$ rpki-client -vvf rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft File: r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft (raw, json) Hash identifier: 46m3WOOTzLVqceBTqTZtnCJ0zEWqPJxgxfhZDXQ7xBA= Subject key identifier: 49:54:08:27:BB:B3:21:96:6D:1E:0E:C8:54:DF:BF:8B:E6:2C:2E:24 Authority key identifier: AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE Certificate issuer: /CN=A912BA82/serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft Manifest number: 010A Signing time: Sat 19 Jul 2025 05:13:31 +0000 Manifest this update: Sat 19 Jul 2025 05:13:31 +0000 Manifest next update: Sat 26 Jul 2025 05:13:31 +0000 Files and hashes: 1: r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl (hash: nsxdZe5Vd5uK11IZKrVUhajcn5DnloQL8PbVhb4eIiQ=) 2: 4BFDDACCEB3311EE9D65C57DC4F9AE02.roa (hash: JbXYoZCeV73k0ydVhueXLAHh7xzomEgWbLFpEGgJxiE=) 3: 6198218AEB3311EEA75DE77DC4F9AE02.roa (hash: br9VY1Ap5bODWGjIwXH93XykBR4wm+eKQRXiepCLuxo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:13:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BA82, serialNumber=AFB8FFE1E8686296B996C63AA902EA9C128F48FE Validity Not Before: Jul 19 05:13:31 2025 GMT Not After : Jul 26 05:13:31 2025 GMT Subject: CN=687b297b-affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:26:94:5b:20:47:39:ed:23:47:34:fa:a4:3d: 3e:b2:13:e6:85:cf:00:4b:bc:40:dd:b2:9c:28:1f: 16:11:2b:5f:0e:48:a1:3e:aa:d7:63:3b:e9:56:52: 17:37:7b:fb:eb:39:9a:e5:54:33:65:b6:39:ac:f6: c7:64:e7:83:b6:98:83:45:e1:41:65:6e:8a:fa:0e: 5c:a4:e5:15:ff:39:ec:1d:9c:e9:1e:32:af:9e:7d: c0:74:36:cb:9e:44:62:0c:03:5b:06:7a:88:16:36: 05:31:40:21:a3:f6:fb:b1:55:1d:c5:25:68:8d:dc: 7c:f5:c2:6b:f0:10:69:43:d4:cb:18:79:3f:a4:d9: 03:9e:de:72:82:13:2e:b6:bd:0a:54:82:0d:1b:36: 5c:cb:0e:9c:53:b5:0d:11:23:cd:08:16:22:f6:06: d8:68:3c:e5:b0:ad:6b:12:ea:1f:17:5d:dc:61:c9: 4f:a0:87:e6:ef:0e:7c:3e:32:fa:46:bf:12:b3:05: 37:4c:c3:f5:77:5d:ab:50:92:87:13:6f:0f:56:86: 37:95:90:e1:ac:1a:60:31:96:92:b3:e8:c0:a0:d4: 68:84:4d:59:20:2c:72:d5:f8:b6:45:18:1f:d2:d4: 5d:0c:fb:a2:57:48:ba:74:cb:a1:bd:e9:79:00:17: 12:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:08:27:BB:B3:21:96:6D:1E:0E:C8:54:DF:BF:8B:E6:2C:2E:24 X509v3 Authority Key Identifier: keyid:AF:B8:FF:E1:E8:68:62:96:B9:96:C6:3A:A9:02:EA:9C:12:8F:48:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7j_4ehoYpa5lsY6qQLqnBKPSP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BA82/FBDDAC24CE5A11EE8C3BD03AC4F9AE02/r7j_4ehoYpa5lsY6qQLqnBKPSP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c8:86:95:0c:59:be:14:6e:7a:60:53:aa:d1:e9:ca:02:cc: 