$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: F5Err4qJYymkhSNFN2uIUWo8Y5YKvmghlT8ww3YCoHk= Subject key identifier: 27:85:49:C6:EC:A8:F7:E0:A0:16:A5:06:CD:A3:C4:A3:81:EA:B2:C4 Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0345 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 033F Signing time: Tue 01 Jul 2025 01:39:40 +0000 Manifest this update: Tue 01 Jul 2025 01:39:40 +0000 Manifest next update: Tue 08 Jul 2025 01:39:40 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: nS1OYV2HOC9CWNxpeevEjfdTFCKcuHXCK2G4I3WRbno=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: z4vQqgZhpqZXS+GtFlO73cYGprnonSTGtg6l7U/hdMg=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: m3FNoE8x/APaB37yvI31cS5HnGrXCqQFoxWPhTaz/1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 01:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 837 (0x345) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Jul 1 01:39:40 2025 GMT Not After : Jul 8 01:39:40 2025 GMT Subject: CN=68633c5c-f64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:f3:48:23:a9:94:f1:5c:73:80:55:14:5f: 92:91:00:a7:32:91:d5:66:38:91:c6:5b:09:7d:10: 07:b6:c3:c7:f9:11:80:70:72:4d:9c:07:f0:ac:df: 6e:b2:9e:92:1c:ff:a7:85:43:de:58:3e:72:83:d5: 04:d5:9a:82:42:06:0b:08:f7:84:25:df:db:b9:07: 51:f9:ab:19:19:3f:19:26:a7:e3:76:3d:b3:7f:5c: 03:a0:59:93:69:67:33:b3:00:e9:3a:6a:3b:a9:76: 93:14:de:e7:45:ef:d2:a4:25:87:32:69:a3:96:74: 38:6d:c3:98:0c:60:db:7b:40:ee:63:2c:a4:58:d4: 2d:a7:90:24:28:3f:0b:24:db:4f:0d:7c:90:9f:f9: 27:78:03:75:98:8a:24:ef:79:36:2c:6e:60:19:29: 23:cf:03:9c:ad:ee:6c:9c:19:cf:c1:c6:4f:70:56: 79:a4:aa:3a:e8:ae:67:b8:cd:12:4c:4b:87:51:de: 91:5a:22:30:52:e3:da:a4:15:11:9c:bc:36:e4:a8: af:d9:49:0c:33:cb:14:1b:41:49:f1:22:1f:8a:1f: 9e:43:28:9a:5b:47:b2:14:6d:cc:0a:be:bd:cc:6f: b9:9a:62:24:a6:1e:ad:f5:75:59:15:20:a3:c5:e3: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:85:49:C6:EC:A8:F7:E0:A0:16:A5:06:CD:A3:C4:A3:81:EA:B2:C4 X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:50:54:f9:82:a9:2c:48:37:eb:62:58:3a:85:dc:00:9e:df: d1:c9:92:73:5c:e3:9e:8d:b7:fe:fa:71:98:32:85:88:1d:39: 3c:cc:8a:b6:61:b5:25:42:81:f6:6e:e3:38:ae:1d:c2:70:ea: 4b:1e:e2:4b:40:e2:97:a1:bd:b0:d9:4f:15:ac:09:50:13:79: db:0b:6f:8e:b8:f9:90:6b:68:b4:11:e0:ba:32:6f:5e:ae:91: fd:7d:9f:90:47:6f:25:e3:f0:d7:ae:57:a3:af:8e:65:5c:b3: a1:d9:16:9c:35:dc:b8:4e:a6:d3:b4:ef:1b:ad:3b:79:66:12: 97:f7:50:c4:84:1b:ca:67:be:1c:ad:71:c0:9b:c5:69:32:7b: f3:ef:aa:fa:0b:45:4f:64:c2:7f:8a:85:d7:79:58:72:a0:bf: d9:db:c9:0e:95:f9:d8:bd:47:7b:7b:7f:f5:e9:13:8e:8e:51: 3a:49:20:64:18:5d:a7:79:d6:fb:81:bc:28:11:2e:4c:fe:16: 45:28:1b:11:f7:61:d7:7f:80:bd:59:bb:57:ae:cc:fa:39:9a: 5b:1c:41:6e:d8:61:80:4c:eb:3e:42:e5:03:de:52:76:04:ff: e0:2b:71:51:fe:bf:ae:7b:a9:ed:80:75:61:d8:f6:4f:8e:c5: 26:2c:5f:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwNzAxMDEzOTQwWhcNMjUwNzA4MDEzOTQwWjAYMRYwFAYD VQQDEw02ODYzM2M1Yy1mNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxP/zSCOplPFcc4BVFF+SkQCnMpHVZjiRxlsJfRAHtsPH+RGAcHJNnAfwrN9u sp6SHP+nhUPeWD5yg9UE1ZqCQgYLCPeEJd/buQdR+asZGT8ZJqfjdj2zf1wDoFmT aWczswDpOmo7qXaTFN7nRe/SpCWHMmmjlnQ4bcOYDGDbe0DuYyykWNQtp5AkKD8L JNtPDXyQn/kneAN1mIok73k2LG5gGSkjzwOcre5snBnPwcZPcFZ5pKo66K5nuM0S TEuHUd6RWiIwUuPapBURnLw25Kiv2UkMM8sUG0FJ8SIfih+eQyiaW0eyFG3MCr69 zG+5mmIkph6t9XVZFSCjxeNX1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeFScbs qPfgoBalBs2jxKOB6rLEMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMUFT5gqksSDfrYlg6hdwAnt/RyZJzXOOejbf++nGYMoWIHTk8zIq2 YbUlQoH2buM4rh3CcOpLHuJLQOKXob2w2U8VrAlQE3nbC2+OuPmQa2i0EeC6Mm9e rpH9fZ+QR28l4/DXrlejr45lXLOh2RacNdy4TqbTtO8brTt5ZhKX91DEhBvKZ74c rXHAm8VpMnvz76r6C0VPZMJ/ioXXeVhyoL/Z28kOlfnYvUd7e3/16ROOjlE6SSBk GF2nedb7gbwoES5M/hZFKBsR92HXf4C9WbtXrsz6OZpbHEFu2GGATOs+QuUD3lJ2 BP/gK3FR/r+ue6ntgHVh2PZPjsUmLF+5 -----END CERTIFICATE-----Generated at Thu Jul 3 00:50:50 2025 by rpki-client