$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: HYwYBdwCUQ6dBqmmfu9VPfPll+nG/+8doCdojfNPC3E= Subject key identifier: 1B:1B:79:45:C2:8D:6C:44:63:73:5D:3D:C3:06:06:17:AC:84:CE:39 Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 05FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 05EF Signing time: Sun 20 Jul 2025 23:06:44 +0000 Manifest this update: Sun 20 Jul 2025 23:06:44 +0000 Manifest next update: Sun 27 Jul 2025 23:06:43 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: DuhxayT7tnmv3BP48TU670IoKptxkwE9yJdWtFOo4tw=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1531 (0x5fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Jul 20 23:06:44 2025 GMT Not After : Jul 27 23:06:43 2025 GMT Subject: CN=687d7684-8ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:b4:b0:a6:6d:a7:c8:79:ec:63:60:9d:95: 0e:e0:d2:c6:56:d2:40:31:bb:4a:7c:0b:9c:28:b1: cb:be:e0:62:85:45:63:dc:96:e1:f5:a9:76:ea:67: d2:18:7d:ac:62:b2:59:df:be:31:94:3c:d0:40:6d: 6b:46:e6:77:b1:46:ee:f4:2f:f1:54:7d:49:27:bd: 56:b5:a1:2e:dd:df:ef:88:e7:1c:1f:e5:ca:ff:62: 54:7c:43:8b:7a:d3:43:11:c6:a3:4d:75:b7:91:cc: 4e:81:2f:72:b5:05:bb:fc:cc:83:3d:6b:33:92:69: c9:b1:c2:93:c9:d0:e8:80:e0:79:38:ec:8b:99:34: 93:d3:21:9e:24:24:90:20:c2:1e:2d:76:e6:7a:2a: d4:10:2d:1f:f7:d9:67:dd:4c:db:a7:5c:c1:5c:59: ff:a0:34:f1:f1:99:16:2c:2a:ce:f2:5d:95:b5:74: 8f:ba:42:9a:fe:67:ae:2d:d5:d5:6d:70:4a:5e:cb: be:fd:f3:34:8f:00:b8:85:38:e1:f8:e5:49:0d:b0: 7b:15:dc:e7:3e:d8:e8:98:99:6b:9d:02:c4:85:37: 9c:0d:c7:fc:b9:9e:a8:b4:53:00:e8:7a:86:ab:ea: d0:3a:52:b3:02:1b:43:d6:4b:e8:e3:f9:43:e2:5e: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1B:79:45:C2:8D:6C:44:63:73:5D:3D:C3:06:06:17:AC:84:CE:39 X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:4f:76:6a:ea:e7:94:f1:c7:db:25:a7:92:fe:5f:d1:df:cd: 00:6b:59:8f:ef:65:33:62:a9:3f:2c:60:cf:4d:c7:96:56:71: f6:56:ed:f2:2d:0a:a4:be:97:64:c2:da:96:64:38:6a:ad:1f: 54:89:69:c3:bd:da:c8:01:1a:0c:5f:37:c3:6a:fd:54:a8:e7: 68:b0:ee:9b:d1:53:75:a7:b5:cd:a6:57:37:79:2f:1f:16:e5: 77:97:de:75:4d:52:fe:f3:f5:76:e1:7f:4e:aa:df:aa:e7:99: f5:5c:ae:e2:e9:04:26:80:41:c8:25:48:b4:84:c1:08:1f:da: 21:a8:3e:3b:4a:33:0a:41:5b:60:18:f2:4c:b0:33:41:ac:41: e7:d6:16:53:07:28:8f:66:4c:47:6e:ef:a4:d6:f1:6b:e0:0a: 68:ec:56:7d:cd:03:52:02:46:01:3a:3a:12:ed:f1:0d:3d:35: 70:20:3a:0a:07:10:1a:3f:4a:89:3c:91:79:2a:4d:89:2b:c4: 4e:8a:2b:3b:cf:8a:31:62:f4:ac:fe:39:c2:1b:e5:47:cb:24: 08:ec:15:f7:7b:0f:20:d0:4c:f4:b2:28:c5:d9:a7:76:d9:31: e1:1f:3b:ed:ef:4c:a5:78:5c:71:c1:ae:c7:17:ae:e6:ba:bf: a3:d4:11:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwNzIwMjMwNjQ0WhcNMjUwNzI3MjMwNjQzWjAYMRYwFAYD VQQDEw02ODdkNzY4NC04YWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl/K0sKZtp8h57GNgnZUO4NLGVtJAMbtKfAucKLHLvuBihUVj3Jbh9al26mfS GH2sYrJZ374xlDzQQG1rRuZ3sUbu9C/xVH1JJ71WtaEu3d/viOccH+XK/2JUfEOL etNDEcajTXW3kcxOgS9ytQW7/MyDPWszkmnJscKTydDogOB5OOyLmTST0yGeJCSQ IMIeLXbmeirUEC0f99ln3Uzbp1zBXFn/oDTx8ZkWLCrO8l2VtXSPukKa/meuLdXV bXBKXsu+/fM0jwC4hTjh+OVJDbB7FdznPtjomJlrnQLEhTecDcf8uZ6otFMA6HqG q+rQOlKzAhtD1kvo4/lD4l7shwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsbeUXC jWxEY3NdPcMGBheshM45MB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuT3Zq6ueU8cfbJaeS/l/R380Aa1mP72UzYqk/LGDPTceWVnH2Vu3y LQqkvpdkwtqWZDhqrR9UiWnDvdrIARoMXzfDav1UqOdosO6b0VN1p7XNplc3eS8f FuV3l951TVL+8/V24X9Oqt+q55n1XK7i6QQmgEHIJUi0hMEIH9ohqD47SjMKQVtg GPJMsDNBrEHn1hZTByiPZkxHbu+k1vFr4Apo7FZ9zQNSAkYBOjoS7fENPTVwIDoK BxAaP0qJPJF5Kk2JK8ROiis7z4oxYvSs/jnCG+VHyyQI7BX3ew8g0Ez0sijF2ad2 2THhHzvt70yleFxxwa7HF67mur+j1BFs -----END CERTIFICATE-----Generated at Mon Jul 21 02:13:25 2025 by rpki-client