$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: d+81REXoCDi++mkAQPKsJWT8y29uZxYRRFxQr/5sLck= Subject key identifier: 57:93:3B:15:91:38:3E:9F:AA:58:11:3C:22:C7:A7:EF:34:68:E5:CF Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01AD Signing time: Fri 13 Jun 2025 02:22:30 +0000 Manifest this update: Fri 13 Jun 2025 02:22:29 +0000 Manifest next update: Fri 20 Jun 2025 02:22:29 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: xNuLjSRfksDgHI24tphzGhcsD/KDlEpXjxBpJofClQM=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 02:22:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Jun 13 02:22:29 2025 GMT Not After : Jun 20 02:22:29 2025 GMT Subject: CN=684b8b65-ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:53:0d:a3:17:92:6f:1e:83:ac:8b:92:05: 59:59:4f:2e:c4:fa:0a:af:68:ae:ec:e6:d8:e1:c1: 3f:68:62:c4:98:c2:6b:9e:61:b7:3e:e0:5b:e2:ab: 16:36:1f:43:dd:11:0d:0d:26:24:88:b6:c7:8f:6d: 79:20:fd:e5:d7:76:a2:70:a4:92:59:35:7c:f1:32: ec:e4:de:01:58:49:37:6f:e0:38:fa:40:f5:4e:32: ce:4b:cc:db:be:ad:1c:86:95:80:82:42:62:b4:66: a2:bc:f0:4f:9f:56:88:51:72:cf:c1:6e:20:77:ee: bc:7b:ac:bc:7b:87:a5:e9:bb:a4:5e:be:cc:fd:bb: 59:89:3d:78:b5:2e:0a:7f:5b:d8:db:33:21:14:df: cf:79:8b:6a:8b:96:08:58:4b:51:cb:b6:24:a5:ab: 9d:49:e8:20:4f:ea:1a:2e:01:32:b8:bf:58:72:4e: 21:e3:ec:98:74:12:3e:3a:07:0d:63:3a:e4:62:cb: 87:21:17:92:2d:27:dc:05:35:4d:b8:ae:1c:43:ee: eb:a6:72:36:5c:c4:9b:a8:08:d5:ae:1e:04:83:09: e6:c2:28:7f:67:27:40:df:68:f1:14:30:67:b1:b3: 1c:d8:be:a3:ba:c2:d8:d3:43:53:ef:d4:73:6e:06: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:93:3B:15:91:38:3E:9F:AA:58:11:3C:22:C7:A7:EF:34:68:E5:CF X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:ef:4c:3d:e5:1b:50:fb:25:38:12:46:21:a8:19:74:4c:3d: c8:27:b7:04:15:6a:05:bc:e7:bf:92:61:8e:07:30:8e:d5:be: 4e:f6:63:e1:a6:33:7a:ee:66:01:f3:e1:11:b6:d9:2b:ae:d4: a6:1e:0a:d3:c0:78:2f:86:1b:66:9d:a4:13:69:50:0d:20:95: 3c:8d:1a:58:ec:37:37:7a:84:4a:56:05:07:ad:4f:26:da:0e: cf:5b:c9:90:73:c7:86:d5:f4:1b:29:17:3c:6c:4b:87:71:e8: 83:18:8c:46:4f:43:13:76:16:2f:30:2c:30:ce:09:67:74:bc: 82:07:d5:77:b6:d8:ec:42:0a:5f:36:21:96:43:31:64:d1:e2: 6d:f4:59:69:ee:f5:f2:90:1e:83:b8:b2:aa:3b:9f:10:2f:15: b9:22:80:8e:80:ed:3a:dd:0b:6a:41:27:b4:be:1b:3e:88:a2: 96:71:26:b4:99:5b:3f:41:9a:ef:46:c5:9f:70:d5:30:36:e8: a3:80:cd:2b:9a:4e:87:9d:3c:a1:84:69:5b:89:14:2a:1b:67: 57:0d:03:85:77:0d:9b:46:2b:04:ec:07:d4:f4:0e:43:8b:85: aa:99:98:a4:2f:07:69:60:f2:ca:5a:d5:8a:64:2a:73:5e:45: 63:fb:d5:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNjEzMDIyMjI5WhcNMjUwNjIwMDIyMjI5WjAYMRYwFAYD VQQDEw02ODRiOGI2NS1hZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3NTDaMXkm8eg6yLkgVZWU8uxPoKr2iu7ObY4cE/aGLEmMJrnmG3PuBb4qsW Nh9D3RENDSYkiLbHj215IP3l13aicKSSWTV88TLs5N4BWEk3b+A4+kD1TjLOS8zb vq0chpWAgkJitGaivPBPn1aIUXLPwW4gd+68e6y8e4el6bukXr7M/btZiT14tS4K f1vY2zMhFN/PeYtqi5YIWEtRy7YkpaudSeggT+oaLgEyuL9Yck4h4+yYdBI+OgcN YzrkYsuHIReSLSfcBTVNuK4cQ+7rpnI2XMSbqAjVrh4Egwnmwih/ZydA32jxFDBn sbMc2L6jusLY00NT79RzbgYz3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeTOxWR OD6fqlgRPCLHp+80aOXPMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCB70w95RtQ+yU4EkYhqBl0TD3IJ7cEFWoFvOe/kmGOBzCO1b5O9mPh pjN67mYB8+ERttkrrtSmHgrTwHgvhhtmnaQTaVANIJU8jRpY7Dc3eoRKVgUHrU8m 2g7PW8mQc8eG1fQbKRc8bEuHceiDGIxGT0MTdhYvMCwwzglndLyCB9V3ttjsQgpf NiGWQzFk0eJt9Flp7vXykB6DuLKqO58QLxW5IoCOgO063QtqQSe0vhs+iKKWcSa0 mVs/QZrvRsWfcNUwNuijgM0rmk6HnTyhhGlbiRQqG2dXDQOFdw2bRisE7AfU9A5D i4WqmZikLwdpYPLKWtWKZCpzXkVj+9UJ -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:02 2025 by rpki-client