$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: sWe5y5aBdBr1pjeMSbb6LF64I4bHE9nFXWmzUprKMm4= Subject key identifier: B4:18:33:3E:04:7F:F4:1C:BB:29:17:6A:A6:D9:4F:E9:6A:E0:9D:B6 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 1488 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 146A Signing time: Sat 14 Jun 2025 16:51:49 +0000 Manifest this update: Sat 14 Jun 2025 16:51:48 +0000 Manifest next update: Sat 21 Jun 2025 16:51:48 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: viT24zg1YNGxGTESEm23JjQ48jgCgvqkbzdDwhJc0oQ=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 16:51:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5256 (0x1488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Jun 14 16:51:48 2025 GMT Not After : Jun 21 16:51:48 2025 GMT Subject: CN=684da8a5-bd70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5e:ad:69:6c:1c:64:d6:05:0d:b0:e3:d9:98: 89:87:93:ef:fa:2f:a4:f0:46:77:44:69:09:57:43: fa:30:75:29:dc:1e:cd:f4:6b:26:e1:85:d1:9c:d8: f2:b1:44:b9:8a:08:d4:83:05:59:44:8c:63:99:c5: 74:29:d5:f7:05:ea:93:26:78:eb:0d:2d:a5:66:9e: d0:e0:0e:79:ab:18:e6:0e:f8:bb:e1:a6:a7:c6:78: 5a:1a:95:bc:d0:53:b3:29:8f:81:31:ae:40:82:8e: 49:77:73:0a:fd:df:9b:a2:e4:d1:48:0f:52:36:3b: 64:ec:73:ee:5c:44:f7:0b:3e:72:0d:4c:af:36:6d: 4a:d3:40:1b:b3:a1:a7:f6:4d:2e:7c:6a:73:fb:2e: 9e:fb:49:3c:dc:27:b0:ac:fa:a2:a0:c5:c2:0e:0f: 0c:a0:f3:65:60:e6:05:bb:56:44:02:e2:ac:c8:ca: b9:dc:c6:e0:28:1f:65:62:dd:e1:12:97:9f:d6:84: 5d:2f:7d:7f:7d:d5:d2:34:63:fa:48:3e:a1:8f:d8: 23:5d:70:f4:4c:c6:24:ce:2b:4b:ff:e9:00:e4:18: 66:b2:96:6b:23:3d:dd:60:c5:5a:a9:1a:50:c2:25: a7:bf:aa:55:11:57:b4:2f:16:6c:8e:e0:84:58:7f: ae:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:18:33:3E:04:7F:F4:1C:BB:29:17:6A:A6:D9:4F:E9:6A:E0:9D:B6 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2f:9b:33:97:70:ca:8f:0a:97:a3:45:18:05:93:b7:1d:b8: 08:51:9e:fd:71:94:33:d2:5d:d0:c3:2c:3e:8b:cb:f1:18:9a: 50:82:dd:4f:b1:9b:1a:64:be:a3:5c:77:76:15:d5:53:ff:92: 8c:c3:0a:77:eb:66:4d:88:6c:ac:75:9a:79:89:f2:ff:bd:f8: 46:d1:1e:fd:c5:27:e7:9c:41:8a:86:b1:aa:53:34:10:28:35: b5:5f:3c:09:6a:66:e4:e7:0e:19:e3:77:90:f6:a4:51:dc:ee: fa:b8:a3:b3:5b:56:6e:e8:9d:59:13:b5:36:00:23:04:f4:03: 70:5e:dc:c4:a1:02:26:4a:71:2b:20:ef:cc:cf:60:d8:c4:2d: 88:52:90:3c:df:c1:51:df:2c:b6:ff:a3:9e:d9:26:32:6b:de: 99:88:a6:b0:7e:57:fd:c2:21:17:40:c6:4a:87:1d:7b:e9:71: 72:0d:03:9b:96:ce:45:7e:85:d1:ca:49:58:f9:d3:ea:54:66: 4d:e0:80:2b:b2:c0:cd:30:52:16:d9:3e:6a:68:09:02:9d:f5: 7d:22:88:b3:50:75:2e:5d:ea:f5:74:03:61:6a:97:23:c3:fe: 70:82:8b:58:bb:3a:1f:23:db:da:8c:8b:81:68:fb:2d:dc:90: 99:80:ad:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNjE0MTY1MTQ4WhcNMjUwNjIxMTY1MTQ4WjAYMRYwFAYD VQQDEw02ODRkYThhNS1iZDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx16taWwcZNYFDbDj2ZiJh5Pv+i+k8EZ3RGkJV0P6MHUp3B7N9Gsm4YXRnNjy sUS5igjUgwVZRIxjmcV0KdX3BeqTJnjrDS2lZp7Q4A55qxjmDvi74aanxnhaGpW8 0FOzKY+BMa5Ago5Jd3MK/d+bouTRSA9SNjtk7HPuXET3Cz5yDUyvNm1K00Abs6Gn 9k0ufGpz+y6e+0k83CewrPqioMXCDg8MoPNlYOYFu1ZEAuKsyMq53MbgKB9lYt3h Epef1oRdL31/fdXSNGP6SD6hj9gjXXD0TMYkzitL/+kA5BhmspZrIz3dYMVaqRpQ wiWnv6pVEVe0LxZsjuCEWH+u2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQYMz4E f/QcuykXaqbZT+lq4J22MB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9L5szl3DKjwqXo0UYBZO3HbgIUZ79cZQz0l3Qwyw+i8vxGJpQgt1P sZsaZL6jXHd2FdVT/5KMwwp362ZNiGysdZp5ifL/vfhG0R79xSfnnEGKhrGqUzQQ KDW1XzwJambk5w4Z43eQ9qRR3O76uKOzW1Zu6J1ZE7U2ACME9ANwXtzEoQImSnEr IO/Mz2DYxC2IUpA838FR3yy2/6Oe2SYya96ZiKawflf9wiEXQMZKhx176XFyDQOb ls5FfoXRyklY+dPqVGZN4IArssDNMFIW2T5qaAkCnfV9IoizUHUuXer1dANhapcj w/5wgotYuzofI9vajIuBaPst3JCZgK1O -----END CERTIFICATE-----Generated at Mon Jun 16 16:08:04 2025 by rpki-client