$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft File: 7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json) Hash identifier: NQs8WxYYhqg8nU575yyX5ZRxjvh/aw7F/VgS5D9JHzE= Subject key identifier: 8F:FC:8A:C2:AD:39:01:8F:8D:47:02:5A:51:C5:69:75:3B:AA:B9:31 Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D Certificate issuer: /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft Manifest number: 0145 Signing time: Tue 01 Jul 2025 04:45:10 +0000 Manifest this update: Tue 01 Jul 2025 04:45:10 +0000 Manifest next update: Tue 08 Jul 2025 04:45:10 +0000 Files and hashes: 1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: V+G0vtLYWGQuhlDGyGLbNtH9MMSfdZY8K2L9NgUUJAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D Validity Not Before: Jul 1 04:45:10 2025 GMT Not After : Jul 8 04:45:10 2025 GMT Subject: CN=686367d6-4eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:0f:84:b8:9d:dd:71:1a:97:a6:cf:fe:b2: 93:58:19:95:93:ad:b5:88:bc:f4:c4:f1:8a:e3:86: 06:fe:57:3a:b2:eb:cc:fd:ee:94:55:74:e8:95:8e: 86:f0:f5:89:c1:64:62:cc:43:a5:75:ec:2f:c7:39: f9:6f:2c:fa:89:29:7d:cc:cd:f2:59:88:87:f1:4e: 6a:28:14:e8:46:b9:8e:4c:f0:b5:2d:f5:f6:18:1d: cc:45:4d:a3:60:36:e5:5f:72:36:7b:cf:a9:f6:1c: 0d:ce:7a:08:e9:70:49:08:05:60:bc:48:f2:05:eb: 35:44:48:00:2b:80:1d:0a:b4:a3:3b:08:b6:85:44: f0:2e:c4:91:1d:9c:66:8e:8b:60:cd:33:7b:5e:2f: 55:d7:d9:b2:4b:6a:92:9f:6b:f6:a6:bb:b9:ba:ed: 03:77:92:67:eb:74:04:98:4b:72:c2:b7:97:a8:2b: 98:d6:59:09:b1:fa:73:79:94:c6:13:5b:74:56:ad: ef:f4:98:66:63:07:6a:6c:26:c7:60:6b:83:cc:c2: f9:20:50:fc:ce:9d:6e:3d:d2:a0:50:b9:ea:b9:a9: cf:62:a3:4c:7d:0c:25:10:23:88:99:61:67:5c:be: c0:a9:a3:5c:38:5f:cc:60:b6:08:f1:4d:27:e0:90: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FC:8A:C2:AD:39:01:8F:8D:47:02:5A:51:C5:69:75:3B:AA:B9:31 X509v3 Authority Key Identifier: keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:4e:43:45:1a:70:54:dd:34:8c:b7:46:ce:34:35:6b:22:01: 8b:00:cc:bc:d3:1e:e0:b1:41:4f:8b:c0:95:fb:19:e7:a1:79: 30:13:53:ef:a5:14:04:4b:bc:ab:e6:da:83:8b:bd:c1:b0:c7: 41:24:34:7d:fe:8a:0f:d4:c1:bf:3e:ad:24:19:b9:5e:d1:02: ea:b8:a8:9a:54:86:f7:35:9a:b5:a8:24:4d:07:19:b5:a0:2b: 6e:ea:e7:33:7d:df:23:fa:70:41:e4:7a:7d:39:01:22:61:e1: 07:07:19:3c:0c:32:c5:08:63:6b:f0:07:4b:1a:27:e0:33:cd: ee:7c:5a:66:1a:e6:3a:f6:7f:9d:34:c6:0f:c4:91:ab:5f:33: 6d:6f:84:5e:92:06:75:51:73:2c:51:79:38:c4:ad:e0:58:9f: 47:33:5f:eb:f5:f4:78:a4:8d:d7:77:e2:79:11:92:c4:5c:81: 7e:ff:c2:3e:79:0e:01:2f:81:9a:53:1c:77:76:ea:b5:3e:a6: 04:28:af:24:32:d8:00:d5:c7:bd:ab:30:06:10:18:3d:1a:fa: 39:e1:88:f8:a0:f2:33:83:7d:df:cb:4f:ae:d2:73:bf:00:33: bd:d7:53:2b:1c:e8:ad:27:63:1a:e6:d9:ba:85:3c:13:a9:9b: 45:42:fc:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw NzkwQzk5NEQwHhcNMjUwNzAxMDQ0NTEwWhcNMjUwNzA4MDQ0NTEwWjAYMRYwFAYD VQQDEw02ODYzNjdkNi00ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNAPhLid3XEal6bP/rKTWBmVk621iLz0xPGK44YG/lc6suvM/e6UVXTolY6G 8PWJwWRizEOldewvxzn5byz6iSl9zM3yWYiH8U5qKBToRrmOTPC1LfX2GB3MRU2j YDblX3I2e8+p9hwNznoI6XBJCAVgvEjyBes1REgAK4AdCrSjOwi2hUTwLsSRHZxm jotgzTN7Xi9V19myS2qSn2v2pru5uu0Dd5Jn63QEmEtywreXqCuY1lkJsfpzeZTG E1t0Vq3v9JhmYwdqbCbHYGuDzML5IFD8zp1uPdKgULnquanPYqNMfQwlECOImWFn XL7AqaNcOF/MYLYI8U0n4JDUiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/8isKt OQGPjUcCWlHFaXU7qrkxMB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0 bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFTkNFGnBU3TSMt0bONDVrIgGLAMy80x7gsUFPi8CV+xnnoXkwE1Pv pRQES7yr5tqDi73BsMdBJDR9/ooP1MG/Pq0kGble0QLquKiaVIb3NZq1qCRNBxm1 oCtu6uczfd8j+nBB5Hp9OQEiYeEHBxk8DDLFCGNr8AdLGifgM83ufFpmGuY69n+d NMYPxJGrXzNtb4RekgZ1UXMsUXk4xK3gWJ9HM1/r9fR4pI3Xd+J5EZLEXIF+/8I+ eQ4BL4GaUxx3duq1PqYEKK8kMtgA1ce9qzAGEBg9Gvo54Yj4oPIzg33fy0+u0nO/ ADO911MrHOitJ2Ma5tm6hTwTqZtFQvz/ -----END CERTIFICATE-----Generated at Wed Jul 2 04:25:01 2025 by rpki-client