$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: dxeTGqW4pu3BAYzgr/EgTyhhSswy0CPJEbpTg6U7tf0= Subject key identifier: ED:A7:E0:58:F4:DF:3C:2C:E4:6F:5B:DE:CA:34:52:BE:46:32:75:BC Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 078E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 077F Signing time: Sat 28 Jun 2025 21:10:22 +0000 Manifest this update: Sat 28 Jun 2025 21:10:22 +0000 Manifest next update: Sat 05 Jul 2025 21:10:22 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: vSBWf/KiglA3W6MPiuetjfRpXzs16wzFambJWUIOpq8=) 2: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: eFS1nhS/cjjP4D0ssaf1AaxH+1D33Vf2JZuqTy0/YEI=) 3: 3E8742D63F5911F09438792BC4F9AE02.roa (hash: KRqaCDUz3xDXSJIF8H5ZMsARRFjF1KlUr9/szS6ztXQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:10:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1934 (0x78e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Jun 28 21:10:22 2025 GMT Not After : Jul 5 21:10:22 2025 GMT Subject: CN=68605a3e-10a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f0:e6:47:a7:7d:e2:6c:51:33:c9:d5:84:54: a8:44:a9:07:77:da:6a:59:2f:1c:00:b6:e3:53:c9: 57:46:89:7f:76:86:e1:2e:87:bd:5b:1d:74:20:63: aa:d5:19:bc:44:58:e3:97:2d:13:a1:e4:27:e7:89: e0:f6:e1:c0:8f:5d:fe:ed:35:6e:0c:dd:67:10:76: 2a:3e:a9:31:32:5d:ab:32:50:22:b8:ff:60:f1:18: f4:ee:99:18:95:8c:2e:23:4e:84:c9:ba:7f:57:83: 18:25:43:3c:63:91:70:c1:c7:c7:9f:81:dd:c8:84: e4:67:26:10:10:00:26:9c:70:ee:9f:12:5d:c7:74: 69:5e:7b:bf:c1:76:9d:08:6e:4f:34:44:99:77:11: c8:7f:00:d1:a1:51:d4:de:77:d5:06:c9:a6:ab:0e: 75:3f:47:68:bb:b2:06:4f:79:e3:bd:a1:8b:44:71: a5:f7:c6:f9:23:f8:cd:74:cb:35:12:b2:0b:d3:fc: 37:cf:af:9a:01:51:5f:30:14:71:1a:fe:24:63:ee: 33:72:49:e5:76:6f:4f:ed:90:61:5c:e7:40:84:7e: 2f:9c:7d:92:87:78:9b:79:32:43:15:99:8b:11:c6: fb:62:46:63:41:17:e5:e2:ab:4b:0e:e4:34:0d:50: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:E0:58:F4:DF:3C:2C:E4:6F:5B:DE:CA:34:52:BE:46:32:75:BC X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d7:2d:bb:6b:44:17:25:43:ec:f2:57:17:cc:56:a9:00:44:20: 96:df:4a:7b:91:be:af:2c:22:71:99:bf:92:10:bc:a9:08:f6: 9b:8c:4a:d1:d5:dd:3a:34:8e:4b:e5:5a:a1:af:e8:89:09:13: a4:6d:de:9b:b4:6f:da:64:86:f4:48:a4:d8:6e:f4:0d:a1:b9: f9:78:5d:f0:ff:f7:79:31:66:39:be:24:bb:48:bd:f5:e4:02: 6c:b8:01:7c:0f:c6:e3:0b:a8:7a:12:26:31:a8:17:32:e1:be: db:db:dc:4f:f4:30:0d:79:fc:41:28:98:3e:ce:6b:53:36:24: 7e:3d:d3:cc:e1:d4:f1:25:e2:60:28:d6:d2:53:2c:79:9f:fc: cd:de:87:14:8b:f2:5c:df:02:0c:38:02:e6:09:ea:ee:ba:23: 87:36:a5:7f:a8:0b:81:1a:4e:8d:ee:21:d1:37:25:da:c0:f3: 21:73:ea:cd:51:8d:9b:b7:21:ea:85:9c:84:9d:c3:f8:7f:73: 83:a9:18:db:b7:5d:58:75:4b:73:ae:e2:f8:06:24:73:0c:36: 21:72:47:7f:05:78:8a:81:3d:15:b7:0f:43:85:56:b6:2f:4b: 66:dc:ef:2c:05:3d:64:3a:46:66:d3:a0:00:2e:16:bc:cf:f5: 08:27:4f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB44wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUwNjI4MjExMDIyWhcNMjUwNzA1MjExMDIyWjAYMRYwFAYD VQQDEw02ODYwNWEzZS0xMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfDmR6d94mxRM8nVhFSoRKkHd9pqWS8cALbjU8lXRol/dobhLoe9Wx10IGOq 1Rm8RFjjly0ToeQn54ng9uHAj13+7TVuDN1nEHYqPqkxMl2rMlAiuP9g8Rj07pkY lYwuI06Eybp/V4MYJUM8Y5FwwcfHn4HdyITkZyYQEAAmnHDunxJdx3RpXnu/wXad CG5PNESZdxHIfwDRoVHU3nfVBsmmqw51P0dou7IGT3njvaGLRHGl98b5I/jNdMs1 ErIL0/w3z6+aAVFfMBRxGv4kY+4zcknldm9P7ZBhXOdAhH4vnH2Sh3ibeTJDFZmL Ecb7YkZjQRfl4qtLDuQ0DVDWgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2n4Fj0 3zws5G9b3so0Ur5GMnW8MB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDXLbtrRBclQ+zyVxfMVqkARCCW30p7kb6vLCJxmb+SELypCPabjErR 1d06NI5L5Vqhr+iJCROkbd6btG/aZIb0SKTYbvQNobn5eF3w//d5MWY5viS7SL31 5AJsuAF8D8bjC6h6EiYxqBcy4b7b29xP9DANefxBKJg+zmtTNiR+PdPM4dTxJeJg KNbSUyx5n/zN3ocUi/Jc3wIMOALmCeruuiOHNqV/qAuBGk6N7iHRNyXawPMhc+rN UY2btyHqhZyEncP4f3ODqRjbt11YdUtzruL4BiRzDDYhckd/BXiKgT0Vtw9DhVa2 L0tm3O8sBT1kOkZm06AALha8z/UIJ0/B -----END CERTIFICATE-----Generated at Mon Jun 30 20:42:18 2025 by rpki-client