$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: YBSKWpCyqldxidMFAnYYZyBRMOOmIkJWJZKOp8/88zw= Subject key identifier: 62:D2:38:32:1F:AC:BE:00:9E:CB:23:F7:E1:AC:5C:94:5A:1D:5F:3B Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09E0 Signing time: Sat 14 Jun 2025 19:43:44 +0000 Manifest this update: Sat 14 Jun 2025 19:43:44 +0000 Manifest next update: Sat 21 Jun 2025 19:43:44 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: rSdXt9oKivlF21OsX1VnHLs4jtrMRU8dV2Lo4bzfRf8=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Jun 14 19:43:44 2025 GMT Not After : Jun 21 19:43:44 2025 GMT Subject: CN=684dd0f0-43a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:61:fe:a0:55:9e:64:e5:d7:04:25:57:fe:d9: 1f:e0:4d:2e:4d:e2:e7:ad:da:b7:1e:aa:72:1d:46: c9:fa:76:89:10:a9:6a:ad:20:e0:e6:1e:7e:bd:1b: 3a:b5:3e:31:ef:47:3b:78:8f:ed:88:a2:3c:b7:cc: dd:6f:0c:02:24:0c:95:e5:4f:8f:cd:1e:ac:01:9e: c0:c2:59:de:ee:81:5e:6c:be:3a:3d:63:af:2f:c6: 8e:c4:03:d7:b7:ed:fb:1a:67:db:12:a4:e9:20:2e: 81:02:e1:33:84:da:8f:81:70:2d:f1:3d:fb:27:08: a5:84:2f:98:06:46:b5:78:b1:55:04:1e:7f:19:5d: 1f:94:e6:26:d6:32:59:c9:cb:c7:e0:43:14:37:38: c7:dc:40:37:63:d4:c0:0c:4a:7e:f0:4a:a3:fb:17: ae:f7:78:db:c0:cd:e9:51:6c:62:5b:49:ec:7b:7a: 6c:d6:98:06:28:04:cb:f4:04:40:29:a3:f7:13:71: 5d:f7:f1:e7:b4:21:45:bf:6d:e4:5c:3f:4f:ba:2f: 14:34:0b:c1:1b:c5:f5:01:c8:11:9a:3b:1a:68:f7: 43:cd:61:e0:2d:c4:ec:1f:a4:88:0b:2a:f5:3c:81: de:56:32:35:c4:1d:78:32:cb:65:bd:42:bc:63:e2: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D2:38:32:1F:AC:BE:00:9E:CB:23:F7:E1:AC:5C:94:5A:1D:5F:3B X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:48:7f:d7:ed:90:13:f2:f8:1f:8e:52:4d:23:37:34:c7:81: 02:67:5e:20:f2:e6:65:9e:57:72:d6:c4:b7:1e:2c:f5:f2:74: 44:19:67:28:3b:43:44:83:29:f0:8e:0e:86:2a:ea:99:ab:dd: 93:13:e0:fb:10:4f:9b:17:20:c7:d4:61:95:1c:5c:c3:28:0d: a5:e1:7f:9a:4c:ce:c1:64:25:36:9a:0e:75:9e:a3:bb:03:e5: 07:5a:95:e9:db:bc:5e:78:50:6f:73:b7:80:da:40:16:8a:d0: 87:d1:7c:39:1f:76:7e:21:b8:94:32:f2:8d:44:97:db:07:48: 33:1e:94:72:08:5e:fd:8f:5c:01:83:1e:12:0a:d9:12:23:19: 56:56:2f:ad:e0:d4:72:be:b4:59:0a:9e:35:34:2f:93:b9:aa: a2:02:29:a5:ed:39:9e:a5:aa:80:8a:2c:6a:91:de:1f:9f:a8: 05:5f:90:2c:d9:ec:84:78:76:d5:b5:4c:ff:72:28:5a:c5:4f: cf:7e:db:cf:d1:f8:5e:ef:e8:1f:a0:3f:fa:60:36:ad:ca:49: 77:8c:2f:e9:bc:66:c3:f2:83:c9:58:ca:c7:13:5c:37:14:97: d6:d5:fa:71:c8:77:44:7f:29:6e:2e:08:17:49:8f:5e:69:72: 73:8a:45:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNjE0MTk0MzQ0WhcNMjUwNjIxMTk0MzQ0WjAYMRYwFAYD VQQDEw02ODRkZDBmMC00M2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmH+oFWeZOXXBCVX/tkf4E0uTeLnrdq3HqpyHUbJ+naJEKlqrSDg5h5+vRs6 tT4x70c7eI/tiKI8t8zdbwwCJAyV5U+PzR6sAZ7Awlne7oFebL46PWOvL8aOxAPX t+37GmfbEqTpIC6BAuEzhNqPgXAt8T37JwilhC+YBka1eLFVBB5/GV0flOYm1jJZ ycvH4EMUNzjH3EA3Y9TADEp+8Eqj+xeu93jbwM3pUWxiW0nse3ps1pgGKATL9ARA KaP3E3Fd9/HntCFFv23kXD9Pui8UNAvBG8X1AcgRmjsaaPdDzWHgLcTsH6SICyr1 PIHeVjI1xB14MstlvUK8Y+JNWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGLSODIf rL4Anssj9+GsXJRaHV87MB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCSH/X7ZAT8vgfjlJNIzc0x4ECZ14g8uZlnldy1sS3Hiz18nREGWco O0NEgynwjg6GKuqZq92TE+D7EE+bFyDH1GGVHFzDKA2l4X+aTM7BZCU2mg51nqO7 A+UHWpXp27xeeFBvc7eA2kAWitCH0Xw5H3Z+IbiUMvKNRJfbB0gzHpRyCF79j1wB gx4SCtkSIxlWVi+t4NRyvrRZCp41NC+TuaqiAiml7TmepaqAiixqkd4fn6gFX5As 2eyEeHbVtUz/cihaxU/PftvP0fhe7+gfoD/6YDatykl3jC/pvGbD8oPJWMrHE1w3 FJfW1fpxyHdEfyluLggXSY9eaXJzikUc -----END CERTIFICATE-----Generated at Sun Jun 15 19:20:00 2025 by rpki-client