$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft File: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft (raw, json) Hash identifier: 1NtkhJL+c5yoryXdviN8hf9/ed2mXGhJjYBqeGwla8Q= Subject key identifier: E0:D8:E1:9D:8C:24:97:24:AA:6F:38:C7:B2:A9:44:AE:7D:8F:3E:41 Authority key identifier: EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 Certificate issuer: /CN=A918D7D0/serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Certificate serial: 0C63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft Manifest number: 1468 Signing time: Sat 28 Jun 2025 18:04:34 +0000 Manifest this update: Sat 28 Jun 2025 18:04:34 +0000 Manifest next update: Sat 05 Jul 2025 18:04:34 +0000 Files and hashes: 1: 7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl (hash: HyRFxPDKt/bvccEVl2G/MRQUI7i6foKlg5GhWIWZbm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3171 (0xc63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D7D0, serialNumber=EC3B90C34886FD0928E3125461FBB4152BE99137 Validity Not Before: Jun 28 18:04:34 2025 GMT Not After : Jul 5 18:04:34 2025 GMT Subject: CN=68602eb2-3575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e1:08:e7:7e:dd:b1:e3:d3:51:bc:83:da:2b: 7d:df:8c:7d:ad:c6:16:98:94:e4:84:0c:07:c0:9c: 59:0b:ab:01:a6:15:c9:b0:f6:00:75:cc:44:b9:fc: 7c:7a:80:b0:8e:ce:b7:64:3d:ae:a1:8c:d4:db:29: e9:05:c6:55:43:98:6d:2e:aa:58:28:25:14:ae:c5: 2a:b7:b2:1f:34:42:53:1f:35:6d:ee:69:03:42:02: 6c:4b:11:fa:46:96:0d:a7:4c:11:f4:75:b8:29:26: b0:6a:c7:d1:9f:b2:19:ee:8e:60:8c:3b:7e:6c:a9: 44:ac:12:bc:6d:67:2e:78:25:b3:85:d5:d7:2f:05: d3:14:2c:88:ec:f9:ff:9a:05:e6:8d:ce:e1:1c:d6: cc:6a:de:58:81:78:37:ac:17:07:42:64:82:fe:20: 29:ce:e5:7d:5d:d6:19:d3:04:7e:af:d9:de:77:2b: 35:b9:08:31:0d:ac:f0:c6:47:6c:a9:39:c0:fb:98: d2:b7:ff:d3:d0:7c:53:5a:f3:c1:6d:90:4c:6c:24: c9:d0:90:26:1c:c4:c4:1e:8e:34:79:92:d6:a7:c7: 85:3b:c2:f7:71:7b:1e:69:16:04:68:93:f5:d0:1f: 3c:88:b4:7e:db:65:c5:3c:9c:bb:7f:31:64:cd:58: 43:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D8:E1:9D:8C:24:97:24:AA:6F:38:C7:B2:A9:44:AE:7D:8F:3E:41 X509v3 Authority Key Identifier: keyid:EC:3B:90:C3:48:86:FD:09:28:E3:12:54:61:FB:B4:15:2B:E9:91:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DuQw0iG_Qko4xJUYfu0FSvpkTc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7D0/982B2D5A008211EAB71F4A2BC4F9AE02/7DuQw0iG_Qko4xJUYfu0FSvpkTc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:95:f2:e1:b0:6c:9f:31:77:2e:87:65:3d:42:25:39:1b:8f: b9:a4:83:f2:08:df:2e:62:eb:32:8c:05:ac:a4:83:4e:16:88: d6:52:23:a9:b5:5c:e7:15:16:88:74:75:ce:26:46:96:0e:8a: d1:38:63:30:2a:96:c5:8e:d5:c9:ee:d9:60:b4:71:a0:70:1d: 78:c3:e7:3f:c4:e7:97:5d:b7:0a:fa:2a:03:94:60:69:45:bc: d8:78:53:30:06:a5:63:5c:38:70:07:57:f8:f4:d0:77:bd:77: a1:34:94:b0:7f:16:7c:fb:fd:50:95:82:dd:82:3b:ac:eb:7d: de:5f:ce:6d:77:b1:07:5e:5e:64:ae:c6:93:9a:e3:d2:4d:70: ab:73:eb:a4:64:b5:2c:5c:e0:b6:0f:97:cc:ff:d4:1b:b6:e0: ed:27:99:a0:d8:02:84:06:ff:db:57:f1:ad:33:1d:66:a0:0a: 25:4e:12:25:71:cd:0b:33:d8:81:75:63:b5:04:74:b3:0b:0b: 79:4d:5d:f1:87:fb:c3:18:51:dd:6b:79:ea:76:71:76:61:ef: e7:a2:ed:f1:0b:b6:28:8e:d4:78:3f:5b:a3:2c:1b:d0:8b:4b: 1c:bc:c3:fe:80:d8:65:a8:f6:31:87:d1:68:8e:34:96:a8:38: 0a:08:5f:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ3RDAxMTAvBgNVBAUTKEVDM0I5MEMzNDg4NkZEMDkyOEUzMTI1NDYxRkJCNDE1 MkJFOTkxMzcwHhcNMjUwNjI4MTgwNDM0WhcNMjUwNzA1MTgwNDM0WjAYMRYwFAYD VQQDEw02ODYwMmViMi0zNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2OEI537dsePTUbyD2it934x9rcYWmJTkhAwHwJxZC6sBphXJsPYAdcxEufx8 eoCwjs63ZD2uoYzU2ynpBcZVQ5htLqpYKCUUrsUqt7IfNEJTHzVt7mkDQgJsSxH6 RpYNp0wR9HW4KSawasfRn7IZ7o5gjDt+bKlErBK8bWcueCWzhdXXLwXTFCyI7Pn/ mgXmjc7hHNbMat5YgXg3rBcHQmSC/iApzuV9XdYZ0wR+r9nedys1uQgxDazwxkds qTnA+5jSt//T0HxTWvPBbZBMbCTJ0JAmHMTEHo40eZLWp8eFO8L3cXseaRYEaJP1 0B88iLR+22XFPJy7fzFkzVhDJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODY4Z2M JJckqm84x7KpRK59jz5BMB8GA1UdIwQYMBaAFOw7kMNIhv0JKOMSVGH7tBUr6ZE3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDdEMC85ODJCMkQ1QTAw ODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19Ra280eEpVWWZ1MEZTdnBr VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEdVF3MGlHX1FrbzR4SlVZZnUwRlN2cGtUYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDdEMC85ODJCMkQ1QTAwODIxMUVBQjcxRjRBMkJDNEY5QUUwMi83RHVRdzBpR19R a280eEpVWWZ1MEZTdnBrVGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPlfLhsGyfMXcuh2U9QiU5G4+5pIPyCN8uYusyjAWspINOFojWUiOp tVznFRaIdHXOJkaWDorROGMwKpbFjtXJ7tlgtHGgcB14w+c/xOeXXbcK+ioDlGBp RbzYeFMwBqVjXDhwB1f49NB3vXehNJSwfxZ8+/1QlYLdgjus633eX85td7EHXl5k rsaTmuPSTXCrc+ukZLUsXOC2D5fM/9QbtuDtJ5mg2AKEBv/bV/GtMx1moAolThIl cc0LM9iBdWO1BHSzCwt5TV3xh/vDGFHda3nqdnF2Ye/nou3xC7YojtR4P1ujLBvQ i0scvMP+gNhlqPYxh9FojjSWqDgKCF8t -----END CERTIFICATE-----Generated at Sun Jun 29 16:37:48 2025 by rpki-client