$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: alamohbvicF0AWIaZLarTKzjQ73nW+F0llUwKDv/tNY= Subject key identifier: F2:A1:D0:41:DD:3F:E4:E4:31:70:E1:29:DB:AB:CD:95:15:C3:71:4C Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21BB Signing time: Mon 30 Jun 2025 15:58:56 +0000 Manifest this update: Mon 30 Jun 2025 15:58:55 +0000 Manifest next update: Mon 07 Jul 2025 15:58:55 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: CZIbYvoO+hneHsPAri6OdTU64A3BVXDQMrRmSRCVMTo=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 15:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8668 (0x21dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Jun 30 15:58:55 2025 GMT Not After : Jul 7 15:58:55 2025 GMT Subject: CN=6862b440-5e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:e6:ad:86:84:e1:13:17:10:32:89:c5:0e: c2:c5:b7:1f:ac:76:bf:2a:49:06:a3:12:11:a0:bd: 1b:e8:96:cb:f6:8e:04:db:95:ff:3e:44:d8:4e:a5: 21:2f:78:21:9d:16:a4:3d:27:3b:00:80:15:6b:c2: 36:28:62:4f:c0:f3:79:35:79:02:44:dd:40:9f:f7: 93:70:27:0d:dd:6c:71:cf:74:b3:58:0d:5e:4d:05: 1f:73:b4:f2:cd:75:43:ab:b0:c4:df:c9:98:43:bb: ab:25:fe:64:e4:15:ef:a3:4f:00:bd:4c:ab:49:d3: 1f:ec:ea:ef:20:81:9b:cd:84:7d:e7:23:2b:f8:27: cb:72:3b:46:42:1d:c7:75:a5:1f:f8:4c:3a:7a:43: 27:8a:62:0c:60:87:7d:32:41:c1:f9:9d:73:03:07: 33:3b:99:6d:fb:d4:16:e7:c0:ff:0a:11:a2:3d:da: 39:c3:14:df:7e:1a:a1:07:67:8b:66:28:4b:15:c2: 99:fb:47:7f:e6:64:de:a5:cd:a9:3f:63:6e:0d:78: 1c:0a:9e:22:10:43:16:74:94:eb:e6:fd:98:72:88: a4:de:09:b4:c5:f5:7c:7f:ce:62:58:4e:dc:ab:91: 17:3a:91:2e:b8:8e:65:bb:fd:93:9b:9a:e5:f6:a7: 27:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A1:D0:41:DD:3F:E4:E4:31:70:E1:29:DB:AB:CD:95:15:C3:71:4C X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:b6:93:bf:56:e1:45:32:7f:f1:4c:ab:9e:c3:12:9d:07:2f: 7a:07:42:b5:26:3c:2a:13:f0:b2:7f:ea:28:35:86:bb:c0:18: a0:7a:f0:2b:82:87:c9:96:23:ac:7f:43:52:3e:fb:f1:e4:ef: 6e:6d:af:53:77:86:39:33:71:27:b1:2a:a6:04:ac:bb:2d:6b: e3:85:e8:63:bd:1d:b3:0c:d9:88:8f:24:38:2e:25:32:21:25: 68:8c:1c:6c:e6:37:21:16:60:b7:d9:e1:66:60:8f:84:cd:ae: 15:db:db:3d:ce:90:f7:dc:78:12:41:9c:71:dd:3f:55:a1:18: eb:9b:a9:06:e8:9f:75:ea:3d:b3:6f:6e:8a:04:55:88:eb:58: 80:39:f3:b3:73:48:bc:12:35:c0:76:f2:ed:67:35:38:4d:cf: 54:37:4d:cb:9b:4f:4c:5e:4b:c0:24:da:ec:30:fc:95:03:db: a5:bb:69:53:fd:4a:79:e1:1b:15:7f:90:3d:19:17:f7:b6:a9: 09:f4:55:b4:2a:48:2f:52:99:a7:fa:07:67:b7:14:1b:bb:b8: 7a:c6:07:13:c6:1a:ea:89:8e:c9:ac:6a:98:07:6e:4b:9c:0c: 90:b3:cd:b8:36:19:1a:a7:58:4f:ca:b5:24:a5:78:f9:cf:ec: 52:24:1d:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwNjMwMTU1ODU1WhcNMjUwNzA3MTU1ODU1WjAYMRYwFAYD VQQDEw02ODYyYjQ0MC01ZTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxonmrYaE4RMXEDKJxQ7CxbcfrHa/KkkGoxIRoL0b6JbL9o4E25X/PkTYTqUh L3ghnRakPSc7AIAVa8I2KGJPwPN5NXkCRN1An/eTcCcN3Wxxz3SzWA1eTQUfc7Ty zXVDq7DE38mYQ7urJf5k5BXvo08AvUyrSdMf7OrvIIGbzYR95yMr+CfLcjtGQh3H daUf+Ew6ekMnimIMYId9MkHB+Z1zAwczO5lt+9QW58D/ChGiPdo5wxTffhqhB2eL ZihLFcKZ+0d/5mTepc2pP2NuDXgcCp4iEEMWdJTr5v2Ycoik3gm0xfV8f85iWE7c q5EXOpEuuI5lu/2Tm5rl9qcn8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKh0EHd P+TkMXDhKdurzZUVw3FMMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCktpO/VuFFMn/xTKuewxKdBy96B0K1JjwqE/Cyf+ooNYa7wBigevAr gofJliOsf0NSPvvx5O9uba9Td4Y5M3EnsSqmBKy7LWvjhehjvR2zDNmIjyQ4LiUy ISVojBxs5jchFmC32eFmYI+Eza4V29s9zpD33HgSQZxx3T9VoRjrm6kG6J916j2z b26KBFWI61iAOfOzc0i8EjXAdvLtZzU4Tc9UN03Lm09MXkvAJNrsMPyVA9ulu2lT /Up54RsVf5A9GRf3tqkJ9FW0KkgvUpmn+gdntxQbu7h6xgcTxhrqiY7JrGqYB25L nAyQs824Nhkap1hPyrUkpXj5z+xSJB0E -----END CERTIFICATE-----Generated at Wed Jul 2 16:33:41 2025 by rpki-client