$ rpki-client -vvf rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft File: e9TVxajvXN_HTFmgk2RZTl75-uc.mft (raw, json) Hash identifier: Y04YrCoYa9CADQ40GyzK96oK0Y3U9mXQSMt0wEkYSvw= Subject key identifier: 6B:1C:CC:0E:89:1C:30:ED:25:0C:94:D2:94:D9:23:3A:B4:51:8D:BC Authority key identifier: 7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 Certificate issuer: /CN=A919FE07/serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft Manifest number: 0BE9 Signing time: Wed 02 Jul 2025 19:16:26 +0000 Manifest this update: Wed 02 Jul 2025 19:16:26 +0000 Manifest next update: Wed 09 Jul 2025 19:16:26 +0000 Files and hashes: 1: e9TVxajvXN_HTFmgk2RZTl75-uc.crl (hash: DCimgIs0MNkYYECAMJQdBUlfPB5vnrW7PqEoO53goT8=) 2: CF834404B27511EFA614D07EC4F9AE02.roa (hash: teLLfJcXs/WVE6HHR1PJI4gLt00YbMNATiTLdmWgtzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:16:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FE07, serialNumber=7BD4D5C5A8EF5CDFC74C59A09364594E5EF9FAE7 Validity Not Before: Jul 2 19:16:26 2025 GMT Not After : Jul 9 19:16:26 2025 GMT Subject: CN=6865858a-56e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:cb:20:27:02:49:fe:a1:c7:0c:f2:78:66: d3:f9:49:ff:0f:2a:61:ad:a8:85:d0:f0:35:14:3b: 90:13:f0:c9:cf:66:7d:e1:8b:0e:4a:d8:04:b5:97: b4:4c:47:3b:e9:e5:6c:b7:d1:27:99:13:f7:c5:39: cc:21:42:77:a1:c4:e4:43:97:fa:f0:bf:a6:8b:0a: 2e:75:89:85:94:74:0a:e9:5e:52:65:ed:92:08:21: 35:48:10:c8:3b:96:1b:72:1f:2c:84:e8:7f:a2:99: 07:2b:99:41:9a:aa:39:11:78:28:fb:d6:47:92:09: bf:92:59:e7:7f:04:4d:49:82:4f:3a:8d:2a:a6:29: 12:99:6b:32:5e:4a:17:34:9d:cc:5c:0d:12:6a:c1: 3a:4a:ad:23:a4:a7:2d:34:df:31:e1:52:3d:a3:03: e2:19:e6:95:55:18:3f:25:be:c7:b6:5c:49:a4:4d: 54:98:41:d7:d3:4e:94:fc:fe:54:31:fc:11:52:14: 43:80:04:ff:82:db:3f:e3:d3:8d:4f:8e:30:11:cd: 83:f0:f9:a1:3e:de:43:c9:8b:e8:08:32:93:79:14: 16:f1:fe:4e:95:3f:45:20:b7:8f:a7:48:fa:38:d2: 9e:c0:83:85:ce:b2:3a:d5:23:b6:82:3b:8a:95:7b: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:CC:0E:89:1C:30:ED:25:0C:94:D2:94:D9:23:3A:B4:51:8D:BC X509v3 Authority Key Identifier: keyid:7B:D4:D5:C5:A8:EF:5C:DF:C7:4C:59:A0:93:64:59:4E:5E:F9:FA:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e9TVxajvXN_HTFmgk2RZTl75-uc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FE07/A16A88DA306A11EA998C8F30C4F9AE02/e9TVxajvXN_HTFmgk2RZTl75-uc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d1:5f:4d:90:a9:a6:a5:7d:dd:fe:82:3b:90:39:cb:7a:97: