$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: w8lA4gwTVR5QIs7hirkFsG2Im0J8j122qTU7XfYd6zY= Subject key identifier: CA:23:8C:AD:9C:E3:A6:F6:3D:59:B4:01:B0:55:67:49:95:59:C7:05 Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 060B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 05FC Signing time: Wed 02 Jul 2025 23:16:56 +0000 Manifest this update: Wed 02 Jul 2025 23:16:56 +0000 Manifest next update: Wed 09 Jul 2025 23:16:56 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: gfP63NLtfpzaKg0hca/K5swQsCBOstzjCWVKEHMFBBw=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: T+T+1Z/cawjlF+EJ2TY+wUSApzd2WBwRzpxk9RHEA54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1547 (0x60b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Jul 2 23:16:56 2025 GMT Not After : Jul 9 23:16:56 2025 GMT Subject: CN=6865bde8-df46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:19:a2:02:d2:9b:91:60:d9:9b:6f:5d:39: 5f:db:64:b9:88:84:dc:95:19:8b:af:91:31:8c:00: 35:d2:93:5c:71:6b:c5:b8:d8:b8:fa:2c:db:97:69: e3:93:f5:93:2a:75:23:41:ce:2f:55:cd:9f:95:7e: c0:f9:a8:85:63:d2:85:31:4d:a4:9a:7d:a5:b0:c0: db:02:3e:c4:9c:a8:76:f9:0c:9b:7f:16:a5:e5:c6: d3:c7:83:4c:9e:f2:be:1a:41:de:ef:0a:e1:cf:03: 85:ed:01:e1:f1:64:23:55:27:f7:44:96:d3:f7:df: 10:e2:e2:f6:cd:07:cb:74:36:a5:b4:9c:27:ae:f1: 01:b9:9d:3a:93:00:6a:cb:da:3f:64:76:09:ee:d5: 18:63:aa:bb:ba:5f:7f:c4:03:78:2d:21:69:d2:16: a8:95:7c:87:41:7e:02:72:c9:15:f8:a9:6a:40:7a: 00:ec:74:06:9b:c9:68:fd:2b:95:d6:b3:a0:7b:71: d6:dc:71:dd:ef:70:e6:01:a9:4d:ea:cf:f5:04:a5: 17:9d:59:dc:25:3e:56:9a:47:f1:9e:af:b4:fc:4a: 82:cc:c5:ca:38:3f:5f:a7:86:ba:b2:e8:3e:7b:2b: 9b:80:61:6c:d5:02:d2:d5:70:a7:05:d6:23:4d:bf: bb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:23:8C:AD:9C:E3:A6:F6:3D:59:B4:01:B0:55:67:49:95:59:C7:05 X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:e1:ed:9a:04:fc:c4:33:c3:79:13:54:11:4a:17:94:8c: 2c:84:e3:4a:34:e5:b8:f7:c1:c6:97:1f:fd:7e:2a:30:b9:fd: f2:df:d7:40:8f:7d:3b:91:7f:8c:aa:f9:c5:ad:3a:1c:73:75: 7a:3f:60:c1:30:a7:81:1f:73:dd:a4:7e:81:48:34:80:b2:cf: 30:75:4e:41:0e:5c:1e:82:fd:eb:b3:70:0f:0b:fe:e6:5f:e5: 1f:7f:94:76:c0:49:f3:fd:20:51:3a:3d:f2:d5:5e:17:aa:bc: e9:b2:f6:3f:7e:5c:ff:2a:e6:ab:7c:40:49:0a:c4:75:cc:23: 80:8e:a5:28:ce:5c:4b:33:5a:51:63:9d:44:3d:2d:c7:b1:8a: fe:a2:96:bb:ef:ee:e3:a5:18:fa:05:41:74:53:b7:ca:60:b8: 57:5d:ff:5c:b9:56:02:e8:e6:67:90:58:c1:a9:af:73:68:dc: 70:ed:6e:76:d8:b7:36:3d:6c:33:bd:d7:ac:df:4f:0f:56:69: 58:fc:6e:5e:aa:6d:f9:c1:c9:62:55:70:a2:bc:29:ef:62:da: 41:69:fd:95:0a:17:90:c5:3d:08:55:9e:d5:0b:fa:6f:8f:ec: 8c:4a:f2:89:5f:63:4d:c6:e8:5a:d3:b0:4c:86:f7:fb:36:7e: 64:b1:fa:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUwNzAyMjMxNjU2WhcNMjUwNzA5MjMxNjU2WjAYMRYwFAYD VQQDEw02ODY1YmRlOC1kZjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxWkZogLSm5Fg2ZtvXTlf22S5iITclRmLr5ExjAA10pNccWvFuNi4+izbl2nj k/WTKnUjQc4vVc2flX7A+aiFY9KFMU2kmn2lsMDbAj7EnKh2+Qybfxal5cbTx4NM nvK+GkHe7wrhzwOF7QHh8WQjVSf3RJbT998Q4uL2zQfLdDaltJwnrvEBuZ06kwBq y9o/ZHYJ7tUYY6q7ul9/xAN4LSFp0haolXyHQX4CcskV+KlqQHoA7HQGm8lo/SuV 1rOge3HW3HHd73DmAalN6s/1BKUXnVncJT5Wmkfxnq+0/EqCzMXKOD9fp4a6sug+ eyubgGFs1QLS1XCnBdYjTb+7gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMojjK2c 46b2PVm0AbBVZ0mVWccFMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyLuHtmgT8xDPDeRNUEUoXlIwshONKNOW498HGlx/9fiowuf3y39dA j307kX+MqvnFrTocc3V6P2DBMKeBH3PdpH6BSDSAss8wdU5BDlwegv3rs3APC/7m X+Uff5R2wEnz/SBROj3y1V4XqrzpsvY/flz/KuarfEBJCsR1zCOAjqUozlxLM1pR Y51EPS3HsYr+opa77+7jpRj6BUF0U7fKYLhXXf9cuVYC6OZnkFjBqa9zaNxw7W52 2Lc2PWwzvdes308PVmlY/G5eqm35wcliVXCivCnvYtpBaf2VCheQxT0IVZ7VC/pv j+yMSvKJX2NNxuha07BMhvf7Nn5ksfo2 -----END CERTIFICATE-----Generated at Thu Jul 3 00:53:08 2025 by rpki-client