$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: lEYjADeXMaMhQ8mjAnguWLETeVsBRG+3ftvjHdPxuVU= Subject key identifier: B8:C4:50:02:3B:26:BC:7F:04:78:AE:F9:D2:A2:EB:77:BC:53:E6:A6 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 59 Signing time: Thu 12 Jun 2025 14:27:16 +0000 Manifest this update: Thu 12 Jun 2025 14:27:16 +0000 Manifest next update: Thu 19 Jun 2025 14:27:16 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: OCww4pGl0c2Sua/mxxTCjpXWRLAx39vyGvlRFUmht4w=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: aHRMsUiiCZcaoYDZ7FKWAlCPT4264RLq5QWpPmMZea0=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: GDTBPp4WE9Ezmla7awNs0CkIUNNSTnoRfm7f06nojtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:27:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Jun 12 14:27:16 2025 GMT Not After : Jun 19 14:27:16 2025 GMT Subject: CN=684ae3c4-83a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:74:a3:0e:52:07:db:9d:b1:0a:37:31:45:b5: e9:89:de:96:d8:66:36:78:85:20:fa:da:8e:77:fc: b4:ef:22:93:e9:3d:e9:56:c8:92:56:e6:d6:eb:db: fd:39:76:8c:5b:43:30:d6:9d:54:29:16:84:89:b8: 57:81:eb:c4:ea:2c:05:85:aa:e1:7e:55:80:83:44: 09:27:83:4a:4f:67:de:91:b8:86:f1:4c:57:13:96: cb:5c:c1:c8:41:36:92:28:ce:43:98:8d:ab:68:1a: 8d:85:25:01:3f:4e:71:e9:e6:d7:c6:1c:cd:1c:8b: 2e:cc:c3:0c:45:49:88:8b:88:42:f0:83:f4:1b:14: 92:e8:1c:84:5b:81:2d:19:1e:fb:ab:45:91:2f:e6: f5:92:2f:e9:6b:c8:57:28:09:8d:fd:a7:7b:df:1e: ac:a1:2c:11:6a:14:19:9b:00:a8:6f:5e:91:d4:31: 13:a2:63:6e:02:b2:b7:f2:a3:e9:34:18:80:0e:8c: ac:0e:ad:1a:3d:06:23:dc:1a:07:c3:2f:a5:05:5e: 4d:8f:ed:2f:51:b7:49:32:48:6e:be:14:99:35:a5: e1:e4:f5:79:9f:6d:77:28:82:3c:3b:fc:7a:df:84: 04:10:e6:81:9b:d6:15:47:8d:3c:94:d7:e2:73:84: c5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C4:50:02:3B:26:BC:7F:04:78:AE:F9:D2:A2:EB:77:BC:53:E6:A6 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:8b:54:b2:6e:26:05:5d:7a:90:c0:e7:da:9a:00:ad:c1:cf: 3f:85:ba:55:94:74:bf:4f:e3:4d:d8:bc:10:19:75:cd:7f:8c: e6:75:74:28:39:da:d6:ab:22:35:bd:0b:4c:57:f5:c8:b5:97: b4:c9:75:b9:1e:90:3b:96:6c:a5:56:a7:27:57:c5:44:7d:d6: a7:5b:e3:2a:1e:1c:6d:bb:6a:42:a4:71:c4:56:f3:e5:f9:cd: ca:d7:12:7a:3a:ae:7b:70:e5:fe:ca:de:96:c4:8b:09:a8:67: dc:f5:2f:07:8e:97:d2:74:6b:5d:4a:8b:0d:77:2c:d6:3c:01: 07:bd:5b:0a:3a:c7:72:4d:9b:b2:6e:60:cc:43:3e:83:67:f3: d5:56:c3:35:d3:2a:a3:83:44:90:ce:bc:ad:95:08:92:54:04: 4d:7a:c3:59:45:4f:cd:93:6b:82:57:fc:88:bb:ed:46:55:dd: 72:98:37:bc:dd:07:a5:59:97:de:56:56:b6:cc:b4:be:62:98: 03:f2:31:1a:30:7d:ea:d4:aa:c7:4d:27:14:cb:e9:13:a1:fb: ef:7a:40:b1:b0:16:36:66:8d:c0:b0:69:fb:cb:de:38:68:c8: 4d:fe:a4:b1:19:5e:2e:58:61:bb:c0:7a:a5:69:87:b1:b9:36: 9a:47:1a:53 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MTQyQzExMC8GA1UEBRMoRUMwMkNEMDZCNzQ3Mzc4QjJDMUNDNUEyMjFFNkUwODY2 MURBODIyNTAeFw0yNTA2MTIxNDI3MTZaFw0yNTA2MTkxNDI3MTZaMBgxFjAUBgNV BAMTDTY4NGFlM2M0LTgzYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrdKMOUgfbnbEKNzFFtemJ3pbYZjZ4hSD62o53/LTvIpPpPelWyJJW5tbr2/05 doxbQzDWnVQpFoSJuFeB68TqLAWFquF+VYCDRAkng0pPZ96RuIbxTFcTlstcwchB NpIozkOYjatoGo2FJQE/TnHp5tfGHM0ciy7MwwxFSYiLiELwg/QbFJLoHIRbgS0Z HvurRZEv5vWSL+lryFcoCY39p3vfHqyhLBFqFBmbAKhvXpHUMROiY24Csrfyo+k0 GIAOjKwOrRo9BiPcGgfDL6UFXk2P7S9Rt0kySG6+FJk1peHk9XmfbXcogjw7/Hrf hAQQ5oGb1hVHjTyU1+JzhMWBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuMRQAjsm vH8EeK750qLrd7xT5qYwHwYDVR0jBBgwFoAU7ALNBrdHN4ssHMWiIebghmHagiUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxNDJDLzJDMkY2RTUwQ0VF OTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdp VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvN0FMTkJyZEhONHNzSE1XaUllYmdobUhhZ2lVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIx NDJDLzJDMkY2RTUwQ0VFOTExRUZCREZEM0E2N0M0RjlBRTAyLzdBTE5CcmRITjRz c0hNV2lJZWJnaG1IYWdpVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGmLVLJuJgVdepDA59qaAK3Bzz+FulWUdL9P403YvBAZdc1/jOZ1dCg5 2tarIjW9C0xX9ci1l7TJdbkekDuWbKVWpydXxUR91qdb4yoeHG27akKkccRW8+X5 zcrXEno6rntw5f7K3pbEiwmoZ9z1LweOl9J0a11Kiw13LNY8AQe9Wwo6x3JNm7Ju YMxDPoNn89VWwzXTKqODRJDOvK2VCJJUBE16w1lFT82Ta4JX/Ii77UZV3XKYN7zd B6VZl95WVrbMtL5imAPyMRowferUqsdNJxTL6ROh++96QLGwFjZmjcCwafvL3jho yE3+pLEZXi5YYbvAeqVph7G5NppHGlM= -----END CERTIFICATE-----Generated at Fri Jun 13 07:42:21 2025 by rpki-client