$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: jasWqMen7bzN/J25Lfoq4VfkHOg7PsEBl3awjzTTWq8= Subject key identifier: D6:55:4E:EC:CE:3E:1A:31:0D:61:93:36:07:1F:1D:37:CC:F3:E8:20 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 141F Signing time: Mon 16 Jun 2025 18:24:33 +0000 Manifest this update: Mon 16 Jun 2025 18:24:33 +0000 Manifest next update: Mon 23 Jun 2025 18:24:33 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: 1TWZNRT+fbXd6VxwnCPGDHrsEsZbsOi6g1ajM+4dZGs=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: wVNJXIBMdOA17Qx14FaFmrSL3yk1+Qgxj7UVSyMJrHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 18:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Jun 16 18:24:33 2025 GMT Not After : Jun 23 18:24:33 2025 GMT Subject: CN=68506161-006d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:43:1a:02:8f:76:f0:ea:ba:e5:b8:b1:2b: 3a:73:c8:b3:8a:77:4c:85:3c:21:21:6b:b6:47:26: 82:b2:f0:f1:0e:3a:33:23:dc:50:9d:09:71:41:08: 1e:df:a9:ee:43:91:7b:72:dc:21:55:c9:bc:c6:9c: 53:7c:39:62:a3:eb:10:be:0c:f1:ce:8b:4f:b8:f0: dd:f0:30:7f:59:29:10:28:75:d6:43:13:39:0e:d4: 42:46:1b:bd:71:3e:7b:4b:ab:9d:00:73:66:65:60: 6f:33:db:11:f0:19:0f:99:21:95:f5:6f:86:b6:eb: 92:66:bb:62:93:29:3b:a7:1f:f5:6d:c9:d9:bb:8b: b0:4c:1a:33:84:a7:71:55:94:1b:ad:52:20:ed:38: ff:9b:f1:f0:94:17:fc:8b:0a:69:a2:d8:4b:ce:09: 18:f7:b1:ed:a5:a1:14:26:8d:4f:3b:00:cd:58:8b: af:31:e0:87:d7:30:47:a2:51:f3:8b:78:f4:b1:b3: aa:26:ad:fd:f1:86:cb:23:62:34:2c:89:05:0a:f9: 6e:84:e9:e4:67:f2:16:64:cc:3a:71:5b:14:b9:47: 54:e9:e6:5f:cc:fe:57:e5:71:09:36:5a:0f:7a:48: 4f:3a:36:e2:b9:f1:eb:77:05:2b:20:62:7c:e1:39: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:55:4E:EC:CE:3E:1A:31:0D:61:93:36:07:1F:1D:37:CC:F3:E8:20 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:68:61:61:ff:83:f4:79:41:dd:52:25:44:48:5c:36:2c:98: 2b:6b:73:ad:4f:78:da:29:a7:79:e5:a7:4e:01:c9:93:0e:d8: aa:29:45:11:71:13:f2:98:5d:6a:60:61:b3:bd:d0:45:8f:cc: f6:3e:f7:ac:3f:36:80:25:ec:08:62:f2:7d:95:37:32:28:05: 9a:42:82:31:fb:ee:a9:c2:4d:f2:5f:7f:a2:f9:8e:dd:f0:f2: 65:d2:d5:7d:7e:1f:61:e4:9d:3c:af:00:c4:7a:68:e7:23:66: cc:96:3f:66:c1:c0:f5:d9:1b:c6:d7:f3:b1:4c:cf:c9:b8:f3: 5a:a6:69:10:46:b3:d9:f9:42:88:5e:d0:2b:43:b4:cb:6f:33: 37:5a:d1:75:85:b0:42:ca:f7:29:9d:a3:bc:30:ca:81:b0:9b: 83:4f:0c:47:79:da:31:ec:83:d5:ff:d5:a2:ae:7b:7a:f7:ae: 7e:f6:7c:a0:18:c2:9d:05:73:c3:76:84:d9:cf:d9:0e:b9:f7: ea:6d:d9:43:fb:ec:e9:d1:4f:54:fd:cd:29:b6:a1:07:6e:ca: 43:88:5c:68:19:47:ff:2e:d3:c4:8e:6a:1a:2b:16:2d:bc:08: 94:6a:68:39:94:de:28:05:6c:65:be:2c:6e:6e:80:bd:d9:07: 0a:d0:33:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwNjE2MTgyNDMzWhcNMjUwNjIzMTgyNDMzWjAYMRYwFAYD VQQDEw02ODUwNjE2MS0wMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAor9DGgKPdvDquuW4sSs6c8izindMhTwhIWu2RyaCsvDxDjozI9xQnQlxQQge 36nuQ5F7ctwhVcm8xpxTfDlio+sQvgzxzotPuPDd8DB/WSkQKHXWQxM5DtRCRhu9 cT57S6udAHNmZWBvM9sR8BkPmSGV9W+GtuuSZrtikyk7px/1bcnZu4uwTBozhKdx VZQbrVIg7Tj/m/HwlBf8iwppothLzgkY97HtpaEUJo1POwDNWIuvMeCH1zBHolHz i3j0sbOqJq398YbLI2I0LIkFCvluhOnkZ/IWZMw6cVsUuUdU6eZfzP5X5XEJNloP ekhPOjbiufHrdwUrIGJ84TmmtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZVTuzO PhoxDWGTNgcfHTfM8+ggMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDaGFh/4P0eUHdUiVESFw2LJgra3OtT3jaKad55adOAcmTDtiqKUUR cRPymF1qYGGzvdBFj8z2PvesPzaAJewIYvJ9lTcyKAWaQoIx++6pwk3yX3+i+Y7d 8PJl0tV9fh9h5J08rwDEemjnI2bMlj9mwcD12RvG1/OxTM/JuPNapmkQRrPZ+UKI XtArQ7TLbzM3WtF1hbBCyvcpnaO8MMqBsJuDTwxHedox7IPV/9Wirnt6965+9nyg GMKdBXPDdoTZz9kOuffqbdlD++zp0U9U/c0ptqEHbspDiFxoGUf/LtPEjmoaKxYt vAiUamg5lN4oBWxlvixuboC92QcK0DO+ -----END CERTIFICATE-----Generated at Tue Jun 17 09:19:53 2025 by rpki-client