$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json) Hash identifier: c1+c/GcrEqiQ7mORv0Eem5Q8ICX9TuLs8yWC8K4u7C4= Subject key identifier: AE:EA:D5:88:BB:9C:2F:95:66:C8:A1:A7:74:06:CF:73:F6:C8:92:09 Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft Manifest number: 1E Signing time: Sat 05 Jul 2025 08:12:43 +0000 Manifest this update: Sat 05 Jul 2025 08:12:42 +0000 Manifest next update: Sat 12 Jul 2025 08:12:42 +0000 Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: sSPu5zDpRqUzhX2JriDgc01HF9viI7BgrceXI8s0ISY=) 2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: 3eRh0WSm3ML8fWWz0uqzCk5In0Q1rchUgCmcr9wy07U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Validity Not Before: Jul 5 08:12:42 2025 GMT Not After : Jul 12 08:12:42 2025 GMT Subject: CN=6868de7a-2078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:2f:3b:ef:1f:11:0e:22:ff:ec:ab:85:17: 2e:c9:d9:a8:fa:fe:af:b8:32:70:19:05:1e:df:8d: 2e:a3:e7:fc:39:91:87:f3:3b:1b:bd:17:36:e2:61: 06:a9:7d:ab:04:92:33:47:37:65:36:52:06:e6:fa: 04:db:bb:cc:d7:9e:eb:1d:ac:c9:83:78:b7:16:57: 06:36:61:2b:2a:b0:83:d3:9a:81:8f:28:95:09:33: b9:46:e6:19:a1:2b:e2:89:a4:1a:ac:3b:3d:11:4f: 57:52:be:29:5d:e2:35:84:05:6b:55:45:ce:74:f1: b1:4c:bf:73:ef:c1:6d:ae:14:66:9f:48:ae:c4:a2: 24:6f:e3:12:18:2a:3c:10:42:05:1b:b0:7e:f2:f0: 4d:dd:76:ef:20:72:3b:ef:77:76:8b:18:d8:36:d1: fb:62:01:cb:20:55:4d:60:df:8b:eb:09:3b:f9:ac: 4b:58:73:24:98:a4:bf:53:e5:e6:34:a7:07:d7:26: ed:e3:31:c7:ef:b3:f4:42:63:f6:2a:16:84:d6:cf: fd:f8:d8:8d:0a:75:74:bf:f2:c8:30:3c:e9:b5:c6: f6:2a:b6:fe:6f:41:70:eb:20:ef:72:d9:2f:93:17: 4d:4a:0f:a1:57:c9:d7:d2:d6:e1:21:f4:26:ab:6b: bf:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EA:D5:88:BB:9C:2F:95:66:C8:A1:A7:74:06:CF:73:F6:C8:92:09 X509v3 Authority Key Identifier: keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ff:d6:cd:67:72:40:5f:05:64:dc:e7:cd:d3:80:32:9d:18: 87:7b:4f:07:b4:13:de:1d:42:05:a5:95:e1:fa:ed:21:9b:54: c3:ee:98:82:73:1f:af:21:ba:b8:d6:f8:3e:be:78:21:5f:ee: 4e:db:76:60:0b:35:4f:e7:4d:b7:2e:b7:ee:55:ec:27:5a:e8: e6:cc:e8:25:3c:ce:32:46:f7:5e:f6:9f:45:25:45:bd:e3:88: 5a:b9:cf:bf:79:88:61:4a:32:55:f5:f4:d8:4c:a5:a5:ac:19: 4d:e8:e3:cc:52:61:df:6a:64:5e:8e:fc:6e:68:a0:59:13:be: 12:81:77:69:2f:67:04:bc:e8:39:f2:e4:a3:72:ac:ea:39:5e: 44:65:f3:b5:d5:3f:e1:97:ff:17:28:66:4e:aa:8a:18:39:40: 62:a4:b9:39:2d:a0:7e:ee:14:05:60:e0:16:cf:86:fb:59:d3: 0e:ee:80:d2:09:d9:12:89:7f:c0:9f:47:40:d5:1a:b7:42:8e: a3:2e:02:a0:9b:58:1a:48:a4:fd:0d:fd:d1:b1:22:93:6b:94: d1:5f:bb:66:57:b3:ab:5c:30:28:82:96:dc:c2:ca:1a:0c:88: 60:1e:97:77:c7:b0:80:d7:c9:2a:42:68:c5:a7:0d:6d:ff:40: a6:31:6c:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QUEyNDExMC8GA1UEBRMoRUQ3MkM3MTZCQzBBRjU5RDQzMDYzMjNGQkFBNDc0QkQ0 QjRERTcxQzAeFw0yNTA3MDUwODEyNDJaFw0yNTA3MTIwODEyNDJaMBgxFjAUBgNV BAMTDTY4NjhkZTdhLTIwNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoPy877x8RDiL/7KuFFy7J2aj6/q+4MnAZBR7fjS6j5/w5kYfzOxu9FzbiYQap fasEkjNHN2U2Ugbm+gTbu8zXnusdrMmDeLcWVwY2YSsqsIPTmoGPKJUJM7lG5hmh K+KJpBqsOz0RT1dSvild4jWEBWtVRc508bFMv3PvwW2uFGafSK7EoiRv4xIYKjwQ QgUbsH7y8E3ddu8gcjvvd3aLGNg20ftiAcsgVU1g34vrCTv5rEtYcySYpL9T5eY0 pwfXJu3jMcfvs/RCY/YqFoTWz/342I0KdXS/8sgwPOm1xvYqtv5vQXDrIO9y2S+T F01KD6FXydfS1uEh9Cara7+RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrurViLuc L5VmyKGndAbPc/bIkgkwHwYDVR0jBBgwFoAU7XLHFrwK9Z1DBjI/uqR0vUtN5xww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBQTI0LzE3MzlDMzVBMkJD OTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVoxREJqSV91cVIwdlV0TjV4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1hMSEZyd0s5WjFEQmpJX3VxUjB2VXRONXh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB QTI0LzE3MzlDMzVBMkJDOTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVox REJqSV91cVIwdlV0TjV4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG7/1s1nckBfBWTc583TgDKdGId7Twe0E94dQgWlleH67SGbVMPumIJz H68hurjW+D6+eCFf7k7bdmALNU/nTbcut+5V7Cda6ObM6CU8zjJG9172n0UlRb3j iFq5z795iGFKMlX19NhMpaWsGU3o48xSYd9qZF6O/G5ooFkTvhKBd2kvZwS86Dny 5KNyrOo5XkRl87XVP+GX/xcoZk6qihg5QGKkuTktoH7uFAVg4BbPhvtZ0w7ugNIJ 2RKJf8CfR0DVGrdCjqMuAqCbWBpIpP0N/dGxIpNrlNFfu2ZXs6tcMCiCltzCyhoM iGAel3fHsIDXySpCaMWnDW3/QKYxbIc= -----END CERTIFICATE-----Generated at Sat Jul 5 14:24:46 2025 by rpki-client