$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json) Hash identifier: pFK8HXavLv+1yZxhbPt/nPcDXfJ5b1T7QHziicF5Ezc= Subject key identifier: C3:CF:6C:4E:70:7C:36:EB:81:1E:27:14:9E:12:24:0D:2B:60:91:45 Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Certificate serial: 0EBC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft Manifest number: 0EB0 Signing time: Sun 20 Jul 2025 17:42:22 +0000 Manifest this update: Sun 20 Jul 2025 17:42:21 +0000 Manifest next update: Sun 27 Jul 2025 17:42:21 +0000 Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: KPOoVQ/jFYKjl0J5RXDqspfMd/Ay2L7FTmrOegCuewI=) 2: E1769D329EF711EABE23195AC4F9AE02.roa (hash: bnxide7jSDy0H4+26/GRiKEkbVdX6Jj48LQNDvhocz8=) 3: 8C17CD80572411F0A1621829C4F9AE02.roa (hash: fxCg2CkrcMOMAZiOglCfNK1aFdm48sqjb1COKfoWEmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3772 (0xebc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Validity Not Before: Jul 20 17:42:21 2025 GMT Not After : Jul 27 17:42:21 2025 GMT Subject: CN=687d2a7d-651b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c1:94:44:7f:c2:43:3f:fb:b1:5e:94:d8:dd: 17:9d:85:34:e8:61:d0:6c:60:7d:71:02:4f:e8:77: f8:a2:76:b1:7d:ae:d0:9f:6a:a8:3d:ab:47:2a:a7: 37:bc:d1:04:34:48:8f:17:30:d4:21:cb:61:dc:c5: bb:65:88:4d:10:bf:d9:05:93:ef:82:46:60:34:9d: f2:28:c4:81:e6:77:c0:d8:e0:f2:62:7e:c2:84:d6: c9:b6:ad:e2:8e:af:c9:f0:c3:ac:1b:92:d8:a6:7a: 0f:dd:02:c7:d7:60:46:b4:b5:ee:83:03:f1:6d:85: 9e:4b:7a:b8:4f:8e:4f:ff:58:1b:15:ca:9b:d3:08: 05:b4:1e:62:d8:e2:f5:b7:b5:6a:e5:17:ce:87:c4: bb:52:03:b1:8c:52:a6:3e:3c:9a:b8:de:ea:0b:7d: e2:05:63:6b:11:77:03:4a:c9:26:3e:be:54:3b:4f: 8c:26:83:eb:3e:bd:88:54:d7:37:54:0c:27:2c:7e: 9d:36:e8:1e:b1:25:d5:a2:59:ce:81:56:cc:bf:c2: 91:b2:4b:aa:63:86:92:8f:39:26:29:50:8a:f7:ea: 81:35:df:9f:8e:d6:1a:d9:a5:2f:72:de:b8:3a:a3: 66:03:59:0b:50:94:8a:15:eb:62:39:57:48:29:7c: 18:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CF:6C:4E:70:7C:36:EB:81:1E:27:14:9E:12:24:0D:2B:60:91:45 X509v3 Authority Key Identifier: keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:27:5a:ac:d3:6b:e8:84:54:f2:d2:39:0f:59:84:c6:16:18: af:d4:3c:45:8e:15:9d:41:84:af:ee:4e:e4:8f:13:19:be:5c: f9:21:63:ca:3b:51:db:4e:21:e0:45:23:d0:e0:c5:bb:16:61: 19:6b:3a:75:cc:ae:61:27:c6:fa:1f:6f:ce:4f:98:59:53:d2: 06:d2:25:f9:3e:2d:ab:4c:23:9e:1b:4c:4f:03:10:c4:bd:75: 31:94:cc:ea:e3:2f:af:19:a1:d9:7f:a3:fd:d9:63:6b:cd:6f: 75:19:29:b0:ca:6c:ff:d1:11:80:26:a6:89:2b:4a:b2:91:aa: c2:c9:95:3a:1b:b8:1d:32:15:b3:ac:52:91:ea:52:57:fe:35: 52:0c:94:cb:95:0d:61:18:fa:d4:78:ed:a8:aa:7c:04:7f:66: d3:d8:98:d7:06:12:e0:ae:bc:b8:40:6a:a3:50:32:b1:f2:e8: fd:9f:7b:bd:ce:6c:09:e4:7b:19:b1:8e:95:e5:41:33:d5:1a: 4c:a2:7e:91:cc:8b:b1:b2:10:f8:0c:8c:c4:5c:ba:f5:35:28: a2:08:0b:bc:45:5b:43:b3:0e:30:34:42:f4:e2:04:9f:ff:ac: d6:e7:2a:70:f3:28:19:04:53:64:55:8b:09:94:7c:b6:e5:1e: b0:6d:08:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE NDNEN0VDQTQwHhcNMjUwNzIwMTc0MjIxWhcNMjUwNzI3MTc0MjIxWjAYMRYwFAYD VQQDEw02ODdkMmE3ZC02NTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsGURH/CQz/7sV6U2N0XnYU06GHQbGB9cQJP6Hf4onaxfa7Qn2qoPatHKqc3 vNEENEiPFzDUIcth3MW7ZYhNEL/ZBZPvgkZgNJ3yKMSB5nfA2ODyYn7ChNbJtq3i jq/J8MOsG5LYpnoP3QLH12BGtLXugwPxbYWeS3q4T45P/1gbFcqb0wgFtB5i2OL1 t7Vq5RfOh8S7UgOxjFKmPjyauN7qC33iBWNrEXcDSskmPr5UO0+MJoPrPr2IVNc3 VAwnLH6dNugesSXVolnOgVbMv8KRskuqY4aSjzkmKVCK9+qBNd+fjtYa2aUvct64 OqNmA1kLUJSKFetiOVdIKXwY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMPPbE5w fDbrgR4nFJ4SJA0rYJFFMB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv TTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpJ1qs02vohFTy0jkPWYTGFhiv1DxFjhWdQYSv7k7kjxMZvlz5IWPK O1HbTiHgRSPQ4MW7FmEZazp1zK5hJ8b6H2/OT5hZU9IG0iX5Pi2rTCOeG0xPAxDE vXUxlMzq4y+vGaHZf6P92WNrzW91GSmwymz/0RGAJqaJK0qykarCyZU6G7gdMhWz rFKR6lJX/jVSDJTLlQ1hGPrUeO2oqnwEf2bT2JjXBhLgrry4QGqjUDKx8uj9n3u9 zmwJ5HsZsY6V5UEz1RpMon6RzIuxshD4DIzEXLr1NSiiCAu8RVtDsw4wNEL04gSf /6zW5ypw8ygZBFNkVYsJlHy25R6wbQi7 -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:02 2025 by rpki-client