$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: MnRtS906EMtEjox7mAlx6Bw30AzCvr9A+HVTBwQ2ulU= Subject key identifier: F9:EA:31:A1:EC:3B:08:2C:40:53:FF:8F:04:22:4D:5C:D4:AA:F9:22 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 7E Signing time: Sat 19 Jul 2025 07:01:38 +0000 Manifest this update: Sat 19 Jul 2025 07:01:38 +0000 Manifest next update: Sat 26 Jul 2025 07:01:38 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: fqyX+nn6gA0UiJd26LfrGk1+SGMmXNTlecDPLKi+O5Q=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Jul 19 07:01:38 2025 GMT Not After : Jul 26 07:01:38 2025 GMT Subject: CN=687b42d2-696e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:95:21:1b:29:8d:8c:35:79:2f:b7:4f:f1:97: 0b:4a:cb:8d:51:43:c3:dd:00:45:16:e3:e5:15:ba: 4a:31:ca:0e:51:f4:3c:ee:8a:f4:27:c8:bd:52:4c: 87:d4:9c:95:63:6a:cc:17:c3:79:a0:c0:32:e3:6c: f5:6b:60:f6:7d:4d:8c:42:a5:88:f2:20:f1:06:53: fe:79:67:8d:0b:cd:c5:06:49:fb:e2:4b:12:40:03: fb:37:4a:7c:69:30:7c:3e:2e:8d:97:84:c9:60:fb: b2:65:ee:17:93:92:fe:54:c0:87:44:ff:b6:c2:2b: 43:ff:47:92:77:6d:44:a7:d5:33:27:be:17:f2:31: c4:7a:03:8b:f7:c3:23:9b:18:58:55:e8:dd:db:e2: a9:3d:6f:04:8b:25:a7:c5:c9:e2:19:62:e7:b6:5b: b8:54:84:23:ae:f3:80:a6:ea:90:73:15:6c:68:e6: f4:36:94:f1:03:53:26:c7:50:32:43:1f:9c:0f:af: f7:9c:a0:2f:9e:4d:1a:a8:31:f7:69:74:89:e4:b9: d4:41:41:8e:0f:81:62:a4:ac:db:e6:b2:76:0e:a1: 2b:84:fa:b4:8a:9a:10:c6:39:21:f4:f2:94:ea:6d: 9a:dc:ce:18:75:84:a6:bc:dc:c2:3f:ab:ca:b9:5b: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:31:A1:EC:3B:08:2C:40:53:FF:8F:04:22:4D:5C:D4:AA:F9:22 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:5e:43:88:39:6b:71:cf:7d:83:f5:d0:40:4b:03:be:88: 04:7c:ad:d9:e7:a7:1e:a3:d3:12:8f:8a:6f:0e:f0:0c:95:3d: 9e:26:c1:09:72:99:d4:fe:e6:52:0a:6b:a5:27:50:38:2d:50: 9d:d1:6e:37:83:ad:9a:90:6a:0a:4d:b3:a2:f5:75:d8:ac:a0: c0:2e:85:39:47:e8:8e:00:45:2e:29:8e:9a:7c:14:08:e0:a7: f3:2f:35:64:cd:59:94:4b:80:25:85:5b:61:73:37:cd:15:2b: db:43:62:b6:24:f7:04:bc:e9:ec:a1:4b:be:1b:9a:75:f7:4a: 8a:51:8a:50:12:92:36:71:5b:35:17:c3:5f:63:e7:eb:64:7e: ad:cb:12:08:2a:cf:bd:7f:40:95:1a:5f:2a:8c:a3:b1:71:14: 9c:1f:b0:46:ce:05:5c:4c:5d:a2:e9:37:62:8b:fa:d3:c6:08: 26:90:15:85:5d:42:83:df:89:98:54:cb:e9:1b:98:a1:bb:3d: d0:25:bb:3d:4f:68:4b:fd:d8:e0:a6:fa:6b:4c:a4:01:5e:f9: 7e:cc:dc:cd:ae:18:15:42:57:de:f0:c2:47:da:04:1d:11:2d: 85:3f:cc:ab:74:88:a5:8b:0c:52:2f:d8:fe:46:b9:e4:48:04: 92:3d:01:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxNjIxMTAvBgNVBAUTKDA3QTY4MUM5MUMzRTA1MTJEMzY4OUU5OUJDRTVCQzY2 NDA5MTY3MzQwHhcNMjUwNzE5MDcwMTM4WhcNMjUwNzI2MDcwMTM4WjAYMRYwFAYD VQQDEw02ODdiNDJkMi02OTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz5UhGymNjDV5L7dP8ZcLSsuNUUPD3QBFFuPlFbpKMcoOUfQ87or0J8i9UkyH 1JyVY2rMF8N5oMAy42z1a2D2fU2MQqWI8iDxBlP+eWeNC83FBkn74ksSQAP7N0p8 aTB8Pi6Nl4TJYPuyZe4Xk5L+VMCHRP+2witD/0eSd21Ep9UzJ74X8jHEegOL98Mj mxhYVejd2+KpPW8EiyWnxcniGWLntlu4VIQjrvOApuqQcxVsaOb0NpTxA1Mmx1Ay Qx+cD6/3nKAvnk0aqDH3aXSJ5LnUQUGOD4FipKzb5rJ2DqErhPq0ipoQxjkh9PKU 6m2a3M4YdYSmvNzCP6vKuVuObQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnqMaHs OwgsQFP/jwQiTVzUqvkiMB8GA1UdIwQYMBaAFAemgckcPgUS02iembzlvGZAkWc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE2Mi81QTM4MEQ2QUFE NDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJSTFRhSjZadk9XOFprQ1Ja elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJS TFRhSjZadk9XOFprQ1JaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALhl5DiDlrcc99g/XQQEsDvogEfK3Z56ceo9MSj4pvDvAMlT2eJsEJ cpnU/uZSCmulJ1A4LVCd0W43g62akGoKTbOi9XXYrKDALoU5R+iOAEUuKY6afBQI 4KfzLzVkzVmUS4AlhVthczfNFSvbQ2K2JPcEvOnsoUu+G5p190qKUYpQEpI2cVs1 F8NfY+frZH6tyxIIKs+9f0CVGl8qjKOxcRScH7BGzgVcTF2i6Tdii/rTxggmkBWF XUKD34mYVMvpG5ihuz3QJbs9T2hL/djgpvprTKQBXvl+zNzNrhgVQlfe8MJH2gQd ES2FP8yrdIiliwxSL9j+RrnkSASSPQH0 -----END CERTIFICATE-----Generated at Mon Jul 21 08:06:55 2025 by rpki-client