$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: 5RGvXHKkYbl7/xGlW2QdUypQZhzu/4QORV8Niu1NOqY= Subject key identifier: A5:63:89:1C:57:11:0F:99:F7:32:E1:AF:3C:F9:1C:D6:36:3A:3B:18 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0AFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0AF4 Signing time: Sat 14 Jun 2025 19:12:58 +0000 Manifest this update: Sat 14 Jun 2025 19:12:58 +0000 Manifest next update: Sat 21 Jun 2025 19:12:58 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: ia9RLamvBlQLnqIPrIMr/TPnyq9S5ZjYXSRh3TtS4sQ=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: CuzGm85wLiuHxUTSuvnqnZczG2t94ONHHbEKTXpyL78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 19:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2810 (0xafa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Jun 14 19:12:58 2025 GMT Not After : Jun 21 19:12:58 2025 GMT Subject: CN=684dc9ba-26bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fb:96:b8:0b:1a:5d:41:57:46:ce:fd:32:4d: 3c:e7:08:41:2c:3c:b1:3f:79:b2:20:56:6f:37:da: b3:92:65:5b:fe:b4:6f:60:f7:5a:3a:0f:22:ef:ec: dc:73:57:89:72:e3:4e:13:85:e2:d3:65:4b:d5:98: 07:31:ed:04:e7:25:c5:88:15:ee:07:9d:e0:aa:ff: 3f:c9:6f:43:34:2f:d1:dc:7b:df:71:5c:d6:fc:7b: 5f:6a:70:3d:3d:5c:68:c6:56:79:89:84:01:05:73: 8d:95:fe:e9:8f:fb:29:d4:47:51:91:6b:f0:3f:19: 0b:50:ca:0e:fa:56:04:e1:ea:47:32:67:e0:f1:62: 24:02:11:5e:8c:cb:a2:5c:58:d1:af:7d:3c:dc:a4: ca:1a:b8:a3:11:a5:53:91:ae:bd:87:73:27:56:f5: d6:ae:1e:87:59:21:34:d4:c6:34:0e:b8:58:6a:7c: 6e:3e:06:9e:c8:71:ed:de:6e:c4:2d:e5:1f:e0:b5: 83:97:eb:7b:43:26:cb:5e:e6:b1:86:11:00:13:0e: 5d:fd:83:2b:fc:38:ef:46:3b:85:cc:b9:81:f5:d3: e4:cc:4e:09:cc:bd:e7:dd:5d:cc:69:64:8c:40:c4: ad:21:73:70:be:9b:8e:7c:cf:90:6b:68:87:ca:65: 5b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:63:89:1C:57:11:0F:99:F7:32:E1:AF:3C:F9:1C:D6:36:3A:3B:18 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:ea:70:3f:35:b7:d1:da:ef:1e:56:5a:c0:db:36:c2:32:7d: da:2f:58:b7:07:0b:44:9e:de:b0:e3:d9:4e:23:4b:52:6f:08: d6:a5:53:17:87:8a:87:04:c4:68:11:51:b3:97:a7:fb:ad:b4: 77:21:9b:dd:61:26:bc:87:1c:77:08:71:fc:1c:6c:1b:0d:eb: f7:1c:77:da:df:c4:fc:91:3a:3f:7e:3f:b6:45:31:00:e2:aa: 43:b9:4d:e5:9a:bc:59:84:ec:56:33:b6:a1:17:30:98:a7:d7: be:96:78:6e:1e:fa:10:8a:83:06:83:99:2a:84:d4:08:3a:6a: 39:c8:82:7c:89:db:a3:71:3f:9e:a4:96:4c:00:4b:b6:1f:72: ba:5a:12:b8:9a:df:8f:2c:21:7c:61:f7:c0:17:7b:c6:73:dd: 37:36:1d:3a:f5:61:5e:9f:1e:b1:6c:70:8a:0c:29:e4:b6:1f: 20:df:f3:88:2c:ea:6e:b4:ab:84:75:97:01:38:aa:7f:ba:b9: 41:55:d1:e5:94:e7:24:81:2e:5c:3c:c9:47:20:44:01:50:2f: 9f:bd:a0:f2:a0:e2:1f:08:b0:52:53:6e:b7:66:c8:ce:89:2c: 57:84:0c:59:20:1f:44:84:25:bf:81:77:a5:d3:04:6b:8b:8f: a1:fc:d0:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUwNjE0MTkxMjU4WhcNMjUwNjIxMTkxMjU4WjAYMRYwFAYD VQQDEw02ODRkYzliYS0yNmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/uWuAsaXUFXRs79Mk085whBLDyxP3myIFZvN9qzkmVb/rRvYPdaOg8i7+zc c1eJcuNOE4Xi02VL1ZgHMe0E5yXFiBXuB53gqv8/yW9DNC/R3HvfcVzW/HtfanA9 PVxoxlZ5iYQBBXONlf7pj/sp1EdRkWvwPxkLUMoO+lYE4epHMmfg8WIkAhFejMui XFjRr3083KTKGrijEaVTka69h3MnVvXWrh6HWSE01MY0DrhYanxuPgaeyHHt3m7E LeUf4LWDl+t7QybLXuaxhhEAEw5d/YMr/DjvRjuFzLmB9dPkzE4JzL3n3V3MaWSM QMStIXNwvpuOfM+Qa2iHymVbAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVjiRxX EQ+Z9zLhrzz5HNY2OjsYMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAl6nA/NbfR2u8eVlrA2zbCMn3aL1i3BwtEnt6w49lOI0tSbwjWpVMX h4qHBMRoEVGzl6f7rbR3IZvdYSa8hxx3CHH8HGwbDev3HHfa38T8kTo/fj+2RTEA 4qpDuU3lmrxZhOxWM7ahFzCYp9e+lnhuHvoQioMGg5kqhNQIOmo5yIJ8idujcT+e pJZMAEu2H3K6WhK4mt+PLCF8YffAF3vGc903Nh069WFenx6xbHCKDCnkth8g3/OI LOputKuEdZcBOKp/urlBVdHllOckgS5cPMlHIEQBUC+fvaDyoOIfCLBSU263ZsjO iSxXhAxZIB9EhCW/gXel0wRri4+h/NC/ -----END CERTIFICATE-----Generated at Sun Jun 15 09:31:43 2025 by rpki-client