$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: h5Vm7sI7Y5ERQcDO9PGHX8TGRhiYsCHxTSU/+0Pw29E= Subject key identifier: 86:AA:D5:F6:F1:82:6F:EB:65:17:17:18:0C:51:26:3F:D9:81:1B:87 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 38 Signing time: Fri 13 Jun 2025 06:28:18 +0000 Manifest this update: Fri 13 Jun 2025 06:28:18 +0000 Manifest next update: Fri 20 Jun 2025 06:28:18 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: jufcbj/Pgn4v+bhI+BSvp8NWOD0uyksLy9RXwp33/wo=) 2: F3229F38F44511EFB636B464C4F9AE02.roa (hash: B0q4cUX8VVB8XcPWLSJob9ZUavvkIS4gZAdv8DWQNPk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:28:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57 (0x39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Jun 13 06:28:18 2025 GMT Not After : Jun 20 06:28:18 2025 GMT Subject: CN=684bc502-70fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:99:71:57:16:93:4b:56:12:71:78:c5:dc:4c: e8:e3:15:32:87:ad:c3:a0:83:5b:5f:35:68:0d:94: 0d:c4:94:04:e1:48:30:d3:3e:25:51:39:db:95:05: df:4d:4a:2a:e4:46:4b:d5:8e:86:82:57:12:2d:eb: 62:95:7a:67:fb:46:54:11:42:e8:05:12:34:1d:39: 33:d4:0b:aa:ca:b1:61:c0:6e:1f:83:62:51:f4:fb: bd:27:60:59:d3:37:46:dd:77:89:f4:19:6c:cc:53: eb:8b:e0:10:b5:25:f5:10:57:fd:b1:6e:50:64:c2: b9:70:58:56:e3:f6:44:0d:64:34:a6:ca:29:66:f1: a5:73:25:32:03:87:48:06:93:ff:4f:53:a3:f1:b1: 7d:1a:b1:c9:a7:11:b6:c4:84:56:07:d6:b5:f0:8c: 55:5f:7d:66:f0:f1:09:e0:4b:52:b9:24:f2:9f:0b: a5:08:81:2c:db:0a:73:21:d0:5b:82:e9:94:49:c9: 0d:76:7d:94:14:47:c9:d4:45:e6:a1:e0:c2:66:8c: 14:e3:c9:4d:cd:db:06:37:ac:60:d0:c0:b9:bc:88: 47:93:7f:69:ae:c1:c5:8d:35:af:91:4a:7a:54:18: 0d:35:8d:b8:d6:83:c5:b0:60:4a:71:46:fa:56:67: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:AA:D5:F6:F1:82:6F:EB:65:17:17:18:0C:51:26:3F:D9:81:1B:87 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:54:b5:dc:18:ff:68:23:18:bd:58:46:cc:00:20:ed:7c:fa: 7c:8f:6f:1c:29:89:bb:c3:e8:d7:0f:51:da:41:a5:a3:45:25: fb:00:39:1d:cd:59:7a:bd:5c:0b:05:3b:a9:21:ee:c9:87:31: 6e:c1:57:5a:39:ec:96:d1:3d:0e:0b:11:67:b2:6b:9e:c2:b5: ec:e1:b4:95:fe:04:21:93:24:69:15:44:7b:50:a0:6f:c4:88: 11:8f:d5:90:97:1c:37:c1:5d:af:23:8d:fa:8e:68:b7:9a:16: e5:fe:78:73:f3:1e:83:3d:9e:0d:6d:1c:4d:66:77:22:f4:87: 7f:3e:be:82:b6:cd:fb:d6:37:e3:67:f5:d7:4e:d4:d3:48:22: f1:38:73:e2:93:f4:02:d2:ae:a9:1f:8f:d0:4a:bf:ca:6d:26: 0f:e3:3f:10:4b:a2:b0:16:54:a8:20:24:23:4a:10:32:07:6d: 35:26:fc:b5:8c:c7:d5:be:71:a4:6f:d2:f1:f6:ca:10:ea:2d: 89:62:e1:6b:c6:01:43:34:33:17:16:20:c9:56:29:8d:8e:89: 47:f1:7f:46:9f:7c:d7:97:3a:90:a0:c2:ef:87:bb:f9:2d:5b: 58:9a:2b:7f:74:ca:71:77:1e:11:3e:cb:d0:a7:3a:8d:d8:b0: 08:e8:d7:c9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA2MTMwNjI4MThaFw0yNTA2MjAwNjI4MThaMBgxFjAUBgNV BAMTDTY4NGJjNTAyLTcwZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD4mXFXFpNLVhJxeMXcTOjjFTKHrcOgg1tfNWgNlA3ElAThSDDTPiVROduVBd9N SirkRkvVjoaCVxIt62KVemf7RlQRQugFEjQdOTPUC6rKsWHAbh+DYlH0+70nYFnT N0bdd4n0GWzMU+uL4BC1JfUQV/2xblBkwrlwWFbj9kQNZDSmyilm8aVzJTIDh0gG k/9PU6PxsX0ascmnEbbEhFYH1rXwjFVffWbw8QngS1K5JPKfC6UIgSzbCnMh0FuC 6ZRJyQ12fZQUR8nUReah4MJmjBTjyU3N2wY3rGDQwLm8iEeTf2muwcWNNa+RSnpU GA01jbjWg8WwYEpxRvpWZwg7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhqrV9vGC b+tlFxcYDFEmP9mBG4cwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGhUtdwY/2gjGL1YRswAIO18+nyPbxwpibvD6NcPUdpBpaNFJfsAOR3N WXq9XAsFO6kh7smHMW7BV1o57JbRPQ4LEWeya57CtezhtJX+BCGTJGkVRHtQoG/E iBGP1ZCXHDfBXa8jjfqOaLeaFuX+eHPzHoM9ng1tHE1mdyL0h38+voK2zfvWN+Nn 9ddO1NNIIvE4c+KT9ALSrqkfj9BKv8ptJg/jPxBLorAWVKggJCNKEDIHbTUm/LWM x9W+caRv0vH2yhDqLYli4WvGAUM0MxcWIMlWKY2OiUfxf0affNeXOpCgwu+Hu/kt W1iaK390ynF3HhE+y9CnOo3YsAjo18k= -----END CERTIFICATE-----Generated at Sat Jun 14 18:43:10 2025 by rpki-client