$ rpki-client -vvf rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft File: 7c3wYKYQK_rQbrqNaDHShI0dvec.mft (raw, json) Hash identifier: t8esu5JusYAwLFc3t7rzkyX+b3LDGKKhtIifJUvKRAc= Subject key identifier: F4:C4:A5:C9:A9:01:D1:42:A9:8E:13:59:40:94:DC:A4:F8:ED:1B:8E Authority key identifier: ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 Certificate issuer: /CN=A91D483A/serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Certificate serial: 0792 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft Manifest number: 0789 Signing time: Thu 12 Jun 2025 21:07:38 +0000 Manifest this update: Thu 12 Jun 2025 21:07:38 +0000 Manifest next update: Thu 19 Jun 2025 21:07:38 +0000 Files and hashes: 1: 7c3wYKYQK_rQbrqNaDHShI0dvec.crl (hash: BTKr5YbGKGxzY2pIIR9nOUCHo2K3gBA5VE+nLVcUGVo=) 2: 03ADBBC4194B11EB8C73474DC4F9AE02.roa (hash: 9lbHf1cHckf8dUxoW20HZsn96REnlD7CWohZQ19csPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 21:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1938 (0x792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D483A, serialNumber=EDCDF060A6102BFAD06EBA8D6831D2848D1DBDE7 Validity Not Before: Jun 12 21:07:38 2025 GMT Not After : Jun 19 21:07:38 2025 GMT Subject: CN=684b419a-cdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:77:27:e1:13:9d:a8:b2:2b:54:6f:70:c9: 7c:50:0c:18:85:4c:49:d1:da:fd:02:31:c3:b5:07: e2:d0:e3:6c:92:75:9d:c9:0b:35:4f:08:37:93:9d: ca:f6:e5:19:ee:84:69:23:c0:dc:43:6c:37:15:7e: 91:61:fa:81:a2:2c:5f:d1:5c:f4:90:a4:b8:0d:2d: cd:ec:28:3b:ad:72:06:93:12:2a:53:10:21:c8:42: 2a:00:ce:9d:eb:d3:94:34:86:dc:78:f7:68:85:68: c1:51:c1:9d:ca:d0:87:4e:35:ab:08:98:ea:95:0c: 6c:9e:55:54:a0:0a:a9:cd:78:62:a8:1b:39:c3:d0: 6e:54:d7:c2:b2:fb:cd:0a:73:f6:9a:e2:63:6f:d2: 45:09:88:78:ab:51:2e:14:37:70:d0:9a:95:e3:7c: da:49:52:11:73:99:bc:86:32:2c:bf:26:f9:6b:6c: 8c:f6:95:45:66:cf:ed:7a:bb:38:f1:e6:2f:6a:69: 8b:49:cb:44:4a:71:d4:df:5d:fc:de:f8:f6:d0:03: f6:1d:17:fa:28:f2:f0:f1:04:91:58:83:89:cc:67: ec:bf:3b:43:94:09:87:5f:97:fe:23:97:5a:00:78: d0:00:ee:74:fd:1f:c8:72:77:a4:9e:58:52:aa:b8: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C4:A5:C9:A9:01:D1:42:A9:8E:13:59:40:94:DC:A4:F8:ED:1B:8E X509v3 Authority Key Identifier: keyid:ED:CD:F0:60:A6:10:2B:FA:D0:6E:BA:8D:68:31:D2:84:8D:1D:BD:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7c3wYKYQK_rQbrqNaDHShI0dvec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D483A/0701B34A12D211EB9292D63FC4F9AE02/7c3wYKYQK_rQbrqNaDHShI0dvec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:51:36:80:b4:54:92:37:f8:bf:e9:4e:39:63:6c:84:05:67: