$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: zRPKbzALlg0aQe7dT1c+kR5Vp5ZTC5BmPPKlM6D+wlI= Subject key identifier: 6D:F4:6A:DA:4E:38:EA:8E:38:5E:86:74:2B:00:22:8F:30:76:71:E6 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: 017A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: 0177 Signing time: Fri 25 Jul 2025 03:57:47 +0000 Manifest this update: Fri 25 Jul 2025 03:57:46 +0000 Manifest next update: Fri 01 Aug 2025 03:57:46 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: oWvqIjUfLWDIUU3QPcxGtw0Gb923wXVJmAQHclIQXCU=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: 5CsSLBVUqO7iYI3YRTHfpw5ufVtfRWmcgwgw7lPb8iE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 03:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 378 (0x17a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Validity Not Before: Jul 25 03:57:46 2025 GMT Not After : Aug 1 03:57:46 2025 GMT Subject: CN=688300bb-9a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:13:0c:ed:77:d8:54:ee:96:c4:a5:77:ae: b6:e8:9b:e9:ea:14:25:48:59:e2:08:0e:30:38:b1: 9c:50:2f:c9:22:27:cb:38:37:82:36:df:63:dd:8e: 9a:d9:ea:1d:65:c5:a8:e5:c0:b0:c7:3a:64:50:7b: 0c:55:87:2c:c8:fb:65:5f:18:07:39:83:c8:c6:cf: 4a:e8:06:85:f7:7c:2a:c1:ef:ef:14:12:97:3c:fa: 49:64:bd:d4:f2:86:4d:2e:e0:1d:b8:5b:37:1f:02: ed:35:d0:fd:23:dc:8c:4f:6d:da:98:24:d9:48:d8: f8:2a:67:d6:1e:9f:e0:ab:60:49:cf:ca:17:6d:0a: 10:7c:56:ac:30:d3:76:66:20:a4:3a:0e:d5:16:a1: d1:40:b4:68:f8:89:90:2d:8f:61:ba:5f:93:f7:3b: ce:a8:e5:81:b7:c6:c4:64:af:17:0a:e8:d2:e1:44: 01:f3:58:a0:9e:09:0a:43:ac:a3:39:01:f0:c8:0e: 7a:47:0f:a8:18:5d:11:4b:53:a7:4d:a7:db:52:57: 0b:78:30:01:d1:40:bf:43:e2:91:85:56:63:30:9f: 87:54:49:9b:ae:77:47:d7:c4:14:2e:54:40:0d:73: 60:84:ca:6e:be:36:36:95:75:1d:0f:63:97:4c:75: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:6A:DA:4E:38:EA:8E:38:5E:86:74:2B:00:22:8F:30:76:71:E6 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:98:b5:e8:e0:6f:5c:ef:2a:2e:85:d2:d2:f2:e1:64:fb:49: 1b:cb:33:96:7e:57:09:48:48:40:2d:53:e2:95:f9:61:b8:ee: df:23:88:ce:c5:9c:a4:2b:00:0b:e3:e5:86:f8:67:8d:d9:f0: 88:d7:9f:64:8b:89:c5:7c:af:d7:b6:78:aa:c6:19:f3:ca:a3: 42:58:a2:a6:55:5f:b8:d7:3f:48:eb:e7:3b:65:d5:9a:3b:ca: 74:77:af:54:5e:3d:11:de:94:4f:82:39:9f:e3:89:e1:f4:58: 92:c5:c0:3d:9a:da:23:c5:88:46:ad:90:cf:ab:f6:c9:0e:f0: 52:ff:e1:d3:b1:61:62:eb:9e:64:ee:de:62:67:93:dc:3e:e2: 0c:f4:6b:69:dd:d5:5e:38:eb:de:2f:6b:7f:b4:67:6f:f4:d4: 8b:85:f2:82:e2:7b:f9:de:e8:4c:4e:fe:1b:67:1d:ff:89:82: 8b:c8:eb:45:29:cc:5a:4f:b6:90:51:9d:33:fe:fe:0d:99:cd: 58:1e:00:77:95:ed:76:5e:f0:57:6b:d5:93:88:30:d9:d8:91: 17:ef:16:bc:11:91:a6:2c:5d:76:d9:a3:60:38:29:c6:c8:0a: e4:6b:84:ad:ab:64:75:e1:80:16:e3:19:5f:1e:c1:12:dd:61: f5:18:8b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjUwNzI1MDM1NzQ2WhcNMjUwODAxMDM1NzQ2WjAYMRYwFAYD VQQDEw02ODgzMDBiYi05YTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQsTDO132FTulsSld6626Jvp6hQlSFniCA4wOLGcUC/JIifLODeCNt9j3Y6a 2eodZcWo5cCwxzpkUHsMVYcsyPtlXxgHOYPIxs9K6AaF93wqwe/vFBKXPPpJZL3U 8oZNLuAduFs3HwLtNdD9I9yMT23amCTZSNj4KmfWHp/gq2BJz8oXbQoQfFasMNN2 ZiCkOg7VFqHRQLRo+ImQLY9hul+T9zvOqOWBt8bEZK8XCujS4UQB81igngkKQ6yj OQHwyA56Rw+oGF0RS1OnTafbUlcLeDAB0UC/Q+KRhVZjMJ+HVEmbrndH18QULlRA DXNghMpuvjY2lXUdD2OXTHWxRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG30atpO OOqOOF6GdCsAIo8wdnHmMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/mLXo4G9c7youhdLS8uFk+0kbyzOWflcJSEhALVPilflhuO7fI4jO xZykKwAL4+WG+GeN2fCI159ki4nFfK/XtniqxhnzyqNCWKKmVV+41z9I6+c7ZdWa O8p0d69UXj0R3pRPgjmf44nh9FiSxcA9mtojxYhGrZDPq/bJDvBS/+HTsWFi655k 7t5iZ5PcPuIM9Gtp3dVeOOveL2t/tGdv9NSLhfKC4nv53uhMTv4bZx3/iYKLyOtF KcxaT7aQUZ0z/v4Nmc1YHgB3le12XvBXa9WTiDDZ2JEX7xa8EZGmLF122aNgOCnG yArka4Stq2R14YAW4xlfHsES3WH1GIsF -----END CERTIFICATE-----Generated at Fri Jul 25 19:38:01 2025 by rpki-client