$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: bHSO5poxwQ2YOBjmI3pDj9H6WXPZzRTWGSi2u1Ip6Ik= Subject key identifier: B0:06:51:93:5A:45:04:95:F9:74:55:7E:F8:0E:11:65:8D:D9:D1:18 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B1E Signing time: Wed 02 Jul 2025 19:32:24 +0000 Manifest this update: Wed 02 Jul 2025 19:32:24 +0000 Manifest next update: Wed 09 Jul 2025 19:32:24 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: eFL+RPv03ljNvIL5d5ABWMy6JGGBbHj9+lQXqQHK58E=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Jul 2 19:32:24 2025 GMT Not After : Jul 9 19:32:24 2025 GMT Subject: CN=68658948-34c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:10:8e:9c:3f:0a:47:6b:ae:fa:ff:63:93:ef: 6f:40:b0:f7:cd:bb:df:cc:d6:36:7d:0b:3e:70:66: 85:77:02:96:56:34:4a:20:1a:d9:a2:7b:2d:8d:9e: 19:9a:1e:95:71:06:a2:61:d2:89:8f:b2:96:8e:da: 22:07:f7:c9:16:d0:2f:0f:91:4c:ea:81:49:87:e1: 4a:96:af:29:d8:2c:37:62:fa:45:c5:ab:88:46:17: 01:81:13:77:3a:8c:26:4f:df:c7:6a:26:56:5d:ea: 89:14:d2:64:10:29:bb:6c:50:a9:8a:2e:c1:c4:d5: be:eb:de:44:39:3d:6f:b7:70:0a:7a:e6:48:09:fe: 09:29:ee:3a:b7:0d:d4:66:ef:3b:be:59:6e:24:99: cd:ab:42:63:38:93:13:e1:75:63:54:e6:a7:24:ff: a6:c0:4e:c1:01:77:d5:64:2a:43:bb:13:97:ca:48: 81:0c:8c:dd:27:dc:d7:af:d9:08:ff:76:8a:62:5c: fd:e0:3a:81:5e:6d:27:a7:10:03:f0:e0:22:a1:25: 00:85:82:9c:1b:2b:df:1e:28:90:2b:e5:f9:f2:a7: 5d:0b:e0:6f:06:6d:86:ae:c9:d2:54:14:c2:ff:88: 24:bf:f0:3c:52:c1:1e:a7:25:26:ad:a4:5e:a3:e7: 4d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:51:93:5A:45:04:95:F9:74:55:7E:F8:0E:11:65:8D:D9:D1:18 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:60:1c:90:db:56:3f:3c:ab:a2:af:02:66:92:cb:c3:31:f2: 17:30:eb:a1:86:49:b1:73:27:15:2d:c0:59:f5:b9:5e:84:72: 86:48:e9:53:c4:ba:18:08:6d:67:3a:6a:f9:b3:8f:cb:fd:8c: 70:7d:a2:1a:10:d5:28:42:8f:9f:ee:80:6d:00:80:bc:fa:96: d7:a9:8b:a6:d4:a7:3b:97:ad:99:dd:32:60:8b:45:9c:1b:c8: 4f:97:a5:a3:9d:52:20:1e:3a:fb:27:93:1e:86:7d:17:ae:df: 5d:8b:9e:b1:39:67:aa:38:ed:c3:23:61:2f:bf:a1:32:1d:f1: af:0c:c9:98:dc:a0:33:3e:f8:5d:a5:60:c3:d2:59:af:bc:78: 31:d3:48:65:d6:d8:c5:80:4a:b4:81:7b:46:0f:f1:b5:78:a3: b4:f7:b9:c0:42:b7:02:b1:70:40:27:90:63:93:90:84:7a:6d: 11:a2:08:34:8e:7d:ad:af:0e:13:39:4d:66:3c:e8:aa:e2:8e: 42:18:36:a7:9e:86:a3:a8:b6:64:e1:ce:3f:22:ae:f6:f5:23: de:7a:f5:93:48:f4:3c:99:cd:8a:46:bf:dc:3d:3a:24:34:a6: c5:67:ad:d4:92:bd:20:b0:55:3d:70:9b:14:03:40:93:e8:22: bf:37:93:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUwNzAyMTkzMjI0WhcNMjUwNzA5MTkzMjI0WjAYMRYwFAYD VQQDEw02ODY1ODk0OC0zNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6BCOnD8KR2uu+v9jk+9vQLD3zbvfzNY2fQs+cGaFdwKWVjRKIBrZonstjZ4Z mh6VcQaiYdKJj7KWjtoiB/fJFtAvD5FM6oFJh+FKlq8p2Cw3YvpFxauIRhcBgRN3 OowmT9/HaiZWXeqJFNJkECm7bFCpii7BxNW+695EOT1vt3AKeuZICf4JKe46tw3U Zu87vlluJJnNq0JjOJMT4XVjVOanJP+mwE7BAXfVZCpDuxOXykiBDIzdJ9zXr9kI /3aKYlz94DqBXm0npxAD8OAioSUAhYKcGyvfHiiQK+X58qddC+BvBm2GrsnSVBTC /4gkv/A8UsEepyUmraReo+dNTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAGUZNa RQSV+XRVfvgOEWWN2dEYMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDQYByQ21Y/PKuirwJmksvDMfIXMOuhhkmxcycVLcBZ9blehHKGSOlT xLoYCG1nOmr5s4/L/YxwfaIaENUoQo+f7oBtAIC8+pbXqYum1Kc7l62Z3TJgi0Wc G8hPl6WjnVIgHjr7J5Mehn0Xrt9di56xOWeqOO3DI2Evv6EyHfGvDMmY3KAzPvhd pWDD0lmvvHgx00hl1tjFgEq0gXtGD/G1eKO097nAQrcCsXBAJ5Bjk5CEem0Rogg0 jn2trw4TOU1mPOiq4o5CGDannoajqLZk4c4/Iq729SPeevWTSPQ8mc2KRr/cPTok NKbFZ63Ukr0gsFU9cJsUA0CT6CK/N5O/ -----END CERTIFICATE-----Generated at Thu Jul 3 14:16:34 2025 by rpki-client