$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: 7fnxU5SGhaPFZJABP8LlfGSOZZx6WAjEjrxGKrA3xVo= Subject key identifier: CF:14:3B:FC:5F:0D:AB:C6:03:58:73:2C:D5:75:9C:4B:AA:4A:6F:E0 Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1B04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1AFD Signing time: Wed 02 Jul 2025 16:25:12 +0000 Manifest this update: Wed 02 Jul 2025 16:25:11 +0000 Manifest next update: Wed 09 Jul 2025 16:25:11 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: 7FvHfyrEQZnUbGJ0l0CDe/iLozwLHmJnuBk4w3LPWyY=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6916 (0x1b04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: Jul 2 16:25:11 2025 GMT Not After : Jul 9 16:25:11 2025 GMT Subject: CN=68655d68-e2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a0:6a:1c:2d:ba:77:38:fb:6b:ab:b9:f2:b4: 81:ea:67:15:70:95:8f:2c:a3:bc:de:20:00:76:35: d2:c3:66:51:62:1e:84:96:00:2b:6e:4f:cb:05:e1: 9b:2f:f0:ff:f4:2d:70:17:3b:99:5f:f7:19:c0:cf: 45:20:34:67:a0:e9:5c:7c:78:e7:d5:32:98:57:0e: a9:02:0f:ae:73:56:28:55:bc:13:5c:17:69:39:14: b4:42:31:2c:3a:c7:81:39:5b:ad:34:40:68:d0:8a: 38:7a:de:57:44:ad:87:b8:7e:bb:86:13:df:81:a6: 89:7b:30:6b:f1:35:d6:df:87:cd:79:c7:40:2a:c8: a2:7b:2b:a0:80:91:5a:0b:7f:14:3d:f9:56:3c:24: c5:30:2f:dd:45:6b:75:65:94:5b:e0:ce:45:aa:1d: 54:c1:ba:b9:7b:05:90:ff:af:9c:57:ab:78:41:60: a7:07:b2:6a:5a:3e:41:a7:0d:69:07:d7:b2:38:e4: 28:f8:9d:97:a4:45:f9:eb:60:16:c2:f6:62:41:d1: de:3b:9f:61:a5:e7:af:fc:a2:30:41:23:a0:ca:58: f7:6d:48:25:fe:c3:01:34:cb:8f:c3:63:06:51:29: ef:f4:53:95:d6:88:b0:ca:fc:91:2e:5d:62:3d:09: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:14:3B:FC:5F:0D:AB:C6:03:58:73:2C:D5:75:9C:4B:AA:4A:6F:E0 X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:bd:07:56:3c:2e:d0:7f:a9:d8:62:37:1f:80:7a:16:d3:60: b9:17:f7:69:13:ac:20:ae:c6:7d:de:9f:1a:2e:6a:9f:cc:61: 41:e6:99:78:13:3c:bd:b5:1d:96:09:74:63:48:66:42:20:7c: ab:9b:8c:61:d9:80:3f:a7:37:9c:fa:9e:c9:0e:03:01:7f:a4: e0:64:ea:a9:71:d4:8e:f2:51:89:76:96:5b:96:55:87:b9:9b: c9:38:d1:3a:a3:f7:14:bb:62:37:c5:04:45:88:2d:66:3e:ac: 26:72:f5:62:7d:3a:0f:76:19:48:7a:d8:a6:94:80:dd:74:77: d0:ed:c4:98:5a:25:2a:6c:9b:0f:b4:7f:6e:50:4f:ad:24:4f: 2e:cc:ac:36:6a:7e:c5:80:8c:e6:41:25:f3:e3:ba:8c:87:de: 82:06:4a:bb:a4:e8:28:43:59:ee:ef:ec:3e:0a:94:57:53:6a: 5a:b0:1a:f6:06:a2:15:78:db:51:8a:7a:10:5b:99:f2:3a:e3: 6c:9b:5d:e4:09:ce:0c:6d:a0:ea:44:26:14:1e:f0:1e:8a:2b: 33:1c:ea:0a:a4:fb:b2:69:ae:8f:31:ef:da:a5:49:70:e8:0c: 05:25:fb:2d:d8:41:1c:83:f9:e2:bc:16:e6:a1:ca:59:da:c8: fc:e9:b8:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUwNzAyMTYyNTExWhcNMjUwNzA5MTYyNTExWjAYMRYwFAYD VQQDEw02ODY1NWQ2OC1lMmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA06BqHC26dzj7a6u58rSB6mcVcJWPLKO83iAAdjXSw2ZRYh6ElgArbk/LBeGb L/D/9C1wFzuZX/cZwM9FIDRnoOlcfHjn1TKYVw6pAg+uc1YoVbwTXBdpORS0QjEs OseBOVutNEBo0Io4et5XRK2HuH67hhPfgaaJezBr8TXW34fNecdAKsiieyuggJFa C38UPflWPCTFMC/dRWt1ZZRb4M5Fqh1Uwbq5ewWQ/6+cV6t4QWCnB7JqWj5Bpw1p B9eyOOQo+J2XpEX562AWwvZiQdHeO59hpeev/KIwQSOgylj3bUgl/sMBNMuPw2MG USnv9FOV1oiwyvyRLl1iPQn6hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8UO/xf DavGA1hzLNV1nEuqSm/gMB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkvQdWPC7Qf6nYYjcfgHoW02C5F/dpE6wgrsZ93p8aLmqfzGFB5pl4 Ezy9tR2WCXRjSGZCIHyrm4xh2YA/pzec+p7JDgMBf6TgZOqpcdSO8lGJdpZbllWH uZvJONE6o/cUu2I3xQRFiC1mPqwmcvVifToPdhlIetimlIDddHfQ7cSYWiUqbJsP tH9uUE+tJE8uzKw2an7FgIzmQSXz47qMh96CBkq7pOgoQ1nu7+w+CpRXU2pasBr2 BqIVeNtRinoQW5nyOuNsm13kCc4MbaDqRCYUHvAeiiszHOoKpPuyaa6PMe/apUlw 6AwFJfst2EEcg/nivBbmocpZ2sj86bgB -----END CERTIFICATE-----Generated at Thu Jul 3 06:26:28 2025 by rpki-client