$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: IeG20Xg1IDCBtPpmuDnQRyw+7gGVervj4KGycVfXxaE= Subject key identifier: 54:00:BF:7C:62:1D:73:DB:62:54:D7:02:54:47:4B:13:4C:E5:31:FB Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 348B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 348B Signing time: Sat 14 Jun 2025 14:31:06 +0000 Manifest this update: Sat 14 Jun 2025 14:31:06 +0000 Manifest next update: Sat 21 Jun 2025 14:31:06 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: L0x4HxbxrxWirT4kX4Ic8eov3eTiAxAkuaFOdNR6wG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13451 (0x348b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: Jun 14 14:31:06 2025 GMT Not After : Jun 21 14:31:06 2025 GMT Subject: CN=684d87aa-8c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:46:cb:09:0d:0a:19:03:4d:cb:90:75:8c: 5f:50:3b:5d:13:bb:c4:64:ca:99:28:5d:21:b7:65: 12:05:35:0e:d1:4a:c6:4d:0b:c0:0f:46:5b:d6:2a: 40:5c:a8:72:4e:e3:48:c5:cc:7d:c7:85:76:09:e9: c5:25:12:e7:89:32:0d:78:fa:25:40:50:c8:71:25: 27:ec:f2:1a:72:19:ca:20:be:e4:b1:45:31:d0:53: 3e:bd:27:2b:c2:c2:a5:1c:a9:ea:da:76:e8:fb:7c: 60:2b:8b:fb:0d:66:4b:da:b0:5d:8d:48:03:78:21: 71:8a:01:0f:0e:50:ed:20:62:37:0d:9b:cc:2e:e4: 05:b1:f1:6e:3a:05:50:87:41:0e:e1:ac:eb:ce:ef: 25:bc:93:ee:ce:88:c8:5d:7b:d6:04:85:2d:78:54: e8:c1:33:22:be:8c:4a:83:cc:53:92:91:c7:90:08: ff:e4:de:d8:14:5e:f0:2c:2a:4d:8b:b3:a1:a2:62: 80:c3:bf:d8:81:22:be:62:e4:14:1d:53:7a:ca:a2: 2b:0b:4e:85:ec:af:58:24:5d:23:9c:fd:4b:59:26: bf:a5:e1:36:9e:64:98:2d:1d:a3:47:e5:12:87:1e: 2b:12:40:7e:08:21:65:14:5b:1c:97:25:70:f5:17: f5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:00:BF:7C:62:1D:73:DB:62:54:D7:02:54:47:4B:13:4C:E5:31:FB X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:c7:bc:c4:c1:a0:60:ca:c5:ac:0b:e2:11:df:ca:69:f0:37: c8:ac:4c:f2:a4:38:c4:05:5c:fc:94:aa:8b:34:cb:13:f7:ff: 13:7b:26:f1:48:3f:47:fa:0b:c4:26:c0:22:bf:ae:31:fe:b8: bf:99:d1:cf:c4:1d:b2:52:df:05:be:9c:3c:ed:05:e7:0e:ed: ee:f4:25:66:cd:f8:0a:de:42:20:f9:25:a7:98:21:bb:4e:d9: 56:e2:f9:03:24:9e:4a:c9:e1:4c:01:5b:f3:3a:a3:55:21:e5: 08:0e:58:9a:a3:fd:14:b7:f7:d3:7c:e5:9f:9a:99:8a:7d:e8: 99:ac:11:e3:a2:3b:0f:95:7c:16:2d:91:32:c0:b5:e9:14:d6: df:5b:37:da:ec:15:f6:c4:d5:b4:4e:2d:4e:05:10:ba:3d:2f: f7:83:98:c8:8b:af:6c:5d:c5:28:91:47:22:6c:32:35:78:ce: cc:f9:1b:43:57:41:b7:82:fb:14:9e:39:d8:0e:ef:d3:4e:b1: 4d:7e:0d:79:7c:2a:93:cb:90:14:c0:5e:a5:c9:29:ad:58:54: 99:10:57:d9:73:23:5e:63:75:05:45:09:a7:91:cb:3b:9c:46: bc:9a:fb:d6:a7:4e:e6:8d:e1:b5:54:f2:50:be:65:f6:fd:e7: 44:6d:63:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjUwNjE0MTQzMTA2WhcNMjUwNjIxMTQzMTA2WjAYMRYwFAYD VQQDEw02ODRkODdhYS04Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntlGywkNChkDTcuQdYxfUDtdE7vEZMqZKF0ht2USBTUO0UrGTQvAD0Zb1ipA XKhyTuNIxcx9x4V2CenFJRLniTINePolQFDIcSUn7PIachnKIL7ksUUx0FM+vScr wsKlHKnq2nbo+3xgK4v7DWZL2rBdjUgDeCFxigEPDlDtIGI3DZvMLuQFsfFuOgVQ h0EO4azrzu8lvJPuzojIXXvWBIUteFTowTMivoxKg8xTkpHHkAj/5N7YFF7wLCpN i7OhomKAw7/YgSK+YuQUHVN6yqIrC06F7K9YJF0jnP1LWSa/peE2nmSYLR2jR+US hx4rEkB+CCFlFFsclyVw9Rf1LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFQAv3xi HXPbYlTXAlRHSxNM5TH7MB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACx7zEwaBgysWsC+IR38pp8DfIrEzypDjEBVz8lKqLNMsT9/8Teybx SD9H+gvEJsAiv64x/ri/mdHPxB2yUt8Fvpw87QXnDu3u9CVmzfgK3kIg+SWnmCG7 TtlW4vkDJJ5KyeFMAVvzOqNVIeUIDliao/0Ut/fTfOWfmpmKfeiZrBHjojsPlXwW LZEywLXpFNbfWzfa7BX2xNW0Ti1OBRC6PS/3g5jIi69sXcUokUcibDI1eM7M+RtD V0G3gvsUnjnYDu/TTrFNfg15fCqTy5AUwF6lySmtWFSZEFfZcyNeY3UFRQmnkcs7 nEa8mvvWp07mjeG1VPJQvmX2/edEbWNh -----END CERTIFICATE-----Generated at Mon Jun 16 10:29:11 2025 by rpki-client