$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: PVMUpxOLqWMivOZSSQ7SU4etP7HGM4hYqDH1BEC3vv0= Subject key identifier: CF:1F:75:8A:F9:86:1A:F5:AA:48:B4:6E:3B:E1:6C:30:CC:DF:09:1B Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 04E8 Signing time: Wed 02 Jul 2025 15:29:49 +0000 Manifest this update: Wed 02 Jul 2025 15:29:49 +0000 Manifest next update: Wed 09 Jul 2025 15:29:49 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: ko0tyr2g9ejo2fDXahD6CAFnR+rUSmh6elS6NarPs2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:29:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Jul 2 15:29:49 2025 GMT Not After : Jul 9 15:29:49 2025 GMT Subject: CN=6865506d-4570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bf:ee:0d:71:f1:5e:1f:04:d4:01:d2:0e:64: a8:82:77:49:0b:15:3d:97:cf:42:48:4d:95:ea:16: 17:da:c0:4b:23:61:9d:f3:74:cb:8a:6a:13:6d:f2: 62:e7:02:5e:67:62:08:68:98:9d:9f:93:b9:3f:ec: a4:e9:92:58:34:b5:a1:e3:f8:9d:40:87:aa:8b:18: cf:f8:b8:89:cc:0a:d5:06:e2:59:6e:c8:25:1e:e9: 04:59:32:d2:74:dc:91:d4:93:4f:fe:57:ae:fc:d1: 56:cf:6e:6d:eb:5f:a7:34:82:32:b2:05:05:cc:55: ac:23:49:2a:b7:cd:cb:38:bc:1d:89:60:f6:be:61: e6:c5:c3:41:80:71:de:05:fd:96:e1:70:fd:1e:16: a0:f8:43:62:8b:af:27:04:92:ec:6c:40:87:16:2b: ad:c9:14:f9:5a:c7:56:d0:77:05:3c:d2:18:37:1e: 0e:ad:06:cf:f1:44:2b:4e:0a:20:cf:4f:4e:ef:28: a5:56:bd:c0:a4:b0:5a:70:11:f2:92:a0:da:fd:5c: 62:4e:76:7a:64:6e:6d:0d:65:98:e7:1d:ce:c2:71: cb:79:14:00:0d:b8:11:fb:a9:25:ae:f7:98:00:7f: 97:bd:5f:38:88:c0:75:62:fb:bf:85:2d:90:ed:65: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:75:8A:F9:86:1A:F5:AA:48:B4:6E:3B:E1:6C:30:CC:DF:09:1B X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a4:ce:ab:8a:1c:cd:aa:5e:3d:17:53:f8:fb:ad:18:89:9a: d9:9f:83:f6:5a:14:59:24:1e:a3:4b:ed:aa:cb:4e:c0:f0:dc: 7a:03:87:ae:19:ef:34:ce:67:3d:3d:66:81:07:38:34:b5:94: ab:5e:8a:21:f8:ce:dd:10:ad:9d:ec:1b:fe:67:26:f9:dd:4c: 18:54:e9:22:7b:48:07:72:8e:4c:f7:44:93:92:3e:d9:5e:c0: d5:90:dc:f6:13:35:9d:06:07:2e:76:43:6a:68:e6:b1:b3:63: 75:de:cf:40:fa:de:96:47:21:5c:91:b5:b1:3f:4c:03:cb:13: 52:61:ec:f4:dd:73:5a:a3:17:2e:45:01:4d:43:d2:65:ec:89: 0a:9f:e4:3c:c0:44:e5:79:b1:f0:5b:ab:cf:42:24:59:73:b3: e8:2e:b6:af:47:83:38:0b:eb:f4:b6:dc:41:6a:fa:ef:2e:11: 53:c8:8c:1f:f2:ab:4a:b5:78:96:49:65:a1:4e:38:bf:0c:c2: 73:ab:be:b2:39:67:ae:5d:8a:71:b5:d5:55:28:9c:d1:71:63: 1a:77:a9:1b:1c:40:c5:8f:8f:70:22:5a:35:d3:5e:9a:6d:41: f3:09:11:11:a2:a9:59:ce:83:9c:a6:c3:2d:ee:57:1d:36:0f: b2:52:e9:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUwNzAyMTUyOTQ5WhcNMjUwNzA5MTUyOTQ5WjAYMRYwFAYD VQQDEw02ODY1NTA2ZC00NTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7/uDXHxXh8E1AHSDmSogndJCxU9l89CSE2V6hYX2sBLI2Gd83TLimoTbfJi 5wJeZ2IIaJidn5O5P+yk6ZJYNLWh4/idQIeqixjP+LiJzArVBuJZbsglHukEWTLS dNyR1JNP/leu/NFWz25t61+nNIIysgUFzFWsI0kqt83LOLwdiWD2vmHmxcNBgHHe Bf2W4XD9Hhag+ENii68nBJLsbECHFiutyRT5WsdW0HcFPNIYNx4OrQbP8UQrTgog z09O7yilVr3ApLBacBHykqDa/VxiTnZ6ZG5tDWWY5x3OwnHLeRQADbgR+6klrveY AH+XvV84iMB1Yvu/hS2Q7WUIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8fdYr5 hhr1qki0bjvhbDDM3wkbMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTpM6rihzNql49F1P4+60YiZrZn4P2WhRZJB6jS+2qy07A8Nx6A4eu Ge80zmc9PWaBBzg0tZSrXooh+M7dEK2d7Bv+Zyb53UwYVOkie0gHco5M90STkj7Z XsDVkNz2EzWdBgcudkNqaOaxs2N13s9A+t6WRyFckbWxP0wDyxNSYez03XNaoxcu RQFNQ9Jl7IkKn+Q8wETlebHwW6vPQiRZc7PoLravR4M4C+v0ttxBavrvLhFTyIwf 8qtKtXiWSWWhTji/DMJzq76yOWeuXYpxtdVVKJzRcWMad6kbHEDFj49wIlo1016a bUHzCRERoqlZzoOcpsMt7lcdNg+yUuks -----END CERTIFICATE-----Generated at Fri Jul 4 10:03:47 2025 by rpki-client