$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft File: B7Y7XcFse0rper0AhqMVbV10Rlk.mft (raw, json) Hash identifier: Mb+51HsMX/cMgQld1bzlP1EB8XGfO7ajqgf+Sia7SHM= Subject key identifier: 92:52:AE:C4:70:B5:94:9D:64:26:61:2D:EC:6D:97:B2:EE:DA:73:76 Authority key identifier: 07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59 Certificate issuer: /CN=A91C6E49/serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659 Certificate serial: 01FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft Manifest number: 01F8 Signing time: Tue 01 Jul 2025 02:49:23 +0000 Manifest this update: Tue 01 Jul 2025 02:49:22 +0000 Manifest next update: Tue 08 Jul 2025 02:49:22 +0000 Files and hashes: 1: B7Y7XcFse0rper0AhqMVbV10Rlk.crl (hash: uvRO7eq7sA1Eeff5SN562E6ZpxO3xSuchmDwzCZzBS8=) 2: 98FD8A0E538411ED8D781C7CC4F9AE02.roa (hash: lJnZtZDQNzdO0qp1p8vNJySg5lDyaZrljj6ja2HApOA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6E49, serialNumber=07B63B5DC16C7B4AE97ABD0086A3156D5D744659 Validity Not Before: Jul 1 02:49:22 2025 GMT Not After : Jul 8 02:49:22 2025 GMT Subject: CN=68634cb3-2f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3e:3b:10:96:53:a8:54:66:74:cd:b6:1d:1f: 2e:d4:94:55:49:3e:d1:ab:68:72:6a:74:60:c1:16: c3:b4:eb:fa:3b:be:82:34:40:3b:aa:32:b4:00:da: d6:97:12:ef:b8:55:ed:2b:18:92:17:29:11:21:56: 60:ba:45:63:0d:06:cd:cb:6c:4f:33:aa:3e:f3:9d: e0:12:8f:99:9c:ec:1c:c1:a0:c7:96:95:22:d9:fb: 31:66:2a:97:cc:8c:76:a4:99:07:f8:12:54:56:da: 9e:0e:3b:28:cb:f2:d6:a4:79:01:d3:82:9a:3e:2d: 71:59:49:5f:20:76:10:d2:8a:73:a4:5e:45:7c:2e: 13:e8:3e:6e:b9:34:1a:2c:d4:ac:5f:9f:56:f4:54: 3f:c3:e2:69:8e:6a:c6:5a:1c:00:d5:44:39:21:25: 08:17:90:cd:26:66:b4:b8:a8:b7:9c:f7:20:98:9e: e5:9a:de:b8:d5:64:af:02:53:c9:b2:69:65:92:a2: 67:33:8d:33:6e:a8:48:3c:db:ca:84:20:73:4b:e8: 80:f8:84:88:33:15:c2:ce:6b:f9:9e:4c:6f:70:30: 1a:74:e9:6b:04:fb:49:d5:fb:e2:c0:ef:68:b3:70: 8b:de:48:ef:ba:50:9f:eb:97:1f:47:f6:70:57:bd: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:52:AE:C4:70:B5:94:9D:64:26:61:2D:EC:6D:97:B2:EE:DA:73:76 X509v3 Authority Key Identifier: keyid:07:B6:3B:5D:C1:6C:7B:4A:E9:7A:BD:00:86:A3:15:6D:5D:74:46:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7Y7XcFse0rper0AhqMVbV10Rlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6E49/B33AA7A6538111ED8AA98F77C4F9AE02/B7Y7XcFse0rper0AhqMVbV10Rlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:25:67:4d:da:78:c1:68:fc:d9:d1:c8:74:3b:97:7e:b8:e4: 