$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: dS1niIzSt1hREgM57nOElpmuNTZY1mk0u/7NucbqPjo= Subject key identifier: EE:E6:73:19:1F:36:7B:0C:CC:09:3A:41:25:E1:EA:83:FA:D5:48:78 Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 0662 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 0660 Signing time: Wed 02 Jul 2025 14:50:53 +0000 Manifest this update: Wed 02 Jul 2025 14:50:52 +0000 Manifest next update: Wed 09 Jul 2025 14:50:52 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 4ZtWKf3Yyhwm4ICnxjIM60Rs5XtY57pdC0KTZxnuyBw=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:50:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1634 (0x662) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Jul 2 14:50:52 2025 GMT Not After : Jul 9 14:50:52 2025 GMT Subject: CN=6865474c-7c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7f:57:d0:9a:d2:4a:ef:35:e6:db:b8:57:66: 64:82:1c:7f:a2:72:78:eb:d2:7a:d9:9e:6e:75:81: c8:f7:44:64:bc:8d:30:29:aa:74:19:3d:8d:52:c3: 76:6b:7b:00:6a:34:47:4b:56:fe:8f:d2:99:1f:22: 03:9d:da:f8:c6:e5:fd:c2:51:f0:2b:fd:eb:97:3e: 62:dd:a8:fb:9b:1d:ed:ad:ef:7f:a2:e0:e3:43:5f: 41:88:b0:15:e7:45:15:5a:dc:6d:0a:10:83:8a:f2: fe:23:08:54:81:6f:2e:49:7e:25:1a:a9:e3:ed:17: 32:38:f4:8e:98:e0:41:13:7b:af:b7:89:0b:a7:56: 97:c2:68:98:1c:89:dd:0d:bd:06:7e:dd:66:14:da: b0:97:ea:f0:41:af:f6:04:f5:7c:e7:a3:11:d2:f9: 60:2e:66:d1:18:ec:e9:77:29:bd:66:29:ad:0e:f4: ad:ae:8d:02:a6:e4:99:5e:1e:5f:67:ea:c6:cb:42: a5:80:7d:3f:2b:d0:48:aa:14:84:84:b2:15:bf:0d: 8f:aa:9f:6f:f0:14:e7:98:e7:1d:b8:1c:8f:ba:ad: 8f:c7:a3:bb:9f:2b:54:17:3c:96:fb:5b:a0:48:88: 32:b8:f6:2b:78:14:0a:27:4e:e5:84:53:06:c5:fb: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:73:19:1F:36:7B:0C:CC:09:3A:41:25:E1:EA:83:FA:D5:48:78 X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:41:5e:f9:51:d2:d9:7d:8a:4d:38:96:bb:ca:a5:75:50:5f: d5:9d:68:05:76:be:ce:e7:8e:b0:40:4c:a0:0b:e0:4d:53:77: 94:9c:50:c0:8c:3f:0d:19:f1:e8:62:7b:7d:03:35:22:77:4f: f5:3f:60:54:ee:6f:8a:5a:65:6e:8a:0f:da:64:56:40:17:70: e6:7b:90:fd:51:89:6c:e0:59:fa:5d:0f:a5:08:b0:73:c9:f2: c2:72:75:c8:fc:53:f6:0c:e7:e6:06:6a:bf:d2:93:81:d2:23: ca:70:24:01:cb:c7:6e:34:ad:4a:e5:ed:aa:6e:6c:55:6e:64: 83:53:e1:50:49:8f:ff:26:b2:89:c8:44:8c:a2:17:bd:e5:5c: c6:92:f8:a7:09:c5:69:d3:92:5a:84:92:f5:72:72:b0:c8:4b: 22:7b:b4:fd:25:29:18:5e:eb:f2:bd:81:8b:ce:98:0c:f4:24: ee:70:7d:2c:3a:70:95:4a:64:ee:8a:f5:68:79:f1:c7:2b:c5: 6e:6b:c5:0b:1b:19:b5:d5:2d:1d:fb:d1:c1:2b:ca:b7:00:c4: d6:81:26:23:7e:60:8d:1d:55:6f:55:c8:44:4a:02:1a:af:78: cd:3f:38:a0:2a:5e:aa:42:5c:31:14:6f:97:8b:46:7b:c6:aa: 15:2c:c9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjUwNzAyMTQ1MDUyWhcNMjUwNzA5MTQ1MDUyWjAYMRYwFAYD VQQDEw02ODY1NDc0Yy03YzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5n9X0JrSSu815tu4V2Zkghx/onJ469J62Z5udYHI90RkvI0wKap0GT2NUsN2 a3sAajRHS1b+j9KZHyIDndr4xuX9wlHwK/3rlz5i3aj7mx3tre9/ouDjQ19BiLAV 50UVWtxtChCDivL+IwhUgW8uSX4lGqnj7RcyOPSOmOBBE3uvt4kLp1aXwmiYHInd Db0Gft1mFNqwl+rwQa/2BPV856MR0vlgLmbRGOzpdym9ZimtDvStro0CpuSZXh5f Z+rGy0KlgH0/K9BIqhSEhLIVvw2Pqp9v8BTnmOcduByPuq2Px6O7nytUFzyW+1ug SIgyuPYreBQKJ07lhFMGxfvDcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7mcxkf NnsMzAk6QSXh6oP61Uh4MB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdQV75UdLZfYpNOJa7yqV1UF/VnWgFdr7O546wQEygC+BNU3eUnFDA jD8NGfHoYnt9AzUid0/1P2BU7m+KWmVuig/aZFZAF3Dme5D9UYls4Fn6XQ+lCLBz yfLCcnXI/FP2DOfmBmq/0pOB0iPKcCQBy8duNK1K5e2qbmxVbmSDU+FQSY//JrKJ yESMohe95VzGkvinCcVp05JahJL1cnKwyEsie7T9JSkYXuvyvYGLzpgM9CTucH0s OnCVSmTuivVoefHHK8Vua8ULGxm11S0d+9HBK8q3AMTWgSYjfmCNHVVvVchESgIa r3jNPzigKl6qQlwxFG+Xi0Z7xqoVLMn8 -----END CERTIFICATE-----Generated at Thu Jul 3 07:57:14 2025 by rpki-client