$ rpki-client -vvf rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft File: aTtxpbXaYFTff5wNN5z1IMHI8pE.mft (raw, json) Hash identifier: gXcOmikA4tiesjyCrBUsemyPvyZMbVzs+yLfx0Bw7BE= Subject key identifier: 24:85:B2:A3:F7:9F:07:31:D2:F0:4B:80:FC:24:D1:7E:6A:7E:5D:74 Authority key identifier: 69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 Certificate issuer: /CN=A917DB52/serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Certificate serial: 07F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft Manifest number: 07E7 Signing time: Wed 02 Jul 2025 21:17:58 +0000 Manifest this update: Wed 02 Jul 2025 21:17:57 +0000 Manifest next update: Wed 09 Jul 2025 21:17:57 +0000 Files and hashes: 1: aTtxpbXaYFTff5wNN5z1IMHI8pE.crl (hash: mv1szSmkmYZ9NHHOf8qwso2cviOGsL/YTz5firAHikg=) 2: D7A207C2F33611EAA449F44CC4F9AE02.roa (hash: /kcNu2DzvPjb/K+Cuz9Luoiid37N2ZQdhRNxbuzcd2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2032 (0x7f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DB52, serialNumber=693B71A5B5DA6054DF7F9C0D379CF520C1C8F291 Validity Not Before: Jul 2 21:17:57 2025 GMT Not After : Jul 9 21:17:57 2025 GMT Subject: CN=6865a206-e7d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cb:47:ac:62:d5:e7:bb:c1:07:3e:b9:36:7d: 66:eb:9a:ee:a4:8b:e9:46:6c:f5:13:32:48:f2:71: 7e:36:9e:4a:18:22:e7:e9:d4:d9:28:d0:84:0f:5d: 65:20:aa:3e:0b:8f:b5:3e:c5:e4:e3:dc:67:d3:70: c7:46:47:79:af:d0:cc:eb:7e:5d:55:4b:4c:fe:20: 96:f6:6f:df:2d:0d:6e:a2:5f:d0:6d:f5:12:e2:8b: ee:f0:75:5f:90:19:b9:8f:88:26:09:f9:ae:37:42: fe:26:46:d1:b2:65:29:12:35:67:44:ba:61:1a:98: fd:ab:ae:81:c5:fb:7d:94:25:dd:43:53:68:53:e2: 0a:f1:45:6e:b7:24:d0:32:12:90:19:4b:ec:84:3b: d3:64:5a:95:60:56:1b:a4:de:0d:c8:5a:e8:58:a5: b6:d6:0b:db:f7:92:cb:3d:aa:6d:16:73:7f:be:68: 50:b6:4f:55:c2:d8:ea:b5:b3:76:b7:2e:fc:e7:63: 30:42:8b:51:89:ad:41:ef:5d:7c:66:b1:d6:dd:64: 01:d6:5b:71:c5:c4:3d:eb:c7:99:08:13:c1:0a:37: 61:24:26:86:52:fc:7f:47:28:2a:ca:0a:fa:5c:6c: b4:1b:3a:f5:83:0c:67:c9:1e:5c:88:9d:3c:5c:ef: 77:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:85:B2:A3:F7:9F:07:31:D2:F0:4B:80:FC:24:D1:7E:6A:7E:5D:74 X509v3 Authority Key Identifier: keyid:69:3B:71:A5:B5:DA:60:54:DF:7F:9C:0D:37:9C:F5:20:C1:C8:F2:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTtxpbXaYFTff5wNN5z1IMHI8pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DB52/45F556BEF28011EA871BAD6AC4F9AE02/aTtxpbXaYFTff5wNN5z1IMHI8pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:2f:0e:28:b4:ac:14:71:4a:4b:28:93:6c:21:c8:d3:5d:c1: 