$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: lBwuhWNddsPfroRrqRTdcPkV5pRFiixrVisHFr8KRos= Subject key identifier: F4:07:5D:71:CC:8F:DB:52:D2:53:E0:4F:A4:90:42:3A:EE:E3:AE:F2 Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17C1 Signing time: Thu 12 Jun 2025 16:31:56 +0000 Manifest this update: Thu 12 Jun 2025 16:31:55 +0000 Manifest next update: Thu 19 Jun 2025 16:31:55 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: VA15YywJoEogPcZWZmM3dt0qSmpc8tbd7QIZrXliMjQ=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: MtUOG8te7vvd8OgcyO+YgqB1a0uCeqPJKDSTrguzMzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 16:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6092 (0x17cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Jun 12 16:31:55 2025 GMT Not After : Jun 19 16:31:55 2025 GMT Subject: CN=684b00fc-5833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:20:b9:3a:92:5c:fd:ff:7a:80:ad:97:33: 99:13:23:11:10:f8:e6:81:62:5e:c3:84:50:d7:fd: 56:45:a7:41:4b:6a:1a:5b:aa:ef:90:41:cb:3c:f0: a1:f5:41:16:8a:62:10:be:dc:2e:4e:51:61:38:2d: 02:27:30:b2:1e:55:f5:60:31:90:bd:6c:d9:30:d6: 27:61:58:8e:77:54:91:d0:f5:c9:64:50:be:86:42: 11:91:0c:62:3b:6e:88:e1:59:4d:b5:85:dd:9e:52: 01:62:fd:54:1a:95:46:93:5b:77:1f:cb:4b:ea:ad: bf:17:2a:48:4c:a8:61:a6:55:63:89:ed:19:e7:b0: 2d:0e:93:56:ca:b9:d5:10:1a:ea:8d:07:7b:f1:fb: 4e:a5:1f:b3:31:04:bf:c4:3b:68:c6:da:04:e4:3a: 92:f8:b8:d8:b5:df:07:98:37:0c:35:62:1c:4c:02: 95:4d:8f:97:65:ad:d8:08:59:0c:c0:29:5d:a1:b6: fc:5c:9a:0e:f6:e0:be:dd:91:dc:51:c6:6b:29:27: fb:4b:17:06:9a:ed:6f:30:9a:bf:e4:36:db:f9:c7: 60:a5:4a:85:af:d9:f4:93:84:9d:bc:50:07:95:f1: 36:44:cb:bb:36:6c:b1:17:7c:86:ed:0c:e2:07:11: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:07:5D:71:CC:8F:DB:52:D2:53:E0:4F:A4:90:42:3A:EE:E3:AE:F2 X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:e5:66:cc:1c:58:af:3f:fe:ee:97:8e:70:52:52:3d:8f: b6:a3:2e:2d:cd:78:c5:10:72:10:03:77:e5:be:1a:30:fb:01: 66:67:92:da:d4:86:f9:80:72:5a:4f:5f:5c:88:2e:d0:98:a0: 46:2f:11:87:ec:05:1c:45:fd:e0:41:5e:b7:94:02:92:e9:47: 20:ab:c3:33:2d:eb:fb:34:aa:fd:2c:d8:f7:12:5b:b2:c2:c0: a6:5d:bd:6d:7b:f5:2b:8d:32:8a:bf:6d:bf:5b:8d:d8:76:cc: d4:4f:9f:e2:43:a8:f0:03:bc:c1:91:d2:c4:82:de:12:3f:d5: de:53:49:12:12:ae:a5:7e:a7:08:ad:f7:cf:63:c9:c1:d0:fa: 24:2f:7d:7c:16:a6:9f:bf:a2:ec:bb:54:01:f8:0c:de:24:e5: 94:b3:f0:fc:68:37:70:6b:ae:a9:75:3d:d7:7e:f6:9e:e9:b0: 14:59:49:65:e9:44:07:78:39:70:95:da:1d:4c:d0:5b:45:5a: 14:8e:ad:0e:e5:3e:7b:2e:f0:d4:40:58:ba:08:8a:ee:a6:33: ef:71:3a:bd:29:76:fc:d5:82:9f:19:91:63:53:80:ba:9f:93: 14:35:b7:87:e1:df:af:0c:a0:cb:a4:f5:b4:b0:7d:a9:e6:f7: 7b:d6:ef:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwNjEyMTYzMTU1WhcNMjUwNjE5MTYzMTU1WjAYMRYwFAYD VQQDEw02ODRiMDBmYy01ODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXEguTqSXP3/eoCtlzOZEyMREPjmgWJew4RQ1/1WRadBS2oaW6rvkEHLPPCh 9UEWimIQvtwuTlFhOC0CJzCyHlX1YDGQvWzZMNYnYViOd1SR0PXJZFC+hkIRkQxi O26I4VlNtYXdnlIBYv1UGpVGk1t3H8tL6q2/FypITKhhplVjie0Z57AtDpNWyrnV EBrqjQd78ftOpR+zMQS/xDtoxtoE5DqS+LjYtd8HmDcMNWIcTAKVTY+XZa3YCFkM wCldobb8XJoO9uC+3ZHcUcZrKSf7SxcGmu1vMJq/5Dbb+cdgpUqFr9n0k4SdvFAH lfE2RMu7NmyxF3yG7QziBxEB2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQHXXHM j9tS0lPgT6SQQjru467yMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBn4uVmzBxYrz/+7peOcFJSPY+2oy4tzXjFEHIQA3flvhow+wFmZ5La 1Ib5gHJaT19ciC7QmKBGLxGH7AUcRf3gQV63lAKS6Ucgq8MzLev7NKr9LNj3Eluy wsCmXb1te/UrjTKKv22/W43YdszUT5/iQ6jwA7zBkdLEgt4SP9XeU0kSEq6lfqcI rffPY8nB0PokL318Fqafv6Lsu1QB+AzeJOWUs/D8aDdwa66pdT3Xfvae6bAUWUll 6UQHeDlwldodTNBbRVoUjq0O5T57LvDUQFi6CIrupjPvcTq9KXb81YKfGZFjU4C6 n5MUNbeH4d+vDKDLpPW0sH2p5vd71u+s -----END CERTIFICATE-----Generated at Sat Jun 14 17:12:52 2025 by rpki-client