$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: QnGT5d5LQkQxN31Q5mefzLivcqGvdkNNT8rTl39MgL4= Subject key identifier: D0:C7:40:AA:FE:51:2E:BE:00:33:89:D5:AB:49:BD:73:5D:D6:E6:BD Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 34B3 Signing time: Wed 02 Jul 2025 14:16:46 +0000 Manifest this update: Wed 02 Jul 2025 14:16:45 +0000 Manifest next update: Wed 09 Jul 2025 14:16:45 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: TPlHy+oxy5BsumDmmIxrfztHkeTup3Zvlvov/cHL11o=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13529 (0x34d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Jul 2 14:16:45 2025 GMT Not After : Jul 9 14:16:45 2025 GMT Subject: CN=68653f4e-34aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1d:9e:85:dc:10:33:d0:8e:c8:8e:d3:eb:42: a8:37:5e:1f:93:d7:f1:bc:00:58:77:e7:1d:9e:ec: 52:e6:4b:16:4f:42:35:87:a8:76:aa:b0:bd:48:80: 57:45:43:59:c1:3e:30:30:aa:69:e9:53:4a:e6:5a: 13:0c:94:c9:b1:d1:ce:16:de:f2:3e:20:29:d2:d0: 9e:c7:81:d3:fe:58:db:57:70:b5:60:a6:dd:e5:57: 25:2b:d3:4a:80:26:61:a2:fb:91:8d:55:a8:19:12: 87:00:40:1e:a3:69:49:43:c9:b4:14:a1:a8:e8:d8: ac:dd:f9:36:99:14:e5:32:ff:19:dc:25:45:6b:36: 77:48:63:5d:fe:89:ed:49:70:44:4f:75:30:a8:ad: 18:f8:c5:e6:fb:e0:3b:c9:c4:13:f3:aa:41:bb:dd: 1a:3a:64:bf:01:6d:34:48:e2:dd:1d:67:08:16:42: f4:6f:b0:5a:7e:8b:00:ec:ba:f9:67:d0:9b:e4:46: 14:ea:f7:38:ec:09:41:ca:78:49:a0:21:77:d8:77: a7:f7:e0:2f:2f:e8:cf:df:24:cd:09:f6:82:58:30: 9d:49:1d:6e:d5:22:3d:a3:43:d4:50:d3:47:47:cf: 0a:1f:eb:02:97:fd:fb:fd:3c:e8:60:50:f2:06:29: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:40:AA:FE:51:2E:BE:00:33:89:D5:AB:49:BD:73:5D:D6:E6:BD X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:e5:1b:74:3b:8f:46:f8:c8:f5:28:86:32:fd:99:4b:87:9a: 0e:51:df:3d:42:22:85:b6:16:3b:df:81:2c:6a:40:29:2c:e2: da:e4:20:18:7b:8f:f9:f0:d1:fc:70:80:41:e9:85:65:3a:a6: 39:51:90:b8:31:19:85:c0:95:5c:bd:39:16:64:8d:e8:0f:15: 47:33:41:2f:90:fe:84:d0:5a:cd:1d:fb:2f:79:c1:99:04:34: 6a:04:20:02:ad:aa:47:48:02:43:03:aa:69:46:35:43:15:af: 65:ce:e0:dd:4a:d5:0d:3a:d3:d1:cd:ed:60:76:8c:64:93:05: a7:7b:a9:72:30:e6:60:13:56:ea:e8:26:10:1e:8f:0f:6e:bb: 6a:2f:29:cd:e2:96:e6:74:dc:30:a3:3d:2b:c5:b6:3d:e7:06: 45:96:4b:60:49:08:8a:8e:78:14:9d:9d:c2:81:f6:3f:8e:88: 22:5b:ca:b9:28:66:3f:36:de:08:5e:33:a1:ca:05:70:b5:56: b6:ca:bd:99:d6:70:cb:6d:e6:c7:59:40:e6:3a:6c:5a:59:e0: 0a:5a:02:03:71:7b:4b:35:d4:68:dd:75:8f:1a:e2:34:7b:7a: 74:6c:7c:06:6d:97:36:7d:b6:71:a3:cf:e6:1e:cf:21:75:0c: d7:d6:ba:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwNzAyMTQxNjQ1WhcNMjUwNzA5MTQxNjQ1WjAYMRYwFAYD VQQDEw02ODY1M2Y0ZS0zNGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxB2ehdwQM9COyI7T60KoN14fk9fxvABYd+cdnuxS5ksWT0I1h6h2qrC9SIBX RUNZwT4wMKpp6VNK5loTDJTJsdHOFt7yPiAp0tCex4HT/ljbV3C1YKbd5VclK9NK gCZhovuRjVWoGRKHAEAeo2lJQ8m0FKGo6Nis3fk2mRTlMv8Z3CVFazZ3SGNd/ont SXBET3UwqK0Y+MXm++A7ycQT86pBu90aOmS/AW00SOLdHWcIFkL0b7BafosA7Lr5 Z9Cb5EYU6vc47AlBynhJoCF32Hen9+AvL+jP3yTNCfaCWDCdSR1u1SI9o0PUUNNH R88KH+sCl/37/TzoYFDyBilDkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDHQKr+ US6+ADOJ1atJvXNd1ua9MB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAY5Rt0O49G+Mj1KIYy/ZlLh5oOUd89QiKFthY734EsakApLOLa5CAY e4/58NH8cIBB6YVlOqY5UZC4MRmFwJVcvTkWZI3oDxVHM0EvkP6E0FrNHfsvecGZ BDRqBCACrapHSAJDA6ppRjVDFa9lzuDdStUNOtPRze1gdoxkkwWne6lyMOZgE1bq 6CYQHo8PbrtqLynN4pbmdNwwoz0rxbY95wZFlktgSQiKjngUnZ3CgfY/jogiW8q5 KGY/Nt4IXjOhygVwtVa2yr2Z1nDLbebHWUDmOmxaWeAKWgIDcXtLNdRo3XWPGuI0 e3p0bHwGbZc2fbZxo8/mHs8hdQzX1rpf -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:17 2025 by rpki-client