$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft File: L7B78TYUrVoZNQr8da-wVMhrr60.mft (raw, json) Hash identifier: akj2LzWCYQS800fCcXOemjBK2ADSCt47F1YqgXyVbG8= Subject key identifier: 09:74:81:FC:27:2C:C2:03:29:D1:20:39:51:8A:C2:80:B3:B2:4A:EB Authority key identifier: 2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD Certificate issuer: /CN=A919EF6A/serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Certificate serial: 01D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft Manifest number: 01CD Signing time: Sun 15 Jun 2025 02:09:43 +0000 Manifest this update: Sun 15 Jun 2025 02:09:43 +0000 Manifest next update: Sun 22 Jun 2025 02:09:43 +0000 Files and hashes: 1: L7B78TYUrVoZNQr8da-wVMhrr60.crl (hash: SFlL1BdgzkFYH5DKpjgjZYNfcvZlYkEtQ/4MPKNz8GM=) 2: 3A9B909286BE11ED93DB0765C4F9AE02.roa (hash: XahtR2T510aEKb9I/6EITKzZRawtEl9xMR6MDMSwo6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 465 (0x1d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EF6A, serialNumber=2FB07BF13614AD5A19350AFC75AFB054C86BAFAD Validity Not Before: Jun 15 02:09:43 2025 GMT Not After : Jun 22 02:09:43 2025 GMT Subject: CN=684e2b67-0efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:35:78:1b:75:19:28:ef:09:82:6a:4b:36: c4:a8:43:98:38:9b:49:f0:99:86:31:8f:60:8f:ae: ba:1a:b1:a4:41:76:7c:88:31:47:d5:48:0e:82:b3: 41:8c:de:90:96:bd:82:f0:9d:f1:dc:67:9a:fd:25: 12:5a:8f:a1:f4:19:a1:84:fc:e0:0c:7f:4a:d7:90: 70:cc:58:1c:95:c2:f2:ba:02:94:a2:71:c5:85:52: fc:16:5b:2b:a6:7f:f8:db:29:1e:e4:31:3e:7f:fc: 8d:7f:d3:a0:5f:13:0b:33:ed:2b:ba:b9:84:93:8c: b9:d8:0d:70:69:22:cf:02:51:f4:7d:74:c2:0e:db: 6f:0b:82:a4:8e:c7:5f:23:e4:7e:93:6d:1e:d2:ee: 18:92:60:c7:85:a6:dd:de:1a:3f:d6:5a:6f:06:d1: 62:91:83:05:d4:66:3f:26:73:98:6d:31:87:f7:c6: fa:e8:22:72:53:3d:9a:c7:18:10:f5:ec:07:81:69: 92:d8:b5:0f:d9:14:93:38:a8:cb:c1:6b:86:b1:53: 3f:ec:9a:56:fe:3f:f5:7b:6f:ea:d6:33:8e:ec:d4: 14:1e:c1:98:d2:71:eb:81:dd:eb:3a:9b:64:51:16: 29:fc:78:0f:39:b6:28:f7:f2:e3:8b:01:ab:31:fb: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:74:81:FC:27:2C:C2:03:29:D1:20:39:51:8A:C2:80:B3:B2:4A:EB X509v3 Authority Key Identifier: keyid:2F:B0:7B:F1:36:14:AD:5A:19:35:0A:FC:75:AF:B0:54:C8:6B:AF:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L7B78TYUrVoZNQr8da-wVMhrr60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF6A/65AB41F086BA11ED92204A56C4F9AE02/L7B78TYUrVoZNQr8da-wVMhrr60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:8c:12:f1:ad:a2:4f:b3:fe:7a:f2:5c:ce:56:f7:38:d7:f4: 