$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft File: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft (raw, json) Hash identifier: ltx6uOiLxaO3N4tO83grebEfZXOgwU3eNWf8vAEq29k= Subject key identifier: B7:B1:48:5C:85:5B:E2:83:29:31:9A:E4:B4:2C:A6:73:98:26:5A:05 Authority key identifier: D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11 Certificate issuer: /CN=A911F5C7/serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft Manifest number: 7A Signing time: Fri 13 Jun 2025 05:40:19 +0000 Manifest this update: Fri 13 Jun 2025 05:40:18 +0000 Manifest next update: Fri 20 Jun 2025 05:40:18 +0000 Files and hashes: 1: 1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl (hash: GMEAE7alCjDAg9jIBkuUDzD6k2NxbgtEHIW2ttQDerU=) 2: E6721B6E908211EFAC47F726C4F9AE02.roa (hash: wJxQyf0eIMTbf6R3S1EMRdfJGjX/18WoSajNIY4aU5s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5C7, serialNumber=D550470613936D7D47B7197AB5256FA06E0BDC11 Validity Not Before: Jun 13 05:40:18 2025 GMT Not After : Jun 20 05:40:18 2025 GMT Subject: CN=684bb9c3-f362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:47:ef:6d:0f:a6:c4:a1:d1:d1:44:63:80: 31:77:8c:e2:cd:25:1b:1c:68:5e:1a:1a:1f:0f:91: 20:21:c0:69:2f:66:63:5d:cf:7c:48:ff:83:af:ad: dd:59:34:7c:b6:73:3d:3a:30:69:7a:1a:9d:e7:ed: a5:cf:b1:91:13:ac:e4:6b:8a:c7:1d:b5:bc:66:b7: 2f:32:73:45:a0:ed:da:ea:c2:cc:b2:29:c0:0f:15: d8:72:3b:e2:1d:32:7a:2f:a7:6f:09:69:73:31:75: e6:8a:2a:68:77:df:63:27:da:76:57:36:03:60:08: b3:be:8f:f1:1d:90:82:08:7d:74:8e:2a:12:c8:0c: 67:b2:27:dd:4e:bb:48:c5:f0:b2:09:ed:0e:fb:5a: f2:6a:a6:3a:d9:4e:90:78:d0:da:68:60:56:d1:95: 46:4e:7b:c6:d6:be:36:e6:e5:b7:f4:0d:91:d9:38: d1:53:aa:eb:03:4a:bb:ce:e4:9b:de:f4:00:a2:64: 12:c4:45:90:16:61:6f:8f:7c:b5:f4:15:52:5b:38: 71:d9:f3:76:0e:e5:71:a1:f3:f0:29:a3:c7:12:f6: 26:f8:82:3e:b1:6e:74:59:25:00:32:48:29:ec:e9: f2:09:03:29:b2:fd:34:a6:16:fa:8c:5d:89:65:c4: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:48:5C:85:5B:E2:83:29:31:9A:E4:B4:2C:A6:73:98:26:5A:05 X509v3 Authority Key Identifier: keyid:D5:50:47:06:13:93:6D:7D:47:B7:19:7A:B5:25:6F:A0:6E:0B:DC:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1VBHBhOTbX1Htxl6tSVvoG4L3BE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5C7/3C2D18FC908211EF95AD480FC4F9AE02/1VBHBhOTbX1Htxl6tSVvoG4L3BE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:b6:cd:48:b2:3c:ba:e0:ff:46:41:6c:ab:00:0c:85:16: