$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: rMf8smYbnkl3J6OGRm1wxbQ3iNp7116fUg9btAJMLWY= Subject key identifier: F9:91:5A:9E:9B:D7:71:7B:97:73:86:E8:6C:02:7C:C0:B6:78:37:1A Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0AF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0AD7 Signing time: Wed 02 Jul 2025 19:42:08 +0000 Manifest this update: Wed 02 Jul 2025 19:42:08 +0000 Manifest next update: Wed 09 Jul 2025 19:42:08 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: mTeQxzkjGoXkqeh2nfq5+iqoHGn0Y0P8GbthFXu1qGc=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2803 (0xaf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Jul 2 19:42:08 2025 GMT Not After : Jul 9 19:42:08 2025 GMT Subject: CN=68658b90-a153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:02:5e:bf:e2:86:55:64:d0:a3:4e:44:78: 94:7e:a3:3d:a9:f5:07:3e:a2:15:3e:1e:bb:ed:85: 1d:71:44:5c:37:a7:c6:19:bf:d6:6c:51:e4:5c:7c: a9:6a:71:12:be:32:9e:bc:e3:8f:6f:8a:d4:03:b1: 52:74:7f:4b:0a:a3:6d:51:5f:3f:3b:1f:1e:9a:27: 38:13:43:50:77:fc:84:20:9a:25:ec:97:f0:05:e8: cd:25:a5:9d:d4:1e:40:25:0f:53:48:bd:fd:86:db: 2d:f8:ca:11:5c:22:21:6d:75:16:ee:c3:15:d0:7f: 29:23:6f:85:8e:af:55:79:fa:92:6a:fb:b9:01:72: e2:e9:74:5b:6d:13:ef:90:bd:f7:5a:b1:58:47:fb: 20:e8:07:ad:6a:95:59:7d:2b:0b:97:c2:e3:51:94: 4f:3f:f2:6c:22:23:53:fb:39:ae:9b:ae:74:3c:93: cc:75:9e:e7:71:88:c8:e7:49:3c:2d:af:dc:16:46: a5:99:29:48:5e:f4:f3:9e:08:10:38:32:5a:3a:cd: 14:c8:42:ac:78:d7:da:51:6b:4d:b3:e6:4c:f8:48: 6f:3d:b3:b4:56:16:8b:b6:46:7c:00:28:09:e3:e5: 52:e4:29:ab:75:b5:6b:2c:b7:d6:22:ca:94:10:64: e0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:91:5A:9E:9B:D7:71:7B:97:73:86:E8:6C:02:7C:C0:B6:78:37:1A X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:38:a9:47:ca:45:93:46:d9:a1:6b:ac:6f:67:6e:54:f8:a2: 48:a6:2a:0d:ec:a6:39:13:fd:3f:c6:03:66:4e:81:27:cb:4d: d2:66:e0:b2:e1:e2:03:58:01:6e:0e:f9:ff:fc:75:76:94:8f: 25:9a:4c:a9:ac:fa:50:6a:7b:4b:72:13:80:11:8b:d8:07:d9: 85:a9:d6:50:05:46:13:17:bf:17:2c:0c:72:bd:96:02:73:27: e7:06:e8:a4:82:c2:30:c8:30:88:3c:fa:fc:2e:42:4e:2b:a7: db:74:8d:a0:0b:a5:64:0c:b0:d3:73:b7:45:74:24:ae:68:57: 8c:19:c6:b4:6d:3c:4b:3a:25:7f:af:30:4d:34:46:ce:ed:32: b9:5c:ff:94:4c:b7:6f:7d:c5:57:cc:b3:8c:10:45:57:6c:1b: 18:cb:d2:b1:2b:29:00:95:6c:6a:2b:5a:a5:8f:09:64:e7:1d: c4:a9:65:cb:3c:fd:99:9b:e5:37:17:78:b5:98:de:9b:b3:a6: 6b:de:16:56:65:81:a7:0c:46:be:d4:f5:64:f5:40:85:17:e5: 50:5e:2d:95:3e:95:38:2a:4a:3f:3c:64:d0:8b:84:23:6d:f4: 3b:de:f0:e2:fb:fe:6e:d9:43:f2:fb:53:fe:f5:d4:ec:55:0f: ca:8c:03:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwNzAyMTk0MjA4WhcNMjUwNzA5MTk0MjA4WjAYMRYwFAYD VQQDEw02ODY1OGI5MC1hMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArGMCXr/ihlVk0KNORHiUfqM9qfUHPqIVPh677YUdcURcN6fGGb/WbFHkXHyp anESvjKevOOPb4rUA7FSdH9LCqNtUV8/Ox8emic4E0NQd/yEIJol7JfwBejNJaWd 1B5AJQ9TSL39htst+MoRXCIhbXUW7sMV0H8pI2+Fjq9VefqSavu5AXLi6XRbbRPv kL33WrFYR/sg6AetapVZfSsLl8LjUZRPP/JsIiNT+zmum650PJPMdZ7ncYjI50k8 La/cFkalmSlIXvTznggQODJaOs0UyEKseNfaUWtNs+ZM+EhvPbO0VhaLtkZ8ACgJ 4+VS5CmrdbVrLLfWIsqUEGTgQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmRWp6b 13F7l3OG6GwCfMC2eDcaMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyOKlHykWTRtmha6xvZ25U+KJIpioN7KY5E/0/xgNmToEny03SZuCy 4eIDWAFuDvn//HV2lI8lmkyprPpQantLchOAEYvYB9mFqdZQBUYTF78XLAxyvZYC cyfnBuikgsIwyDCIPPr8LkJOK6fbdI2gC6VkDLDTc7dFdCSuaFeMGca0bTxLOiV/ rzBNNEbO7TK5XP+UTLdvfcVXzLOMEEVXbBsYy9KxKykAlWxqK1qljwlk5x3EqWXL PP2Zm+U3F3i1mN6bs6Zr3hZWZYGnDEa+1PVk9UCFF+VQXi2VPpU4Kko/PGTQi4Qj bfQ73vDi+/5u2UPy+1P+9dTsVQ/KjAPF -----END CERTIFICATE-----Generated at Fri Jul 4 18:49:59 2025 by rpki-client