$ rpki-client -vvf rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft File: 7f5wbJSbXs8du-Rg29BO_nweEos.mft (raw, json) Hash identifier: vhtee1+izzsSrHa3/RbA4IekmEPEPkoPtYQtBoDKIVY= Subject key identifier: 02:FE:C5:BC:DB:5C:67:83:98:75:95:DD:9D:BA:A0:9F:39:CE:B0:CE Authority key identifier: ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B Certificate issuer: /CN=A9170EED/serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Certificate serial: 8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft Manifest number: 87 Signing time: Sun 15 Jun 2025 05:43:49 +0000 Manifest this update: Sun 15 Jun 2025 05:43:49 +0000 Manifest next update: Sun 22 Jun 2025 05:43:49 +0000 Files and hashes: 1: 7f5wbJSbXs8du-Rg29BO_nweEos.crl (hash: 8tr7rNMkWtTA9uOMOnxn30lcMgHy02Jub3CLLWCOh+s=) 2: A647525E853B11EFB513D149C4F9AE02.roa (hash: NVZ/4pC5x+KRkn1xpv0XuIrsdCyF6l6g38IM7lDAhYA=) 3: 4A6837A4CE0C11EF8EFFF140C4F9AE02.roa (hash: HwJfMTQ7jgg3uM77Aihq1iVX6drdh4vJBA8hbyppq9w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170EED, serialNumber=EDFE706C949B5ECF1DBBE460DBD04EFE7C1E128B Validity Not Before: Jun 15 05:43:49 2025 GMT Not After : Jun 22 05:43:49 2025 GMT Subject: CN=684e5d95-bd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:66:47:b9:23:c9:50:f6:62:55:b9:b3:b2: e3:b0:20:93:b5:48:75:c3:1c:fc:2a:ef:ca:ac:8d: 36:ed:00:3f:b7:3b:ad:39:01:ed:3e:a7:45:2d:2b: b1:df:39:bc:c0:77:ed:11:57:f2:82:70:c9:c9:8d: 4d:98:ae:80:aa:67:3e:49:ad:cb:66:3a:64:dc:18: 4e:dd:84:f6:9f:91:f4:54:93:29:17:34:3e:66:33: 11:d8:d4:a8:9e:d7:7b:04:2f:86:ac:f6:16:f0:7b: e4:00:b5:1b:1a:7d:3a:12:e0:a2:4d:8b:1d:47:34: 52:19:b8:18:01:57:f1:ed:f0:f9:c8:e2:a3:49:b8: 1a:f8:e6:4f:bc:94:1a:e0:6e:d0:24:c8:02:f9:b6: 20:a7:ad:58:4a:05:02:a6:f4:52:50:4e:20:46:54: 7e:f5:24:f0:ff:d5:69:b3:1c:96:81:51:ff:59:a0: f2:0c:b3:47:ed:21:8c:bd:c8:c4:d8:fa:85:ae:8f: d5:60:e0:3d:be:44:92:eb:ec:2f:f3:4f:03:48:4a: 00:47:f1:69:29:2a:d3:e5:71:cf:8a:df:c5:c8:17: 9f:4c:93:9c:30:d9:4f:11:3d:96:46:17:c7:13:47: 44:d3:98:fb:9b:e7:4e:69:61:48:c8:0b:97:ba:66: 84:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:C5:BC:DB:5C:67:83:98:75:95:DD:9D:BA:A0:9F:39:CE:B0:CE X509v3 Authority Key Identifier: keyid:ED:FE:70:6C:94:9B:5E:CF:1D:BB:E4:60:DB:D0:4E:FE:7C:1E:12:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f5wbJSbXs8du-Rg29BO_nweEos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170EED/3FF3940E853B11EFA3072349C4F9AE02/7f5wbJSbXs8du-Rg29BO_nweEos.