$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft File: C7z952hnW5lPKiMRTDUUEiAVVbg.mft (raw, json) Hash identifier: SXoO0W8DwaifK2nDHvwHlq+dck2cVh1H0aNle45yfWQ= Subject key identifier: B0:50:A7:09:FC:02:4F:2D:3C:A1:82:15:83:8F:E9:7C:8D:A4:57:16 Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 Certificate issuer: /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Certificate serial: 073E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft Manifest number: 0732 Signing time: Fri 20 Jun 2025 21:38:48 +0000 Manifest this update: Fri 20 Jun 2025 21:38:48 +0000 Manifest next update: Fri 27 Jun 2025 21:38:48 +0000 Files and hashes: 1: C7z952hnW5lPKiMRTDUUEiAVVbg.crl (hash: EV4tBtWefzwPfxMQejdAkXpmIS4reMXjLWmpflXHn9E=) 2: 31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (hash: uuBWBt4HEhDV8CjrNo2I7XyyiDQqCjSA8yzYrddp5CM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 21:26:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1854 (0x73e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123193, serialNumber=0BBCFDE768675B994F2A23114C351412201555B8 Validity Not Before: Jun 20 21:38:48 2025 GMT Not After : Jun 27 21:38:48 2025 GMT Subject: CN=6855d4e8-7c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d9:2f:47:5c:7c:42:af:48:69:9d:be:a7:ef: 96:42:7d:6b:32:67:4f:6c:4d:86:ac:9e:14:45:34: 86:0c:d3:34:f2:2f:32:3c:a2:ce:b5:c4:c9:c3:7c: 52:3a:c4:09:a6:af:bf:9a:ea:e7:28:9c:0a:3f:03: e0:25:91:a8:40:81:99:0a:32:e2:d2:50:c4:6c:b3: 91:50:46:ec:f6:7c:22:cf:ab:ef:2d:42:03:22:80: d6:cd:04:68:65:66:53:8c:e4:c2:9a:18:b2:bb:81: 30:21:df:30:d6:13:a2:bc:99:f0:f4:0f:9e:f1:b5: b7:4d:5f:e6:88:ce:cb:6e:59:ec:25:ba:da:b9:07: fc:ad:cf:87:4a:00:c2:ca:8d:f7:8c:62:48:51:7e: 21:4a:c9:48:74:9a:2e:6c:40:7a:eb:e5:58:fc:8b: e0:fa:08:50:80:67:39:c5:fc:df:33:ad:bd:fe:2a: 05:02:06:b6:4b:5a:9d:74:e3:10:61:6a:34:48:77: b4:cf:e9:42:84:a9:22:b2:e2:5a:fd:94:3f:4d:45: bb:b8:e7:f8:bd:ec:40:db:06:1b:11:a0:94:ec:c6: a5:16:3d:0f:3d:03:a4:b4:56:c3:da:82:6d:78:24: ea:c2:23:b1:51:ee:be:39:ae:82:f8:ba:5f:e6:11: 5a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:50:A7:09:FC:02:4F:2D:3C:A1:82:15:83:8F:E9:7C:8D:A4:57:16 X509v3 Authority Key Identifier: keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:72:43:cf:72:ba:20:ad:9a:0a:03:3a:de:12:cc:e2:f7:62: 6b:08:77:66:d3:56:9f:b7:2c:92:56:da:a8:ed:93:91:cd:e2: 7f:c2:cd:b7:34:93:68:5f:8f:20:98:6c:4d:aa:33:79:fe:ab: 99:90:7f:ca:de:17:bf:d1:9b:a6:ff:80:a1:a1:32:15:bd:bf: eb:05:11:4d:f9:83:8b:c5:c6:a4:e0:23:66:32:f6:72:67:c9: b6:50:49:46:ee:54:78:4a:76:62:1a:0c:82:f6:88:e7:a7:cc: 96:26:11:b3:e2:e3:d3:74:3f:ef:03:15:d1:00:a6:53:76:cb: 60:1c:92:5b:e3:61:e2:a5:db:ea:e9:99:0d:da:5f:f3:52:48: 4f:01:26:98:b1:d1:96:30:cf:81:88:bc:ef:11:f2:bb:48:fa: 9f:68:f2:30:5c:f8:4e:36:2d:b5:fc:7f:f8:bf:dd:a2:11:3a: 69:fb:f9:6d:0a:3f:d5:b9:a4:0f:72:e4:ac:bf:b3:a4:a8:b0: 0f:7e:a3:a3:17:0d:5f:15:e5:98:7c:59:c0:db:0a:b7:5f:a1: 93:26:3f:8e:d9:de:db:b5:e8:09:d7:fc:8c:49:7b:2e:03:5d: 9b:2a:63:a3:f7:66:10:53:61:43:1c:84:98:c7:51:01:77:54: 86:3f:2c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMxOTMxMTAvBgNVBAUTKDBCQkNGREU3Njg2NzVCOTk0RjJBMjMxMTRDMzUxNDEy MjAxNTU1QjgwHhcNMjUwNjIwMjEzODQ4WhcNMjUwNjI3MjEzODQ4WjAYMRYwFAYD VQQDEw02ODU1ZDRlOC03Yzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAodkvR1x8Qq9IaZ2+p++WQn1rMmdPbE2GrJ4URTSGDNM08i8yPKLOtcTJw3xS OsQJpq+/murnKJwKPwPgJZGoQIGZCjLi0lDEbLORUEbs9nwiz6vvLUIDIoDWzQRo ZWZTjOTCmhiyu4EwId8w1hOivJnw9A+e8bW3TV/miM7LblnsJbrauQf8rc+HSgDC yo33jGJIUX4hSslIdJoubEB66+VY/Ivg+ghQgGc5xfzfM629/ioFAga2S1qddOMQ YWo0SHe0z+lChKkisuJa/ZQ/TUW7uOf4vexA2wYbEaCU7MalFj0PPQOktFbD2oJt eCTqwiOxUe6+Oa6C+Lpf5hFaqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLBQpwn8 Ak8tPKGCFYOP6XyNpFcWMB8GA1UdIwQYMBaAFAu8/edoZ1uZTyojEUw1FBIgFVW4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzE5My9DQThBNEIzQzM5 RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1bFBLaU1SVERVVUVpQVZW YmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3ejk1MmhuVzVsUEtpTVJURFVVRWlBVlZiZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzE5My9DQThBNEIzQzM5RDkxMUVCQTc4MUZBNTdDNEY5QUUwMi9DN3o5NTJoblc1 bFBLaU1SVERVVUVpQVZWYmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIckPPcrogrZoKAzreEszi92JrCHdm01aftyySVtqo7ZORzeJ/ws23 NJNoX48gmGxNqjN5/quZkH/K3he/0Zum/4ChoTIVvb/rBRFN+YOLxcak4CNmMvZy Z8m2UElG7lR4SnZiGgyC9ojnp8yWJhGz4uPTdD/vAxXRAKZTdstgHJJb42Hipdvq 6ZkN2l/zUkhPASaYsdGWMM+BiLzvEfK7SPqfaPIwXPhONi21/H/4v92iETpp+/lt Cj/VuaQPcuSsv7OkqLAPfqOjFw1fFeWYfFnA2wq3X6GTJj+O2d7btegJ1/yMSXsu A12bKmOj92YQU2FDHISYx1EBd1SGPyyx -----END CERTIFICATE-----Generated at Sat Jun 21 04:03:38 2025 by rpki-client