74:f3:8c:28:81:bf:ec:a5:b1:75:64:24:89:83:61:bd:70:7e: 7b:5e:96:fb:63:74:27:e2:c9:86:30:7b:23:6f:7b:7b:c5:33: 97:32:09:80:bc:40:51:51:43:46:5d:3f:e0:2c:b5:2f:72:e0: f1:4c:50:ca:ac:b2:3f:e3:2d:63:df:12:b0:19:be:2b:cc:96: d1:d7:7d:f8:b1:5f:d7:6c:4c:49:26:3e:6a:22:5a:33:ce:4a: ba:4e:e0:3c:45:b9:fa:82:a3:a1:74:e6:5a:6e:26:96:af:3d: 08:fe:1d:b1:d2:18:cd:95:9c:e6:ac:11:ef:e8:21:33:68:d4: 35:de:94:73:c0:36:ad:fb:d9:6f:59:9c:d8:36:82:eb:6f:54: f2:0d:2d:ec:86:13:03:8b:63:95:ff:11:75:11:bf:36:38:71: 86:08:d1:b8:13:2e:96:7a:f5:49:e4:f4:11:af:77:c9:21:a1: 0e:dc:e7:6e:0a:4e:42:40:43:70:a8:1a:ae:b1:f7:a3:61:d4: 50:d8:63:82:ea:a1:3f:f5:1e:1e:c3:da:f4:62:5f:b1:95:c1: 7c:be:47:98:28:a3:5f:7f:4b:b6:18:ca:69:21:4d:04:64:38: 8e:8e:6f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RCNTIxMTAvBgNVBAUTKDY5M0I3MUE1QjVEQTYwNTRERjdGOUMwRDM3OUNGNTIw QzFDOEYyOTEwHhcNMjUwNzAyMjExNzU3WhcNMjUwNzA5MjExNzU3WjAYMRYwFAYD VQQDEw02ODY1YTIwNi1lN2QxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxctHrGLV57vBBz65Nn1m65rupIvpRmz1EzJI8nF+Np5KGCLn6dTZKNCED11l IKo+C4+1PsXk49xn03DHRkd5r9DM635dVUtM/iCW9m/fLQ1uol/QbfUS4ovu8HVf kBm5j4gmCfmuN0L+JkbRsmUpEjVnRLphGpj9q66Bxft9lCXdQ1NoU+IK8UVutyTQ MhKQGUvshDvTZFqVYFYbpN4NyFroWKW21gvb95LLPaptFnN/vmhQtk9VwtjqtbN2 ty7852MwQotRia1B7118ZrHW3WQB1ltxxcQ968eZCBPBCjdhJCaGUvx/Rygqygr6 XGy0Gzr1gwxnyR5ciJ08XO93/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSFsqP3 nwcx0vBLgPwk0X5qfl10MB8GA1UdIwQYMBaAFGk7caW12mBU33+cDTec9SDByPKR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REI1Mi80NUY1NTZCRUYy ODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlGVGZmNXdOTjV6MUlNSEk4 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FUdHhwYlhhWUZUZmY1d05ONXoxSU1ISThwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 REI1Mi80NUY1NTZCRUYyODAxMUVBODcxQkFENkFDNEY5QUUwMi9hVHR4cGJYYVlG VGZmNXdOTjV6MUlNSEk4cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYLw4otKwUcUpLKJNsIcjTXcF084wogb/spbF1ZCSJg2G9cH57Xpb7 Y3Qn4smGMHsjb3t7xTOXMgmAvEBRUUNGXT/gLLUvcuDxTFDKrLI/4y1j3xKwGb4r zJbR1334sV/XbExJJj5qIlozzkq6TuA8Rbn6gqOhdOZabiaWrz0I/h2x0hjNlZzm rBHv6CEzaNQ13pRzwDat+9lvWZzYNoLrb1TyDS3shhMDi2OV/xF1Eb82OHGGCNG4 Ey6WevVJ5PQRr3fJIaEO3OduCk5CQENwqBqusfejYdRQ2GOC6qE/9R4ew9r0Yl+x lcF8vkeYKKNff0u2GMppIU0EZDiOjm+s -----END CERTIFICATE-----Generated at Thu Jul 3 15:31:09 2025 by rpki-client