$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: TnyAblQF1GENlHNViM0xJ0E3EJmfHKFi8neK04+lNsc= Subject key identifier: DE:08:4F:FA:82:19:41:94:D9:D8:A0:0D:CF:45:CC:A7:D2:C7:ED:D8 Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 06B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 06AA Signing time: Sat 14 Jun 2025 21:54:43 +0000 Manifest this update: Sat 14 Jun 2025 21:54:43 +0000 Manifest next update: Sat 21 Jun 2025 21:54:43 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: CcW69RfPsKS2+hebT9W+SCahkq82nDk6huRiBVsPnm8=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 21:54:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1715 (0x6b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: Jun 14 21:54:43 2025 GMT Not After : Jun 21 21:54:43 2025 GMT Subject: CN=684defa3-abf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:f8:43:78:db:1a:58:70:ba:b6:0a:24:31: ed:ba:27:fe:45:b1:a5:df:68:ba:bc:78:77:f6:41: b2:54:44:c1:2c:34:8b:81:9d:9f:20:cb:22:f9:c6: 28:f9:60:01:8d:6c:6f:d4:ea:ef:83:57:f8:97:0a: cf:1d:1b:3a:95:32:b7:99:89:9d:9e:35:88:ef:8f: d2:e1:d7:f5:93:8d:08:3c:0a:45:48:60:26:91:39: 44:2a:24:8f:ba:50:9b:00:7d:62:6c:90:8c:93:5a: 7d:4b:50:a5:22:03:06:3c:b4:8d:13:73:a4:03:35: fd:a9:5c:df:f3:03:2b:bf:41:26:97:b9:b0:aa:a1: b2:69:dd:d7:23:32:4a:f4:e3:2d:6c:21:ab:2b:06: a4:b3:9c:77:67:bf:de:08:57:51:d7:40:38:c3:13: b5:ab:79:38:27:b0:b7:f1:9f:69:44:bd:f0:28:eb: ae:a4:39:e6:7e:a1:e1:8b:c6:c4:34:6e:69:64:95: e4:e1:6c:ca:c0:4d:ec:f1:0d:cb:ac:a6:53:27:6e: 55:88:08:15:ef:b5:74:cd:d2:49:3b:b8:91:a7:b6: 37:90:cc:d0:23:56:15:5a:30:dc:5c:e5:cb:df:88: ba:47:d5:53:89:23:35:d1:cd:0b:a3:fa:19:44:a7: 20:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:08:4F:FA:82:19:41:94:D9:D8:A0:0D:CF:45:CC:A7:D2:C7:ED:D8 X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:df:3a:2c:6b:8f:1a:cb:3f:aa:7c:40:f1:24:46:26:4f:16: 46:30:2b:42:90:dd:e2:29:db:d2:20:e9:75:0f:82:01:a5:b7: 0d:e6:63:c6:84:a0:c7:35:f1:6a:07:14:f0:f5:ef:ce:3b:c0: 00:31:cd:a1:2c:81:ca:bf:9a:37:7c:ca:88:3d:74:4c:79:a3: 70:9c:28:b1:93:da:18:d1:b6:1f:03:6a:d8:c9:ba:47:0a:c4: b1:b9:ea:d3:a4:3f:53:90:2d:7d:2e:e7:d9:b6:88:e4:6e:69: 6b:2d:e0:4d:5c:a9:b7:09:b9:f7:ca:2b:89:7c:b5:d7:a9:c8: 9a:6d:7e:f3:53:55:dc:3d:44:cd:ed:dc:21:29:d8:cf:8b:6f: c5:0d:95:b8:f9:84:22:a0:cb:c6:52:3b:8f:30:9f:b1:a5:6e: bf:47:ef:74:d1:fa:dd:2c:08:52:18:5e:43:c2:6f:1c:ae:85: 76:f1:aa:54:4b:64:1d:96:85:06:e4:59:8b:ea:cb:fb:9a:51: 83:c3:e6:89:c6:09:6f:f1:d4:6a:d1:c3:1d:c3:b9:66:3a:a9: 3f:05:b6:61:d7:45:07:fc:13:ad:c7:f3:00:3b:eb:75:ee:28: 46:aa:2f:08:d4:fd:57:c8:87:f1:fc:8e:06:24:2d:3e:1f:c8: c9:c8:b0:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjUwNjE0MjE1NDQzWhcNMjUwNjIxMjE1NDQzWjAYMRYwFAYD VQQDEw02ODRkZWZhMy1hYmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7T4Q3jbGlhwurYKJDHtuif+RbGl32i6vHh39kGyVETBLDSLgZ2fIMsi+cYo +WABjWxv1Orvg1f4lwrPHRs6lTK3mYmdnjWI74/S4df1k40IPApFSGAmkTlEKiSP ulCbAH1ibJCMk1p9S1ClIgMGPLSNE3OkAzX9qVzf8wMrv0Eml7mwqqGyad3XIzJK 9OMtbCGrKwaks5x3Z7/eCFdR10A4wxO1q3k4J7C38Z9pRL3wKOuupDnmfqHhi8bE NG5pZJXk4WzKwE3s8Q3LrKZTJ25ViAgV77V0zdJJO7iRp7Y3kMzQI1YVWjDcXOXL 34i6R9VTiSM10c0Lo/oZRKcg8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4IT/qC GUGU2digDc9FzKfSx+3YMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC23zosa48ayz+qfEDxJEYmTxZGMCtCkN3iKdvSIOl1D4IBpbcN5mPG hKDHNfFqBxTw9e/OO8AAMc2hLIHKv5o3fMqIPXRMeaNwnCixk9oY0bYfA2rYybpH CsSxuerTpD9TkC19LufZtojkbmlrLeBNXKm3Cbn3yiuJfLXXqciabX7zU1XcPUTN 7dwhKdjPi2/FDZW4+YQioMvGUjuPMJ+xpW6/R+900frdLAhSGF5Dwm8croV28apU S2QdloUG5FmL6sv7mlGDw+aJxglv8dRq0cMdw7lmOqk/BbZh10UH/BOtx/MAO+t1 7ihGqi8I1P1XyIfx/I4GJC0+H8jJyLAk -----END CERTIFICATE-----Generated at Sun Jun 15 07:59:04 2025 by rpki-client