$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: TxVaj20wrp7sitM6mvjFUYkOrIwCOcQdXFwRMkx85Zs= Subject key identifier: 0D:12:89:13:0C:AB:46:0D:11:AE:93:72:1F:D7:9C:D1:AD:03:4C:F2 Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 1299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 128F Signing time: Sat 28 Jun 2025 16:56:07 +0000 Manifest this update: Sat 28 Jun 2025 16:56:07 +0000 Manifest next update: Sat 05 Jul 2025 16:56:07 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: +hk760YKePhUjPykgx+vHh5sU8yZLZfOAgpckZ5SXvg=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:56:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4761 (0x1299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Jun 28 16:56:07 2025 GMT Not After : Jul 5 16:56:07 2025 GMT Subject: CN=68601ea7-42b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5e:0e:80:a1:bd:74:2d:9f:7c:49:9e:5f:8a: a4:40:c3:83:0a:42:a0:6a:04:67:59:aa:7d:31:61: 77:55:c2:93:3a:e2:af:a7:3f:1e:cf:cc:be:be:2b: b7:15:4e:5f:65:fd:e6:06:0b:fb:bb:a0:6a:f2:46: 50:73:06:bb:25:15:1f:ed:eb:89:21:81:1b:57:48: a4:cc:91:7c:11:33:0c:e6:51:ba:b3:44:0f:be:0e: fa:7c:b0:a4:15:c4:ca:28:f0:ea:db:cd:a4:07:79: db:17:84:bf:61:2e:de:93:bb:72:cd:4a:82:eb:e7: 8c:f1:fe:bf:75:20:8c:9a:92:98:d4:a5:a8:fd:b0: 82:4e:6c:60:28:bb:92:2a:99:8d:3c:4f:ed:ea:3e: 8f:d1:15:d4:c0:53:25:e0:42:54:a0:96:1a:9b:81: e2:92:ce:92:6a:03:af:2f:c2:c4:e2:36:de:99:ae: f2:f4:cb:7a:78:74:f8:22:fd:16:5b:e9:00:7c:9d: b5:eb:49:e4:35:03:59:4b:98:ee:57:73:e3:0a:40: e4:d6:ba:b0:61:f7:ed:11:fc:5c:10:70:6c:a4:b1: 30:b1:51:3d:f2:63:05:c3:81:19:e0:90:ff:80:47: 0f:e4:f9:eb:35:c4:06:a3:44:59:56:d4:09:23:9c: 52:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:12:89:13:0C:AB:46:0D:11:AE:93:72:1F:D7:9C:D1:AD:03:4C:F2 X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:ba:b0:0d:46:a6:e6:eb:c6:8e:5a:6f:c0:23:05:0c:72:da: 01:0a:30:28:78:70:ea:f6:21:8a:7b:f0:89:88:35:4d:84:79: 29:cf:8e:a4:b9:6c:c2:25:a3:8b:42:56:54:eb:77:68:4d:0c: 6a:14:4e:ba:9e:c8:7e:13:26:2c:0c:11:6d:7f:07:f2:2c:a8: dc:f2:bd:d0:73:26:af:5f:d9:dc:96:dc:f1:5d:9d:a0:e8:05: 5f:15:95:f8:76:8e:1d:d8:01:73:f5:77:8b:c0:0d:25:95:b8: 41:e0:5d:3a:2f:6c:66:eb:aa:19:e7:39:32:67:b4:8c:43:6a: d6:a0:65:83:18:2a:d6:f0:73:3a:7e:4d:93:41:65:ab:e3:c4: 06:ae:15:76:47:58:e4:83:34:70:23:a6:98:4d:64:c9:b0:f1: 86:ee:5a:d7:8c:a8:6e:09:95:96:41:70:c9:72:47:3b:4f:d6: 9d:37:23:02:f3:33:09:ca:8d:13:a7:52:95:ea:d9:a1:d8:35: 54:17:8e:81:35:57:bf:fa:b5:37:25:25:64:eb:ac:39:30:48: b0:d8:ea:42:bf:0c:e8:17:4e:cc:60:43:df:01:2a:af:7f:cb: 68:5d:0f:6b:68:4e:b9:06:75:27:3f:90:5e:d4:6f:a6:58:f9: ec:aa:48:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNjI4MTY1NjA3WhcNMjUwNzA1MTY1NjA3WjAYMRYwFAYD VQQDEw02ODYwMWVhNy00MmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxV4OgKG9dC2ffEmeX4qkQMODCkKgagRnWap9MWF3VcKTOuKvpz8ez8y+viu3 FU5fZf3mBgv7u6Bq8kZQcwa7JRUf7euJIYEbV0ikzJF8ETMM5lG6s0QPvg76fLCk FcTKKPDq282kB3nbF4S/YS7ek7tyzUqC6+eM8f6/dSCMmpKY1KWo/bCCTmxgKLuS KpmNPE/t6j6P0RXUwFMl4EJUoJYam4Hiks6SagOvL8LE4jbema7y9Mt6eHT4Iv0W W+kAfJ2160nkNQNZS5juV3PjCkDk1rqwYfftEfxcEHBspLEwsVE98mMFw4EZ4JD/ gEcP5PnrNcQGo0RZVtQJI5xSMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0SiRMM q0YNEa6Tch/XnNGtA0zyMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYurANRqbm68aOWm/AIwUMctoBCjAoeHDq9iGKe/CJiDVNhHkpz46k uWzCJaOLQlZU63doTQxqFE66nsh+EyYsDBFtfwfyLKjc8r3QcyavX9ncltzxXZ2g 6AVfFZX4do4d2AFz9XeLwA0llbhB4F06L2xm66oZ5zkyZ7SMQ2rWoGWDGCrW8HM6 fk2TQWWr48QGrhV2R1jkgzRwI6aYTWTJsPGG7lrXjKhuCZWWQXDJckc7T9adNyMC 8zMJyo0Tp1KV6tmh2DVUF46BNVe/+rU3JSVk66w5MEiw2OpCvwzoF07MYEPfASqv f8toXQ9raE65BnUnP5Be1G+mWPnsqkhw -----END CERTIFICATE-----Generated at Sun Jun 29 20:17:40 2025 by rpki-client