$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: KfUE5VJkz7qB0apDStOsp7of4lc2p3sSZqCILKuj3yQ= Subject key identifier: 55:BA:24:24:8C:CD:AC:40:BF:CC:2D:FD:AD:6E:38:12:59:2F:26:03 Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01D6 Signing time: Thu 03 Jul 2025 02:52:37 +0000 Manifest this update: Thu 03 Jul 2025 02:52:37 +0000 Manifest next update: Thu 10 Jul 2025 02:52:37 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: NfglR9ly1OZTL1yF6nH+zhIyzQ8XjCC8PI388FHN4aw=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Jul 3 02:52:37 2025 GMT Not After : Jul 10 02:52:37 2025 GMT Subject: CN=6865f075-4b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:96:7f:87:eb:4b:7b:76:ab:fb:e0:0d:0a:dd: c9:01:da:08:da:8a:35:18:d0:c3:7f:09:71:a1:67: a8:64:33:59:15:1b:55:94:95:96:61:5f:35:3d:84: 53:a4:c7:d4:bc:f9:d4:cf:f1:23:6d:43:9d:ab:70: cd:5b:81:4a:d8:5c:20:d7:f8:37:3e:d4:25:f0:1b: 1c:49:86:cf:52:1c:44:d0:14:31:de:5f:7e:a7:c8: c3:8f:cb:c5:dd:9e:57:5b:a7:87:1f:f2:ab:1f:e0: 64:3d:82:b3:ce:3a:0a:c2:f9:f1:be:b3:8b:f7:73: fb:40:0c:b4:ff:3c:44:9e:b3:a2:ee:a2:99:05:cd: f3:ea:4f:66:5b:6c:ab:57:32:ce:b7:69:7d:0a:62: 4d:4d:6f:22:73:41:59:ff:9c:b1:81:2b:38:bd:0e: 1a:c8:8c:d6:a5:76:5f:15:bc:24:03:2c:29:86:41: 74:6f:26:50:67:13:04:c6:54:94:0d:1f:75:6f:f3: a0:9a:50:26:c0:af:3e:b9:cd:6a:79:28:d9:d6:66: 14:4b:6d:00:34:c3:94:39:01:31:9b:d1:c7:9b:4d: 2d:51:c4:32:fc:13:dc:47:eb:81:92:70:24:36:36: 49:fb:d4:d9:58:76:c0:e0:b9:43:7f:5b:5e:96:da: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BA:24:24:8C:CD:AC:40:BF:CC:2D:FD:AD:6E:38:12:59:2F:26:03 X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ca:bf:41:f5:6e:54:d1:0e:f7:10:1e:99:a9:b6:93:78:d3: c8:f9:83:3e:25:a8:c5:72:9c:84:5c:7d:34:46:4d:11:f3:11: b3:4f:c7:4a:02:a0:e1:08:3c:d0:ae:8e:72:31:5f:8c:ff:7a: 2a:da:5e:8b:4b:00:cc:a1:b0:50:19:f1:d7:92:48:bd:c7:ef: d4:ca:15:5c:7d:3a:34:53:eb:33:ec:98:29:9a:89:3d:7b:c9: 62:f3:a5:a4:0a:a6:47:3f:a6:41:2f:fd:b3:20:9c:a0:6a:d9: 7f:e1:95:9a:28:31:76:b3:8e:b0:26:87:15:f6:ff:74:4c:fa: 91:2e:53:d5:fd:d4:2e:34:de:bd:18:a6:b7:57:8c:e8:c9:dc: 5c:06:3e:b5:2a:3c:f7:20:df:5c:33:5a:97:4e:db:45:df:dd: c0:fe:a3:cd:6c:7d:22:a7:2e:03:40:24:53:9f:33:3f:1f:60: c9:16:12:13:7b:39:7c:73:eb:88:e4:0b:7c:3f:26:52:cd:6b: 93:f0:83:db:dc:d8:11:73:8d:a2:dd:46:12:30:c3:17:03:f6: 2f:d9:59:f5:34:73:5f:4e:d8:0b:30:d8:a7:f4:92:86:f7:97: 4b:5c:24:37:07:11:cd:70:b7:87:27:56:8a:3c:82:d7:01:e9: 84:82:c6:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNzAzMDI1MjM3WhcNMjUwNzEwMDI1MjM3WjAYMRYwFAYD VQQDEw02ODY1ZjA3NS00YjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5Z/h+tLe3ar++ANCt3JAdoI2oo1GNDDfwlxoWeoZDNZFRtVlJWWYV81PYRT pMfUvPnUz/EjbUOdq3DNW4FK2Fwg1/g3PtQl8BscSYbPUhxE0BQx3l9+p8jDj8vF 3Z5XW6eHH/KrH+BkPYKzzjoKwvnxvrOL93P7QAy0/zxEnrOi7qKZBc3z6k9mW2yr VzLOt2l9CmJNTW8ic0FZ/5yxgSs4vQ4ayIzWpXZfFbwkAywphkF0byZQZxMExlSU DR91b/OgmlAmwK8+uc1qeSjZ1mYUS20ANMOUOQExm9HHm00tUcQy/BPcR+uBknAk NjZJ+9TZWHbA4LlDf1teltqtBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFW6JCSM zaxAv8wt/a1uOBJZLyYDMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+yr9B9W5U0Q73EB6ZqbaTeNPI+YM+JajFcpyEXH00Rk0R8xGzT8dK AqDhCDzQro5yMV+M/3oq2l6LSwDMobBQGfHXkki9x+/UyhVcfTo0U+sz7Jgpmok9 e8li86WkCqZHP6ZBL/2zIJygatl/4ZWaKDF2s46wJocV9v90TPqRLlPV/dQuNN69 GKa3V4zoydxcBj61Kjz3IN9cM1qXTttF393A/qPNbH0ipy4DQCRTnzM/H2DJFhIT ezl8c+uI5At8PyZSzWuT8IPb3NgRc42i3UYSMMMXA/Yv2Vn1NHNfTtgLMNin9JKG 95dLXCQ3BxHNcLeHJ1aKPILXAemEgsZ2 -----END CERTIFICATE-----Generated at Thu Jul 3 08:13:58 2025 by rpki-client