$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: XiLfppMOC/6MXerGVsQ574EenLF/505IU/Y4tJWXi5w= Subject key identifier: 08:D8:85:C6:42:45:82:E1:C5:23:09:14:6C:D3:C1:5C:E0:C2:D1:B9 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0DB6 Signing time: Wed 02 Jul 2025 18:07:27 +0000 Manifest this update: Wed 02 Jul 2025 18:07:26 +0000 Manifest next update: Wed 09 Jul 2025 18:07:26 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: k+Zox9QgQUBCkhtUO/i4LZ6PnVJt6R0iZsuypZ+vARc=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3514 (0xdba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Jul 2 18:07:26 2025 GMT Not After : Jul 9 18:07:26 2025 GMT Subject: CN=6865755f-0985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:d4:d7:a4:95:ce:d9:38:38:36:ee:97:71: 38:7a:e8:3a:fa:3a:83:ac:00:05:98:19:71:d7:3f: ac:45:28:3f:7e:f0:d4:5b:f3:ca:be:b9:0f:5e:ba: 5c:ac:72:c8:5a:ba:ae:f2:40:e3:89:40:38:b0:eb: b0:8e:36:04:ee:08:8f:25:27:03:7a:1a:db:cd:6f: e3:ec:2c:05:fe:e9:3a:fb:6e:b6:e6:98:4f:85:c6: f1:44:83:91:d3:8b:8a:01:cb:9d:20:4e:71:f5:5c: 03:dd:7f:0f:8e:6d:84:60:6d:99:e6:44:fb:93:2c: 2e:27:d1:e9:8d:82:94:3e:6d:b4:7b:9d:4f:79:09: 00:df:8f:e0:0c:4c:4a:bd:4c:6b:b9:7b:a9:17:b9: 31:8f:9c:17:8d:38:e8:ac:0e:a3:05:16:fd:f6:5f: d6:3f:80:76:03:72:ef:8e:11:94:35:d1:5a:c0:17: 66:c7:99:1e:8f:6f:fb:32:14:f6:ad:86:bd:6a:11: 09:a4:31:e8:25:45:a0:9f:ea:37:e3:ca:93:6f:d2: f1:6e:3f:2f:fe:13:cf:13:f9:c5:c1:6e:3a:27:f5: 35:d3:43:e0:a1:88:0f:69:77:09:bc:04:d7:64:24: b9:cb:53:a8:dd:0c:85:4b:e1:c6:f5:99:40:3e:8a: 40:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D8:85:C6:42:45:82:E1:C5:23:09:14:6C:D3:C1:5C:E0:C2:D1:B9 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:23:ca:46:be:08:94:4b:c0:39:a7:19:b7:4a:c0:f0:af: 58:07:1a:64:c3:34:81:71:1f:2b:00:3c:ce:db:58:05:a0:0c: f6:b4:a2:40:1a:9c:62:a5:cd:99:fc:00:16:4d:8f:fd:ae:a9: cc:0f:35:c2:03:fb:49:43:51:93:6a:60:ac:7a:fc:ff:5d:53: 16:f2:d8:13:a0:d4:65:61:40:d8:94:81:a8:a9:ce:d8:89:6c: a9:db:eb:04:ea:b7:f5:62:fc:37:fc:00:a0:44:aa:c3:ce:04: f7:ef:b4:62:46:c8:48:39:c7:aa:27:58:44:3d:0f:2f:bd:57: e2:5b:ef:3e:bb:76:fe:56:2d:9b:a3:70:cd:50:f6:de:39:0d: 96:08:2f:a9:d4:32:01:8a:2c:54:ff:6b:ca:e0:22:26:72:c5: 70:61:31:01:c1:34:95:21:1c:aa:80:19:fe:67:da:6a:01:c1: 2c:91:78:f1:aa:98:b6:10:92:98:c1:cd:4e:3a:4e:93:b0:c0: 4c:3c:a8:61:89:28:dd:dd:ac:bd:44:72:00:00:81:57:19:3d: 37:ef:e2:81:e0:b9:2c:1b:ac:9c:d0:79:29:ce:58:3f:68:19: f7:fc:9b:24:af:31:f8:96:6c:3c:52:51:f2:ba:87:73:b4:9a: 5f:58:c3:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwNzAyMTgwNzI2WhcNMjUwNzA5MTgwNzI2WjAYMRYwFAYD VQQDEw02ODY1NzU1Zi0wOTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArKfU16SVztk4ODbul3E4eug6+jqDrAAFmBlx1z+sRSg/fvDUW/PKvrkPXrpc rHLIWrqu8kDjiUA4sOuwjjYE7giPJScDehrbzW/j7CwF/uk6+2625phPhcbxRIOR 04uKAcudIE5x9VwD3X8Pjm2EYG2Z5kT7kywuJ9HpjYKUPm20e51PeQkA34/gDExK vUxruXupF7kxj5wXjTjorA6jBRb99l/WP4B2A3LvjhGUNdFawBdmx5kej2/7MhT2 rYa9ahEJpDHoJUWgn+o348qTb9Lxbj8v/hPPE/nFwW46J/U100PgoYgPaXcJvATX ZCS5y1Oo3QyFS+HG9ZlAPopAEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAjYhcZC RYLhxSMJFGzTwVzgwtG5MB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPKiPKRr4IlEvAOacZt0rA8K9YBxpkwzSBcR8rADzO21gFoAz2tKJA Gpxipc2Z/AAWTY/9rqnMDzXCA/tJQ1GTamCsevz/XVMW8tgToNRlYUDYlIGoqc7Y iWyp2+sE6rf1Yvw3/ACgRKrDzgT377RiRshIOceqJ1hEPQ8vvVfiW+8+u3b+Vi2b o3DNUPbeOQ2WCC+p1DIBiixU/2vK4CImcsVwYTEBwTSVIRyqgBn+Z9pqAcEskXjx qpi2EJKYwc1OOk6TsMBMPKhhiSjd3ay9RHIAAIFXGT037+KB4LksG6yc0Hkpzlg/ aBn3/JskrzH4lmw8UlHyuodztJpfWMNo -----END CERTIFICATE-----Generated at Thu Jul 3 01:11:07 2025 by rpki-client