$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: MB1CAHEe4Mqe1B81BV3JGzrgY0GUkmS24WBuUcDc9UU= Subject key identifier: 60:4D:05:EF:DB:37:8D:F8:E4:18:C5:8A:C5:80:BE:E3:ED:79:E6:24 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F55 Signing time: Sat 14 Jun 2025 17:30:35 +0000 Manifest this update: Sat 14 Jun 2025 17:30:34 +0000 Manifest next update: Sat 21 Jun 2025 17:30:34 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: SpBr6llOH2xLJojNcXekCp5EdYCPV+F4jvCrUtb5teU=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: KvPwwQitCLdp1wselY09GkbM7S1n62UBniOlJEvvNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3940 (0xf64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Jun 14 17:30:34 2025 GMT Not After : Jun 21 17:30:34 2025 GMT Subject: CN=684db1ba-0093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:f0:43:5d:7f:cf:16:03:b2:63:24:43:a3: 2c:20:7c:c0:ac:ed:b5:69:71:0f:ea:6c:5b:24:9e: 17:dc:43:07:a1:83:3b:bd:bf:49:91:c7:5f:e3:2d: 7b:8a:bf:f1:38:f6:ee:b8:1d:ec:27:00:36:6d:e5: 40:ba:6d:17:ad:15:fa:e6:21:17:3c:a4:66:9d:2b: 74:6c:d0:51:f7:29:7c:fe:a9:a0:ba:99:b7:55:a4: fc:0f:12:e1:e2:32:e0:3a:76:34:8c:99:9e:67:a8: 17:fd:6a:4a:ad:65:82:a1:88:f0:89:71:6d:eb:02: 3c:8e:ed:f5:91:1d:5c:08:e3:1c:91:74:3d:8e:93: 2d:45:2f:95:86:a5:18:8a:0d:4d:1c:df:20:34:10: fd:a4:02:15:b1:b4:87:43:23:5f:3f:1d:03:d6:fc: 31:09:c8:38:ea:bb:70:83:f2:e2:aa:2d:c4:87:09: 62:d5:30:3c:87:4f:c5:83:6f:c7:4b:37:d1:2c:a8: 80:43:4f:0c:4d:29:7a:82:8a:b3:bc:4e:c3:7a:a3: 98:3c:3e:ac:46:53:1d:54:b8:be:81:73:fb:b1:a2: 8e:31:35:77:df:f2:99:2f:c1:e3:b5:9c:cc:81:48: 54:20:ec:ed:8a:d4:70:89:96:44:d2:72:1d:2f:60: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4D:05:EF:DB:37:8D:F8:E4:18:C5:8A:C5:80:BE:E3:ED:79:E6:24 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:d3:ff:d4:fa:0f:f1:0e:25:e1:5b:4b:13:34:08:43:c9:9e: 46:2f:17:8b:b1:5c:ea:8e:de:25:51:12:a5:3d:98:cd:5a:50: a3:df:84:41:64:9e:01:ed:d6:65:60:bc:32:0e:a8:96:29:6d: 9a:6e:8d:6a:f8:d9:26:02:41:1a:bb:ad:d1:b5:54:69:a7:47: 4a:e9:26:d5:72:76:de:89:40:da:77:ba:4c:8b:eb:7a:68:14: 8d:93:2e:e1:63:e2:f5:ec:63:2f:04:98:cd:fa:d0:c5:1a:2a: 2f:39:f8:e8:39:d5:2b:79:d0:89:96:22:34:7d:52:d0:53:81: 08:30:03:ea:38:ef:37:b5:b0:8b:16:90:5d:73:65:bd:6a:d8: d8:60:e1:eb:02:01:5f:fe:5f:a0:ea:c4:42:f8:0c:0a:68:22: aa:8f:3b:1c:13:32:1d:f3:d0:53:b0:eb:65:33:4e:fb:59:5f: c3:c2:89:be:b8:a0:5d:48:66:b1:15:2f:06:51:db:15:7d:3f: 3b:8a:b3:28:5a:79:3e:38:e8:d8:ec:08:95:8e:94:56:8f:83: e0:c7:f0:46:24:6c:1c:de:01:6f:c0:c4:c7:8f:d8:92:ea:02: c4:91:9c:fd:32:cc:d3:a3:7d:4a:d6:54:ac:1a:c2:f1:24:9a: a5:e9:45:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwNjE0MTczMDM0WhcNMjUwNjIxMTczMDM0WjAYMRYwFAYD VQQDEw02ODRkYjFiYS0wMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYjwQ11/zxYDsmMkQ6MsIHzArO21aXEP6mxbJJ4X3EMHoYM7vb9Jkcdf4y17 ir/xOPbuuB3sJwA2beVAum0XrRX65iEXPKRmnSt0bNBR9yl8/qmgupm3VaT8DxLh 4jLgOnY0jJmeZ6gX/WpKrWWCoYjwiXFt6wI8ju31kR1cCOMckXQ9jpMtRS+VhqUY ig1NHN8gNBD9pAIVsbSHQyNfPx0D1vwxCcg46rtwg/Liqi3Ehwli1TA8h0/Fg2/H SzfRLKiAQ08MTSl6goqzvE7DeqOYPD6sRlMdVLi+gXP7saKOMTV33/KZL8HjtZzM gUhUIOztitRwiZZE0nIdL2BCCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBNBe/b N4345BjFisWAvuPteeYkMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv0//U+g/xDiXhW0sTNAhDyZ5GLxeLsVzqjt4lURKlPZjNWlCj34RB ZJ4B7dZlYLwyDqiWKW2abo1q+NkmAkEau63RtVRpp0dK6SbVcnbeiUDad7pMi+t6 aBSNky7hY+L17GMvBJjN+tDFGiovOfjoOdUredCJliI0fVLQU4EIMAPqOO83tbCL FpBdc2W9atjYYOHrAgFf/l+g6sRC+AwKaCKqjzscEzId89BTsOtlM077WV/Dwom+ uKBdSGaxFS8GUdsVfT87irMoWnk+OOjY7AiVjpRWj4Pgx/BGJGwc3gFvwMTHj9iS 6gLEkZz9MszTo31K1lSsGsLxJJql6UVt -----END CERTIFICATE-----Generated at Sat Jun 14 19:29:32 2025 by rpki-client