$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: S9AeDUKidUsn+tUNehStpqJsKFv3YmdZAaDgSHszbAE= Subject key identifier: C3:A7:99:32:6B:2E:CC:83:C6:6F:47:3A:43:41:FE:BF:17:86:75:8C Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 02BB Signing time: Thu 03 Jul 2025 01:53:39 +0000 Manifest this update: Thu 03 Jul 2025 01:53:39 +0000 Manifest next update: Thu 10 Jul 2025 01:53:39 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: 26eQSVDOw6BiUTcn9px6rqkw8m2WXU71hEz2CrwwkX4=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: rCllvSopoGz8aDfU9lvXSKhRHbkj+3Ed22RiWwBDqfc=) 3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: bX2GvM4twLrpOhpUXaE3dMjzmYpyVWJx7L0sV9znlKE=) 4: EBF3EF123A2911F09F97AA47C4F9AE02.roa (hash: NHQgyn9MrNq1g/omGCRMq2I0Uiy6dz0ptIaB3+XylPM=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: 455DCGiIcAmYhveApDA31/VkiMOYSAFDxNYnnGbSEJY=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: lOUpDRjlxbgUApviuBIHPbtPtdQ0a+j/Lmf0E0RCirU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:53:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 718 (0x2ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Jul 3 01:53:39 2025 GMT Not After : Jul 10 01:53:39 2025 GMT Subject: CN=6865e2a3-5901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c5:a0:22:99:d3:b5:a9:64:f0:9a:16:df:d9: 39:b4:af:90:90:34:7a:d4:31:1f:7f:a1:34:f7:2d: 71:13:5d:e1:33:32:ff:90:de:89:fa:ae:b0:28:42: 4c:7a:5c:a5:18:bd:8c:71:cc:db:a7:ef:87:bf:c2: 74:05:f4:6e:aa:b5:15:e1:6a:96:4c:5b:a0:1e:bd: a9:60:cb:0f:75:a7:32:1b:60:e7:f6:fa:6b:c0:b5: 1d:c3:c6:f2:69:3a:4d:15:d2:9a:2b:ba:e6:dc:41: 07:89:a2:d9:b9:f6:bc:13:9e:4f:5d:66:fb:1e:2c: 7a:15:ad:b6:f9:1c:24:f7:d9:ca:ed:76:cd:7e:4b: f0:4c:55:aa:c6:e7:fe:78:87:0f:31:ec:50:94:59: 46:9d:9f:6e:40:da:d7:24:dd:25:66:c7:1e:78:cd: f4:0a:74:9e:21:58:cf:db:b9:8b:18:61:c4:2f:d3: df:7d:0c:8a:92:36:17:8a:ab:74:e1:15:45:e0:67: 4e:ca:78:ba:a6:81:2c:c7:35:a9:81:21:e7:16:8c: 09:d2:2c:93:c4:6b:41:62:8a:84:9b:ab:0b:b8:27: 69:d5:1a:09:7a:da:06:60:dd:6f:1d:3c:4b:be:6e: d5:0f:af:f9:ab:17:a8:25:09:e8:76:b8:78:ae:3f: 87:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A7:99:32:6B:2E:CC:83:C6:6F:47:3A:43:41:FE:BF:17:86:75:8C X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:22:2e:b7:4a:05:a7:47:1f:db:eb:67:69:07:82:72:ee:ec: fe:26:30:d8:4e:fc:42:79:58:71:45:bd:36:6c:44:17:b9:fb: 8e:59:f9:1f:e8:d9:b9:e2:22:79:c8:af:10:e2:30:3a:65:db: 85:25:fb:ef:f5:54:18:06:99:57:29:b3:23:71:88:25:90:24: 30:63:f9:b3:5e:2a:27:f8:29:86:34:1b:9f:f4:70:57:a5:d8: ca:e3:c0:c0:96:1c:13:10:d5:4d:c5:41:d4:80:1f:bc:96:be: ba:8c:a1:54:7f:27:ca:8d:a3:f2:de:83:a3:ef:52:c7:a6:b1: e8:70:d1:47:cd:f9:f9:36:9d:33:48:f8:cd:3b:2e:b3:cc:11: 76:59:42:7c:eb:63:b2:4e:c0:cf:4c:7f:04:68:50:9f:25:23: 36:d6:c1:df:c3:40:2d:0c:64:99:7a:fe:08:0a:40:73:7a:01: aa:c1:4d:fd:49:92:7c:26:18:68:e1:49:1a:97:b3:09:d4:df: d7:48:10:8b:ff:15:23:06:38:ec:bc:93:c9:2a:b9:ab:a3:ef: 5e:1d:bc:e1:a8:03:4a:60:2f:47:7a:50:cd:51:23:59:7b:95: 21:25:22:41:ab:c0:e2:0e:74:1c:65:80:54:58:7e:05:f5:0b: df:48:b1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwNzAzMDE1MzM5WhcNMjUwNzEwMDE1MzM5WjAYMRYwFAYD VQQDEw02ODY1ZTJhMy01OTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoMWgIpnTtalk8JoW39k5tK+QkDR61DEff6E09y1xE13hMzL/kN6J+q6wKEJM elylGL2Mcczbp++Hv8J0BfRuqrUV4WqWTFugHr2pYMsPdacyG2Dn9vprwLUdw8by aTpNFdKaK7rm3EEHiaLZufa8E55PXWb7Hix6Fa22+Rwk99nK7XbNfkvwTFWqxuf+ eIcPMexQlFlGnZ9uQNrXJN0lZsceeM30CnSeIVjP27mLGGHEL9PffQyKkjYXiqt0 4RVF4GdOyni6poEsxzWpgSHnFowJ0iyTxGtBYoqEm6sLuCdp1RoJetoGYN1vHTxL vm7VD6/5qxeoJQnodrh4rj+H0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOnmTJr LsyDxm9HOkNB/r8XhnWMMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlIi63SgWnRx/b62dpB4Jy7uz+JjDYTvxCeVhxRb02bEQXufuOWfkf 6Nm54iJ5yK8Q4jA6ZduFJfvv9VQYBplXKbMjcYglkCQwY/mzXion+CmGNBuf9HBX pdjK48DAlhwTENVNxUHUgB+8lr66jKFUfyfKjaPy3oOj71LHprHocNFHzfn5Np0z SPjNOy6zzBF2WUJ862OyTsDPTH8EaFCfJSM21sHfw0AtDGSZev4ICkBzegGqwU39 SZJ8Jhho4Ukal7MJ1N/XSBCL/xUjBjjsvJPJKrmro+9eHbzhqANKYC9HelDNUSNZ e5UhJSJBq8DiDnQcZYBUWH4F9QvfSLG7 -----END CERTIFICATE-----Generated at Thu Jul 3 21:29:49 2025 by rpki-client