$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: REPzTYfRQemevy9iJl3ngROIqXFWAUZ2dQrWEdA8ZsI= Subject key identifier: C9:80:F4:13:DE:66:34:DB:07:A3:93:1B:80:3F:7E:DC:05:2C:FE:21 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 03B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 03A9 Signing time: Sat 19 Jul 2025 01:11:11 +0000 Manifest this update: Sat 19 Jul 2025 01:11:10 +0000 Manifest next update: Sat 26 Jul 2025 01:11:10 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: jxNh+YXDBPkkzi8zgV5caSHnB2Jto6grtsm6hmEi6hQ=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:11:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Jul 19 01:11:10 2025 GMT Not After : Jul 26 01:11:10 2025 GMT Subject: CN=687af0af-8857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:55:fb:d5:4f:06:73:05:a0:0f:41:c2:cc:d4: 8d:73:47:23:a4:7a:7f:20:7a:f1:a9:cc:dc:aa:6e: b1:80:f2:c5:46:1c:2d:e2:88:28:16:27:98:86:3c: 6f:21:ac:e5:0a:8a:4d:d1:df:02:55:36:3b:80:99: 56:e6:a6:f3:4c:1d:9a:d0:50:b1:82:9e:6b:3d:70: 85:c9:ff:2c:ba:df:b1:da:69:29:d1:cf:00:5e:e2: 96:5b:e8:d9:4b:c1:42:e8:5d:16:3b:2a:5e:43:81: d2:5d:1e:b9:8a:e9:33:ed:90:6c:30:aa:9d:25:60: 22:95:1a:d3:25:87:5e:d6:a4:6b:b5:5c:d9:83:d2: 25:94:26:ed:ab:50:c0:da:63:1a:f7:60:70:a3:07: 16:23:b9:48:8a:91:01:04:4c:b7:1c:51:ff:96:86: c9:9c:35:86:27:4d:2f:8a:86:5c:18:4e:0b:3b:67: 72:4a:dc:d4:cb:41:ad:01:30:f9:ef:29:1b:d2:68: 63:a3:15:6a:34:61:d4:4e:35:98:bb:58:bc:6e:f3: 18:d9:ef:12:6a:54:43:14:aa:72:c1:3a:27:e1:bc: da:3f:be:ae:61:cb:b8:dd:87:28:a1:c5:d4:a0:52: f5:45:7e:35:fd:74:99:de:15:10:0c:1e:1d:53:22: 13:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:80:F4:13:DE:66:34:DB:07:A3:93:1B:80:3F:7E:DC:05:2C:FE:21 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:64:99:fa:50:61:dc:4d:ca:19:5f:06:22:32:bd:c6:13:3b: 0e:f3:52:52:bb:07:d8:3d:02:34:e3:56:17:2f:b1:43:98:66: 04:c5:83:70:6b:08:6f:f7:a7:a4:fa:8d:8f:41:57:1f:ca:f1: 4c:3d:af:21:01:38:da:85:c3:22:dd:04:19:48:c3:78:4b:37: d0:aa:34:cd:c7:c1:1a:b9:87:a3:d7:27:4a:73:d0:be:6c:81: 8d:56:59:f5:d8:ac:24:2e:06:1e:14:9d:09:6b:11:0e:6d:d4: 62:0d:a2:55:c2:f3:ae:d7:53:f7:1a:a2:2e:80:57:1d:de:2f: 27:d3:60:96:c6:0b:1a:ac:0d:c9:d8:08:5c:5d:e6:50:8e:af: 64:c4:3a:ed:3e:88:de:db:b0:87:3b:57:28:dd:42:de:57:95: a5:9c:70:16:ca:a4:f5:37:3f:d7:73:d8:ac:43:b6:f1:ae:13: 0e:80:35:fd:f4:eb:77:86:22:31:a8:50:30:67:16:8f:95:ed: c7:c3:81:94:76:3e:d3:8c:eb:69:ae:4a:af:40:49:25:db:f5: 9c:d7:95:6a:53:d8:1f:e3:78:28:8f:9a:b3:8a:66:76:54:3f: 1d:cc:7a:aa:25:cf:18:9a:d4:b0:31:9e:26:10:21:e4:06:f3: 06:d2:d9:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwNzE5MDExMTEwWhcNMjUwNzI2MDExMTEwWjAYMRYwFAYD VQQDEw02ODdhZjBhZi04ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlX71U8GcwWgD0HCzNSNc0cjpHp/IHrxqczcqm6xgPLFRhwt4ogoFieYhjxv IazlCopN0d8CVTY7gJlW5qbzTB2a0FCxgp5rPXCFyf8sut+x2mkp0c8AXuKWW+jZ S8FC6F0WOypeQ4HSXR65iukz7ZBsMKqdJWAilRrTJYde1qRrtVzZg9IllCbtq1DA 2mMa92BwowcWI7lIipEBBEy3HFH/lobJnDWGJ00vioZcGE4LO2dyStzUy0GtATD5 7ykb0mhjoxVqNGHUTjWYu1i8bvMY2e8SalRDFKpywTon4bzaP76uYcu43YcoocXU oFL1RX41/XSZ3hUQDB4dUyITFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmA9BPe ZjTbB6OTG4A/ftwFLP4hMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ZJn6UGHcTcoZXwYiMr3GEzsO81JSuwfYPQI041YXL7FDmGYExYNw awhv96ek+o2PQVcfyvFMPa8hATjahcMi3QQZSMN4SzfQqjTNx8EauYej1ydKc9C+ bIGNVln12KwkLgYeFJ0JaxEObdRiDaJVwvOu11P3GqIugFcd3i8n02CWxgsarA3J 2AhcXeZQjq9kxDrtPoje27CHO1co3ULeV5WlnHAWyqT1Nz/Xc9isQ7bxrhMOgDX9 9Ot3hiIxqFAwZxaPle3Hw4GUdj7TjOtprkqvQEkl2/Wc15VqU9gf43goj5qzimZ2 VD8dzHqqJc8YmtSwMZ4mECHkBvMG0tm+ -----END CERTIFICATE-----Generated at Sun Jul 20 07:45:10 2025 by rpki-client