$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft File: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft (raw, json) Hash identifier: 2xtbxH2rej/4pga/HBiE2ugdJCe4fI6jat2u8hSNYd0= Subject key identifier: 07:4C:72:8B:E2:19:48:25:DE:16:38:47:E0:1A:9E:10:B2:7A:A1:83 Authority key identifier: EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D Certificate issuer: /CN=A91A55C9/serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft Manifest number: FB Signing time: Sun 15 Jun 2025 04:20:01 +0000 Manifest this update: Sun 15 Jun 2025 04:20:01 +0000 Manifest next update: Sun 22 Jun 2025 04:20:01 +0000 Files and hashes: 1: 7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl (hash: IwislJUTAnuckAwxEOU28FOInM1BlHhLeJmG5j3oeq0=) 2: 9DDCAB1AC9EC11EE9644540FC4F9AE02.roa (hash: u6J6SPSNjElCImZDre2hX9rdBiRV9plYfnlpPbtxhQc=) 3: 9E40D11CC9EC11EE9644540FC4F9AE02.roa (hash: hR3HemTX8sPR//njNhfSediG0DqzFMWVKhRmgOL4nRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 04:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55C9, serialNumber=EC678DE0D7BCF839D998A0FCE5C9EB75FFC8673D Validity Not Before: Jun 15 04:20:01 2025 GMT Not After : Jun 22 04:20:01 2025 GMT Subject: CN=684e49f1-fb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a3:bf:5b:64:83:68:4c:96:15:53:1d:fe:9c: 51:dd:8d:d9:a1:2e:f3:e5:1f:0c:e9:a1:92:ad:fe: 6e:dd:71:10:17:9d:e1:49:67:bc:42:5a:c6:fa:0a: 85:84:d1:88:19:23:32:b1:cb:bc:c2:11:0f:e5:c1: 9b:df:b7:37:6c:3f:76:dd:cf:ad:a9:98:cc:a4:da: 6d:f4:bd:9a:62:8b:ba:9f:95:79:35:90:d0:2e:03: b8:da:95:22:fb:01:7b:01:c8:a2:32:8b:fe:ca:ad: 92:9b:82:41:8c:5c:4a:9d:a9:6a:21:d7:8b:f1:11: f3:83:f0:b3:61:ca:45:7f:7d:0f:6c:ac:b4:92:eb: 9a:6f:ab:f3:5f:97:ef:82:24:e9:58:e7:f5:4b:15: 4a:00:82:9b:6c:06:af:ae:1a:1c:a6:b8:94:e4:28: e0:9d:e3:c9:45:56:11:1c:8b:91:89:10:c4:f6:92: 81:39:03:ef:a0:ff:5b:d2:48:21:58:b6:47:61:4a: 12:f8:f3:95:12:dc:37:d1:6a:6d:3a:31:57:11:ea: 48:83:0a:a1:07:32:b1:2e:8f:cb:d3:5f:44:ce:c9: 55:eb:c3:d3:6b:81:b6:af:2f:7e:69:4e:dc:cd:18: bf:5e:bd:50:1e:7b:56:a4:ad:fe:ce:6f:70:38:95: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4C:72:8B:E2:19:48:25:DE:16:38:47:E0:1A:9E:10:B2:7A:A1:83 X509v3 Authority Key Identifier: keyid:EC:67:8D:E0:D7:BC:F8:39:D9:98:A0:FC:E5:C9:EB:75:FF:C8:67:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7GeN4Ne8-DnZmKD85cnrdf_IZz0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55C9/7E2F1268C9EB11EE8B857B0CC4F9AE02/7GeN4Ne8-DnZmKD85cnrdf_IZz0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b5:b0:e5:ca:4d:d0:09:5a:41:6c:2d:81:2a:7a:fd:23:f0: