$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: LOTF1ABjm4mDsT55y1u3hIPZ9C9cII2pdK9s85YDeYs= Subject key identifier: FD:4B:AA:34:F7:72:10:89:75:F5:FF:DB:53:F3:C1:EB:EE:A7:16:E4 Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 3C Signing time: Tue 01 Jul 2025 08:17:05 +0000 Manifest this update: Tue 01 Jul 2025 08:17:05 +0000 Manifest next update: Tue 08 Jul 2025 08:17:05 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: FRgf2jAh9p53VN5PRa9qJ8xqcjYLJInVWJk4JdigGsY=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:17:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Jul 1 08:17:05 2025 GMT Not After : Jul 8 08:17:05 2025 GMT Subject: CN=68639981-71e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:fe:c0:68:b6:b2:05:90:50:0f:bc:cc:4b: a0:21:69:20:3b:0c:fa:6e:ca:0b:b5:23:45:ce:73: 85:41:5b:e4:73:93:36:e4:2c:e1:23:c4:8f:45:0d: a4:04:e8:48:72:bf:e3:6b:5f:d6:84:b9:e1:59:de: 6c:23:48:24:d7:da:1b:12:c5:8b:a2:59:ea:ac:4d: 1d:e4:30:b8:b9:f4:38:39:b5:be:de:0b:8d:68:c1: 84:ba:09:2e:a9:5c:0b:5c:23:ef:3b:d6:2e:bf:5a: b4:50:00:17:af:e8:d5:98:5b:5a:e5:1e:b9:fb:f7: b7:9f:6d:e3:a2:df:5a:71:ad:a7:82:69:e7:40:82: 0e:62:9b:1c:58:8e:4a:fd:be:c8:e4:6e:85:f4:4d: b5:3e:fc:6f:26:2d:1c:3b:31:eb:00:fa:f5:65:3b: f0:01:2f:ff:47:98:4a:b4:f1:8a:1b:a6:37:80:44: 3f:e2:d0:12:41:84:6d:cb:c2:e3:70:0c:aa:e4:cb: 91:ff:cc:9f:a7:ce:e3:5c:bc:99:12:33:d8:cb:57: 4d:e7:73:da:6a:6e:a6:af:5d:0d:73:80:c6:c7:6b: 81:25:e8:a2:f7:19:f9:64:1a:3e:11:07:df:c7:3e: 03:25:f6:b0:ce:8a:64:f1:5f:36:b1:70:ef:12:60: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:AA:34:F7:72:10:89:75:F5:FF:DB:53:F3:C1:EB:EE:A7:16:E4 X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:61:07:12:ed:db:42:99:c9:66:67:ed:88:ab:08:fc:db: 28:00:8d:65:16:00:2f:32:03:2d:11:5c:f0:f7:20:b8:99:c2: d9:1f:b4:e5:45:40:b6:82:14:5a:42:75:2a:c4:07:42:58:2a: c7:41:26:19:23:f9:c0:0b:a4:fa:d2:8a:33:f9:cd:b2:e0:55: f5:f8:87:37:f3:1b:3a:31:e2:03:a2:d5:61:1a:58:8d:0d:a4: e2:88:4f:48:66:34:cf:45:5f:e9:63:be:f1:47:d6:bf:20:11: dd:c4:b2:df:ca:92:09:40:ab:d6:d3:16:2d:58:f4:ef:d6:a6: d8:ad:f9:bf:1f:a2:f0:2f:ee:f2:5a:5a:b8:d2:93:c8:c4:91: ba:5a:58:e6:c0:b1:f7:e4:91:3d:3a:4b:49:47:fb:52:94:33: 33:34:23:9f:01:27:bb:f2:f2:e5:88:57:66:e3:92:33:83:e6: 44:8d:bb:20:ec:48:76:0b:65:ba:70:43:c1:2d:a3:81:8b:9e: ee:4e:63:58:a6:dc:33:c2:fd:3b:2f:a9:44:78:fe:6a:95:93: 72:f0:ad:1c:95:e3:88:9e:be:c9:ae:74:6a:40:57:26:33:57: 56:9a:b0:47:44:6c:58:88:cc:54:bf:23:99:15:cf:8d:46:c2: 58:7d:0c:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA3MDEwODE3MDVaFw0yNTA3MDgwODE3MDVaMBgxFjAUBgNV BAMTDTY4NjM5OTgxLTcxZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKPf7AaLayBZBQD7zMS6AhaSA7DPpuygu1I0XOc4VBW+RzkzbkLOEjxI9FDaQE 6Ehyv+NrX9aEueFZ3mwjSCTX2hsSxYuiWeqsTR3kMLi59Dg5tb7eC41owYS6CS6p XAtcI+871i6/WrRQABev6NWYW1rlHrn797efbeOi31pxraeCaedAgg5imxxYjkr9 vsjkboX0TbU+/G8mLRw7MesA+vVlO/ABL/9HmEq08YobpjeARD/i0BJBhG3LwuNw DKrky5H/zJ+nzuNcvJkSM9jLV03nc9pqbqavXQ1zgMbHa4El6KL3GflkGj4RB9/H PgMl9rDOimTxXzaxcO8SYHS7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/UuqNPdy EIl19f/bU/PB6+6nFuQwHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEwtYQcS7dtCmclmZ+2Iqwj82ygAjWUWAC8yAy0RXPD3ILiZwtkftOVF QLaCFFpCdSrEB0JYKsdBJhkj+cALpPrSijP5zbLgVfX4hzfzGzox4gOi1WEaWI0N pOKIT0hmNM9FX+ljvvFH1r8gEd3Est/KkglAq9bTFi1Y9O/Wptit+b8fovAv7vJa WrjSk8jEkbpaWObAsffkkT06S0lH+1KUMzM0I58BJ7vy8uWIV2bjkjOD5kSNuyDs SHYLZbpwQ8Eto4GLnu5OY1im3DPC/TsvqUR4/mqVk3LwrRyV44ievsmudGpAVyYz V1aasEdEbFiIzFS/I5kVz41Gwlh9DIk= -----END CERTIFICATE-----Generated at Wed Jul 2 22:45:25 2025 by rpki-client