$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: KI31PYr/0w7/5ZCI4ANHH3/lfeCe456+YcRUZlwsbLo= Subject key identifier: 16:35:7B:52:87:F7:E7:39:F4:41:0C:9C:08:CD:22:40:05:6F:32:C5 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1AEC Signing time: Wed 02 Jul 2025 16:26:15 +0000 Manifest this update: Wed 02 Jul 2025 16:26:14 +0000 Manifest next update: Wed 09 Jul 2025 16:26:14 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: jR1D1HGXOkUAbIIKGiHf+d5D1aZpC9468L2l4K0FcEg=) 2: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: LOoxZWeDgU2+wusXufQ94pg+OOkfT8j3WfNTQznwf90=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: LUrVRFHpHNZiTqSy0L8SOTOMfbUQlb1OEo2uN/0dmZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6933 (0x1b15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Jul 2 16:26:14 2025 GMT Not After : Jul 9 16:26:14 2025 GMT Subject: CN=68655da7-9040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:0b:37:fe:cd:38:58:32:6b:3a:eb:4f:e2: ef:10:a5:32:0d:90:41:29:dd:b7:26:69:50:5e:f4: 15:e1:e5:c2:80:f1:54:46:ce:9e:66:58:e0:a8:46: c0:6f:f2:3a:14:e3:ce:75:a5:aa:ac:cb:39:0e:72: ae:f7:32:92:51:11:4b:ce:5e:a9:be:56:b0:52:be: 92:ca:03:ef:0e:bd:4e:38:3e:fd:15:c3:1c:49:37: 3b:49:dc:d0:89:0c:99:9b:55:66:21:d5:5d:8d:4e: c4:6d:cc:f2:99:7b:ae:b6:d5:06:5d:20:00:ac:ed: 4a:0e:f0:d2:0f:d3:c2:4e:49:1e:07:d0:65:82:9a: ed:24:f9:3a:4b:66:ba:d1:45:19:16:7f:a6:27:94: 7f:9e:e5:a0:7a:d2:ff:50:33:e2:cc:46:84:c0:64: b0:62:95:47:0b:49:cf:6b:df:3d:da:2b:fb:63:4e: 17:99:b3:79:af:38:31:a9:a1:d4:73:de:8f:56:bf: 92:33:59:cb:fd:4d:f8:46:fd:30:4a:22:2a:e0:16: ea:b5:dd:8e:1d:b3:eb:37:5c:32:66:f1:49:9a:2e: d0:ad:0c:00:9c:50:b0:c4:c8:31:b8:1d:fe:50:2a: 95:e5:2c:cf:5f:fe:65:43:e4:8a:29:e9:b8:3c:a4: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:35:7B:52:87:F7:E7:39:F4:41:0C:9C:08:CD:22:40:05:6F:32:C5 X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9c:ed:47:55:38:91:0e:2f:cd:e9:0d:b2:90:90:20:64:6f: bd:c0:15:1c:55:39:3e:78:80:31:14:c5:f4:66:d5:56:85:2c: 59:32:83:59:d2:16:57:62:bb:3e:e8:91:fa:80:87:06:6e:4a: c3:52:fc:72:69:ee:69:0c:ec:37:22:87:95:f7:c6:77:05:88: 99:1e:84:49:dc:31:bc:e2:a7:72:ca:a5:17:ad:47:26:3e:ca: 12:ae:aa:39:4d:93:3d:f2:bd:ba:be:18:6a:d7:5b:37:80:37: 55:65:10:3b:7d:3b:f4:02:44:02:ac:13:c2:d2:2f:a9:a5:44: a3:3f:7a:a1:db:4c:f4:a0:42:26:18:a4:91:ed:43:30:2d:84: 55:f7:91:02:05:6b:aa:a5:fd:4a:0d:be:2f:85:62:5d:c9:ab: ea:a8:40:c2:f2:f9:b1:a6:75:aa:c6:85:1f:57:17:83:43:fc: 95:1b:69:24:16:54:f4:fd:76:d2:16:2e:84:58:46:d3:e7:e0: 25:c3:ae:69:7f:fd:0e:73:40:10:06:ba:48:bc:68:ad:35:93: b7:2b:0e:0c:0e:41:9e:6a:22:73:fe:43:48:7b:6f:d1:c3:10: 8f:37:05:d0:11:25:6b:49:7b:56:a7:a1:b2:ea:62:79:8f:f2: 9f:3d:fa:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwNzAyMTYyNjE0WhcNMjUwNzA5MTYyNjE0WjAYMRYwFAYD VQQDEw02ODY1NWRhNy05MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvK0LN/7NOFgyazrrT+LvEKUyDZBBKd23JmlQXvQV4eXCgPFURs6eZljgqEbA b/I6FOPOdaWqrMs5DnKu9zKSURFLzl6pvlawUr6SygPvDr1OOD79FcMcSTc7SdzQ iQyZm1VmIdVdjU7EbczymXuuttUGXSAArO1KDvDSD9PCTkkeB9BlgprtJPk6S2a6 0UUZFn+mJ5R/nuWgetL/UDPizEaEwGSwYpVHC0nPa9892iv7Y04XmbN5rzgxqaHU c96PVr+SM1nL/U34Rv0wSiIq4Bbqtd2OHbPrN1wyZvFJmi7QrQwAnFCwxMgxuB3+ UCqV5SzPX/5lQ+SKKem4PKRRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBY1e1KH 9+c59EEMnAjNIkAFbzLFMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcnO1HVTiRDi/N6Q2ykJAgZG+9wBUcVTk+eIAxFMX0ZtVWhSxZMoNZ 0hZXYrs+6JH6gIcGbkrDUvxyae5pDOw3IoeV98Z3BYiZHoRJ3DG84qdyyqUXrUcm PsoSrqo5TZM98r26vhhq11s3gDdVZRA7fTv0AkQCrBPC0i+ppUSjP3qh20z0oEIm GKSR7UMwLYRV95ECBWuqpf1KDb4vhWJdyavqqEDC8vmxpnWqxoUfVxeDQ/yVG2kk FlT0/XbSFi6EWEbT5+Alw65pf/0Oc0AQBrpIvGitNZO3Kw4MDkGeaiJz/kNIe2/R wxCPNwXQESVrSXtWp6Gy6mJ5j/KfPfrL -----END CERTIFICATE-----Generated at Wed Jul 2 20:04:01 2025 by rpki-client