a4:51:9a:7b:b7:1a:96:e8:2c:66:b0:0f:3d:8f:92:d1:77:50: 39:85:ec:53:45:3c:ca:14:be:fb:3a:f6:20:a4:1d:d6:7c:7f: 4e:db:50:63:d9:ee:4f:14:b6:ea:64:8d:8f:e6:a1:c3:60:c9: 4e:4f:06:e3:ec:87:8c:d6:7c:cf:90:d7:7d:ec:83:e4:85:6d: af:df:d2:af:23:69:a6:ac:22:da:a5:de:80:af:8b:bd:b1:88: ec:59:6d:51:80:c0:a7:ca:0c:49:3b:f5:c8:83:6d:3b:2d:01: 90:6f:74:be:4f:a6:62:ee:51:f8:2c:49:6b:a1:d3:d4:69:78: 22:b1:ac:98:9b:db:5a:19:9e:78:59:3a:70:5e:b0:a0:65:72: a4:2a:87:7f:2a:f5:0e:ba:07:83:c6:12:f8:35:ca:5b:16:b7: aa:14:0e:99:fc:bf:9b:82:2d:3d:13:2f:26:aa:55:32:38:31: 7a:d7:55:d8:9d:3f:21:d0:2c:ee:fc:71:f2:39:5f:66:5f:90: 49:9e:eb:a1:09:39:c3:3c:f1:2c:7d:2e:81:0a:cb:b1:3f:85: 5f:14:07:26:67:94:64:34:ad:97:8b:44:91:e2:2f:62:27:4f: 0c:bc:cc:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RkUwNzExMC8GA1UEBRMoN0JENEQ1QzVBOEVGNUNERkM3NEM1OUEwOTM2NDU5NEU1 RUY5RkFFNzAeFw0yNTA3MDIxOTE2MjZaFw0yNTA3MDkxOTE2MjZaMBgxFjAUBgNV BAMTDTY4NjU4NThhLTU2ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwOMsgJwJJ/qHHDPJ4ZtP5Sf8PKmGtqIXQ8DUUO5AT8MnPZn3hiw5K2AS1l7RM Rzvp5Wy30SeZE/fFOcwhQnehxORDl/rwv6aLCi51iYWUdArpXlJl7ZIIITVIEMg7 lhtyHyyE6H+imQcrmUGaqjkReCj71keSCb+SWed/BE1Jgk86jSqmKRKZazJeShc0 ncxcDRJqwTpKrSOkpy003zHhUj2jA+IZ5pVVGD8lvse2XEmkTVSYQdfTTpT8/lQx /BFSFEOABP+C2z/j041PjjARzYPw+aE+3kPJi+gIMpN5FBbx/k6VP0Ugt4+nSPo4 0p7Ag4XOsjrVI7aCO4qVex5zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaxzMDokc MO0lDJTSlNkjOrRRjbwwHwYDVR0jBBgwFoAUe9TVxajvXN/HTFmgk2RZTl75+ucw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGRTA3L0ExNkE4OERBMzA2 QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5fSFRGbWdrMlJaVGw3NS11 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZTlUVnhhanZYTl9IVEZtZ2syUlpUbDc1LXVjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG RTA3L0ExNkE4OERBMzA2QTExRUE5OThDOEYzMEM0RjlBRTAyL2U5VFZ4YWp2WE5f SFRGbWdrMlJaVGw3NS11Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAArRX02Qqaalfd3+gjuQOct6l6RRmnu3GpboLGawDz2PktF3UDmF7FNF PMoUvvs69iCkHdZ8f07bUGPZ7k8UtupkjY/mocNgyU5PBuPsh4zWfM+Q133sg+SF ba/f0q8jaaasItql3oCvi72xiOxZbVGAwKfKDEk79ciDbTstAZBvdL5PpmLuUfgs SWuh09RpeCKxrJib21oZnnhZOnBesKBlcqQqh38q9Q66B4PGEvg1ylsWt6oUDpn8 v5uCLT0TLyaqVTI4MXrXVdidPyHQLO78cfI5X2ZfkEme66EJOcM88Sx9LoEKy7E/ hV8UByZnlGQ0rZeLRJHiL2InTwy8zIM= -----END CERTIFICATE-----Generated at Thu Jul 3 05:30:34 2025 by rpki-client