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:dc:e2:86:c9:f8:fa:5c:5d:00:30:ec:44:8f:55:1d:83:11: e0:05:59:25:7a:26:20:6b:78:01:65:d4:82:8e:ef:19:5f:be: ca:22:77:0b:0f:25:83:71:68:64:dc:7c:3c:e7:8d:28:cc:6c: c0:09:88:0c:d9:63:a5:e5:f0:e8:3c:40:7d:ed:e0:87:61:f9: 75:26:dc:cc:60:05:b3:fe:34:5a:9b:3c:76:d7:ef:0a:ef:37: 28:86:b3:c9:62:5d:fc:3a:0d:32:cf:50:2c:cb:e7:de:49:7b: cf:71:07:ae:cf:1e:c8:84:96:77:65:94:5a:31:40:f5:e7:ef: b5:02:21:6f:ab:4b:0f:81:e4:ff:2f:27:be:88:82:fd:81:33: 57:d3:fa:98:fa:ff:43:a1:63:9c:dc:c2:06:55:da:24:e3:61: 78:8c:d5:f3:eb:db:5a:7e:9d:26:80:93:5f:52:e7:a6:b6:69: 3e:ea:f5:14:5e:b1:21:f0:94:ff:dd:58:2e:d2:d3:07:80:22: 06:b6:08:cc:bc:ea:48:ca:78:87:b7:86:b0:e5:f8:d0:e0:75: d6:04:fa:7b:cb:47:f6:b3:71:d0:da:be:f8:21:84:79:24:5c: 3f:33:ad:79:60:d8:46:f8:1c:2a:30:02:2d:34:11:32:97:b5: 8a:eb:f0:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBFRUQxMTAvBgNVBAUTKEVERkU3MDZDOTQ5QjVFQ0YxREJCRTQ2MERCRDA0RUZF N0MxRTEyOEIwHhcNMjUwNjE1MDU0MzQ5WhcNMjUwNjIyMDU0MzQ5WjAYMRYwFAYD VQQDEw02ODRlNWQ5NS1iZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCBmR7kjyVD2YlW5s7LjsCCTtUh1wxz8Ku/KrI027QA/tzutOQHtPqdFLSux 3zm8wHftEVfygnDJyY1NmK6Aqmc+Sa3LZjpk3BhO3YT2n5H0VJMpFzQ+ZjMR2NSo ntd7BC+GrPYW8HvkALUbGn06EuCiTYsdRzRSGbgYAVfx7fD5yOKjSbga+OZPvJQa 4G7QJMgC+bYgp61YSgUCpvRSUE4gRlR+9STw/9VpsxyWgVH/WaDyDLNH7SGMvcjE 2PqFro/VYOA9vkSS6+wv808DSEoAR/FpKSrT5XHPit/FyBefTJOcMNlPET2WRhfH E0dE05j7m+dOaWFIyAuXumaENwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAL+xbzb XGeDmHWV3Z26oJ85zrDOMB8GA1UdIwQYMBaAFO3+cGyUm17PHbvkYNvQTv58HhKL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEVFRC8zRkYzOTQwRTg1 M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhzOGR1LVJnMjlCT19ud2VF b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmNXdiSlNiWHM4ZHUtUmcyOUJPX253ZUVvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEVFRC8zRkYzOTQwRTg1M0IxMUVGQTMwNzIzNDlDNEY5QUUwMi83ZjV3YkpTYlhz OGR1LVJnMjlCT19ud2VFb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAN3OKGyfj6XF0AMOxEj1UdgxHgBVkleiYga3gBZdSCju8ZX77KIncL DyWDcWhk3Hw8540ozGzACYgM2WOl5fDoPEB97eCHYfl1JtzMYAWz/jRamzx21+8K 7zcohrPJYl38Og0yz1Asy+feSXvPcQeuzx7IhJZ3ZZRaMUD15++1AiFvq0sPgeT/ Lye+iIL9gTNX0/qY+v9DoWOc3MIGVdok42F4jNXz69tafp0mgJNfUuemtmk+6vUU XrEh8JT/3Vgu0tMHgCIGtgjMvOpIyniHt4aw5fjQ4HXWBPp7y0f2s3HQ2r74IYR5 JFw/M615YNhG+BwqMAItNBEyl7WK6/AW -----END CERTIFICATE-----Generated at Sun Jun 15 08:44:22 2025 by rpki-client