00:0c:7d:62:48:59:0b:db:81:bb:36:18:b9:bf:6b:4d:2d:7b: 2c:ea:41:a7:d2:ee:72:2d:87:46:ff:47:85:7d:1a:68:e6:8a: e4:b7:c0:6f:35:99:5c:e7:95:6f:2a:6d:66:ec:eb:c3:21:40: fc:aa:7e:53:10:ae:7c:95:f6:cb:37:af:17:50:b2:9f:4a:a2: 88:7b:b7:95:5d:41:80:15:b8:6e:48:f6:4c:92:03:ae:ea:9e: 05:a0:77:37:22:af:76:52:a5:3a:61:0d:00:44:b0:cb:ce:d2: b2:ca:bc:e9:cf:25:f3:a3:2e:8e:5d:7b:eb:97:aa:99:7e:57: 2c:f6:3d:ee:7b:b5:ec:58:b4:fa:33:62:f7:6d:35:f4:3e:35: d6:4e:9b:65:7d:fb:9e:28:c3:cd:e6:37:14:3b:b3:75:3b:c7: dd:69:55:95:a2:fd:20:f1:61:48:de:04:0c:52:55:17:50:22: 5e:e5:6d:11:11:d3:a4:bd:bb:bc:11:9d:71:41:f9:3e:8c:e9: 85:d2:3a:8e:53:3f:fc:6a:ab:3c:bd:4f:7d:fe:fb:f3:6b:c2: f2:0a:be:29:4b:98:95:a6:a2:d8:92:9f:04:07:43:90:3c:8e: dc:41:b8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVGNkExMTAvBgNVBAUTKDJGQjA3QkYxMzYxNEFENUExOTM1MEFGQzc1QUZCMDU0 Qzg2QkFGQUQwHhcNMjUwNjE1MDIwOTQzWhcNMjUwNjIyMDIwOTQzWjAYMRYwFAYD VQQDEw02ODRlMmI2Ny0wZWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKo1eBt1GSjvCYJqSzbEqEOYOJtJ8JmGMY9gj666GrGkQXZ8iDFH1UgOgrNB jN6Qlr2C8J3x3Gea/SUSWo+h9BmhhPzgDH9K15BwzFgclcLyugKUonHFhVL8Flsr pn/42yke5DE+f/yNf9OgXxMLM+0rurmEk4y52A1waSLPAlH0fXTCDttvC4Kkjsdf I+R+k20e0u4YkmDHhabd3ho/1lpvBtFikYMF1GY/JnOYbTGH98b66CJyUz2axxgQ 9ewHgWmS2LUP2RSTOKjLwWuGsVM/7JpW/j/1e2/q1jOO7NQUHsGY0nHrgd3rOptk URYp/HgPObYo9/LjiwGrMfuAjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAl0gfwn LMIDKdEgOVGKwoCzskrrMB8GA1UdIwQYMBaAFC+we/E2FK1aGTUK/HWvsFTIa6+t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY2QS82NUFCNDFGMDg2 QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJWb1pOUXI4ZGEtd1ZNaHJy NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w3Qjc4VFlVclZvWk5RcjhkYS13Vk1ocnI2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUY2QS82NUFCNDFGMDg2QkExMUVEOTIyMDRBNTZDNEY5QUUwMi9MN0I3OFRZVXJW b1pOUXI4ZGEtd1ZNaHJyNjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5jBLxraJPs/568lzOVvc41/QADH1iSFkL24G7Nhi5v2tNLXss6kGn 0u5yLYdG/0eFfRpo5orkt8BvNZlc55VvKm1m7OvDIUD8qn5TEK58lfbLN68XULKf SqKIe7eVXUGAFbhuSPZMkgOu6p4FoHc3Iq92UqU6YQ0ARLDLztKyyrzpzyXzoy6O XXvrl6qZflcs9j3ue7XsWLT6M2L3bTX0PjXWTptlffueKMPN5jcUO7N1O8fdaVWV ov0g8WFI3gQMUlUXUCJe5W0REdOkvbu8EZ1xQfk+jOmF0jqOUz/8aqs8vU99/vvz a8LyCr4pS5iVpqLYkp8EB0OQPI7cQbge -----END CERTIFICATE-----Generated at Sun Jun 15 09:54:03 2025 by rpki-client