$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: Vsn3S6CUyOw8P3LHg3XEiqGw7Tl7fE5SWCZs5aFYI2c= Subject key identifier: CD:C3:30:34:F8:B7:A6:77:4E:07:82:EF:C0:3D:2A:E0:5A:AB:A1:12 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: 65 Signing time: Fri 13 Jun 2025 05:58:42 +0000 Manifest this update: Fri 13 Jun 2025 05:58:41 +0000 Manifest next update: Fri 20 Jun 2025 05:58:41 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: L0h6BysPyt7oxkPUVVL+bgGDFVWfz55P/af0d02zdqU=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 05:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Jun 13 05:58:41 2025 GMT Not After : Jun 20 05:58:41 2025 GMT Subject: CN=684bbe11-ed84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:71:5a:82:84:8a:ea:7e:d8:38:c3:ec:27: ba:44:b5:97:a6:ed:51:2d:e9:d8:ca:85:cd:6d:3a: 1a:5a:0b:90:65:a3:41:a8:65:72:5b:91:75:a2:61: 2e:11:89:b2:1a:8a:df:df:b4:d5:bb:a4:b3:64:9f: 35:67:4c:31:93:61:9b:7a:58:ef:bf:dd:8f:f0:28: 69:d4:0f:85:df:cb:fd:92:49:2f:a7:4c:92:be:b8: 97:8e:e6:47:29:ac:f5:eb:2e:db:9c:9e:37:f2:09: e6:00:cc:5a:a1:53:e9:f5:f6:e0:8a:fa:ad:22:1f: 72:0d:0f:a8:50:d8:bd:b7:24:ac:0e:a3:77:e5:2a: 1d:e3:70:d1:56:eb:b0:92:96:bc:f6:89:36:e2:8b: d4:a1:cf:c2:7a:6b:0f:0e:e6:31:85:f9:62:8f:06: 65:b3:a1:54:3c:da:eb:97:8d:21:fc:16:cb:0d:7d: 86:4d:b1:e6:f7:b7:6d:10:bd:84:01:69:e4:0b:1b: 0a:e2:b4:38:b9:64:37:11:37:e0:3b:75:a0:50:b7: a3:5b:b3:23:00:00:79:2d:0d:2f:87:06:f2:26:f1: 3a:e5:8e:7a:ad:6d:d2:74:86:e9:29:5e:5e:ce:97: 52:53:6d:a6:c0:6f:2f:bd:d1:99:aa:38:52:00:ab: 8e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C3:30:34:F8:B7:A6:77:4E:07:82:EF:C0:3D:2A:E0:5A:AB:A1:12 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:99:57:0e:92:85:1a:90:5a:59:22:16:44:15:50:cd:3a:2b: f3:9a:66:59:18:9d:e6:4a:a5:62:8d:7f:74:47:9a:63:ce:4a: f3:c7:03:f3:38:90:cd:14:4a:a4:76:22:c5:52:61:21:86:b9: 6e:a1:28:31:73:bb:02:bf:6f:bd:96:e8:58:7a:50:d8:9c:0f: 01:da:d6:35:e7:a7:da:33:a5:b1:fe:c8:57:dd:93:e8:59:60: 85:02:3f:ff:d5:7b:5c:4b:8a:5d:c0:ee:58:c4:e6:41:bc:97: db:07:66:3c:aa:ba:ef:19:be:77:b2:b0:f7:57:76:72:58:31: 2e:9c:8d:79:11:e9:d8:10:db:37:27:3a:a1:5b:b7:bb:8f:9b: b2:16:72:39:91:d2:4d:b9:29:48:1e:df:9d:19:f0:d0:06:00: 4e:7e:b0:50:95:20:15:80:c3:87:60:79:67:56:90:61:3f:3e: 6d:a3:97:ea:7e:d4:84:30:e2:01:5f:7e:f9:e6:a0:32:82:8e: 33:31:cb:36:dd:7a:3b:0f:ab:a5:26:38:94:77:38:17:f0:06: 45:a6:ba:7d:61:da:6f:fa:76:d0:10:66:ba:b6:d9:4f:7a:d0: 8f:97:4a:ca:35:f6:52:d7:aa:e4:c7:7d:a0:20:d8:ad:a7:d3: 5a:b2:d0:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy OTc1NzExMC8GA1UEBRMoRDNCQTQ0REE1Q0JEQzFDQzUxMjVFMkMxMDA3QjZDREI3 RERDREM4NTAeFw0yNTA2MTMwNTU4NDFaFw0yNTA2MjAwNTU4NDFaMBgxFjAUBgNV BAMTDTY4NGJiZTExLWVkODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGf3FagoSK6n7YOMPsJ7pEtZem7VEt6djKhc1tOhpaC5Blo0GoZXJbkXWiYS4R ibIait/ftNW7pLNknzVnTDGTYZt6WO+/3Y/wKGnUD4Xfy/2SSS+nTJK+uJeO5kcp rPXrLtucnjfyCeYAzFqhU+n19uCK+q0iH3IND6hQ2L23JKwOo3flKh3jcNFW67CS lrz2iTbii9Shz8J6aw8O5jGF+WKPBmWzoVQ82uuXjSH8FssNfYZNseb3t20QvYQB aeQLGwritDi5ZDcRN+A7daBQt6NbsyMAAHktDS+HBvIm8TrljnqtbdJ0hukpXl7O l1JTbabAby+90ZmqOFIAq44zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzcMwNPi3 pndOB4LvwD0q4FqroRIwHwYDVR0jBBgwFoAU07pE2ly9wcxRJeLBAHts233c3IUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5NzU3LzMyOTM0Q0VDQjM3 QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJ VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMDdwRTJseTl3Y3hSSmVMQkFIdHMyMzNjM0lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5 NzU3LzMyOTM0Q0VDQjM3QTExRUY5QzA3QzY1QkM0RjlBRTAyLzA3cEUybHk5d2N4 UkplTEJBSHRzMjMzYzNJVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEGZVw6ShRqQWlkiFkQVUM06K/OaZlkYneZKpWKNf3RHmmPOSvPHA/M4 kM0USqR2IsVSYSGGuW6hKDFzuwK/b72W6Fh6UNicDwHa1jXnp9ozpbH+yFfdk+hZ YIUCP//Ve1xLil3A7ljE5kG8l9sHZjyquu8ZvneysPdXdnJYMS6cjXkR6dgQ2zcn OqFbt7uPm7IWcjmR0k25KUge350Z8NAGAE5+sFCVIBWAw4dgeWdWkGE/Pm2jl+p+ 1IQw4gFffvnmoDKCjjMxyzbdejsPq6UmOJR3OBfwBkWmun1h2m/6dtAQZrq22U96 0I+XSso19lLXquTHfaAg2K2n01qy0Iw= -----END CERTIFICATE-----Generated at Sat Jun 14 17:42:55 2025 by rpki-client