$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: NM8rfBAYoqKaD+yK5Jdkc0pHZ4hRsu094bWBAdm/jQc= Subject key identifier: 4A:B0:EC:72:E2:6E:DD:4F:7A:BE:22:41:09:D0:B1:1E:D2:0F:D7:F4 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0602 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 05FC Signing time: Wed 18 Jun 2025 22:44:54 +0000 Manifest this update: Wed 18 Jun 2025 22:44:54 +0000 Manifest next update: Wed 25 Jun 2025 22:44:53 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: J411/dQNx9xUxxCq2A+OVGM0vcynfiXuIx0TRtz3Awg=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 22:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1538 (0x602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Jun 18 22:44:54 2025 GMT Not After : Jun 25 22:44:53 2025 GMT Subject: CN=68534166-90ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:d7:b2:c8:7b:09:55:f3:cf:1c:70:ce:ae: 57:e4:36:6f:c0:d7:4f:2c:50:02:2f:48:dd:5e:8d: 25:10:25:08:24:8f:be:7f:e9:bc:96:74:83:49:6e: 83:a2:a6:91:b2:df:31:5b:40:15:51:5a:56:cb:1c: 9e:e4:4d:12:76:03:f3:80:29:80:cc:83:61:ca:b0: 76:f2:46:5c:07:72:7d:1a:6b:61:15:04:a8:ad:7e: 8c:63:e4:89:77:7e:e2:4e:30:cf:90:d0:2a:43:31: d6:22:3c:91:89:fc:10:b9:01:88:36:40:2c:c2:b6: c7:fd:bf:37:58:a8:f2:40:89:5b:c1:7a:c7:13:6b: ff:91:aa:a3:36:a3:5d:9e:13:f5:3e:b2:31:ed:e5: 8f:a8:1e:2b:07:38:03:85:2f:28:af:9d:6b:90:dd: a6:18:a6:5d:82:8b:4d:40:60:60:a5:38:c0:e9:5a: c7:69:c7:72:19:30:44:76:24:7b:c8:2c:50:f7:3f: 04:38:80:cd:59:11:cd:b1:18:e8:4b:52:46:77:bc: e2:fb:8f:95:a3:38:2d:97:52:84:d9:b4:6b:0a:d6: 72:1d:23:6e:11:95:ee:d3:2f:a7:23:fe:4a:b0:fe: fc:ae:3c:6d:fc:e9:35:86:d0:ff:56:74:14:78:96: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:B0:EC:72:E2:6E:DD:4F:7A:BE:22:41:09:D0:B1:1E:D2:0F:D7:F4 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a1:0c:e4:7f:93:29:e1:fc:3b:d8:07:0b:5a:f4:d5:be:05: cc:ab:88:fe:c8:37:cf:29:42:ad:a8:48:6c:36:bf:57:ec:0a: f3:79:86:ef:25:8f:08:ea:5b:a2:af:58:59:78:f7:ef:9b:44: e8:37:67:83:33:33:0a:dd:02:27:45:1f:00:76:28:12:1d:3e: 70:19:7e:43:a1:a5:48:73:65:2e:8a:a9:7e:99:88:ee:cb:58: 8a:6b:93:d3:87:16:d6:ee:46:81:f9:31:74:65:37:2f:98:f7: da:40:d5:fa:95:af:d1:b9:74:3a:fe:9a:de:fc:ef:00:db:eb: d1:86:e4:85:dd:c6:1c:d0:d3:c8:c6:fe:6d:e3:57:e8:cd:ce: c7:f5:ff:dd:87:fa:cb:08:17:63:eb:a3:8b:2b:5e:12:c4:5e: bd:7c:c2:98:47:10:da:3d:6d:88:79:1d:d2:de:46:34:f1:db: 90:61:d5:30:07:87:16:36:92:f7:f2:fe:8f:50:a9:50:13:72: 63:48:e0:41:f6:f6:78:46:83:13:c0:21:e2:0a:a2:91:83:ed: bd:0f:90:c8:06:26:d9:7d:76:99:94:80:1b:b3:8e:78:f5:2d: 82:98:75:bb:cb:ae:cb:bd:35:62:a8:ac:f3:4b:ce:7f:ed:f6: fb:1e:d6:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwNjE4MjI0NDU0WhcNMjUwNjI1MjI0NDUzWjAYMRYwFAYD VQQDEw02ODUzNDE2Ni05MGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuMfXssh7CVXzzxxwzq5X5DZvwNdPLFACL0jdXo0lECUIJI++f+m8lnSDSW6D oqaRst8xW0AVUVpWyxye5E0SdgPzgCmAzINhyrB28kZcB3J9GmthFQSorX6MY+SJ d37iTjDPkNAqQzHWIjyRifwQuQGINkAswrbH/b83WKjyQIlbwXrHE2v/kaqjNqNd nhP1PrIx7eWPqB4rBzgDhS8or51rkN2mGKZdgotNQGBgpTjA6VrHacdyGTBEdiR7 yCxQ9z8EOIDNWRHNsRjoS1JGd7zi+4+Vozgtl1KE2bRrCtZyHSNuEZXu0y+nI/5K sP78rjxt/Ok1htD/VnQUeJbvxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqw7HLi bt1Per4iQQnQsR7SD9f0MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfoQzkf5Mp4fw72AcLWvTVvgXMq4j+yDfPKUKtqEhsNr9X7ArzeYbv JY8I6luir1hZePfvm0ToN2eDMzMK3QInRR8AdigSHT5wGX5DoaVIc2Uuiql+mYju y1iKa5PThxbW7kaB+TF0ZTcvmPfaQNX6la/RuXQ6/pre/O8A2+vRhuSF3cYc0NPI xv5t41fozc7H9f/dh/rLCBdj66OLK14SxF69fMKYRxDaPW2IeR3S3kY08duQYdUw B4cWNpL38v6PUKlQE3JjSOBB9vZ4RoMTwCHiCqKRg+29D5DIBibZfXaZlIAbs454 9S2CmHW7y67LvTViqKzzS85/7fb7Htaw -----END CERTIFICATE-----Generated at Thu Jun 19 08:14:46 2025 by rpki-client