$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: D4uA5DRvdBu/AK/IKAn6+nkDgQ+kwxDRR5xB/Kgsy+Y= Subject key identifier: 9D:5C:56:B3:DD:B2:C1:62:F8:02:1C:37:19:07:6F:FF:93:55:66:A4 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 01A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 019E Signing time: Sat 05 Jul 2025 03:38:23 +0000 Manifest this update: Sat 05 Jul 2025 03:38:23 +0000 Manifest next update: Sat 12 Jul 2025 03:38:23 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: Ee5bgMJE5yZZgDPQY7bZXBPdNkZiZ1kDKv4GTt5wM70=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 417 (0x1a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Jul 5 03:38:23 2025 GMT Not After : Jul 12 03:38:23 2025 GMT Subject: CN=68689e2f-fddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a8:65:eb:e9:5c:5e:40:5f:2b:91:7c:48:18: 15:64:4d:58:44:92:28:92:0d:8a:db:8a:9f:7b:66: 45:92:b5:e3:4e:19:66:34:a7:7c:5b:8d:aa:24:dc: 2e:f7:55:7e:b7:8e:45:fc:3b:ae:87:ea:20:78:e6: 4e:c9:f4:13:c0:e4:c1:50:a5:76:12:fd:bc:7f:ed: 8a:01:9c:d1:59:a7:82:3c:7e:76:85:e8:a7:3b:d1: 6b:bc:e0:ac:2c:e6:b3:a1:c8:1e:d4:d7:ae:5f:66: 26:f7:91:d9:6c:f8:70:4c:8b:4e:37:a5:79:1b:90: e1:2f:19:a3:7b:fe:8f:7f:13:5d:6c:37:d7:21:ee: 68:77:10:c1:59:fb:46:b4:51:63:0f:3e:d7:f6:62: 38:ba:23:52:49:bd:f4:b5:49:38:33:c5:f7:3e:dd: d0:47:5d:f2:60:f8:17:d8:18:b5:e0:db:dd:2f:ea: ac:e6:97:db:48:53:c5:12:1b:96:28:ee:06:54:14: 0f:0f:a0:2e:e2:f9:86:99:f2:36:2c:c0:0d:b7:e7: 89:15:86:ed:07:6e:26:31:dc:93:a5:bf:6d:fb:05: 7e:56:7e:98:c1:89:81:90:87:93:7a:02:f3:f0:9f: 87:28:75:d1:9c:4c:03:0c:bb:d2:d2:18:6a:01:62: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5C:56:B3:DD:B2:C1:62:F8:02:1C:37:19:07:6F:FF:93:55:66:A4 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8f:0f:36:47:09:7b:d5:ba:67:a7:5a:ac:2c:af:64:eb:ee: ad:a7:60:a4:0e:bf:0c:0f:d3:ab:c6:75:17:03:0f:36:c5:2a: 15:97:27:1d:d8:3e:c7:ff:1a:5a:2c:59:25:0d:25:ec:c2:77: da:00:1a:89:2c:2c:ae:1c:32:cc:b6:cd:a8:86:71:78:23:90: ac:4b:24:ef:b5:c6:da:c2:4a:78:64:61:01:95:07:08:d6:ea: 72:e5:70:00:f1:50:88:a5:71:54:1c:55:37:77:02:a4:50:2b: cf:11:d4:db:eb:26:09:e2:19:f9:76:cd:10:95:4b:0e:09:42: 8c:91:3a:ce:1b:b7:2f:d4:f8:be:d0:2e:6d:29:06:4a:4d:05: ab:33:90:c4:80:6b:aa:03:99:3e:00:68:bf:58:9c:2a:f4:76: 23:be:14:14:79:7a:d7:f3:db:a0:d5:cf:bc:62:a9:66:3b:b5: d7:54:bb:26:a0:52:98:7e:d0:ca:88:fd:20:e1:66:3a:14:20: bf:ac:51:ea:83:7f:40:7b:eb:e0:6d:66:7b:42:94:95:cd:7a: 19:40:2a:9f:9d:b2:c2:0d:55:f6:59:39:fc:77:b6:6c:a6:5d: 5c:b6:37:64:48:98:b3:1a:a6:6a:21:c6:9c:13:20:26:6a:02: 4f:ac:55:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwNzA1MDMzODIzWhcNMjUwNzEyMDMzODIzWjAYMRYwFAYD VQQDEw02ODY4OWUyZi1mZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr6hl6+lcXkBfK5F8SBgVZE1YRJIokg2K24qfe2ZFkrXjThlmNKd8W42qJNwu 91V+t45F/Duuh+ogeOZOyfQTwOTBUKV2Ev28f+2KAZzRWaeCPH52heinO9FrvOCs LOazocge1NeuX2Ym95HZbPhwTItON6V5G5DhLxmje/6PfxNdbDfXIe5odxDBWftG tFFjDz7X9mI4uiNSSb30tUk4M8X3Pt3QR13yYPgX2Bi14NvdL+qs5pfbSFPFEhuW KO4GVBQPD6Au4vmGmfI2LMANt+eJFYbtB24mMdyTpb9t+wV+Vn6YwYmBkIeTegLz 8J+HKHXRnEwDDLvS0hhqAWLFGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1cVrPd ssFi+AIcNxkHb/+TVWakMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMjw82Rwl71bpnp1qsLK9k6+6tp2CkDr8MD9OrxnUXAw82xSoVlycd 2D7H/xpaLFklDSXswnfaABqJLCyuHDLMts2ohnF4I5CsSyTvtcbawkp4ZGEBlQcI 1upy5XAA8VCIpXFUHFU3dwKkUCvPEdTb6yYJ4hn5ds0QlUsOCUKMkTrOG7cv1Pi+ 0C5tKQZKTQWrM5DEgGuqA5k+AGi/WJwq9HYjvhQUeXrX89ug1c+8YqlmO7XXVLsm oFKYftDKiP0g4WY6FCC/rFHqg39Ae+vgbWZ7QpSVzXoZQCqfnbLCDVX2WTn8d7Zs pl1ctjdkSJizGqZqIcacEyAmagJPrFVr -----END CERTIFICATE-----Generated at Sun Jul 6 10:35:58 2025 by rpki-client