ae:5b:c5:4f:7b:c7:b3:b3:d6:cd:da:d9:b4:b2:c5:69:cb:b5: 89:6b:1a:50:08:f0:72:4e:61:52:b1:ee:c7:5f:d3:09:d4:b6: c5:c6:a7:7e:76:53:c6:e8:cc:ef:a8:88:b1:aa:c8:9f:ae:55: f9:63:60:cb:ac:b2:c0:66:99:79:f0:d9:4d:d8:84:5b:1d:81: 6b:4e:5a:56:f7:6f:27:d2:d2:a7:fb:5a:34:59:46:9f:af:1f: d2:6b:90:fa:f1:56:44:d3:aa:23:cf:8a:20:f5:21:0b:66:bb: 4c:a1:a1:e9:ef:ee:2d:94:e8:78:42:ee:e5:82:71:3f:df:d5: 2e:fe:11:ff:67:0e:da:95:f1:f2:8b:1d:e0:c4:89:04:11:2a: 4d:29:1a:68:8b:ee:fc:c2:45:73:08:ad:db:bc:c3:35:4c:54: 06:1b:5e:d5:2e:3e:2e:b2:95:eb:2c:d9:0a:47:f8:83:d3:44: 74:67:87:d8:09:76:7a:d7:a8:c5:d7:80:ba:9a:6b:70:47:83: 42:ed:21:06:dd:d4:7a:e6:7c:0a:9a:c4:59:e5:df:d7:1b:c6: e4:ca:64:b2:1c:43:ef:07:57:e3:61:dc:56:d3:ec:bd:a3:53: e9:1d:50:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjVDNzExMC8GA1UEBRMoRDU1MDQ3MDYxMzkzNkQ3RDQ3QjcxOTdBQjUyNTZGQTA2 RTBCREMxMTAeFw0yNTA2MTMwNTQwMThaFw0yNTA2MjAwNTQwMThaMBgxFjAUBgNV BAMTDTY4NGJiOWMzLWYzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAqkfvbQ+mxKHR0URjgDF3jOLNJRscaF4aGh8PkSAhwGkvZmNdz3xI/4Ovrd1Z NHy2cz06MGl6Gp3n7aXPsZETrORriscdtbxmty8yc0Wg7drqwsyyKcAPFdhyO+Id Mnovp28JaXMxdeaKKmh332Mn2nZXNgNgCLO+j/EdkIIIfXSOKhLIDGeyJ91Ou0jF 8LIJ7Q77WvJqpjrZTpB40NpoYFbRlUZOe8bWvjbm5bf0DZHZONFTqusDSrvO5Jve 9ACiZBLERZAWYW+PfLX0FVJbOHHZ83YO5XGh8/Apo8cS9ib4gj6xbnRZJQAySCns 6fIJAymy/TSmFvqMXYllxE5hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt7FIXIVb 4oMpMZrktCymc5gmWgUwHwYDVR0jBBgwFoAU1VBHBhOTbX1Htxl6tSVvoG4L3BEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNUM3LzNDMkQxOEZDOTA4 MjExRUY5NUFENDgwRkM0RjlBRTAyLzFWQkhCaE9UYlgxSHR4bDZ0U1Z2b0c0TDNC RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMVZCSEJoT1RiWDFIdHhsNnRTVnZvRzRMM0JFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NUM3LzNDMkQxOEZDOTA4MjExRUY5NUFENDgwRkM0RjlBRTAyLzFWQkhCaE9UYlgx SHR4bDZ0U1Z2b0c0TDNCRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB0ots1Isjy64P9GQWyrAAyFFq5bxU97x7Oz1s3a2bSyxWnLtYlrGlAI 8HJOYVKx7sdf0wnUtsXGp352U8bozO+oiLGqyJ+uVfljYMusssBmmXnw2U3YhFsd gWtOWlb3byfS0qf7WjRZRp+vH9JrkPrxVkTTqiPPiiD1IQtmu0yhoenv7i2U6HhC 7uWCcT/f1S7+Ef9nDtqV8fKLHeDEiQQRKk0pGmiL7vzCRXMIrdu8wzVMVAYbXtUu Pi6yless2QpH+IPTRHRnh9gJdnrXqMXXgLqaa3BHg0LtIQbd1HrmfAqaxFnl39cb xuTKZLIcQ+8HV+Nh3FbT7L2jU+kdUIk= -----END CERTIFICATE-----Generated at Sat Jun 14 17:12:16 2025 by rpki-client