$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: hLzkV8xCEwzppWknoC2LvtSCTHmhC07Jy6a6pwHx3q4= Subject key identifier: B1:A8:FA:CF:0A:E6:30:AA:2A:BD:67:11:D2:6D:99:D6:CF:3E:A9:0D Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 067B Signing time: Mon 30 Jun 2025 22:38:49 +0000 Manifest this update: Mon 30 Jun 2025 22:38:49 +0000 Manifest next update: Mon 07 Jul 2025 22:38:49 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: 0jGjGGLPh2QzOOxjDytaLNwEBAJ/yaEvAW8Zp5BWdTE=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Jun 30 22:38:49 2025 GMT Not After : Jul 7 22:38:49 2025 GMT Subject: CN=686311f9-da88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5f:27:8c:16:9e:23:a1:8a:9f:9f:45:a1:17: b8:eb:ef:37:d3:1a:70:d3:59:fb:59:1e:25:4c:49: a3:b2:08:a1:f9:91:f2:9a:9c:81:2f:a2:db:d5:9d: ce:73:d9:96:2a:b8:2c:08:fe:3d:7f:b3:2a:6e:30: 1c:4f:38:62:a2:7d:1a:d4:79:d1:27:db:b8:d8:f1: 47:2d:b9:9d:11:f5:d2:08:24:35:7b:57:c9:cb:02: ec:dc:9f:f3:4c:7e:7e:f0:55:67:ad:5f:fd:df:04: f9:b7:fe:ab:fa:a7:9d:d0:2a:af:dd:66:ab:3b:c4: 6c:54:eb:31:f9:9f:bf:d1:01:6e:73:97:55:d4:ec: cf:dc:68:8f:82:2f:b1:fb:66:f2:7b:a3:55:fc:4d: 3c:cc:73:40:d4:d1:9b:14:c0:4b:b8:f8:7a:f8:6f: e7:0d:82:61:ee:8f:97:bc:56:b2:f9:da:60:7f:64: d7:3a:3b:54:64:bc:af:b4:f5:64:50:07:f3:ae:33: 2a:80:7f:6d:89:db:8e:8c:75:ad:87:3e:cd:8e:2e: 68:b9:fe:7b:5b:9a:2e:05:83:80:ce:a3:a1:a4:1e: ee:f5:dd:a6:07:90:fc:50:a7:b0:cb:1f:96:62:d4: 84:46:37:e2:65:f0:c8:d8:93:3f:41:56:8a:3b:42: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A8:FA:CF:0A:E6:30:AA:2A:BD:67:11:D2:6D:99:D6:CF:3E:A9:0D X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:2e:d8:b5:3c:80:03:bb:13:27:2e:29:c3:d5:45:5b:6a:32: 27:f6:24:bb:fc:4e:c9:ee:7b:d3:9f:46:88:ed:61:31:f1:01: e5:79:11:a1:47:42:cd:8e:95:7f:db:25:a7:1e:88:d0:df:a7: 5f:c5:0c:15:28:9e:08:74:34:43:b9:06:36:fa:b4:f1:ed:29: d1:50:80:70:c7:7e:7e:3c:47:10:59:8a:74:d4:5f:c3:11:b6: 47:cb:2c:a4:0d:b9:c9:cc:cc:5c:e1:1f:bf:2b:91:43:3e:3e: ef:01:3c:f3:6c:91:b2:f9:4d:27:cd:32:aa:87:3a:6f:cf:6e: 5f:ea:ce:6c:45:e6:70:12:51:4e:c2:f6:38:b8:07:a6:d4:21: 1a:21:25:fc:1b:ae:70:4a:ad:e2:82:52:42:a3:0e:bd:e1:11: 9e:df:ca:0b:5b:cb:ef:4a:95:cc:1c:3a:76:2d:de:1c:cf:2e: 6c:7a:68:6d:a0:fc:93:2e:ac:67:fd:6a:a7:20:83:d7:4a:e2: 7f:b2:38:19:ec:eb:b7:33:68:5b:86:6d:5f:91:61:c0:d6:2e: 52:1f:8d:e8:71:61:1e:22:9a:1b:25:81:ad:b6:fa:aa:96:c5: ca:7b:2d:f4:c5:3b:3b:39:a4:11:5b:af:4b:88:5a:c2:dc:56: c5:a1:21:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUwNjMwMjIzODQ5WhcNMjUwNzA3MjIzODQ5WjAYMRYwFAYD VQQDEw02ODYzMTFmOS1kYTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl8njBaeI6GKn59FoRe46+830xpw01n7WR4lTEmjsgih+ZHympyBL6Lb1Z3O c9mWKrgsCP49f7MqbjAcTzhion0a1HnRJ9u42PFHLbmdEfXSCCQ1e1fJywLs3J/z TH5+8FVnrV/93wT5t/6r+qed0Cqv3WarO8RsVOsx+Z+/0QFuc5dV1OzP3GiPgi+x +2bye6NV/E08zHNA1NGbFMBLuPh6+G/nDYJh7o+XvFay+dpgf2TXOjtUZLyvtPVk UAfzrjMqgH9tiduOjHWthz7Nji5ouf57W5ouBYOAzqOhpB7u9d2mB5D8UKewyx+W YtSERjfiZfDI2JM/QVaKO0LP1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLGo+s8K 5jCqKr1nEdJtmdbPPqkNMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvLti1PIADuxMnLinD1UVbajIn9iS7/E7J7nvTn0aI7WEx8QHleRGh R0LNjpV/2yWnHojQ36dfxQwVKJ4IdDRDuQY2+rTx7SnRUIBwx35+PEcQWYp01F/D EbZHyyykDbnJzMxc4R+/K5FDPj7vATzzbJGy+U0nzTKqhzpvz25f6s5sReZwElFO wvY4uAem1CEaISX8G65wSq3iglJCow694RGe38oLW8vvSpXMHDp2Ld4czy5semht oPyTLqxn/WqnIIPXSuJ/sjgZ7Ou3M2hbhm1fkWHA1i5SH43ocWEeIpobJYGttvqq lsXKey30xTs7OaQRW69LiFrC3FbFoSEN -----END CERTIFICATE-----Generated at Tue Jul 1 17:07:33 2025 by rpki-client