19:fe:af:b5:0f:e9:24:1b:0f:7f:bc:b0:5f:e0:39:d5:f2:5f: 06:a1:16:f6:ca:7c:f4:2f:af:86:3a:41:d4:32:fc:ec:2d:30: 82:16:ed:90:64:7f:01:a0:52:cf:0e:51:cf:de:d5:c1:14:2b: 59:73:b4:19:06:4f:6a:0e:0c:64:c7:09:80:7b:2d:a8:a9:d6: 22:a1:ee:71:fa:fa:fa:ff:d4:98:17:30:2d:82:b9:8b:41:c8: 08:77:9e:17:ef:84:ee:65:99:58:a1:a3:6b:15:42:7f:b7:c9: b4:9d:a2:c8:1c:8e:bc:1c:50:5e:d5:ca:53:8b:cb:17:5a:c6: 9e:b1:2a:8e:e5:dd:65:cf:5f:95:11:f3:8e:40:5a:92:b5:1a: d9:0c:07:24:f4:f3:23:0b:c7:93:83:b2:f9:7c:d2:8b:e8:ea: cb:5f:e2:37:e3:a8:38:09:6d:ad:be:1e:d8:07:65:86:01:9d: 70:52:5f:f5:15:5e:ad:8e:fd:42:54:9f:04:19:9b:87:93:0c: 38:84:7d:a2:c5:41:a3:31:29:ae:e3:a6:47:49:64:42:c6:12: cc:48:6e:1c:f6:60:d1:82:8c:c3:b5:0c:7c:82:2e:b3:f6:c3: 40:e8:2e:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJBODIxMTAvBgNVBAUTKEFGQjhGRkUxRTg2ODYyOTZCOTk2QzYzQUE5MDJFQTlD MTI4RjQ4RkUwHhcNMjUwNzE5MDUxMzMxWhcNMjUwNzI2MDUxMzMxWjAYMRYwFAYD VQQDEw02ODdiMjk3Yi1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2yaUWyBHOe0jRzT6pD0+shPmhc8AS7xA3bKcKB8WEStfDkihPqrXYzvpVlIX N3v76zma5VQzZbY5rPbHZOeDtpiDReFBZW6K+g5cpOUV/znsHZzpHjKvnn3AdDbL nkRiDANbBnqIFjYFMUAho/b7sVUdxSVojdx89cJr8BBpQ9TLGHk/pNkDnt5yghMu tr0KVIINGzZcyw6cU7UNESPNCBYi9gbYaDzlsK1rEuofF13cYclPoIfm7w58PjL6 Rr8SswU3TMP1d12rUJKHE28PVoY3lZDhrBpgMZaSs+jAoNRohE1ZICxy1fi2RRgf 0tRdDPuiV0i6dMuhvel5ABcS1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElUCCe7 syGWbR4OyFTfv4vmLC4kMB8GA1UdIwQYMBaAFK+4/+HoaGKWuZbGOqkC6pwSj0j+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkE4Mi9GQkREQUMyNENF NUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lwYTVsc1k2cVFMcW5CS1BT UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3al80ZWhvWXBhNWxzWTZxUUxxbkJLUFNQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkE4Mi9GQkREQUMyNENFNUExMUVFOEMzQkQwM0FDNEY5QUUwMi9yN2pfNGVob1lw YTVsc1k2cVFMcW5CS1BTUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAayIaVDFm+FG56YFOq0enKAswZ/q+1D+kkGw9/vLBf4DnV8l8GoRb2 ynz0L6+GOkHUMvzsLTCCFu2QZH8BoFLPDlHP3tXBFCtZc7QZBk9qDgxkxwmAey2o qdYioe5x+vr6/9SYFzAtgrmLQcgId54X74TuZZlYoaNrFUJ/t8m0naLIHI68HFBe 1cpTi8sXWsaesSqO5d1lz1+VEfOOQFqStRrZDAck9PMjC8eTg7L5fNKL6OrLX+I3 46g4CW2tvh7YB2WGAZ1wUl/1FV6tjv1CVJ8EGZuHkww4hH2ixUGjMSmu46ZHSWRC xhLMSG4c9mDRgozDtQx8gi6z9sNA6C5j -----END CERTIFICATE-----Generated at Sun Jul 20 11:16:50 2025 by rpki-client