da:9b:1b:05:3a:50:bd:6d:35:da:71:5b:6b:01:bc:78:40:8c: 4a:cc:a2:3a:ea:be:4c:0a:4c:bb:17:e6:99:0b:d0:d8:a9:ce: d2:a1:69:7f:6b:7f:ed:ff:95:a1:ee:5d:f1:51:08:57:50:41: ae:26:6a:d6:c8:53:fd:74:27:47:64:95:9c:a8:dc:4f:ce:e6: 2c:eb:a9:fe:14:2a:54:f9:5c:23:07:b2:31:de:c6:c4:c8:1b: 78:e0:f7:08:5e:c3:8a:15:8c:5e:8d:f0:a5:81:cc:5d:3f:dc: e7:84:06:c7:81:80:e8:79:96:d0:85:af:dd:23:f8:2f:d8:e3: 4e:41:25:d9:47:c5:78:00:88:7e:23:37:fb:62:63:9c:c3:a3: 95:46:0a:dc:14:7a:38:59:02:73:70:b4:fb:60:dc:70:e8:9b: 19:8f:99:9f:c1:b3:2d:8e:b7:d3:c6:f1:e9:aa:18:88:4a:85: 98:64:7e:8f:88:12:41:6f:4d:8d:21:72:87:57:47:a7:bc:78: 0b:09:97:56:61:35:24:de:13:b9:1e:22:7c:18:85:0c:f2:4f: 60:65:62:00:3f:35:65:0b:80:e2:06:3a:a8:e8:38:8c:83:64: b9:75:93:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1QzkxMTAvBgNVBAUTKEVDNjc4REUwRDdCQ0Y4MzlEOTk4QTBGQ0U1QzlFQjc1 RkZDODY3M0QwHhcNMjUwNjE1MDQyMDAxWhcNMjUwNjIyMDQyMDAxWjAYMRYwFAYD VQQDEw02ODRlNDlmMS1mYjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqO/W2SDaEyWFVMd/pxR3Y3ZoS7z5R8M6aGSrf5u3XEQF53hSWe8QlrG+gqF hNGIGSMyscu8whEP5cGb37c3bD923c+tqZjMpNpt9L2aYou6n5V5NZDQLgO42pUi +wF7AciiMov+yq2Sm4JBjFxKnalqIdeL8RHzg/CzYcpFf30PbKy0kuuab6vzX5fv giTpWOf1SxVKAIKbbAavrhocpriU5CjgnePJRVYRHIuRiRDE9pKBOQPvoP9b0kgh WLZHYUoS+POVEtw30WptOjFXEepIgwqhBzKxLo/L019EzslV68PTa4G2ry9+aU7c zRi/Xr1QHntWpK3+zm9wOJXGNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdMcovi GUgl3hY4R+AanhCyeqGDMB8GA1UdIwQYMBaAFOxnjeDXvPg52Zig/OXJ63X/yGc9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVDOS83RTJGMTI2OEM5 RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1EblptS0Q4NWNucmRmX0la ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdHZU40TmU4LURuWm1LRDg1Y25yZGZfSVp6MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVDOS83RTJGMTI2OEM5RUIxMUVFOEI4NTdCMENDNEY5QUUwMi83R2VONE5lOC1E blptS0Q4NWNucmRmX0laejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJtbDlyk3QCVpBbC2BKnr9I/DamxsFOlC9bTXacVtrAbx4QIxKzKI6 6r5MCky7F+aZC9DYqc7SoWl/a3/t/5Wh7l3xUQhXUEGuJmrWyFP9dCdHZJWcqNxP zuYs66n+FCpU+VwjB7Ix3sbEyBt44PcIXsOKFYxejfClgcxdP9znhAbHgYDoeZbQ ha/dI/gv2ONOQSXZR8V4AIh+Izf7YmOcw6OVRgrcFHo4WQJzcLT7YNxw6JsZj5mf wbMtjrfTxvHpqhiISoWYZH6PiBJBb02NIXKHV0envHgLCZdWYTUk3hO5HiJ8GIUM 8k9gZWIAPzVlC4DiBjqo6DiMg2S5dZMt -----END CERTIFICATE-----Generated at Sun Jun 15 22:58:03 2025 by rpki-client