$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft File: B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json) Hash identifier: DSmbKHdez87wmVlVl2pPxqISBT4qt38vLd/1aUxbVno= Subject key identifier: B3:35:6B:0D:9B:85:2D:D4:C3:A0:6E:E9:4D:75:9B:EE:58:63:78:DA Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 Certificate issuer: /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft Manifest number: 85 Signing time: Tue 01 Jul 2025 07:18:08 +0000 Manifest this update: Tue 01 Jul 2025 07:18:07 +0000 Manifest next update: Tue 08 Jul 2025 07:18:07 +0000 Files and hashes: 1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: HzyE9KSa6w+Z3WgXrJOuH6NsGWlInsfJCCAB9Fg1HAE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818 Validity Not Before: Jul 1 07:18:07 2025 GMT Not After : Jul 8 07:18:07 2025 GMT Subject: CN=68638baf-e13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d8:49:44:01:a9:b5:ce:c1:c9:b8:e1:97:97: bd:19:ad:79:7e:75:61:7c:9d:93:a3:a8:27:b0:a0: 40:d8:0b:8d:35:d3:e9:b8:7a:77:b3:73:33:ee:54: 06:1b:af:b2:88:f7:05:0d:67:8c:39:41:7a:e9:0e: fe:88:7b:db:d8:da:75:0d:66:85:9b:ce:a2:f2:0a: f8:a3:7e:a7:ae:bc:49:87:ad:06:5d:1a:24:81:f9: fe:00:6f:b6:33:0b:35:c8:e5:27:96:19:5d:26:b4: 37:2a:df:63:2e:c7:8f:11:96:63:86:fb:d2:a0:4c: 01:71:f4:4e:4a:a7:90:13:83:17:86:65:f5:58:64: 24:2d:2d:eb:27:2e:94:26:04:66:46:ba:4c:e0:0d: 2b:64:12:65:5c:f1:7a:1f:47:ca:fb:d4:72:3f:e2: b7:81:e5:37:19:e4:62:5d:c5:28:06:36:63:ad:84: 65:40:52:7e:b2:b7:d9:07:19:a1:d1:79:5c:45:f7: 3d:dd:24:12:d6:bf:c8:77:a2:39:77:de:14:7e:a1: 83:99:db:bf:b4:71:fa:57:37:d3:56:0c:b0:87:77: 71:ad:c8:08:43:5e:2b:39:2a:a0:e7:2c:07:c2:b7: ef:b2:02:d3:3c:b8:69:e4:a0:c0:49:bd:3f:ce:d7: c2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:35:6B:0D:9B:85:2D:D4:C3:A0:6E:E9:4D:75:9B:EE:58:63:78:DA X509v3 Authority Key Identifier: keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5d:4d:c6:7b:5f:b5:f1:78:49:24:37:6f:69:45:8c:bf:0e: 45:d4:b2:83:28:3e:54:55:8e:65:a4:89:cf:d8:3e:f0:98:82: c5:fe:a0:4b:51:07:cb:2d:27:d2:50:60:9e:b9:78:7f:2a:70: a4:d5:1a:46:68:fd:87:4a:91:e7:7d:50:fc:e3:52:3d:8a:f2: cd:e3:4d:d1:63:f0:a0:06:40:48:98:07:92:7e:bd:09:1d:9d: 95:34:9f:d6:c9:ce:7e:e2:09:e3:2c:88:98:cd:5d:14:c6:dd: 89:37:8e:4e:9e:a6:a8:dd:7a:8e:89:50:4f:7e:21:5d:47:fc: c9:e5:f6:e3:84:b5:11:ad:34:89:da:c1:ec:07:4d:ce:d3:f0: cb:04:8f:f4:ca:7c:55:51:44:5e:62:2e:43:bf:8a:cc:d4:55: f4:54:d5:f0:c1:5a:10:29:39:11:89:80:42:fc:9d:5d:1f:87: 01:ec:4c:0e:10:b7:4a:02:09:63:f3:16:08:09:4d:6f:b1:41: 55:b7:34:a9:cc:50:34:b0:6b:29:d0:88:4f:ec:19:38:c2:e1: b2:9b:75:97:b3:d5:8c:ad:57:7a:06:00:eb:f9:40:f0:20:bc: 92:73:2c:34:f3:83:ad:30:5f:ba:37:ca:ee:5a:df:44:93:ac: b3:4f:b3:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUNCMDUxMTAvBgNVBAUTKDA3QjI1RjdFNjVDQjYyNzEwOEIwRDk0QzE4RjdGNTc5 RDMzNDc4MTgwHhcNMjUwNzAxMDcxODA3WhcNMjUwNzA4MDcxODA3WjAYMRYwFAYD VQQDEw02ODYzOGJhZi1lMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9hJRAGptc7Bybjhl5e9Ga15fnVhfJ2To6gnsKBA2AuNNdPpuHp3s3Mz7lQG G6+yiPcFDWeMOUF66Q7+iHvb2Np1DWaFm86i8gr4o36nrrxJh60GXRokgfn+AG+2 Mws1yOUnlhldJrQ3Kt9jLsePEZZjhvvSoEwBcfROSqeQE4MXhmX1WGQkLS3rJy6U JgRmRrpM4A0rZBJlXPF6H0fK+9RyP+K3geU3GeRiXcUoBjZjrYRlQFJ+srfZBxmh 0XlcRfc93SQS1r/Id6I5d94UfqGDmdu/tHH6VzfTVgywh3dxrcgIQ14rOSqg5ywH wrfvsgLTPLhp5KDASb0/ztfCIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM1aw2b hS3Uw6Bu6U11m+5YY3jaMB8GA1UdIwQYMBaAFAeyX35ly2JxCLDZTBj39XnTNHgY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQ0IwNS9GQTUyREVDMjhB OUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFluRUlzTmxNR1BmMWVkTTBl QmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3SmZmbVhMWW5FSXNObE1HUGYxZWRNMGVCZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Q0IwNS9GQTUyREVDMjhBOUExMUVGQjhBQTU2NDhDNEY5QUUwMi9CN0pmZm1YTFlu RUlzTmxNR1BmMWVkTTBlQmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuXU3Ge1+18XhJJDdvaUWMvw5F1LKDKD5UVY5lpInP2D7wmILF/qBL UQfLLSfSUGCeuXh/KnCk1RpGaP2HSpHnfVD841I9ivLN403RY/CgBkBImAeSfr0J HZ2VNJ/Wyc5+4gnjLIiYzV0Uxt2JN45Onqao3XqOiVBPfiFdR/zJ5fbjhLURrTSJ 2sHsB03O0/DLBI/0ynxVUUReYi5Dv4rM1FX0VNXwwVoQKTkRiYBC/J1dH4cB7EwO ELdKAglj8xYICU1vsUFVtzSpzFA0sGsp0IhP7Bk4wuGym3WXs9WMrVd6BgDr+UDw ILyScyw084OtMF+6N8ruWt9Ek6yzT7Px -----END CERTIFICATE-----Generated at Tue Jul 1 19:12:27 2025 by rpki-client