$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: sJQwIosFK/IZrwh6IHthm+WkZz1+U1BCosYcODA4Xns= Subject key identifier: 64:A4:CC:87:8A:06:EB:73:02:F0:8B:37:10:FB:5E:2D:DA:7A:24:2D Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: E6 Signing time: Fri 13 Jun 2025 04:21:57 +0000 Manifest this update: Fri 13 Jun 2025 04:21:57 +0000 Manifest next update: Fri 20 Jun 2025 04:21:57 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: RVSSHxieyAerPWQNPORXF3Y2dwnUJqNDY1WuyweHTOU=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:21:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Jun 13 04:21:57 2025 GMT Not After : Jun 20 04:21:57 2025 GMT Subject: CN=684ba765-5360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:ae:1c:5a:67:8d:2e:72:2a:ad:3d:12:5e: b9:a0:06:ad:78:db:e8:2c:65:75:6e:3e:ef:e4:28: 92:f8:73:45:5a:1a:8f:00:46:ab:19:5b:3e:81:c7: 99:42:52:25:34:56:cf:92:46:ea:5c:60:7a:22:57: 23:cc:7a:56:e0:cd:8e:d7:29:38:29:df:5c:96:68: 65:5d:c1:27:99:ec:dd:fe:48:a2:f0:18:fb:f5:bf: 82:50:38:df:6d:fe:c1:fd:1f:72:ee:f7:96:c5:6c: 84:cf:df:ec:c5:0e:63:fa:c8:2a:10:9d:68:1f:26: 36:70:a0:ab:6c:48:3a:02:3e:d3:0d:47:32:b9:13: e4:87:1c:b0:bd:f7:1a:d6:16:a8:52:bb:f9:a9:52: 9a:78:a0:28:80:5e:0c:1c:b4:f7:7e:95:4e:27:d6: cf:03:b3:8b:14:9a:f4:05:b6:eb:09:00:93:65:b2: dd:c8:80:22:fd:08:c2:25:c3:96:0e:6c:e7:af:c5: 6d:1f:f5:6c:2e:18:e8:97:20:a3:d3:55:31:55:56: 73:b6:16:2b:2b:6a:66:2c:40:40:b8:c7:81:1b:ce: 82:42:4b:5d:1c:25:6f:0f:70:49:84:01:fd:3c:3e: 36:4e:09:13:b4:9b:be:2e:a4:42:16:95:f1:6c:9e: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A4:CC:87:8A:06:EB:73:02:F0:8B:37:10:FB:5E:2D:DA:7A:24:2D X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:ec:22:aa:2f:96:e5:ee:48:49:0b:81:54:34:8b:90:55:39: a3:0b:74:91:4e:53:a1:c8:4e:94:82:ea:50:a1:e0:c1:60:3d: 2c:42:92:b2:1d:35:df:d1:41:5c:fa:3a:2b:bf:24:47:c1:6f: 83:d3:cc:1f:85:0e:b1:6a:86:65:df:d0:4c:e6:32:07:78:c0: c1:89:b8:f7:03:b7:71:c5:6d:11:3a:4f:32:39:48:6c:f7:f7: 44:4f:1a:66:c6:58:60:73:74:5c:61:6d:16:9b:b0:58:82:50: 42:4f:36:89:3a:12:1a:b5:7b:88:5c:32:14:2d:59:93:2b:82: 83:a6:b8:a5:53:7e:bc:af:e2:7e:ac:b9:a9:86:b5:56:11:71: 63:3f:50:0a:b2:9a:a9:7b:77:c5:bd:ae:a3:76:fc:66:d3:56: e0:54:b4:17:0c:03:04:c2:01:67:0a:ee:55:c7:8a:47:6d:33: a2:3b:c2:c0:81:b4:04:b3:08:e8:49:08:f3:72:61:6b:40:bc: 1f:39:00:21:d3:5e:79:36:ef:93:2d:86:d2:f3:80:20:b3:48: a8:e1:fc:51:9e:63:99:33:57:2f:e5:84:d4:51:16:7a:9a:aa: b3:26:1e:c8:1f:cd:fd:a1:8d:c6:3a:3b:30:ae:80:5d:b1:08: ce:3f:6d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUwNjEzMDQyMTU3WhcNMjUwNjIwMDQyMTU3WjAYMRYwFAYD VQQDEw02ODRiYTc2NS01MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxb+uHFpnjS5yKq09El65oAateNvoLGV1bj7v5CiS+HNFWhqPAEarGVs+gceZ QlIlNFbPkkbqXGB6IlcjzHpW4M2O1yk4Kd9clmhlXcEnmezd/kii8Bj79b+CUDjf bf7B/R9y7veWxWyEz9/sxQ5j+sgqEJ1oHyY2cKCrbEg6Aj7TDUcyuRPkhxywvfca 1haoUrv5qVKaeKAogF4MHLT3fpVOJ9bPA7OLFJr0BbbrCQCTZbLdyIAi/QjCJcOW Dmznr8VtH/VsLhjolyCj01UxVVZzthYrK2pmLEBAuMeBG86CQktdHCVvD3BJhAH9 PD42TgkTtJu+LqRCFpXxbJ6qiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSkzIeK ButzAvCLNxD7Xi3aeiQtMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ7CKqL5bl7khJC4FUNIuQVTmjC3SRTlOhyE6UgupQoeDBYD0sQpKy HTXf0UFc+jorvyRHwW+D08wfhQ6xaoZl39BM5jIHeMDBibj3A7dxxW0ROk8yOUhs 9/dETxpmxlhgc3RcYW0Wm7BYglBCTzaJOhIatXuIXDIULVmTK4KDprilU368r+J+ rLmphrVWEXFjP1AKspqpe3fFva6jdvxm01bgVLQXDAMEwgFnCu5Vx4pHbTOiO8LA gbQEswjoSQjzcmFrQLwfOQAh0155Nu+TLYbS84Ags0io4fxRnmOZM1cv5YTUURZ6 mqqzJh7IH839oY3GOjswroBdsQjOP23z -----END CERTIFICATE-----Generated at Sat Jun 14 19:37:24 2025 by rpki-client