a0:d0:61:39:bf:6b:3c:d3:1f:ac:dd:ea:1e:d6:a3:99:e0:ab: b3:45:b4:d5:2b:50:10:e4:15:d6:89:5f:59:52:27:9b:c0:b1: 3b:55:98:83:c3:f3:9d:3d:c6:81:11:40:82:a2:2e:b3:90:ef: 94:b3:3e:c3:73:71:ea:df:43:aa:73:d6:1e:23:ce:13:20:66: 9e:f5:84:25:1e:09:ff:96:2f:cd:e3:18:ec:35:26:03:82:35: fb:0a:53:a5:db:0f:21:33:e9:22:5f:ee:d8:63:25:1a:f8:01: 33:f6:33:2b:94:14:ca:35:f7:17:cf:f1:a7:28:74:e7:fb:67: f5:bc:a9:70:2a:30:b9:9f:c0:b6:f2:b8:dc:ad:02:f4:05:8e: 1d:7d:63:d7:c0:1a:d4:3b:d1:fb:06:ca:b5:a8:9b:7d:8c:dc: e5:c1:f4:10:ee:85:09:78:16:dd:5a:b1:56:5d:da:72:20:60: c6:8c:1f:8d:f0:a7:14:44:2b:59:65:7e:eb:99:78:8f:05:38: 10:27:e1:9d:4e:e2:72:b7:a9:40:51:4d:46:38:b7:56:5e:88: 9a:34:f7:ac:65:53:43:14:51:34:ba:dc:25:da:e9:fe:0e:6d: ef:92:bf:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ4M0ExMTAvBgNVBAUTKEVEQ0RGMDYwQTYxMDJCRkFEMDZFQkE4RDY4MzFEMjg0 OEQxREJERTcwHhcNMjUwNjEyMjEwNzM4WhcNMjUwNjE5MjEwNzM4WjAYMRYwFAYD VQQDEw02ODRiNDE5YS1jZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnix3J+ETnaiyK1RvcMl8UAwYhUxJ0dr9AjHDtQfi0ONsknWdyQs1Twg3k53K 9uUZ7oRpI8DcQ2w3FX6RYfqBoixf0Vz0kKS4DS3N7Cg7rXIGkxIqUxAhyEIqAM6d 69OUNIbcePdohWjBUcGdytCHTjWrCJjqlQxsnlVUoAqpzXhiqBs5w9BuVNfCsvvN CnP2muJjb9JFCYh4q1EuFDdw0JqV43zaSVIRc5m8hjIsvyb5a2yM9pVFZs/ters4 8eYvammLSctESnHU31383vj20AP2HRf6KPLw8QSRWIOJzGfsvztDlAmHX5f+I5da AHjQAO50/R/IcneknlhSqrjqFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTEpcmp AdFCqY4TWUCU3KT47RuOMB8GA1UdIwQYMBaAFO3N8GCmECv60G66jWgx0oSNHb3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDgzQS8wNzAxQjM0QTEy RDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtfclFicnFOYURIU2hJMGR2 ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdjM3dZS1lRS19yUWJycU5hREhTaEkwZHZlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDgzQS8wNzAxQjM0QTEyRDIxMUVCOTI5MkQ2M0ZDNEY5QUUwMi83YzN3WUtZUUtf clFicnFOYURIU2hJMGR2ZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSUTaAtFSSN/i/6U45Y2yEBWeg0GE5v2s80x+s3eoe1qOZ4KuzRbTV K1AQ5BXWiV9ZUiebwLE7VZiDw/OdPcaBEUCCoi6zkO+Usz7Dc3Hq30Oqc9YeI84T IGae9YQlHgn/li/N4xjsNSYDgjX7ClOl2w8hM+kiX+7YYyUa+AEz9jMrlBTKNfcX z/GnKHTn+2f1vKlwKjC5n8C28rjcrQL0BY4dfWPXwBrUO9H7Bsq1qJt9jNzlwfQQ 7oUJeBbdWrFWXdpyIGDGjB+N8KcURCtZZX7rmXiPBTgQJ+GdTuJyt6lAUU1GOLdW XoiaNPesZVNDFFE0utwl2un+Dm3vkr8P -----END CERTIFICATE-----Generated at Sat Jun 14 17:38:27 2025 by rpki-client