$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: xXK8rGYZfLjHquOlMQm13AY8dk9bLq/kDXvEaoQlWTw= Subject key identifier: F0:68:3B:E6:19:C7:11:DA:68:F0:CF:BD:FE:38:69:FC:A0:31:2B:9D Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 01E2 Signing time: Thu 03 Jul 2025 02:48:41 +0000 Manifest this update: Thu 03 Jul 2025 02:48:41 +0000 Manifest next update: Thu 10 Jul 2025 02:48:41 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: ccu5TWtem8uNwdZCP5VhpY2lZNKuMkR/zD4i7KkTBQQ=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Jul 3 02:48:41 2025 GMT Not After : Jul 10 02:48:41 2025 GMT Subject: CN=6865ef89-df2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:66:1f:89:a6:f7:14:bb:56:35:5c:c4:53:84: f3:ea:56:95:27:44:23:ab:a4:28:49:8e:bb:c2:88: 83:6c:18:a3:db:66:e7:a2:f3:1d:b4:e0:34:ea:20: 26:12:18:f0:d1:24:1d:7e:be:7e:2d:82:a6:ea:07: 99:27:cf:56:64:9a:3b:a4:f2:af:75:3f:21:d8:dc: f4:cc:73:5b:42:f2:a0:50:7f:6e:d9:c0:7c:22:9b: 9c:1c:f0:99:00:f0:d2:41:b4:a4:ad:e0:86:da:88: 10:62:dc:dd:e0:c9:74:80:03:cc:04:29:fe:5e:af: 0e:9f:07:d8:5c:4c:b0:75:ed:6d:c4:21:92:ee:b3: 3c:78:26:40:b2:3d:98:ae:64:ff:21:af:8b:a9:99: e1:bc:66:54:22:2e:ac:b9:ab:a1:88:c0:22:35:80: 54:4f:7a:0e:bb:31:6b:9a:5c:f1:e6:d9:88:ab:d3: 83:30:7a:b6:57:ae:d3:b5:7f:d9:3e:65:33:f8:15: 51:99:c4:c6:9f:92:c4:ca:d2:3b:33:4e:b2:29:c6: 04:b4:a4:e5:39:77:75:04:3f:fc:b9:23:59:f3:62: fe:a2:ec:c6:0e:82:88:63:38:66:27:29:28:6a:f0: d1:93:08:23:07:f2:ef:72:77:85:37:c2:87:60:7e: 39:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:68:3B:E6:19:C7:11:DA:68:F0:CF:BD:FE:38:69:FC:A0:31:2B:9D X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:46:10:0f:a2:c0:f3:bf:d2:52:11:0f:d6:63:93:fc:de: 8b:83:2a:1b:eb:02:cc:5b:cc:eb:37:8d:34:ec:c0:8f:8d:20: d4:1b:b6:63:fc:31:cd:29:17:9b:7a:49:e7:dd:eb:53:06:95: eb:ba:5a:90:4a:a3:0e:b4:09:16:13:3b:7f:5c:4a:e7:ac:7b: cd:05:3e:e8:e4:6b:7c:02:cb:d7:e6:eb:d1:c6:17:bc:ce:ea: ba:49:21:a1:14:55:89:ea:93:49:8d:d2:91:e0:4f:c6:c3:41: 54:99:b4:d1:dd:45:bf:50:8e:e7:9f:b4:9d:5a:69:01:66:92: 83:56:e0:b2:71:21:2b:68:3d:3c:ca:6c:4b:54:53:bd:f1:ca: d8:d3:28:ae:c8:92:e9:68:2a:53:30:6a:7d:89:63:b3:3e:6e: 0e:ad:23:c6:2f:4b:5a:ce:c4:94:f4:d5:60:84:52:d3:f3:a2: de:4a:84:54:4b:8b:03:ee:cb:52:be:ef:9e:47:62:ea:f9:c6: 8f:ad:14:b9:6f:8a:99:63:0f:33:eb:16:d6:fd:b0:7f:51:c1: 72:92:19:d7:3e:17:b2:3e:ec:03:72:24:b1:cc:fc:2f:a3:48: 48:36:b7:70:4a:af:e7:ee:48:9f:7d:b5:2e:db:48:b4:39:c1: b6:b5:03:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUwNzAzMDI0ODQxWhcNMjUwNzEwMDI0ODQxWjAYMRYwFAYD VQQDEw02ODY1ZWY4OS1kZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp2Yfiab3FLtWNVzEU4Tz6laVJ0Qjq6QoSY67woiDbBij22bnovMdtOA06iAm Ehjw0SQdfr5+LYKm6geZJ89WZJo7pPKvdT8h2Nz0zHNbQvKgUH9u2cB8IpucHPCZ APDSQbSkreCG2ogQYtzd4Ml0gAPMBCn+Xq8OnwfYXEywde1txCGS7rM8eCZAsj2Y rmT/Ia+LqZnhvGZUIi6suauhiMAiNYBUT3oOuzFrmlzx5tmIq9ODMHq2V67TtX/Z PmUz+BVRmcTGn5LEytI7M06yKcYEtKTlOXd1BD/8uSNZ82L+ouzGDoKIYzhmJyko avDRkwgjB/LvcneFN8KHYH45pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBoO+YZ xxHaaPDPvf44afygMSudMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoPUYQD6LA87/SUhEP1mOT/N6Lgyob6wLMW8zrN4007MCPjSDUG7Zj /DHNKRebeknn3etTBpXrulqQSqMOtAkWEzt/XErnrHvNBT7o5Gt8AsvX5uvRxhe8 zuq6SSGhFFWJ6pNJjdKR4E/Gw0FUmbTR3UW/UI7nn7SdWmkBZpKDVuCycSEraD08 ymxLVFO98crY0yiuyJLpaCpTMGp9iWOzPm4OrSPGL0tazsSU9NVghFLT86LeSoRU S4sD7stSvu+eR2Lq+caPrRS5b4qZYw8z6xbW/bB/UcFykhnXPheyPuwDciSxzPwv o0hINrdwSq/n7kiffbUu20i0OcG2tQPN -----END CERTIFICATE-----Generated at Thu Jul 3 06:04:38 2025 by rpki-client