$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: 7pIErh3cAxX4Poi6Py/fzCjP4xyHgE3WZ4uWwZoPIVc= Subject key identifier: 8C:9B:B6:50:11:B4:32:99:F7:76:4E:FC:49:9B:FF:8A:8E:FD:A7:4E Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 25BF Signing time: Sat 14 Jun 2025 15:43:26 +0000 Manifest this update: Sat 14 Jun 2025 15:43:25 +0000 Manifest next update: Sat 21 Jun 2025 15:43:25 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: AlkONjd7QKjSnHeYEkaRkl57afycV1hSEfB6zJ09/W0=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=) 6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=) 7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=) 8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=) 9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=) 10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=) 11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9797 (0x2645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Jun 14 15:43:25 2025 GMT Not After : Jun 21 15:43:25 2025 GMT Subject: CN=684d989d-c12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0c:b3:60:19:26:a8:2d:e9:b4:b8:4b:78:e3: 42:90:8b:83:7a:a0:ce:c6:0f:bd:46:73:4e:d5:e8: d2:80:79:b9:8e:b4:47:27:a1:e3:d7:65:8c:9d:02: 6e:81:da:64:d7:ee:94:1b:ae:db:35:1b:e7:dc:5c: cd:bb:a2:fd:71:f3:a2:3d:39:3f:04:83:3f:7b:d4: a2:dc:fd:62:f9:c0:5a:94:5b:54:8f:1f:e9:73:07: 9d:e3:d4:21:97:a9:3f:ee:5e:ae:ae:5b:24:ce:bd: 73:3f:f9:28:4f:8a:34:18:1a:f6:3b:62:9a:c9:b0: 53:99:dd:45:b2:b9:19:17:97:6b:87:92:7c:79:27: e7:ba:79:bc:b2:90:67:4e:ef:98:3e:ef:7e:2a:e8: 9c:2c:83:6e:c0:5a:25:dc:f0:6a:d1:49:f8:36:dd: 86:60:87:87:69:23:c2:ff:db:37:ee:1c:a8:d3:34: 83:9b:c8:09:86:1b:36:1d:42:2e:c4:f1:02:9f:a0: 23:d2:8c:b8:b8:1e:a3:f7:07:3a:f8:bd:e8:bb:89: 43:82:37:2a:7f:5f:3e:4b:24:16:e7:bb:dd:e8:38: 49:2c:61:7e:77:33:44:66:d8:21:76:a1:cf:f8:e3: 3f:e5:56:ca:b4:bf:f8:4b:b8:bf:c6:48:02:61:87: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9B:B6:50:11:B4:32:99:F7:76:4E:FC:49:9B:FF:8A:8E:FD:A7:4E X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:6e:1e:15:05:dc:0a:42:d0:57:53:ac:ef:04:b3:c7:d7:16: 41:83:a4:b0:05:ec:f9:68:a1:fa:4e:14:ff:51:ae:3c:ff:5c: 27:15:68:aa:f4:de:83:a0:98:39:f2:97:50:7c:c5:90:69:c2: 55:64:c3:d3:7d:b8:23:ad:51:47:09:56:c4:a9:88:df:07:06: 0e:95:3a:e4:b8:4d:81:0b:f6:c1:14:55:65:7d:0a:9c:5d:53: 37:4b:ca:96:b2:32:5f:12:b5:1c:3b:3c:9c:9a:28:9b:bf:f8: aa:1e:d6:86:0f:4f:b6:78:5b:24:85:72:7a:c8:f1:88:f2:c6: a0:9d:71:36:0b:66:77:53:6b:83:fa:92:f0:61:f5:e2:ce:b9: de:67:04:2c:e2:c4:77:23:1c:1f:a5:37:9f:fd:c4:64:fa:66: 4b:23:83:86:c6:ed:52:9a:f0:ee:ea:f8:9a:70:44:44:cf:41: 59:d6:5a:19:85:c8:2f:44:5f:3e:d3:1c:f5:66:e6:bd:c7:ab: f2:38:b9:23:f6:0a:c7:8b:0b:b3:0d:ae:21:cb:86:d2:d9:fb: e9:ee:a9:3a:cd:a3:47:56:82:e0:2c:29:80:6c:07:24:b4:29: ca:33:22:5a:95:d6:43:95:32:1d:d4:47:23:c8:6c:79:5f:8c: 23:ce:30:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNjE0MTU0MzI1WhcNMjUwNjIxMTU0MzI1WjAYMRYwFAYD VQQDEw02ODRkOTg5ZC1jMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgyzYBkmqC3ptLhLeONCkIuDeqDOxg+9RnNO1ejSgHm5jrRHJ6Hj12WMnQJu gdpk1+6UG67bNRvn3FzNu6L9cfOiPTk/BIM/e9Si3P1i+cBalFtUjx/pcwed49Qh l6k/7l6urlskzr1zP/koT4o0GBr2O2KaybBTmd1FsrkZF5drh5J8eSfnunm8spBn Tu+YPu9+KuicLINuwFol3PBq0Un4Nt2GYIeHaSPC/9s37hyo0zSDm8gJhhs2HUIu xPECn6Aj0oy4uB6j9wc6+L3ou4lDgjcqf18+SyQW57vd6DhJLGF+dzNEZtghdqHP +OM/5VbKtL/4S7i/xkgCYYeFXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIybtlAR tDKZ93ZO/Emb/4qO/adOMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpbh4VBdwKQtBXU6zvBLPH1xZBg6SwBez5aKH6ThT/Ua48/1wnFWiq 9N6DoJg58pdQfMWQacJVZMPTfbgjrVFHCVbEqYjfBwYOlTrkuE2BC/bBFFVlfQqc XVM3S8qWsjJfErUcOzycmiibv/iqHtaGD0+2eFskhXJ6yPGI8sagnXE2C2Z3U2uD +pLwYfXizrneZwQs4sR3IxwfpTef/cRk+mZLI4OGxu1SmvDu6viacEREz0FZ1loZ hcgvRF8+0xz1Zua9x6vyOLkj9grHiwuzDa4hy4bS2fvp7qk6zaNHVoLgLCmAbAck tCnKMyJaldZDlTId1EcjyGx5X4wjzjCV -----END CERTIFICATE-----Generated at Sat Jun 14 19:15:47 2025 by rpki-client