$ rpki-client -vvf rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft File: 7HnRemDtVw7Ge1EWFitgi2C5zUE.mft (raw, json) Hash identifier: QTRmluwbVn4a16ZqJD4SmCtOnYu/Mv+8h1gMuDFvoec= Subject key identifier: F4:8D:8D:6C:36:84:70:07:8D:9A:95:30:1B:42:C3:9E:2C:67:D3:20 Authority key identifier: EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 Certificate issuer: /CN=A91C309F/serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Certificate serial: 06BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft Manifest number: 06B4 Signing time: Fri 04 Jul 2025 22:31:37 +0000 Manifest this update: Fri 04 Jul 2025 22:31:37 +0000 Manifest next update: Fri 11 Jul 2025 22:31:37 +0000 Files and hashes: 1: 7HnRemDtVw7Ge1EWFitgi2C5zUE.crl (hash: uTTfR3Detidu/xVqaVhwEkS2M5ewE7DlNuDKbAlxspY=) 2: C144C89ADCF311EC80AD955EC4F9AE02.roa (hash: oHlo3Sofjys47IZ2Ei8IuoMAeL8C2VUTJUZO9aDUVcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1723 (0x6bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C309F, serialNumber=EC79D17A60ED570EC67B5116162B608B60B9CD41 Validity Not Before: Jul 4 22:31:37 2025 GMT Not After : Jul 11 22:31:37 2025 GMT Subject: CN=68685649-ba93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a0:e3:2e:cb:a4:99:8f:56:37:f9:d2:fa:d5: d7:8e:f8:ff:21:9c:59:46:31:36:91:2d:39:69:da: cd:42:fa:49:a7:77:fd:f2:f4:b9:b1:a4:09:86:f5: dd:ee:ba:98:bc:98:d5:4c:b8:12:62:a0:02:2d:be: 04:f5:16:07:f3:a5:54:91:b3:28:64:ab:f5:bc:bc: 30:41:18:16:4b:bd:0c:ed:f0:18:a0:cf:e4:2c:e5: c8:c4:49:31:f0:e1:d9:d4:98:97:ef:08:be:f8:a0: ec:67:d2:02:c7:a6:6b:45:13:05:c5:2d:8c:22:df: a9:ab:06:fa:2b:37:24:44:58:96:7b:a8:83:86:8c: 4e:98:55:e6:a4:41:4f:e2:ab:61:ef:a3:69:1f:2c: 81:2e:cd:b9:aa:d8:23:82:bb:bd:de:16:ca:42:1c: bb:56:19:0b:8f:86:0c:b7:9c:5b:18:d7:81:5a:ba: 76:3e:21:af:0e:98:fa:4a:74:e9:de:0d:dd:58:54: 29:0b:a8:58:57:ff:5d:50:bf:1b:af:9e:b6:bd:59: ae:cf:99:35:83:8e:ae:e3:f3:98:bd:47:a1:3f:13: d8:e1:18:c1:24:4b:2a:58:8b:75:ce:97:da:91:41: 06:d0:cb:7e:ee:28:4f:6b:14:e4:6e:30:cb:82:0b: 26:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8D:8D:6C:36:84:70:07:8D:9A:95:30:1B:42:C3:9E:2C:67:D3:20 X509v3 Authority Key Identifier: keyid:EC:79:D1:7A:60:ED:57:0E:C6:7B:51:16:16:2B:60:8B:60:B9:CD:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HnRemDtVw7Ge1EWFitgi2C5zUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C309F/1DB483A469DC11EB9E16091AC4F9AE02/7HnRemDtVw7Ge1EWFitgi2C5zUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:1e:e0:89:f2:c2:5f:ca:7a:b1:46:b1:aa:a6:b2:5c:ad: 