$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: FdQTLVOCreGHWlR+qllba1+fcKa72/sWkDwX63RHqCo= Subject key identifier: DF:66:82:CC:96:3D:C1:3F:28:C0:39:93:97:5B:C6:F5:D9:74:0D:67 Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 01D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 01CE Signing time: Mon 23 Jun 2025 01:56:11 +0000 Manifest this update: Mon 23 Jun 2025 01:56:11 +0000 Manifest next update: Mon 30 Jun 2025 01:56:11 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: mDUYGkqK2g9k6gNwym1ib9tywnIY2pKJ7NU5ld0h2G0=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 01:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 468 (0x1d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Jun 23 01:56:11 2025 GMT Not After : Jun 30 01:56:11 2025 GMT Subject: CN=6858b43b-5ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:e4:09:99:44:3e:09:cd:6f:96:00:7a:16: d3:ca:0d:84:62:42:3f:d3:69:af:3a:96:7f:c1:e5: 3f:dc:d2:13:f2:23:65:77:a4:bb:9b:84:c3:f0:ba: d5:14:6a:7b:ea:42:4f:b7:bd:1e:ca:45:28:a0:50: ed:8d:f4:00:fe:15:c6:62:17:de:e0:51:40:8d:ea: 4a:22:a8:ce:40:83:0b:f9:c8:fb:d7:c6:a7:af:5c: bd:b7:12:40:b2:bd:ed:fd:6d:7f:e1:29:65:4c:78: 81:cd:44:fa:e7:09:9d:78:82:55:3e:83:c6:6a:cb: e9:56:c0:a3:8f:3c:5e:41:ce:f3:4d:af:7f:9b:ba: d1:f7:7d:9e:57:e5:86:75:7d:c9:20:4d:88:2a:2f: 9a:28:e3:88:c3:c0:d2:35:4d:e9:74:9e:63:66:50: d6:3c:55:af:3c:c1:46:c4:b7:f2:29:5d:97:ef:46: c6:5f:70:ad:c3:c4:eb:29:14:5d:ec:90:7c:93:a5: a5:68:8a:4d:0b:e3:4d:36:80:3c:70:95:06:bc:dc: e5:e0:61:dd:4c:e1:23:93:14:2b:5f:56:af:ae:4c: 1e:a1:97:3d:6d:5c:9d:8b:35:6d:31:19:5f:67:42: 57:6b:a4:eb:db:4c:98:5b:30:0a:a4:bd:f8:36:0f: 73:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:66:82:CC:96:3D:C1:3F:28:C0:39:93:97:5B:C6:F5:D9:74:0D:67 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:ed:a9:84:81:d4:47:6a:64:5b:63:78:bb:a5:21:ac:ff:f9: 9f:76:00:07:62:de:f8:6b:90:c4:fd:68:8d:15:8c:70:2e:6e: 40:59:13:00:86:6b:ee:d5:7e:68:19:69:52:3a:47:34:c9:ad: 74:ab:26:c7:dc:6b:4a:db:03:56:ce:57:27:57:60:b1:93:ce: 1f:00:f3:3b:e9:e2:6a:6f:3d:53:df:15:71:5b:16:00:67:95: e9:77:78:0d:8f:a0:19:24:40:aa:bc:c0:5f:00:cf:f4:15:98: 09:73:72:f4:c2:dc:b2:75:4e:80:72:d5:c0:73:80:04:95:1e: 15:0c:36:8a:8e:cc:1d:0d:0a:4d:93:9c:c4:39:76:57:3d:7f: 7c:1e:d1:18:17:38:0d:4e:76:5e:96:ba:8d:1c:9b:69:0f:e9: 21:81:cc:1c:67:4d:ff:64:76:f8:cd:74:e1:35:b4:9e:c2:23: 76:fc:b6:00:31:b8:e5:75:3c:e4:c5:78:f9:6e:90:9f:7b:fe: 37:aa:13:6c:e7:e1:23:0c:04:b1:95:b3:7a:05:d8:b2:96:87: 0d:94:9a:3a:85:8b:96:33:fe:15:c1:59:86:73:cf:e2:50:79: 22:78:5a:7a:83:f8:56:3e:35:77:72:63:64:df:ce:f5:e6:a7: 70:52:58:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwNjIzMDE1NjExWhcNMjUwNjMwMDE1NjExWjAYMRYwFAYD VQQDEw02ODU4YjQzYi01ZWNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMrkCZlEPgnNb5YAehbTyg2EYkI/02mvOpZ/weU/3NIT8iNld6S7m4TD8LrV FGp76kJPt70eykUooFDtjfQA/hXGYhfe4FFAjepKIqjOQIML+cj718anr1y9txJA sr3t/W1/4SllTHiBzUT65wmdeIJVPoPGasvpVsCjjzxeQc7zTa9/m7rR932eV+WG dX3JIE2IKi+aKOOIw8DSNU3pdJ5jZlDWPFWvPMFGxLfyKV2X70bGX3Ctw8TrKRRd 7JB8k6WlaIpNC+NNNoA8cJUGvNzl4GHdTOEjkxQrX1avrkweoZc9bVydizVtMRlf Z0JXa6Tr20yYWzAKpL34Ng9zFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9mgsyW PcE/KMA5k5dbxvXZdA1nMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV7amEgdRHamRbY3i7pSGs//mfdgAHYt74a5DE/WiNFYxwLm5AWRMA hmvu1X5oGWlSOkc0ya10qybH3GtK2wNWzlcnV2Cxk84fAPM76eJqbz1T3xVxWxYA Z5Xpd3gNj6AZJECqvMBfAM/0FZgJc3L0wtyydU6ActXAc4AElR4VDDaKjswdDQpN k5zEOXZXPX98HtEYFzgNTnZelrqNHJtpD+khgcwcZ03/ZHb4zXThNbSewiN2/LYA MbjldTzkxXj5bpCfe/43qhNs5+EjDASxlbN6BdiylocNlJo6hYuWM/4VwVmGc8/i UHkieFp6g/hWPjV3cmNk38715qdwUlg5 -----END CERTIFICATE-----Generated at Mon Jun 23 07:20:36 2025 by rpki-client