$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: 5W/PJsxnGEH/R9ICjmfVGdpsJih81lKf6rrv0Y+jqpQ= Subject key identifier: 0F:8F:F3:04:2C:A7:14:73:7F:50:7E:3E:C9:59:56:6F:37:A1:EA:EE Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 5C Signing time: Wed 18 Jun 2025 14:27:31 +0000 Manifest this update: Wed 18 Jun 2025 14:27:31 +0000 Manifest next update: Wed 25 Jun 2025 14:27:31 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: nEKnlwhIaCngMij5drpiPmVoFWT0i4tIrDT3fdtB90w=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aHRMsUiiCZcaoYDZ7FKWAlCPT4264RLq5QWpPmMZea0=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: GDTBPp4WE9Ezmla7awNs0CkIUNNSTnoRfm7f06nojtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Jun 18 14:27:31 2025 GMT Not After : Jun 25 14:27:31 2025 GMT Subject: CN=6852ccd3-5e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ed:c4:ff:96:b2:80:65:8c:4e:bc:1e:b0:2a: 8d:a5:f9:52:30:fd:d0:18:bc:6c:a7:05:32:e1:1d: 97:04:f8:21:86:4a:de:ab:60:1a:ec:0d:f3:f8:72: 8f:04:02:e0:f1:f0:35:48:c3:0a:61:70:7d:41:17: 52:96:dd:31:19:8a:53:14:91:38:77:b1:23:58:b7: 43:d5:0a:8a:d6:95:06:79:ea:1a:90:8f:b0:62:9c: c2:97:f9:02:c1:94:84:54:c6:c7:bc:20:96:64:4e: ce:0e:b6:85:d5:a6:7c:83:45:f6:83:01:80:bf:19: 53:85:7f:39:b3:3f:0b:e5:97:5d:db:29:14:05:47: 16:2b:17:b3:f8:b7:e5:6c:82:7d:4b:3d:a3:d5:96: 2d:f8:7d:53:b9:34:2a:05:19:10:e5:2e:d4:1b:59: ea:75:e2:4b:da:a3:71:be:84:02:7f:d2:7c:cf:dc: c7:93:e3:5c:d7:b9:d9:5b:ec:eb:c9:75:9a:ee:2c: 05:94:5c:f2:73:98:45:cd:46:8b:0e:db:bb:eb:ed: 02:ea:12:dd:f5:d3:fa:15:59:5c:b7:1c:04:35:72: 8f:d0:91:c3:91:7a:d3:03:5e:ce:59:b0:f5:60:14: 61:b9:9c:75:cf:fb:5e:1f:b3:66:e8:1f:47:e0:80: 3a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8F:F3:04:2C:A7:14:73:7F:50:7E:3E:C9:59:56:6F:37:A1:EA:EE X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:85:5d:31:08:42:79:90:37:f3:3f:70:92:00:19:06:66:28: 59:b4:bb:84:98:45:21:d7:50:6b:21:11:0f:4d:ff:ae:f8:4c: 68:fe:12:b2:95:98:d1:38:52:a6:d3:cc:31:5e:a6:16:7b:5e: ad:54:ab:37:e3:33:f4:90:00:2c:df:50:6a:7e:a0:78:31:50: 35:80:06:53:6f:29:f2:c6:ae:e1:88:6c:b5:61:64:bd:4a:ee: f0:b8:ce:16:0e:f7:14:e5:0a:56:54:f4:4b:ce:d6:5a:11:2f: 03:8c:67:f9:0f:89:84:94:19:9f:11:d5:63:e5:43:f9:fc:89: e2:40:9e:47:5a:37:16:10:59:2e:ef:74:c0:25:a4:77:bc:22: 97:1e:a2:5d:d2:f5:5c:1d:b6:dd:60:ad:ad:27:b3:c3:03:a7: 77:cf:5f:8a:42:19:4a:f5:c7:a9:73:dd:44:1d:25:3d:fd:b7: 36:b3:1d:05:cb:ac:0e:e2:b8:5e:52:2a:98:97:dc:4d:37:90: f3:0f:dd:a5:c5:aa:90:bf:0b:11:02:ab:f3:75:5f:ac:ac:e2: bd:cd:00:51:5f:f1:35:1f:c2:83:fb:06:9d:52:27:21:fd:45: a8:87:0f:b7:09:8d:43:3f:da:8e:81:65:21:9a:df:69:02:27: c3:87:f9:24 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA2MTgxNDI3MzFaFw0yNTA2MjUxNDI3MzFaMBgxFjAUBgNV BAMTDTY4NTJjY2QzLTVlNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL7cT/lrKAZYxOvB6wKo2l+VIw/dAYvGynBTLhHZcE+CGGSt6rYBrsDfP4co8E AuDx8DVIwwphcH1BF1KW3TEZilMUkTh3sSNYt0PVCorWlQZ56hqQj7BinMKX+QLB lIRUxse8IJZkTs4OtoXVpnyDRfaDAYC/GVOFfzmzPwvll13bKRQFRxYrF7P4t+Vs gn1LPaPVli34fVO5NCoFGRDlLtQbWep14kvao3G+hAJ/0nzP3MeT41zXudlb7OvJ dZruLAWUXPJzmEXNRosO27vr7QLqEt310/oVWVy3HAQ1co/QkcORetMDXs5ZsPVg FGG5nHXP+14fs2boH0fggDq/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUD4/zBCyn FHN/UH4+yVlWbzeh6u4wHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMSFXTEIQnmQN/M/cJIAGQZmKFm0u4SYRSHXUGshEQ9N/674TGj+ErKV mNE4UqbTzDFephZ7Xq1UqzfjM/SQACzfUGp+oHgxUDWABlNvKfLGruGIbLVhZL1K 7vC4zhYO9xTlClZU9EvO1loRLwOMZ/kPiYSUGZ8R1WPlQ/n8ieJAnkdaNxYQWS7v dMAlpHe8Ipceol3S9Vwdtt1gra0ns8MDp3fPX4pCGUr1x6lz3UQdJT39tzazHQXL rA7iuF5SKpiX3E03kPMP3aXFqpC/CxECq/N1X6ys4r3NAFFf8TUfwoP7Bp1SJyH9 RaiHD7cJjUM/2o6BZSGa32kCJ8OH+SQ= -----END CERTIFICATE-----Generated at Thu Jun 19 04:37:24 2025 by rpki-client