8c:8d:af:e9:93:8d:95:37:62:50:45:20:6e:70:f8:1e:a1:c8: 8a:af:ba:11:52:c6:14:ff:59:3a:97:e7:71:e9:95:3f:57:c8: 88:18:54:0a:67:7c:c8:9c:43:d6:3c:57:ff:c4:cd:23:08:52: 79:69:b2:3d:9f:87:88:69:42:0a:8b:bf:03:80:73:88:b4:db: 59:bb:0c:37:2b:40:30:0a:ee:3a:06:1e:5c:2b:6f:69:61:4f: b7:10:2b:0a:82:f6:32:79:96:fa:92:c1:29:93:96:20:ee:20: 2d:b3:e2:fc:93:70:3d:25:4f:83:7a:3f:46:0d:b5:b0:98:25: fc:57:57:39:b8:c4:5d:3f:e3:df:d3:1b:85:70:74:56:48:b2: d3:88:f9:e9:9f:96:4e:6d:54:63:c6:21:f2:57:85:4f:74:47: 33:a9:6f:2c:dd:42:9c:8a:88:07:b6:12:23:b4:9d:1c:bd:b6: 28:63:9b:8b:a1:0a:fa:c9:4d:79:d1:f0:6e:84:5b:cd:09:98: d1:76:63:82:b4:46:d1:3c:4f:97:38:02:fc:a3:00:01:ae:0f: a2:4c:60:f7:ee:f0:66:1b:63:86:8d:44:94:59:08:76:a2:a2: 5f:e9:de:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMwOUYxMTAvBgNVBAUTKEVDNzlEMTdBNjBFRDU3MEVDNjdCNTExNjE2MkI2MDhC NjBCOUNENDEwHhcNMjUwNzA0MjIzMTM3WhcNMjUwNzExMjIzMTM3WjAYMRYwFAYD VQQDEw02ODY4NTY0OS1iYTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsqDjLsukmY9WN/nS+tXXjvj/IZxZRjE2kS05adrNQvpJp3f98vS5saQJhvXd 7rqYvJjVTLgSYqACLb4E9RYH86VUkbMoZKv1vLwwQRgWS70M7fAYoM/kLOXIxEkx 8OHZ1JiX7wi++KDsZ9ICx6ZrRRMFxS2MIt+pqwb6KzckRFiWe6iDhoxOmFXmpEFP 4qth76NpHyyBLs25qtgjgru93hbKQhy7VhkLj4YMt5xbGNeBWrp2PiGvDpj6SnTp 3g3dWFQpC6hYV/9dUL8br562vVmuz5k1g46u4/OYvUehPxPY4RjBJEsqWIt1zpfa kUEG0Mt+7ihPaxTkbjDLggsmjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPSNjWw2 hHAHjZqVMBtCw54sZ9MgMB8GA1UdIwQYMBaAFOx50Xpg7VcOxntRFhYrYItguc1B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzA5Ri8xREI0ODNBNDY5 REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3N0dlMUVXRml0Z2kyQzV6 VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIblJlbUR0Vnc3R2UxRVdGaXRnaTJDNXpVRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzA5Ri8xREI0ODNBNDY5REMxMUVCOUUxNjA5MUFDNEY5QUUwMi83SG5SZW1EdFZ3 N0dlMUVXRml0Z2kyQzV6VUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEiB7gifLCX8p6sUaxqqayXK2Mja/pk42VN2JQRSBucPgeociKr7oR UsYU/1k6l+dx6ZU/V8iIGFQKZ3zInEPWPFf/xM0jCFJ5abI9n4eIaUIKi78DgHOI tNtZuww3K0AwCu46Bh5cK29pYU+3ECsKgvYyeZb6ksEpk5Yg7iAts+L8k3A9JU+D ej9GDbWwmCX8V1c5uMRdP+Pf0xuFcHRWSLLTiPnpn5ZObVRjxiHyV4VPdEczqW8s 3UKciogHthIjtJ0cvbYoY5uLoQr6yU150fBuhFvNCZjRdmOCtEbRPE+XOAL8owAB rg+iTGD37vBmG2OGjUSUWQh2oqJf6d5q -----END CERTIFICATE-----Generated at Sun Jul 6 00:29:50 2025 by rpki-client