29:e1:26:be:ec:db:6d:d0:fa:0f:51:09: 59:5b:f9:88:bc:5c:d9:d1:fb:f8:1b:89:2b:30:9b:4a:c5:0d: 84:80:b7:79:d5:0c:73:13:d0:cd:1a:94:a2:7c:53:ad:98:8e: ec:61:7a:c2:ca:94:67:7d:03:a9:22:00:99:82:40:98:ce:0b: d2:72:37:3b:b9:d0:6d:e0:5b:bc:b8:71:e5:67:70:f6:18:1b: 67:70:9b:6c:68:d5:f8:14:62:67:76:fc:ba:a2:98:f3:dc:e4: cd:01:62:46:a4:b8:9c:37:7a:2a:e0:1c:62:d4:ff:e4:3e:b6: 25:a2:bf:8b:17:bd:e5:ac:b5:50:98:a5:89:7e:c0:ff:8f:02: 64:d5:20:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzMzNkExMTAvBgNVBAUTKDIxRDNFRDIxRjdDREVCQzdEMDBGMUJCN0EwOTUxMUI5 NUNERUZFMjMwHhcNMjUwNzAxMDY1MDI1WhcNMjUwNzA4MDY1MDI1WjAYMRYwFAYD VQQDEw02ODYzODUzMS1lMDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFYZYhiLL41W8zYbxJ4A1IuXI4IpLwFbIyH38Zu1jpwd7Vr3UYLl42msbPlo NXBDY21owCizUdLiquJzRQbE+4OP8g1fvp+E2JP025fNCvDF6p7q0XQd1MthPV3D RzwndzGbnrmvrpGsyqXW85vJrel8jc7UpIyax5yhazf6+hdpNuXAvFfMFTUPQrGP vKchTQtKjdvoecvnHbwtaYRtGDq3lNpKQFFxyq3jakxzXm0RTXD3uJ5Hn6j2xEIB G2U4HJoyrUpne8V62N7bmEDJLZFV22mY3ss3dfZL9CxxEPo3AbypWOP78gl7bywu Msbvqg3pFbnFLkClFiGF2b/MFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYQgiNJ BkqaQauIGxFcDSJpk3ksMB8GA1UdIwQYMBaAFCHT7SH3zevH0A8bt6CVEblc3v4j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzM2QS84RjVBOTM1NjVB RUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4ZlFEeHUzb0pVUnVWemVf aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lkUHRJZmZONjhmUUR4dTNvSlVSdVZ6ZV9pTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzM2QS84RjVBOTM1NjVBRUExMUVGOTRFOTNENkVDNEY5QUUwMi9JZFB0SWZmTjY4 ZlFEeHUzb0pVUnVWemVfaU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhIo9Ch8zEwCXOua+yRQcMafWOzDAKHC+4AZ9p/GZNqcyg6B3xhWcv UY+1RImE0fDivOmKxyV5Cjv+ISi5UKY/8nJckl62yI8d390ZIDrq7NUav+9T/QSw bC6N/spA1mUZKpiJuS/LUy8djCdyTX9tCKIp4Sa+7Ntt0PoPUQlZW/mIvFzZ0fv4 G4krMJtKxQ2EgLd51QxzE9DNGpSifFOtmI7sYXrCypRnfQOpIgCZgkCYzgvScjc7 udBt4Fu8uHHlZ3D2GBtncJtsaNX4FGJndvy6opjz3OTNAWJGpLicN3oq4Bxi1P/k PrYlor+LF73lrLVQmKWJfsD/jwJk1SCX -----END CERTIFICATE-----Generated at Tue Jul 1 21:00:27 2025 by rpki-client