$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft File: 7UHN-Ie33i9cIBvogU8ejfPQIB8.mft (raw, json) Hash identifier: dKdxcE50K1c9UXAXXJAoPmjvnDszLPVd9e9TrIKpuLI= Subject key identifier: 35:A4:ED:3F:EE:77:49:E0:C9:B4:3B:81:14:DF:7F:F4:35:4C:CA:94 Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F Certificate issuer: /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:57:56 +0000 Manifest this update: Sat 19 Jul 2025 07:57:56 +0000 Manifest next update: Sat 26 Jul 2025 07:57:56 +0000 Files and hashes: 1: 7UHN-Ie33i9cIBvogU8ejfPQIB8.crl (hash: qxXjZgLbyc1hQxh5UAGCUNaFHiKXe5SwJGANHMWmeiE=) 2: AA3FBE4A1E6111F093F53B75C4F9AE02.roa (hash: LSRr7TMpx9Qi1u09QfccXCZNggaDKCGxTg8r/GddSHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F Validity Not Before: Jul 19 07:57:56 2025 GMT Not After : Jul 26 07:57:56 2025 GMT Subject: CN=687b5004-1810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:13:d2:9b:fc:72:2e:9a:86:c9:73:fa:f8:fb: 5a:eb:41:58:2c:08:27:09:40:aa:29:95:8f:bb:1b: 88:49:fd:da:25:2e:8c:bd:18:50:86:9b:64:bf:8c: 85:9c:c2:a6:46:c7:9c:4b:4e:04:08:c5:6c:c6:b1: 47:6c:49:56:44:5c:3b:dd:fc:bf:05:a2:b2:92:b6: b9:07:85:d4:59:80:66:aa:0d:2e:18:92:9c:0d:10: a1:72:e2:0e:5f:ac:dd:9a:f0:20:d8:80:4e:a3:91: 55:40:82:3a:01:dc:48:3b:d4:ca:f9:34:8f:57:fa: cc:a6:c4:72:94:8d:67:cd:66:83:b1:a9:e5:3d:a3: 94:de:f5:03:2a:cb:17:9c:68:0b:12:fa:6c:e9:7a: 37:0a:a0:02:00:b2:4c:56:5b:b9:e2:19:4f:ea:f6: e5:e0:8d:a4:db:69:60:ba:86:b9:54:a5:ef:4f:56: 50:65:cd:19:79:e5:7e:b4:49:f4:a6:8e:41:7a:c8: 2d:59:d6:de:7c:78:fe:78:01:05:e2:3a:84:47:39: 92:ec:b1:d9:70:3f:ed:1e:2c:37:41:c0:99:a2:b2: c4:ff:66:88:ac:f9:00:63:9c:e9:73:2c:20:e3:7d: e7:76:16:cc:e4:35:ac:75:61:2c:be:46:3b:47:1c: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A4:ED:3F:EE:77:49:E0:C9:B4:3B:81:14:DF:7F:F4:35:4C:CA:94 X509v3 Authority Key Identifier: keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:ed:ca:e0:b9:d5:f2:90:23:c9:fb:0d:5a:19:58:d9:50:e5: ae:76:99:cc:cf:f4:63:7b:84:b4:d7:cf:6c:0a:12:18:c8:7e: ef:af:31:17:15:93:b9:dc:1a:57:78:b3:29:dd:10:b0:c0:59: 02:3b:60:8f:a3:39:35:31:14:de:6d:b7:23:3e:44:b9:cd:ef: 80:0a:56:d2:f6:f9:82:ad:00:8a:07:de:55:8c:da:ec:82:c4: 5b:f6:c1:56:c7:98:49:7a:d8:09:f3:03:c9:5f:42:50:c3:a3: 6b:07:40:8c:32:98:e8:85:4f:90:3c:db:96:1f:5d:fd:0d:55: e1:ce:93:87:6a:cb:98:32:33:68:13:ec:74:bf:79:70:2c:82: 1d:02:80:0b:dd:d8:63:d4:9e:90:97:cb:0e:00:f0:52:62:60: 54:4b:59:47:9d:a8:a0:56:b5:fa:70:d0:75:36:67:82:f0:31: 95:2b:5f:26:a6:03:d1:06:36:de:5d:e0:7e:22:94:f2:61:7d: 87:a3:2f:34:4a:bf:ba:a9:cc:8b:48:7c:b8:09:a0:f1:a6:4e: 90:b2:ca:d7:69:26:3a:48:aa:d1:f4:65:bd:e5:f8:2a:dd:38: 3a:93:93:5b:59:3e:06:3e:d0:8a:2c:86:28:a9:32:f8:08:3d: e8:4f:7e:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzgzMjExMC8GA1UEBRMoRUQ0MUNERjg4N0I3REUyRjVDMjAxQkU4ODE0RjFFOERG M0QwMjAxRjAeFw0yNTA3MTkwNzU3NTZaFw0yNTA3MjYwNzU3NTZaMBgxFjAUBgNV BAMTDTY4N2I1MDA0LTE4MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvE9Kb/HIumobJc/r4+1rrQVgsCCcJQKoplY+7G4hJ/dolLoy9GFCGm2S/jIWc wqZGx5xLTgQIxWzGsUdsSVZEXDvd/L8ForKStrkHhdRZgGaqDS4YkpwNEKFy4g5f rN2a8CDYgE6jkVVAgjoB3Eg71Mr5NI9X+symxHKUjWfNZoOxqeU9o5Te9QMqyxec aAsS+mzpejcKoAIAskxWW7niGU/q9uXgjaTbaWC6hrlUpe9PVlBlzRl55X60SfSm jkF6yC1Z1t58eP54AQXiOoRHOZLssdlwP+0eLDdBwJmissT/Zois+QBjnOlzLCDj fed2FszkNax1YSy+RjtHHMphAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNaTtP+53 SeDJtDuBFN9/9DVMypQwHwYDVR0jBBgwFoAU7UHN+Ie33i9cIBvogU8ejfPQIB8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDODMyLzVCNjE4MDYwMUU2 MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlC OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1VITi1JZTMzaTljSUJ2b2dVOGVqZlBRSUI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD ODMyLzVCNjE4MDYwMUU2MTExRjA5MzRGNkY3NEM0RjlBRTAyLzdVSE4tSWUzM2k5 Y0lCdm9nVThlamZQUUlCOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEPtyuC51fKQI8n7DVoZWNlQ5a52mczP9GN7hLTXz2wKEhjIfu+vMRcV k7ncGld4syndELDAWQI7YI+jOTUxFN5ttyM+RLnN74AKVtL2+YKtAIoH3lWM2uyC xFv2wVbHmEl62AnzA8lfQlDDo2sHQIwymOiFT5A825YfXf0NVeHOk4dqy5gyM2gT 7HS/eXAsgh0CgAvd2GPUnpCXyw4A8FJiYFRLWUedqKBWtfpw0HU2Z4LwMZUrXyam A9EGNt5d4H4ilPJhfYejLzRKv7qpzItIfLgJoPGmTpCyytdpJjpIqtH0Zb3l+Crd ODqTk1tZPgY+0IoshiipMvgIPehPfnw= -----END CERTIFICATE-----Generated at Sun Jul 20 03:36:06 2025 by rpki-client