$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: 0zcSpgYGlFMMmd+kC/jozkL7X2mdfWt4yYcq66X4ZmE= Subject key identifier: 9A:3D:58:7A:44:5E:9F:94:79:72:6C:81:00:4E:97:9C:CB:C9:DE:FB Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: 7F Signing time: Thu 19 Jun 2025 05:59:40 +0000 Manifest this update: Thu 19 Jun 2025 05:59:40 +0000 Manifest next update: Thu 26 Jun 2025 05:59:40 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: pTpH4fDIheL+izUxSrY8TLPgWy5tOVxbP30Rpux1SYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 05:59:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Jun 19 05:59:40 2025 GMT Not After : Jun 26 05:59:40 2025 GMT Subject: CN=6853a74c-0b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6a:45:6b:8f:d2:b7:b5:ea:fc:5d:be:39:03: 1f:31:a8:88:bc:a4:38:ae:46:cc:07:bb:bc:00:57: 04:b0:98:d5:69:65:de:2d:e4:30:f5:58:e4:f4:ce: 4f:cb:ee:5f:b5:ee:8e:34:4d:e2:e6:4f:0d:12:b5: a0:8e:91:ce:14:43:04:04:fb:cd:9c:c6:8a:1e:b5: d9:93:0d:ac:f2:1c:e2:26:5a:df:f5:c6:b6:87:1b: d3:5d:9b:73:40:96:9b:77:c1:c2:bb:30:72:f3:52: aa:49:f2:6a:94:a0:9c:a4:c7:76:4b:ab:f6:71:d6: 72:36:85:46:70:4f:18:1a:34:4f:13:80:c1:2f:85: 71:32:28:02:49:e8:17:2a:64:a8:91:c0:a2:5d:10: 4f:e5:0e:2e:8f:c3:b0:d7:54:c5:76:c2:d6:74:1c: 64:91:cc:8f:60:68:b2:d4:ed:e6:60:bf:d6:06:7b: 8c:a6:f6:2e:52:06:e7:3e:9f:c4:29:13:98:9a:be: f4:92:be:dd:8d:02:4b:42:50:d0:e6:fe:4b:a8:f6: 9a:3c:b4:ac:b3:7b:6a:dd:aa:36:92:ee:fe:0c:4b: f1:14:00:1f:70:2d:a5:d0:54:37:08:ab:20:2f:8a: 1d:44:ba:3d:a6:09:ca:b6:5f:be:04:72:65:39:9d: d7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:58:7A:44:5E:9F:94:79:72:6C:81:00:4E:97:9C:CB:C9:DE:FB X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:ad:7b:6d:5d:44:22:af:31:24:d2:5c:5a:e3:b6:75:13:89: bf:8d:ba:00:27:3b:df:e3:91:e4:c1:61:ad:58:5f:6a:de:fb: 82:9f:56:ad:64:bf:f7:11:71:10:dc:34:bf:e1:d7:4a:b9:54: f8:3f:7f:b6:80:8e:c3:0b:18:4d:b8:d2:e3:aa:3e:22:cb:e5: 22:df:41:bc:ee:fa:f1:a8:1c:3b:4c:59:10:a6:45:31:3d:69: 4b:62:07:65:59:ac:a2:8f:cf:82:64:fb:f0:59:ce:e0:e1:65: 11:b8:e4:b0:f2:8d:8b:f3:30:97:95:26:18:ac:aa:30:de:cf: 66:46:72:4c:93:61:a6:7e:d5:04:9d:12:99:33:05:80:20:bc: b2:19:2e:f3:ce:0f:c7:79:64:b1:78:45:5b:43:dd:a2:ad:2d: c0:26:0c:48:8a:08:a6:67:4f:d0:cc:f3:82:f8:26:5b:cf:98: f3:31:cf:be:47:08:c4:80:71:a0:33:42:2e:2f:a8:4b:da:74: 81:15:42:f7:dd:11:e1:b1:33:a9:0b:f4:83:81:ed:7d:f6:f7: 06:7a:66:0b:2d:48:5d:f6:bf:30:c8:9f:92:e6:35:09:a4:f4: 11:ee:ae:c6:46:b3:9b:1f:2d:71:c9:7c:75:27:fb:f2:e2:52: f3:a0:4a:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx Q0IwNTExMC8GA1UEBRMoMDdCMjVGN0U2NUNCNjI3MTA4QjBEOTRDMThGN0Y1NzlE MzM0NzgxODAeFw0yNTA2MTkwNTU5NDBaFw0yNTA2MjYwNTU5NDBaMBgxFjAUBgNV BAMTDTY4NTNhNzRjLTBiNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9akVrj9K3ter8Xb45Ax8xqIi8pDiuRswHu7wAVwSwmNVpZd4t5DD1WOT0zk/L 7l+17o40TeLmTw0StaCOkc4UQwQE+82cxooetdmTDazyHOImWt/1xraHG9Ndm3NA lpt3wcK7MHLzUqpJ8mqUoJykx3ZLq/Zx1nI2hUZwTxgaNE8TgMEvhXEyKAJJ6Bcq ZKiRwKJdEE/lDi6Pw7DXVMV2wtZ0HGSRzI9gaLLU7eZgv9YGe4ym9i5SBuc+n8Qp E5iavvSSvt2NAktCUNDm/kuo9po8tKyze2rdqjaS7v4MS/EUAB9wLaXQVDcIqyAv ih1Euj2mCcq2X74EcmU5ndc5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmj1YekRe n5R5cmyBAE6XnMvJ3vswHwYDVR0jBBgwFoAUB7JffmXLYnEIsNlMGPf1edM0eBgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFDQjA1L0ZBNTJERUMyOEE5 QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVC Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQjdKZmZtWExZbkVJc05sTUdQZjFlZE0wZUJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFD QjA1L0ZBNTJERUMyOEE5QTExRUZCOEFBNTY0OEM0RjlBRTAyL0I3SmZmbVhMWW5F SXNObE1HUGYxZWRNMGVCZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKate21dRCKvMSTSXFrjtnUTib+NugAnO9/jkeTBYa1YX2re+4KfVq1k v/cRcRDcNL/h10q5VPg/f7aAjsMLGE240uOqPiLL5SLfQbzu+vGoHDtMWRCmRTE9 aUtiB2VZrKKPz4Jk+/BZzuDhZRG45LDyjYvzMJeVJhisqjDez2ZGckyTYaZ+1QSd EpkzBYAgvLIZLvPOD8d5ZLF4RVtD3aKtLcAmDEiKCKZnT9DM84L4JlvPmPMxz75H CMSAcaAzQi4vqEvadIEVQvfdEeGxM6kL9IOB7X329wZ6ZgstSF32vzDIn5LmNQmk 9BHursZGs5sfLXHJfHUn+/LiUvOgSoI= -----END CERTIFICATE-----Generated at Thu Jun 19 11:08:41 2025 by rpki-client