$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: P0W6MdA8rwcDdhCeq8Sj4P0wIHGx9jVg3AzK/NS//c0= Subject key identifier: 75:6E:FB:7B:56:82:0E:9E:8E:B4:34:D7:CB:83:7D:53:46:63:E2:6D Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 0483 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0478 Signing time: Tue 01 Jul 2025 00:39:08 +0000 Manifest this update: Tue 01 Jul 2025 00:39:07 +0000 Manifest next update: Tue 08 Jul 2025 00:39:07 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: 6ubKBiE1/LThcrs+4vtMvvcorFa+l1cZ3Z/76MmXUvI=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 00:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1155 (0x483) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: Jul 1 00:39:07 2025 GMT Not After : Jul 8 00:39:07 2025 GMT Subject: CN=68632e2c-62d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:73:d9:49:df:d1:48:57:39:05:f9:d1:f7: 61:da:f8:b0:57:c5:51:6b:1c:e7:57:85:e6:a2:ee: 5f:07:3d:9c:69:0e:5c:b3:1d:48:22:47:cb:00:e5: 09:00:5d:94:45:89:20:c3:94:13:03:49:cb:ac:98: 36:6c:0c:92:d1:02:fe:bf:c9:eb:66:08:f9:df:b4: 57:fa:b2:ce:8c:ca:7a:31:90:d1:b0:95:f6:9f:ac: c3:67:cc:ac:0c:54:b9:05:72:da:cb:45:9f:d3:a2: 4b:b1:0e:54:1a:ab:1c:de:80:3f:54:5a:5d:c9:ed: 3b:e0:9d:9a:ca:76:a2:ba:11:01:4f:23:15:25:3a: 4a:10:19:b9:ea:ba:46:6b:72:38:ee:be:1d:d6:1a: 02:d0:d0:80:71:4d:e8:62:b3:db:4f:9e:22:16:8a: 4d:38:ce:3b:98:5b:e4:f4:1f:5e:e9:33:73:a2:60: 28:13:98:04:e0:c6:73:c1:5c:28:45:5a:40:69:6d: 8b:7d:11:bb:1c:b6:4a:36:9a:56:f0:1c:d3:7d:9f: 7f:84:d4:67:b9:c2:f4:ed:fc:11:f0:17:d7:c7:bf: c8:63:ac:fe:83:bc:02:a3:20:29:55:b5:3a:fc:49: 92:70:cc:f7:ca:f6:cf:a1:8a:e1:42:8b:d7:cf:c2: f9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:6E:FB:7B:56:82:0E:9E:8E:B4:34:D7:CB:83:7D:53:46:63:E2:6D X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:89:58:e8:4c:ac:b3:0e:b3:63:94:60:a5:e3:53:03:20:85: 63:0e:00:4e:2c:5b:c4:b1:1f:15:c7:54:d0:4f:41:6f:15:14: 54:c8:47:83:43:84:fd:33:c1:a3:87:6d:16:3b:fc:70:d3:f8: ff:ba:c7:c0:1a:73:ef:22:91:f7:ad:fe:c4:ba:78:07:36:7c: fd:d6:f7:c5:04:82:51:1f:2a:92:44:e9:03:74:20:38:a7:75: 4a:e6:bf:07:cb:84:56:8b:f1:a4:a7:51:05:83:4d:58:b9:a6: 1f:22:65:0c:07:f3:7c:2a:d8:a9:a8:4f:49:b4:f6:94:ab:ce: 45:29:fd:db:29:65:9d:54:c8:45:00:b3:e5:e9:b0:cc:7c:ee: 3f:8d:ee:76:84:e2:d3:29:32:c4:37:33:fc:14:f8:80:22:ab: 97:33:43:c6:f2:49:98:b2:53:5d:80:26:c9:cd:24:0a:4c:57: bf:88:5e:3a:b1:0e:86:d8:71:89:31:71:4a:34:75:04:b7:03: 27:89:d1:ef:01:a9:21:08:fc:89:f3:cb:d9:79:77:a1:a2:41: a6:92:82:ed:13:04:51:5a:f6:11:fa:8e:a4:ee:db:ba:7f:6b: 4a:7c:2e:39:c6:5e:45:13:2d:e6:47:a1:5c:0e:78:98:f5:2f: 28:24:2b:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUwNzAxMDAzOTA3WhcNMjUwNzA4MDAzOTA3WjAYMRYwFAYD VQQDEw02ODYzMmUyYy02MmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bJz2Unf0UhXOQX50fdh2viwV8VRaxznV4Xmou5fBz2caQ5csx1IIkfLAOUJ AF2URYkgw5QTA0nLrJg2bAyS0QL+v8nrZgj537RX+rLOjMp6MZDRsJX2n6zDZ8ys DFS5BXLay0Wf06JLsQ5UGqsc3oA/VFpdye074J2aynaiuhEBTyMVJTpKEBm56rpG a3I47r4d1hoC0NCAcU3oYrPbT54iFopNOM47mFvk9B9e6TNzomAoE5gE4MZzwVwo RVpAaW2LfRG7HLZKNppW8BzTfZ9/hNRnucL07fwR8BfXx7/IY6z+g7wCoyApVbU6 /EmScMz3yvbPoYrhQovXz8L5EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHVu+3tW gg6ejrQ018uDfVNGY+JtMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQiVjoTKyzDrNjlGCl41MDIIVjDgBOLFvEsR8Vx1TQT0FvFRRUyEeD Q4T9M8Gjh20WO/xw0/j/usfAGnPvIpH3rf7EungHNnz91vfFBIJRHyqSROkDdCA4 p3VK5r8Hy4RWi/Gkp1EFg01YuaYfImUMB/N8KtipqE9JtPaUq85FKf3bKWWdVMhF ALPl6bDMfO4/je52hOLTKTLENzP8FPiAIquXM0PG8kmYslNdgCbJzSQKTFe/iF46 sQ6G2HGJMXFKNHUEtwMnidHvAakhCPyJ88vZeXehokGmkoLtEwRRWvYR+o6k7tu6 f2tKfC45xl5FEy3mR6FcDniY9S8oJCu2 -----END CERTIFICATE-----Generated at Wed Jul 2 23:24:38 2025 by rpki-client