$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: HHjZGLiAh0pTYElv7T/7TMmeu5TK0SETLZhZUdjuBoQ= Subject key identifier: 67:3C:1C:22:AA:0C:70:D3:30:C3:79:3F:B6:7A:44:EF:F3:B8:78:EB Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21B4 Signing time: Mon 16 Jun 2025 15:58:30 +0000 Manifest this update: Mon 16 Jun 2025 15:58:30 +0000 Manifest next update: Mon 23 Jun 2025 15:58:30 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: 5wE18DmdATPtvl4d4+NJmQI8sdt6GpzWbMbR+4blTRE=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Jun 2025 15:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8661 (0x21d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Jun 16 15:58:30 2025 GMT Not After : Jun 23 15:58:30 2025 GMT Subject: CN=68503f26-7e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:70:7a:5b:10:9d:d8:f9:88:1d:7b:8d:de: aa:01:db:53:79:7e:cf:02:58:69:54:15:da:92:55: 7e:3d:2c:1a:13:13:d4:f7:06:10:fd:57:35:20:2c: 19:6a:41:89:7b:6d:18:d4:ab:d4:e3:65:20:e7:3f: 4d:4a:9f:fd:72:93:53:ca:29:ce:a8:3a:70:7a:c4: 53:86:d2:b2:7c:26:91:72:f8:f1:5e:db:17:b2:49: 8b:f0:38:d0:1e:21:15:d1:91:37:87:b8:0b:87:c8: 59:3e:e3:74:d8:09:7b:14:47:d7:0a:10:7e:62:22: 51:80:43:14:c4:68:4f:c3:59:b2:e5:41:b4:f8:bc: ec:27:32:1e:6e:ad:bb:6f:d0:39:eb:6c:d4:cb:36: cb:4f:5b:0b:dc:56:15:d9:b8:f8:af:b6:64:57:c8: d5:1a:ac:82:8b:6d:bc:3c:c9:59:28:be:ee:b2:57: fa:93:f4:5c:56:ed:35:4e:b5:44:f9:dc:e6:b9:4b: 92:e4:62:e5:94:c9:19:d2:b2:90:eb:fa:e3:a3:fe: 4d:df:01:67:c4:c0:fb:03:43:58:94:6d:44:6a:d5: dd:c4:ce:54:b5:23:ae:c5:09:40:b1:ce:38:4e:be: 8f:bc:07:19:d5:5e:4a:95:49:ba:a3:5d:15:cb:ea: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:3C:1C:22:AA:0C:70:D3:30:C3:79:3F:B6:7A:44:EF:F3:B8:78:EB X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:df:4c:5f:81:2a:e3:47:9a:67:db:81:34:38:60:31:de:84: 4a:9c:45:e3:19:a5:ec:a6:5e:f2:58:b4:86:61:76:a2:ee:4e: 85:2e:24:a0:45:45:9b:c3:37:cc:f6:be:7b:31:7a:e4:ae:cc: 04:61:5c:9f:6b:e8:e3:2d:35:da:f3:5f:e5:83:da:b9:2a:6c: 2f:f5:de:a6:80:21:00:25:84:ab:a4:11:22:df:24:d3:a6:1c: b0:c0:5d:df:20:21:5d:f4:aa:0e:0a:76:d4:65:85:c3:b3:6e: eb:43:e4:b8:b9:a5:87:db:1c:11:87:15:1d:18:eb:bc:83:00: af:e2:1d:23:df:74:82:43:c1:60:9f:f3:15:fa:ba:68:5a:59: 3b:3b:c2:37:e8:99:b2:27:e8:42:bf:66:d6:bf:b1:1b:bc:3b: 69:d4:64:3c:10:e4:9e:1c:5b:8b:7f:f9:49:01:20:90:50:06: 99:16:fa:8d:c7:0b:07:f2:47:8a:fe:58:8e:6d:72:76:fe:42: 9a:06:ec:d9:eb:ad:39:1a:0f:52:fd:26:cb:29:5b:4c:21:3e: c2:e9:10:70:ae:2e:04:29:0b:2f:03:a9:0b:3d:e5:49:98:43: 05:4e:a0:a2:e8:9e:27:61:8c:7e:de:24:99:ca:b0:32:2f:c3: 67:ca:53:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwNjE2MTU1ODMwWhcNMjUwNjIzMTU1ODMwWjAYMRYwFAYD VQQDEw02ODUwM2YyNi03ZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE1welsQndj5iB17jd6qAdtTeX7PAlhpVBXaklV+PSwaExPU9wYQ/Vc1ICwZ akGJe20Y1KvU42Ug5z9NSp/9cpNTyinOqDpwesRThtKyfCaRcvjxXtsXskmL8DjQ HiEV0ZE3h7gLh8hZPuN02Al7FEfXChB+YiJRgEMUxGhPw1my5UG0+LzsJzIebq27 b9A562zUyzbLT1sL3FYV2bj4r7ZkV8jVGqyCi228PMlZKL7uslf6k/RcVu01TrVE +dzmuUuS5GLllMkZ0rKQ6/rjo/5N3wFnxMD7A0NYlG1EatXdxM5UtSOuxQlAsc44 Tr6PvAcZ1V5KlUm6o10Vy+rppwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGc8HCKq DHDTMMN5P7Z6RO/zuHjrMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT30xfgSrjR5pn24E0OGAx3oRKnEXjGaXspl7yWLSGYXai7k6FLiSg RUWbwzfM9r57MXrkrswEYVyfa+jjLTXa81/lg9q5Kmwv9d6mgCEAJYSrpBEi3yTT phywwF3fICFd9KoOCnbUZYXDs27rQ+S4uaWH2xwRhxUdGOu8gwCv4h0j33SCQ8Fg n/MV+rpoWlk7O8I36JmyJ+hCv2bWv7EbvDtp1GQ8EOSeHFuLf/lJASCQUAaZFvqN xwsH8keK/liObXJ2/kKaBuzZ6605Gg9S/SbLKVtMIT7C6RBwri4EKQsvA6kLPeVJ mEMFTqCi6J4nYYx+3iSZyrAyL8NnylP+ -----END CERTIFICATE-----Generated at Wed Jun 18 05:06:35 2025 by rpki-client