$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: ndJcL/NRG3ssIK4K6PeRM5b/zcnzGzmDgnG/VuHHY1o= Subject key identifier: 15:AC:E9:1D:C5:B3:3B:07:54:7C:E1:0D:EC:57:6E:0D:8E:C4:49:FD Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0114 Signing time: Sun 29 Jun 2025 04:01:34 +0000 Manifest this update: Sun 29 Jun 2025 04:01:33 +0000 Manifest next update: Sun 06 Jul 2025 04:01:33 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: yOAmAnJXtNWK4LxCN73K8nr/21fNrgxxbXI46bmkOgs=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Jun 29 04:01:33 2025 GMT Not After : Jul 6 04:01:33 2025 GMT Subject: CN=6860ba9e-c02b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:3e:34:3c:18:88:54:50:d3:31:2b:a6:9b: c6:7e:2d:7b:da:2b:34:a9:81:c3:47:0b:d7:db:12: f7:49:39:a8:7d:46:f4:e4:26:21:97:f4:54:24:68: ac:de:96:1e:a4:92:e2:bf:2b:2b:01:f4:a0:a4:e4: bd:aa:a2:d4:6c:25:25:e6:69:94:0c:15:56:51:66: 35:9c:e3:76:61:f7:a6:c6:95:e8:18:f7:38:da:cb: 2c:24:9e:09:6b:32:8b:e8:bc:f0:6e:77:bc:b9:74: 66:4c:b2:41:44:c9:6e:4b:7a:c7:01:f6:33:42:4c: f5:8a:f8:71:0d:23:0d:cf:f4:31:d4:07:54:db:37: 3a:c2:f8:5f:6f:28:d6:2a:fe:53:27:74:ff:05:3a: 6b:51:81:5e:11:9c:d3:58:10:2a:55:bf:e0:d8:75: c2:18:64:c1:93:43:1f:67:f2:4c:9d:cf:d8:cb:87: 70:84:2a:60:e3:26:97:36:c3:d1:5c:35:71:f0:08: 1d:80:69:18:2c:60:eb:ba:e8:f4:79:f0:5a:d5:79: 81:8f:e1:e6:95:23:03:90:77:b2:b2:04:29:a3:f5: 1e:e9:9d:eb:f9:1b:76:b9:4c:47:c3:7e:fb:d7:c9: 27:68:ce:d3:6a:b7:30:c2:fe:19:65:b1:17:05:a3: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AC:E9:1D:C5:B3:3B:07:54:7C:E1:0D:EC:57:6E:0D:8E:C4:49:FD X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:af:f9:7e:b5:1f:d5:73:a7:43:b4:92:f5:e1:24:39:6e:d7: 54:44:d4:95:26:7e:c1:70:56:47:9a:16:85:2f:4f:f7:74:f6: 64:b9:a7:ba:11:b4:57:89:d8:9d:ca:9c:97:0b:96:1a:36:93: 06:57:f0:0b:03:e9:a5:6c:54:98:51:5c:52:9d:30:72:9b:8c: 44:bc:50:67:66:58:5c:bd:54:86:1d:35:44:c1:e5:b0:bb:f3: fc:a9:7c:a9:9c:27:15:31:a2:31:41:3b:26:1f:2e:1f:cf:88: 5b:74:21:6b:02:11:f1:66:3b:b7:23:0f:37:bb:1f:82:05:9e: 62:48:17:45:c9:cb:48:65:84:60:63:51:34:98:d8:e1:4e:c1: f1:68:2f:ba:53:77:9f:f3:1d:af:09:51:5e:62:71:5e:89:43: 3f:cb:5b:1f:0e:4f:e0:b1:b5:a6:c4:21:f5:2f:96:3a:2f:90: 27:91:20:c1:e1:24:31:e4:ef:7f:f6:af:c4:d8:c4:71:af:51: 6a:f3:8a:8c:e0:2e:af:23:f6:74:80:00:57:d5:35:33:b2:a6: 50:09:78:8d:25:35:69:73:b7:d9:8f:23:55:b7:d3:43:0f:d7: b8:d2:6f:b1:3f:b0:16:af:3b:eb:df:30:8e:b3:c5:29:f0:c2: cc:e9:39:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNjI5MDQwMTMzWhcNMjUwNzA2MDQwMTMzWjAYMRYwFAYD VQQDEw02ODYwYmE5ZS1jMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvaM+NDwYiFRQ0zErppvGfi172is0qYHDRwvX2xL3STmofUb05CYhl/RUJGis 3pYepJLivysrAfSgpOS9qqLUbCUl5mmUDBVWUWY1nON2YfemxpXoGPc42sssJJ4J azKL6Lzwbne8uXRmTLJBRMluS3rHAfYzQkz1ivhxDSMNz/Qx1AdU2zc6wvhfbyjW Kv5TJ3T/BTprUYFeEZzTWBAqVb/g2HXCGGTBk0MfZ/JMnc/Yy4dwhCpg4yaXNsPR XDVx8AgdgGkYLGDruuj0efBa1XmBj+HmlSMDkHeysgQpo/Ue6Z3r+Rt2uUxHw377 18knaM7Tarcwwv4ZZbEXBaPMcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBWs6R3F szsHVHzhDexXbg2OxEn9MB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwr/l+tR/Vc6dDtJL14SQ5btdURNSVJn7BcFZHmhaFL0/3dPZkuae6 EbRXididypyXC5YaNpMGV/ALA+mlbFSYUVxSnTBym4xEvFBnZlhcvVSGHTVEweWw u/P8qXypnCcVMaIxQTsmHy4fz4hbdCFrAhHxZju3Iw83ux+CBZ5iSBdFyctIZYRg Y1E0mNjhTsHxaC+6U3ef8x2vCVFeYnFeiUM/y1sfDk/gsbWmxCH1L5Y6L5AnkSDB 4SQx5O9/9q/E2MRxr1Fq84qM4C6vI/Z0gABX1TUzsqZQCXiNJTVpc7fZjyNVt9ND D9e40m+xP7AWrzvr3zCOs8Up8MLM6Tni -----END CERTIFICATE-----Generated at Sun Jun 29 12:38:50 2025 by rpki-client