$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: BxyaaOHMKN2keb4K6SBwCfrFqsaSeQKI9OKbjNuhtxY= Subject key identifier: 3F:83:EA:F2:3E:EE:5B:F8:46:27:49:9A:84:C5:16:CC:5E:D3:93:5A Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0353 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 034B Signing time: Mon 21 Jul 2025 01:18:07 +0000 Manifest this update: Mon 21 Jul 2025 01:18:07 +0000 Manifest next update: Mon 28 Jul 2025 01:18:07 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: TlUQa/mTsF7judeoeeJOk+YS5vzG8uTBKGp8/GIgWrU=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 01:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 851 (0x353) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Jul 21 01:18:07 2025 GMT Not After : Jul 28 01:18:07 2025 GMT Subject: CN=687d954f-5fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:83:d1:60:ad:11:5c:f9:5a:70:8e:48:72:f6: f3:de:d8:e1:fb:06:79:76:47:5d:88:ce:df:64:5a: 54:43:32:71:63:60:9d:44:aa:5f:87:c5:1a:a6:8d: da:f1:47:24:1a:68:45:87:a0:94:e9:99:6f:da:30: c5:39:06:ba:58:a4:2a:eb:34:02:aa:fa:f0:5b:47: 54:a6:fc:72:18:84:11:e5:90:4e:4a:87:4d:05:00: e0:e7:d6:2b:14:12:a4:60:69:e7:bc:b4:51:f3:bb: ee:54:f0:94:a8:b1:6a:02:7b:3c:fe:23:47:e7:a1: e6:a7:ec:ec:bf:49:f2:5c:5c:e1:cf:5b:6c:60:40: eb:52:de:7e:bc:2a:14:18:0f:e8:bd:cc:9a:fb:c6: d7:42:c9:3f:7c:d3:48:00:ae:bb:44:eb:78:57:d3: 0f:72:27:6a:28:f6:96:4c:4f:6a:57:c6:95:c4:82: fe:2e:c5:1f:fb:bb:a7:ec:68:c8:1d:b8:02:2f:87: b6:b7:1a:2d:63:64:95:aa:ae:28:01:e0:d8:42:48: 35:0e:09:61:b1:2e:c0:e1:fc:b7:02:6e:39:61:f5: 93:a4:d0:b8:1b:b1:d2:9d:a0:30:23:e2:99:13:17: 82:1b:cb:21:75:7c:b6:81:28:b4:33:55:12:ba:4a: be:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:83:EA:F2:3E:EE:5B:F8:46:27:49:9A:84:C5:16:CC:5E:D3:93:5A X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:1e:29:90:2c:6b:b2:82:84:af:76:99:d2:c1:0c:4e:95:c6: 0f:00:ba:97:19:a4:e1:98:3c:a2:6f:29:e0:11:e8:74:6b:c8: 6d:d9:ea:ca:a0:90:c1:bd:28:32:28:ff:cf:75:3f:78:97:75: da:40:16:4c:d4:ae:17:73:09:79:63:40:9f:5f:e0:e1:da:d9: 8e:c0:0a:d9:7d:98:a5:9e:34:35:dd:3f:2b:35:ed:6b:1e:4d: 5d:09:67:e3:a6:23:1c:7e:19:1e:e4:68:24:75:94:64:5b:e9: df:e1:e8:c0:da:22:ee:53:9c:5b:d5:2e:2b:57:31:33:eb:0b: 4d:fc:46:c3:be:c3:18:e1:24:44:c2:8f:e6:fd:2b:a5:eb:e4: dd:30:35:7e:6a:c8:36:50:b4:ba:90:69:bc:63:91:54:43:0b: 99:c9:78:8f:8b:4c:99:33:0f:a7:18:c6:16:4c:3b:47:76:bd: 7f:bd:9b:94:64:99:4d:da:0b:99:6e:0c:ed:41:f7:63:6f:06: 95:46:c5:25:b0:31:45:a8:39:92:84:45:6d:de:95:ee:47:ee: 5b:75:b2:27:af:f5:10:5f:fa:6c:a5:94:2e:0a:3a:ef:65:f0: 4b:dd:a5:1c:df:9c:fc:cc:a8:6d:49:37:6b:2a:28:a3:78:48: 2a:4e:48:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwNzIxMDExODA3WhcNMjUwNzI4MDExODA3WjAYMRYwFAYD VQQDEw02ODdkOTU0Zi01ZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1IPRYK0RXPlacI5Icvbz3tjh+wZ5dkddiM7fZFpUQzJxY2CdRKpfh8Uapo3a 8UckGmhFh6CU6Zlv2jDFOQa6WKQq6zQCqvrwW0dUpvxyGIQR5ZBOSodNBQDg59Yr FBKkYGnnvLRR87vuVPCUqLFqAns8/iNH56Hmp+zsv0nyXFzhz1tsYEDrUt5+vCoU GA/ovcya+8bXQsk/fNNIAK67ROt4V9MPcidqKPaWTE9qV8aVxIL+LsUf+7un7GjI HbgCL4e2txotY2SVqq4oAeDYQkg1DglhsS7A4fy3Am45YfWTpNC4G7HSnaAwI+KZ ExeCG8shdXy2gSi0M1USukq+ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+D6vI+ 7lv4RidJmoTFFsxe05NaMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxHimQLGuygoSvdpnSwQxOlcYPALqXGaThmDyibyngEeh0a8ht2erK oJDBvSgyKP/PdT94l3XaQBZM1K4Xcwl5Y0CfX+Dh2tmOwArZfZilnjQ13T8rNe1r Hk1dCWfjpiMcfhke5GgkdZRkW+nf4ejA2iLuU5xb1S4rVzEz6wtN/EbDvsMY4SRE wo/m/Sul6+TdMDV+asg2ULS6kGm8Y5FUQwuZyXiPi0yZMw+nGMYWTDtHdr1/vZuU ZJlN2guZbgztQfdjbwaVRsUlsDFFqDmShEVt3pXuR+5bdbInr/UQX/pspZQuCjrv ZfBL3aUc35z8zKhtSTdrKiijeEgqTkiW -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:23 2025 by rpki-client