$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft File: 7qiugNcT5rItsOxgkVfwxZpS_X8.mft (raw, json) Hash identifier: P2WB0AJLGbHHoAuSiufAg+wtg7L8o4JsQpYWd2CCUMA= Subject key identifier: 68:A1:4D:30:BA:DC:E4:6A:E0:65:47:0D:1C:49:6F:8D:D2:7C:A5:A5 Authority key identifier: EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F Certificate issuer: /CN=A918D6B7/serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Certificate serial: 34F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft Manifest number: 34BD Signing time: Sat 14 Jun 2025 14:50:26 +0000 Manifest this update: Sat 14 Jun 2025 14:50:25 +0000 Manifest next update: Sat 21 Jun 2025 14:50:25 +0000 Files and hashes: 1: 7qiugNcT5rItsOxgkVfwxZpS_X8.crl (hash: smPZPhdk0ir/Pi/sQrt6HJpxv8CoqxrIspho0Fl5nsw=) 2: F026CE74927411EDB020A481C4F9AE02.roa (hash: D3nZr89FC3B/hYB2ABfVDlFpa9Kx2bcJix0bhxq7u3Y=) 3: 6C0C85D0A43011ECA230771BC4F9AE02.roa (hash: 7ZkKrwIf5dxU1AyQHdEtx/cZNmt12RU0pVuLQbnEwD8=) 4: 2A73A3403A0711F081048A4EC4F9AE02.roa (hash: Sb9dKZUra617yJWr0DgG7F51M0rwa4KtVZlgSlPgYpw=) 5: 2ACF9E0C855C11EB8C076013C4F9AE02.roa (hash: /XOWg1DL5Ca4WTABh7nowkgqWfXA9qIHVM17A2ry+Ak=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13561 (0x34f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D6B7, serialNumber=EEA8AE80D713E6B22DB0EC609157F0C59A52FD7F Validity Not Before: Jun 14 14:50:25 2025 GMT Not After : Jun 21 14:50:25 2025 GMT Subject: CN=684d8c32-51d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:95:b2:aa:2d:31:67:24:41:00:eb:f2:76: 05:25:66:7d:d0:f3:c0:5a:b8:cd:2d:c7:f9:07:c7: c5:81:be:f3:85:82:75:2b:51:01:4d:66:4d:a8:5b: 6a:a1:50:f6:7d:3c:a1:f5:05:15:c8:a6:53:03:04: 07:5a:c3:05:d4:9a:93:a5:44:99:7f:ea:4b:93:ce: 20:f9:31:ad:65:22:ff:ca:04:07:fd:1f:5a:38:52: 98:be:c7:c0:75:76:09:58:92:dc:aa:49:07:2b:e5: fe:54:c9:ec:58:a0:0f:f5:ba:9b:01:ec:e4:55:e7: 08:9c:ac:e9:81:34:dc:8f:58:c4:fc:c7:4e:80:ae: 62:a9:19:16:e5:85:d2:ac:8b:7e:a6:c5:cc:da:d4: 4a:d4:86:90:cd:f1:ec:35:55:42:2c:d8:35:a9:2a: 12:75:a3:53:88:c4:6a:4f:a6:4a:6b:f1:4e:8c:a0: 63:6d:62:b5:41:1a:3f:2f:d6:26:a8:ca:8f:a1:33: ee:07:4a:c8:ca:ac:54:81:c9:d4:84:79:e8:28:b0: bc:ff:ef:db:aa:21:d4:c5:df:bb:64:36:3d:05:1c: fb:da:f8:ed:39:7a:d7:40:48:72:1b:ed:dd:99:ee: 76:e7:75:e9:67:b6:39:ea:f5:6e:d2:c7:da:44:b2: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A1:4D:30:BA:DC:E4:6A:E0:65:47:0D:1C:49:6F:8D:D2:7C:A5:A5 X509v3 Authority Key Identifier: keyid:EE:A8:AE:80:D7:13:E6:B2:2D:B0:EC:60:91:57:F0:C5:9A:52:FD:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qiugNcT5rItsOxgkVfwxZpS_X8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6B7/1C16641C1D9711E296D0308008B02CD2/7qiugNcT5rItsOxgkVfwxZpS_X8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ed:00:07:9f:b1:61:20:77:3b:96:79:7b:dd:2b:0e:d7:dd: f7:d8:cf:d8:4f:33:98:cb:11:6b:27:4c:80:74:e3:57:51:70: 89:ba:9d:37:dd:1d:fe:96:51:f2:d9:12:a0:d6:e8:3f:f1:68: b2:62:2a:3f:e7:d3:02:63:51:0b:f8:50:40:a4:dc:08:d5:30: fe:ec:38:0e:62:75:8d:99:e0:49:02:ed:f0:cd:8e:ae:02:9a: 3b:99:11:ae:67:05:77:e7:b2:85:5f:a2:1b:b2:eb:55:44:d0: c9:56:02:7a:cc:bf:73:80:ad:7b:cb:dd:c0:95:e0:84:3c:28: f9:f1:70:fd:6e:bc:a4:3f:60:79:8d:90:3c:3d:f7:d0:b7:8b: 94:41:57:34:97:9e:38:4c:c8:08:fb:1b:e2:ed:c7:d0:ec:d9: 83:a3:93:d3:24:b1:e7:a3:2c:9b:85:d7:de:25:a4:c5:b7:cf: 09:79:25:7d:52:a2:1e:ea:0e:41:98:65:2b:40:09:cb:14:d2: fb:f1:8d:e6:65:38:ad:86:5d:0d:ac:a8:0a:d9:90:70:b3:e8: 8d:d1:5e:8f:6b:f6:70:e7:40:ec:a6:b0:f8:4d:3e:e7:b4:8b: bd:0b:fa:27:61:61:ad:1a:23:ac:17:b7:c1:cd:51:73:5e:a2: 65:80:e3:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2QjcxMTAvBgNVBAUTKEVFQThBRTgwRDcxM0U2QjIyREIwRUM2MDkxNTdGMEM1 OUE1MkZEN0YwHhcNMjUwNjE0MTQ1MDI1WhcNMjUwNjIxMTQ1MDI1WjAYMRYwFAYD VQQDEw02ODRkOGMzMi01MWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ2VsqotMWckQQDr8nYFJWZ90PPAWrjNLcf5B8fFgb7zhYJ1K1EBTWZNqFtq oVD2fTyh9QUVyKZTAwQHWsMF1JqTpUSZf+pLk84g+TGtZSL/ygQH/R9aOFKYvsfA dXYJWJLcqkkHK+X+VMnsWKAP9bqbAezkVecInKzpgTTcj1jE/MdOgK5iqRkW5YXS rIt+psXM2tRK1IaQzfHsNVVCLNg1qSoSdaNTiMRqT6ZKa/FOjKBjbWK1QRo/L9Ym qMqPoTPuB0rIyqxUgcnUhHnoKLC8/+/bqiHUxd+7ZDY9BRz72vjtOXrXQEhyG+3d me5253XpZ7Y56vVu0sfaRLL7fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGihTTC6 3ORq4GVHDRxJb43SfKWlMB8GA1UdIwQYMBaAFO6oroDXE+ayLbDsYJFX8MWaUv1/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDZCNy8xQzE2NjQxQzFE OTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVySXRzT3hna1Zmd3hacFNf WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdxaXVnTmNUNXJJdHNPeGdrVmZ3eFpwU19YOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDZCNy8xQzE2NjQxQzFEOTcxMUUyOTZEMDMwODAwOEIwMkNEMi83cWl1Z05jVDVy SXRzT3hna1Zmd3hacFNfWDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ7QAHn7FhIHc7lnl73SsO19332M/YTzOYyxFrJ0yAdONXUXCJup03 3R3+llHy2RKg1ug/8WiyYio/59MCY1EL+FBApNwI1TD+7DgOYnWNmeBJAu3wzY6u Apo7mRGuZwV357KFX6IbsutVRNDJVgJ6zL9zgK17y93AleCEPCj58XD9brykP2B5 jZA8PffQt4uUQVc0l544TMgI+xvi7cfQ7NmDo5PTJLHnoyybhdfeJaTFt88JeSV9 UqIe6g5BmGUrQAnLFNL78Y3mZTithl0NrKgK2ZBws+iN0V6Pa/Zw50DsprD4TT7n tIu9C/onYWGtGiOsF7fBzVFzXqJlgOMi -----END CERTIFICATE-----Generated at Sat Jun 14 19:36:00 2025 by rpki-client