78:b4:f0:fc:4e:21:c2:a5:2b:14:ea:9f:29:65:d3:5b:d8:97: fd:19:47:1e:73:35:fc:12:89:44:e9:6c:d3:1d:39:9f:95:25: f4:ce:e6:f2:38:ac:d6:6c:55:ee:c7:c6:17:e8:a4:74:51:2f: c4:1d:39:e7:68:c6:82:06:43:4b:27:e2:69:c6:67:d5:30:6d: 32:76:79:5d:a7:29:05:c5:46:25:ff:04:85:1a:96:8b:3a:3a: 6a:88:fb:c8:ea:ab:fb:2a:29:a4:b5:f9:71:bd:74:50:2a:7f: 56:a7:8e:bd:78:2c:a0:71:5c:45:b8:4c:2d:d2:79:b4:f8:35: 6f:c0:01:0d:47:cd:d9:3f:31:f5:df:9a:83:82:c4:01:69:ab: a1:b1:86:10:8d:a1:39:6f:c4:9c:93:17:71:80:53:47:d9:73: 0f:6d:71:49:1b:46:f7:61:dd:17:ec:6e:da:bf:20:11:bf:b3: 87:a8:8d:43:be:e2:f0:7a:ff:da:fd:29:48:fa:6a:8c:73:4a: 97:48:f2:73:0c:ea:86:44:a8:b6:19:35:dc:4e:a6:3f:11:b3: c3:4e:89:41:63:f3:89:c1:c5:f3:c3:a3:c4:88:e6:8d:e8:ce: 52:1c:f8:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZFNDkxMTAvBgNVBAUTKDA3QjYzQjVEQzE2QzdCNEFFOTdBQkQwMDg2QTMxNTZE NUQ3NDQ2NTkwHhcNMjUwNzAxMDI0OTIyWhcNMjUwNzA4MDI0OTIyWjAYMRYwFAYD VQQDEw02ODYzNGNiMy0yZjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T47EJZTqFRmdM22HR8u1JRVST7Rq2hyanRgwRbDtOv6O76CNEA7qjK0ANrW lxLvuFXtKxiSFykRIVZgukVjDQbNy2xPM6o+853gEo+ZnOwcwaDHlpUi2fsxZiqX zIx2pJkH+BJUVtqeDjsoy/LWpHkB04KaPi1xWUlfIHYQ0opzpF5FfC4T6D5uuTQa LNSsX59W9FQ/w+JpjmrGWhwA1UQ5ISUIF5DNJma0uKi3nPcgmJ7lmt641WSvAlPJ smllkqJnM40zbqhIPNvKhCBzS+iA+ISIMxXCzmv5nkxvcDAadOlrBPtJ1fviwO9o s3CL3kjvulCf65cfR/ZwV73qlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJSrsRw tZSdZCZhLextl7Lu2nN2MB8GA1UdIwQYMBaAFAe2O13BbHtK6Xq9AIajFW1ddEZZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkU0OS9CMzNBQTdBNjUz ODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2UwcnBlcjBBaHFNVmJWMTBS bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3WTdYY0ZzZTBycGVyMEFocU1WYlYxMFJsay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkU0OS9CMzNBQTdBNjUzODExMUVEOEFBOThGNzdDNEY5QUUwMi9CN1k3WGNGc2Uw cnBlcjBBaHFNVmJWMTBSbGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2JWdN2njBaPzZ0ch0O5d+uOR4tPD8TiHCpSsU6p8pZdNb2Jf9GUce czX8EolE6WzTHTmflSX0zubyOKzWbFXux8YX6KR0US/EHTnnaMaCBkNLJ+JpxmfV MG0ydnldpykFxUYl/wSFGpaLOjpqiPvI6qv7KimktflxvXRQKn9Wp469eCygcVxF uEwt0nm0+DVvwAENR83ZPzH135qDgsQBaauhsYYQjaE5b8SckxdxgFNH2XMPbXFJ G0b3Yd0X7G7avyARv7OHqI1DvuLwev/a/SlI+mqMc0qXSPJzDOqGRKi2GTXcTqY/ EbPDTolBY/OJwcXzw6PEiOaN6M5SHPja -----END CERTIFICATE-----Generated at Wed Jul 2 06:51:48 2025 by rpki-client