$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: eT9W+FNmsjhgXVyBiD82wNBpp5LIePUfr4PIOp4Ntww= Subject key identifier: E5:CE:CA:CA:A2:54:31:95:20:7E:22:08:98:27:86:A5:24:D5:10:35 Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C4C Signing time: Sat 14 Jun 2025 18:19:48 +0000 Manifest this update: Sat 14 Jun 2025 18:19:48 +0000 Manifest next update: Sat 21 Jun 2025 18:19:48 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: kVOkVJ0lWqkmvprKf/sbIA9p4OpcLJCcLoag9sK0aOg=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:19:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3158 (0xc56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Jun 14 18:19:48 2025 GMT Not After : Jun 21 18:19:48 2025 GMT Subject: CN=684dbd44-39d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:fb:2f:6e:e7:d2:db:15:58:96:1f:f6:43: cb:c1:99:32:53:d8:1d:63:3c:73:07:71:46:d2:c9: 8d:2f:ca:be:15:df:c8:08:71:bf:50:f6:58:98:97: df:53:2d:59:51:7d:49:ee:7e:73:0a:8f:0f:e4:82: 1d:f6:64:ce:69:d6:5c:77:4d:03:e8:bb:56:a7:f5: 67:fc:3a:3a:58:26:a4:f8:ca:77:3e:f9:fa:0b:72: 48:61:83:bc:e6:65:d0:f0:ed:4f:89:28:fd:04:71: df:53:08:4c:8d:5b:1e:9e:2d:2a:a0:33:87:c2:95: 49:99:ec:b6:85:eb:4f:42:87:3f:2d:39:63:eb:f7: 2f:32:df:71:8a:9d:18:e6:81:17:a7:c4:83:28:56: 15:6a:a6:32:f2:f3:2f:cb:a4:85:0b:2c:6b:37:58: 53:9d:98:fe:9b:00:66:01:a8:f0:bb:88:fb:d2:84: a3:ec:d4:62:7b:e2:cd:48:8b:e5:a8:61:84:6e:77: 93:3b:11:4a:c2:f8:6c:96:62:ba:88:e9:fe:db:d5: df:68:39:26:85:a4:0e:c4:95:08:01:e0:36:29:ac: f3:8d:b9:02:3b:d4:4d:0c:1a:95:d3:5d:c3:0a:cc: e5:6f:47:54:40:4b:1e:49:8b:6a:1c:eb:27:2d:49: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CE:CA:CA:A2:54:31:95:20:7E:22:08:98:27:86:A5:24:D5:10:35 X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:4e:57:7c:33:d8:3f:83:34:06:c4:85:70:6f:28:9b:6e:42: 7e:84:b4:a0:40:0b:28:9b:3f:59:aa:b7:96:e3:5c:3a:04:44: 2c:e0:19:14:3d:9b:49:97:2b:2f:ca:b7:20:fb:37:56:f0:09: 4b:3e:79:92:5b:74:b4:d0:ab:14:65:fd:33:4c:2e:d2:eb:96: c6:dd:24:48:d0:6b:3e:bb:3c:0f:c5:ca:7a:5c:b3:a0:01:3a: 15:32:99:be:b0:24:07:10:3d:91:40:ff:c8:f4:bd:e4:24:ef: ad:a2:67:e5:87:a5:93:7a:18:ad:fa:b0:92:74:a5:dc:da:99: cc:b5:b8:08:ca:74:fe:35:89:17:bd:6b:d0:7e:ff:e0:76:52: c2:db:bb:03:a2:b5:26:95:ba:88:b3:50:09:ad:2c:a6:d9:f5: f8:5c:5c:5d:72:51:64:68:c2:30:30:76:13:91:96:03:6b:2e: bd:de:9d:b9:31:b6:07:2f:00:f6:d6:e9:4e:c2:e0:18:b0:66: e3:cf:a8:5a:21:49:ff:6d:a6:b6:32:26:04:2f:7e:c8:71:4b: 00:01:47:f4:78:e2:4a:42:d0:f0:85:40:2b:0c:6a:83:58:39: 11:cb:18:b4:c8:a5:59:26:fe:3b:52:93:f1:e1:f0:cc:2e:45: 90:43:1f:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUwNjE0MTgxOTQ4WhcNMjUwNjIxMTgxOTQ4WjAYMRYwFAYD VQQDEw02ODRkYmQ0NC0zOWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5n7L27n0tsVWJYf9kPLwZkyU9gdYzxzB3FG0smNL8q+Fd/ICHG/UPZYmJff Uy1ZUX1J7n5zCo8P5IId9mTOadZcd00D6LtWp/Vn/Do6WCak+Mp3Pvn6C3JIYYO8 5mXQ8O1PiSj9BHHfUwhMjVseni0qoDOHwpVJmey2hetPQoc/LTlj6/cvMt9xip0Y 5oEXp8SDKFYVaqYy8vMvy6SFCyxrN1hTnZj+mwBmAajwu4j70oSj7NRie+LNSIvl qGGEbneTOxFKwvhslmK6iOn+29XfaDkmhaQOxJUIAeA2KazzjbkCO9RNDBqV013D Cszlb0dUQEseSYtqHOsnLUnc3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXOysqi VDGVIH4iCJgnhqUk1RA1MB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsTld8M9g/gzQGxIVwbyibbkJ+hLSgQAsomz9ZqreW41w6BEQs4BkU PZtJlysvyrcg+zdW8AlLPnmSW3S00KsUZf0zTC7S65bG3SRI0Gs+uzwPxcp6XLOg AToVMpm+sCQHED2RQP/I9L3kJO+tomflh6WTehit+rCSdKXc2pnMtbgIynT+NYkX vWvQfv/gdlLC27sDorUmlbqIs1AJrSym2fX4XFxdclFkaMIwMHYTkZYDay693p25 MbYHLwD21ulOwuAYsGbjz6haIUn/baa2MiYEL37IcUsAAUf0eOJKQtDwhUArDGqD WDkRyxi0yKVZJv47UpPx4fDMLkWQQx8P -----END CERTIFICATE-----Generated at Sun Jun 15 08:35:02 2025 by rpki-client