$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: dhdSr8JzfKg8t5Do1VE1bZ6JgoUZepSvgAb1IzandMQ= Subject key identifier: 04:F7:DE:BC:D9:42:F1:FF:6C:C3:4F:D9:F9:C6:45:B9:BF:64:57:52 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0970 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 096A Signing time: Thu 12 Jun 2025 19:56:40 +0000 Manifest this update: Thu 12 Jun 2025 19:56:39 +0000 Manifest next update: Thu 19 Jun 2025 19:56:39 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: 97RhVNPn9PliJMlL7PU9kGKEtbKvJImqXV/8zAUyfUI=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: eARvkLPx4cJh+IeHG0XdxEw7zw/djQ5xDufaDbeB8VU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:56:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2416 (0x970) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Jun 12 19:56:39 2025 GMT Not After : Jun 19 19:56:39 2025 GMT Subject: CN=684b30f7-9965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f7:37:cf:e8:96:f0:02:26:83:33:92:5f:4e: 93:f2:bc:54:3a:94:c7:b1:54:41:2b:50:4b:78:95: 5c:ee:7e:9e:09:75:83:97:08:0d:18:bf:70:bd:19: ae:28:3c:ba:9f:45:9d:d1:b8:00:aa:a7:f6:97:82: 82:be:49:c1:bf:de:40:90:f5:b1:ed:b1:cd:70:51: fd:26:6b:64:6d:13:35:7b:48:53:96:24:d5:30:50: cc:e7:3d:2f:73:a7:11:a5:c4:3b:0c:05:fc:57:59: 80:34:e3:92:03:93:92:38:28:0c:dc:56:52:e6:fe: 25:e8:5a:5b:67:6a:98:f4:55:cd:c8:3a:11:cc:84: 85:fb:b0:f0:fd:57:1f:47:47:f8:9f:79:69:8b:9f: ec:bf:08:f1:f6:9a:65:13:04:53:33:c2:15:a7:db: 8d:76:a7:eb:db:c3:c1:92:00:3d:8d:a0:44:3f:82: b4:9c:45:aa:48:e8:ea:33:78:6f:34:76:58:86:f7: ad:5e:54:de:1f:cf:82:0d:90:4e:4f:c2:65:a8:22: 66:cb:db:1d:76:80:39:f0:75:05:e5:1e:6a:13:e7: 52:21:a6:3c:7e:8d:69:2e:8d:ea:5c:9b:05:f4:23: 5c:3a:bc:85:a5:27:c9:39:bc:55:c3:6c:fe:11:26: 21:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:DE:BC:D9:42:F1:FF:6C:C3:4F:D9:F9:C6:45:B9:BF:64:57:52 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1e:bd:8d:56:ed:8e:cf:a3:72:6e:4f:73:25:a1:65:71:c4: c7:fd:df:59:4b:61:83:7a:92:d3:11:e9:c4:d7:8e:04:18:fa: ec:b3:c0:cb:85:d2:72:d6:fe:4f:e9:3a:06:e2:ce:d8:95:d7: 1c:f9:e6:2b:c7:39:ce:cb:d6:44:1d:13:05:ee:a6:e7:cb:00: 94:7d:0f:86:2c:af:a4:de:86:f1:4c:82:0c:0e:58:f6:a5:cb: f3:76:0e:2c:ca:7f:82:98:fc:6d:5f:eb:a3:b9:ef:ad:13:ab: 0d:f0:88:53:83:0e:cb:0d:a3:70:99:cf:1d:a7:ac:3a:0e:4b: 0f:39:87:06:56:fe:c6:01:bc:04:a2:48:1a:c4:27:1b:19:46: 2f:f8:dc:ae:cf:1b:8c:41:14:3e:3c:9a:5b:73:8f:a5:ea:a9: 98:38:66:b2:34:49:c0:d8:c7:d3:ef:e7:1b:6c:3d:95:02:c1: 88:c2:5b:eb:53:63:81:d2:53:4d:13:44:4d:d2:84:26:12:35: 33:93:4e:cf:2e:9d:53:13:c0:5b:13:80:6c:ae:46:27:d5:9a: 9a:b0:fa:cd:7d:26:72:6d:b4:be:08:50:7c:21:ab:3c:ff:ca: 55:e2:f0:39:5b:76:40:71:8b:37:6e:b6:8b:5c:30:ef:be:06: 14:2a:10:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwNjEyMTk1NjM5WhcNMjUwNjE5MTk1NjM5WjAYMRYwFAYD VQQDEw02ODRiMzBmNy05OTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/c3z+iW8AImgzOSX06T8rxUOpTHsVRBK1BLeJVc7n6eCXWDlwgNGL9wvRmu KDy6n0Wd0bgAqqf2l4KCvknBv95AkPWx7bHNcFH9JmtkbRM1e0hTliTVMFDM5z0v c6cRpcQ7DAX8V1mANOOSA5OSOCgM3FZS5v4l6FpbZ2qY9FXNyDoRzISF+7Dw/Vcf R0f4n3lpi5/svwjx9pplEwRTM8IVp9uNdqfr28PBkgA9jaBEP4K0nEWqSOjqM3hv NHZYhvetXlTeH8+CDZBOT8JlqCJmy9sddoA58HUF5R5qE+dSIaY8fo1pLo3qXJsF 9CNcOryFpSfJObxVw2z+ESYhMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT33rzZ QvH/bMNP2fnGRbm/ZFdSMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALHr2NVu2Oz6Nybk9zJaFlccTH/d9ZS2GDepLTEenE144EGPrss8DL hdJy1v5P6ToG4s7Yldcc+eYrxznOy9ZEHRMF7qbnywCUfQ+GLK+k3obxTIIMDlj2 pcvzdg4syn+CmPxtX+ujue+tE6sN8IhTgw7LDaNwmc8dp6w6DksPOYcGVv7GAbwE okgaxCcbGUYv+NyuzxuMQRQ+PJpbc4+l6qmYOGayNEnA2MfT7+cbbD2VAsGIwlvr U2OB0lNNE0RN0oQmEjUzk07PLp1TE8BbE4BsrkYn1ZqasPrNfSZybbS+CFB8Ias8 /8pV4vA5W3ZAcYs3braLXDDvvgYUKhCM -----END CERTIFICATE-----Generated at Sat Jun 14 19:30:53 2025 by rpki-client