$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: 8PTB3hwYEbgEzMePQVdQBcOGB8CQqNMnmq9NrAaQL2U= Subject key identifier: E5:8A:37:B4:50:87:EF:B3:A7:D0:3F:99:4A:0B:A3:D1:40:40:26:09 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 0102 Signing time: Thu 19 Jun 2025 00:04:16 +0000 Manifest this update: Thu 19 Jun 2025 00:04:15 +0000 Manifest next update: Thu 26 Jun 2025 00:04:15 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: xWLOq5hjkciAVFtPjkTvvIL3pAVEIinmPmmAVXY7hOE=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: 6gN0nzoFmNHVaS7tp1oD/3MNM9qt5KAUk1vZ6H1zsVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 00:04:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jun 19 00:04:15 2025 GMT Not After : Jun 26 00:04:15 2025 GMT Subject: CN=685353ff-32e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e7:f1:e5:a3:9b:7d:e2:a5:ba:c2:1a:99:9c: db:94:f5:ce:c6:76:70:55:76:f6:ae:f2:ae:38:ce: 48:3d:45:49:81:02:16:0f:96:73:79:f7:ab:cb:68: c1:68:fd:c2:c7:87:ff:a5:95:d2:4e:40:97:db:3e: 4c:fd:82:53:7d:d1:e5:56:90:3f:15:47:83:fb:94: fa:4d:bf:3e:6b:a2:81:db:84:ef:ca:6d:37:20:16: 2c:37:7e:98:50:d8:36:a6:d1:e8:a3:09:e3:f8:af: 4a:fa:13:79:76:6f:d2:69:13:ce:17:31:e1:75:ad: 3d:91:01:dc:20:e7:de:66:42:74:8f:2b:dc:a3:04: fd:7b:95:f0:34:20:a4:52:e5:3f:02:1f:86:52:e4: e7:b3:93:02:9a:96:36:a5:04:a1:c6:66:87:26:ce: 9e:14:49:8a:0f:95:a4:51:1f:a9:0f:63:65:2f:d1: fd:86:33:86:ea:ef:a8:d5:3c:28:5f:a4:2e:be:f7: a4:06:a2:c4:2a:75:6e:8f:9e:20:65:06:b1:a8:aa: 04:20:39:c4:c6:9e:8a:32:ce:4c:e2:40:de:84:76: 7a:a2:83:c3:91:72:23:41:a7:43:5d:68:ab:e4:c4: e9:c0:4e:e8:db:94:89:86:43:74:46:be:13:25:4c: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8A:37:B4:50:87:EF:B3:A7:D0:3F:99:4A:0B:A3:D1:40:40:26:09 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:4a:fa:34:ec:03:86:89:63:64:8e:2f:6f:b1:5b:49:da:46: 80:84:b0:48:29:24:de:2b:9a:b6:ea:6e:10:0b:6f:dd:9a:76: 02:aa:3c:8d:13:38:a5:1f:3b:8b:c9:d9:7b:26:6d:1d:2e:77: fe:10:63:e9:ea:ae:8a:cf:17:57:c9:08:79:22:74:93:0d:1f: af:f2:c3:23:a0:5d:3d:3a:46:d5:4b:0d:74:06:a0:1a:e1:72: 49:72:2b:47:dc:a8:06:02:26:3d:1f:19:33:26:60:a3:83:a6: ec:6e:6b:52:52:5e:6b:f6:c6:40:c5:9e:44:a6:6d:1f:e8:72: ef:24:eb:23:67:26:db:82:73:57:ea:35:14:16:0a:65:29:b0: 74:fa:a9:51:d6:b8:32:43:cf:5f:35:94:56:b0:11:0c:d9:af: da:1f:7a:6f:af:16:02:ce:99:25:02:92:6a:ab:97:a3:3a:a8: c2:f2:ea:4b:1a:be:5b:78:b8:03:9e:e0:ee:c5:1d:f5:15:d9: eb:bc:66:63:1c:6d:48:d4:9c:e5:a8:5f:2b:13:fb:a1:e1:fa: 98:0f:7f:98:e0:9b:58:03:10:9d:6a:71:3f:1a:e4:ee:7f:b8: 65:83:d4:84:6a:d5:d0:aa:b7:6c:db:08:9f:a2:79:5c:e2:e5: 57:2f:c5:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwNjE5MDAwNDE1WhcNMjUwNjI2MDAwNDE1WjAYMRYwFAYD VQQDEw02ODUzNTNmZi0zMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+fx5aObfeKlusIamZzblPXOxnZwVXb2rvKuOM5IPUVJgQIWD5Zzefery2jB aP3Cx4f/pZXSTkCX2z5M/YJTfdHlVpA/FUeD+5T6Tb8+a6KB24Tvym03IBYsN36Y UNg2ptHoownj+K9K+hN5dm/SaRPOFzHhda09kQHcIOfeZkJ0jyvcowT9e5XwNCCk UuU/Ah+GUuTns5MCmpY2pQShxmaHJs6eFEmKD5WkUR+pD2NlL9H9hjOG6u+o1Two X6QuvvekBqLEKnVuj54gZQaxqKoEIDnExp6KMs5M4kDehHZ6ooPDkXIjQadDXWir 5MTpwE7o25SJhkN0Rr4TJUyu6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWKN7RQ h++zp9A/mUoLo9FAQCYJMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYSvo07AOGiWNkji9vsVtJ2kaAhLBIKSTeK5q26m4QC2/dmnYCqjyN EzilHzuLydl7Jm0dLnf+EGPp6q6KzxdXyQh5InSTDR+v8sMjoF09OkbVSw10BqAa 4XJJcitH3KgGAiY9HxkzJmCjg6bsbmtSUl5r9sZAxZ5Epm0f6HLvJOsjZybbgnNX 6jUUFgplKbB0+qlR1rgyQ89fNZRWsBEM2a/aH3pvrxYCzpklApJqq5ejOqjC8upL Gr5beLgDnuDuxR31FdnrvGZjHG1I1JzlqF8rE/uh4fqYD3+Y4JtYAxCdanE/GuTu f7hlg9SEatXQqrds2wifonlc4uVXL8WT -----END CERTIFICATE-----Generated at Thu Jun 19 09:21:43 2025 by rpki-client