$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: V7ExdoGoR3BCPBbTpmoxt7oX7jDoEN4rqf7MOJcCu9o= Subject key identifier: 31:15:5E:00:D4:92:E5:93:E0:43:F2:B8:79:F2:6F:91:6D:A9:02:7B Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 11DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 11CE Signing time: Mon 30 Jun 2025 17:22:50 +0000 Manifest this update: Mon 30 Jun 2025 17:22:50 +0000 Manifest next update: Mon 07 Jul 2025 17:22:50 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: oNlXn8hcRbCha2TItqbYe1/e2LaJpR0TSrgszYcxxIY=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 17:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4572 (0x11dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Jun 30 17:22:50 2025 GMT Not After : Jul 7 17:22:50 2025 GMT Subject: CN=6862c7ea-d1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6b:ea:d6:e3:8e:c9:45:5d:b2:55:7d:62:db: b6:ef:47:0d:a3:ea:a9:88:98:70:8b:51:8f:7c:dc: ba:ff:d2:b2:ed:ab:f6:a6:49:e3:37:72:4c:83:b0: 48:c1:42:3b:ca:21:4b:7d:53:16:90:27:2a:c8:06: 37:50:55:5f:b6:06:dc:fb:a8:22:3e:c8:47:0f:7b: 45:c0:a9:be:12:df:f3:0d:e9:95:90:86:cd:02:3d: a4:e4:62:ef:ee:2c:84:9e:9f:3f:98:ae:9e:8c:13: 0d:61:8a:a0:1c:da:25:85:9a:5c:a0:27:48:d8:22: 28:2f:a6:19:53:58:49:eb:f2:aa:05:8c:42:5a:ca: bd:a2:e6:56:c4:d2:c7:41:5c:3f:12:c8:d3:63:a9: 11:ba:c1:0f:4c:0b:1c:21:d5:dd:f9:c9:ef:50:20: 20:84:67:e0:93:d3:a9:e2:48:4c:77:8c:bf:d1:ff: 36:32:48:02:86:d5:8a:cf:b7:9c:04:da:fe:e2:38: fc:f9:7a:a0:de:b1:94:6e:67:1e:79:95:84:04:9e: 32:0e:d6:8c:74:c9:ac:1e:ba:f1:bc:5d:3d:58:ed: 5f:6a:fb:79:56:46:1f:1b:09:69:8d:6e:6c:6c:a3: e6:db:87:05:a8:7a:19:78:f6:36:f8:c7:86:8f:1c: bc:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:15:5E:00:D4:92:E5:93:E0:43:F2:B8:79:F2:6F:91:6D:A9:02:7B X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:dc:48:24:e0:35:f7:4d:6b:1e:a5:f1:72:df:b8:d2:c1: 79:8c:ce:8c:82:07:0a:1d:35:4a:a7:25:2d:a9:b7:9e:de:62: c4:ee:c8:ac:0a:59:20:f1:af:a0:62:75:3a:c1:a5:7c:dc:11: 43:51:a9:42:fa:20:28:d5:f8:71:43:ba:ca:73:ca:20:8f:00: d7:36:fa:9e:44:0e:95:82:d2:a4:d7:28:88:ae:e3:df:07:46: fa:58:da:54:5a:16:01:e5:c5:ce:13:a6:25:2b:c8:49:42:ce: 7a:ce:ba:fb:59:8d:d2:b2:44:30:f9:0b:25:b2:24:2c:54:85: f1:56:dd:c3:2b:53:25:f4:36:a8:e6:69:f0:5f:12:03:f3:3e: a0:76:22:5a:28:93:74:a6:24:47:b7:14:40:6a:af:15:c1:9f: f1:37:d3:2c:4f:c3:0a:ed:84:f1:cd:af:fc:19:44:3e:c7:2b: 05:f5:fd:d6:18:fa:f5:27:69:31:d2:27:de:42:0b:ac:2d:9a: 19:7b:0c:77:25:9e:73:73:4b:d0:13:30:68:36:ca:14:bb:18: 5a:44:91:87:3f:8d:28:55:78:af:09:12:36:4c:47:f2:34:d1: 60:47:bb:dd:61:40:50:f7:3a:01:ec:79:61:82:63:8a:93:76: 1f:07:9d:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUwNjMwMTcyMjUwWhcNMjUwNzA3MTcyMjUwWjAYMRYwFAYD VQQDEw02ODYyYzdlYS1kMWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmvq1uOOyUVdslV9Ytu270cNo+qpiJhwi1GPfNy6/9Ky7av2pknjN3JMg7BI wUI7yiFLfVMWkCcqyAY3UFVftgbc+6giPshHD3tFwKm+Et/zDemVkIbNAj2k5GLv 7iyEnp8/mK6ejBMNYYqgHNolhZpcoCdI2CIoL6YZU1hJ6/KqBYxCWsq9ouZWxNLH QVw/EsjTY6kRusEPTAscIdXd+cnvUCAghGfgk9Op4khMd4y/0f82MkgChtWKz7ec BNr+4jj8+Xqg3rGUbmceeZWEBJ4yDtaMdMmsHrrxvF09WO1favt5VkYfGwlpjW5s bKPm24cFqHoZePY2+MeGjxy8SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEVXgDU kuWT4EPyuHnyb5FtqQJ7MB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMN9xIJOA1901rHqXxct+40sF5jM6MggcKHTVKpyUtqbee3mLE7sis Clkg8a+gYnU6waV83BFDUalC+iAo1fhxQ7rKc8ogjwDXNvqeRA6VgtKk1yiIruPf B0b6WNpUWhYB5cXOE6YlK8hJQs56zrr7WY3SskQw+QslsiQsVIXxVt3DK1Ml9Dao 5mnwXxID8z6gdiJaKJN0piRHtxRAaq8VwZ/xN9MsT8MK7YTxza/8GUQ+xysF9f3W GPr1J2kx0ifeQgusLZoZewx3JZ5zc0vQEzBoNsoUuxhaRJGHP40oVXivCRI2TEfy NNFgR7vdYUBQ9zoB7HlhgmOKk3YfB51y -----END CERTIFICATE-----Generated at Wed Jul 2 11:47:49 2025 by rpki-client