$ rpki-client -vvf rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft File: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft (raw, json) Hash identifier: rND4HexkXD0SQ2I5TDyMuZJD8bk1LCG31Dq/HgUOc5U= Subject key identifier: 05:65:E3:81:E1:F7:86:80:65:8F:72:79:99:05:81:84:7C:AB:42:79 Authority key identifier: EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 Certificate issuer: /CN=A9136D8B/serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft Manifest number: 07DE Signing time: Mon 30 Jun 2025 21:15:39 +0000 Manifest this update: Mon 30 Jun 2025 21:15:38 +0000 Manifest next update: Mon 07 Jul 2025 21:15:38 +0000 Files and hashes: 1: 7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl (hash: ZWGT63WE+tmMiDvTezhKwZ0xSdzot8jD1p/XZhGOPKo=) 2: D3EE2024F42211EA8FE7AE53C4F9AE02.roa (hash: GW9s3WIygsKZLnHwRZ6mSkc9+Me0q/KYVWFIK75BZGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136D8B, serialNumber=EF1A96D112DE1622B11C8C7E94AEB040EDD6AB00 Validity Not Before: Jun 30 21:15:38 2025 GMT Not After : Jul 7 21:15:38 2025 GMT Subject: CN=6862fe7b-c06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b0:cb:40:49:13:a1:79:00:44:51:cb:ba:7c: 13:eb:ad:8b:27:26:26:72:ef:6b:e0:d1:2b:ff:85: f6:79:88:90:3f:07:34:31:1e:57:0f:18:d0:69:42: dc:f1:2a:b8:a2:31:7c:a9:d9:e5:54:f7:7f:12:19: 08:48:c7:af:f7:97:32:f7:88:60:5e:9d:77:31:6c: d9:62:8b:cd:f8:92:46:1f:bc:c5:f4:74:85:3a:10: 43:85:51:f9:4f:e3:11:05:af:f8:ef:4a:f8:05:da: 11:9d:11:a5:f5:7d:42:0c:c5:75:89:7f:1e:51:af: a3:2f:a5:84:b5:75:20:17:3d:4a:76:c1:13:d1:a2: 04:4f:06:fa:f3:82:f9:57:f7:25:be:60:f6:5b:34: 49:29:18:6e:28:2d:e3:19:2d:fe:1e:a8:f2:e2:4b: f6:01:d5:45:b6:24:d2:71:be:d9:23:bb:3d:f9:41: f1:a7:f9:29:ba:0a:55:19:b3:35:cb:62:df:49:46: d5:22:27:d2:ac:13:48:37:ef:bc:2b:92:70:78:42: 16:96:fc:06:d8:ed:ae:64:2b:c2:86:b1:26:ee:fb: 6e:d5:89:d1:43:fb:20:7d:94:7a:7c:ee:c5:05:c3: 2d:30:e4:69:70:1f:83:a2:b5:cb:02:46:42:1a:09: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:65:E3:81:E1:F7:86:80:65:8F:72:79:99:05:81:84:7C:AB:42:79 X509v3 Authority Key Identifier: keyid:EF:1A:96:D1:12:DE:16:22:B1:1C:8C:7E:94:AE:B0:40:ED:D6:AB:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7xqW0RLeFiKxHIx-lK6wQO3WqwA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136D8B/D00AA85CF42111EA921EFB52C4F9AE02/7xqW0RLeFiKxHIx-lK6wQO3WqwA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:02:aa:ca:d1:d5:a5:6e:6e:d4:0d:82:63:3d:bc:a2:c1: 23:52:b4:e3:fd:8f:23:8b:fc:b1:99:bd:b4:ac:16:b0:27:90: b3:f7:23:d0:c0:df:b3:f3:be:8e:ce:be:26:81:3d:79:05:36: 46:93:9a:90:eb:78:e3:4f:33:94:12:60:a5:1c:3f:a3:7d:14: 80:24:02:ae:d9:d7:af:eb:1c:b8:cb:ef:fe:86:f2:c7:11:14: 8d:98:25:2a:24:8c:01:13:76:78:56:b4:be:51:bd:22:8c:36: 30:b1:46:b0:67:93:a0:6c:bc:16:76:6a:28:ca:0c:a5:2f:90: 21:5f:c3:93:56:3d:19:62:94:9a:9d:ca:25:db:8d:ec:32:44: 3d:72:6a:04:f8:d4:ef:17:d3:b1:47:f7:1c:ad:d9:c5:63:91: 7e:b6:4f:b2:fe:35:25:71:9a:98:f3:d3:7e:f3:cb:41:3f:dc: 92:38:1f:10:b8:02:d6:8e:13:fe:09:08:e4:26:78:da:65:95: 55:45:6f:89:35:87:59:ad:8d:bd:54:91:3a:6d:35:a0:d4:31: da:50:1f:a1:2f:a6:3b:d8:c8:81:82:27:e2:52:c2:e9:ad:fd: 5e:d6:5d:ca:1d:f0:f6:73:81:a7:6d:09:fb:47:b2:1e:94:b8: 8b:27:01:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZEOEIxMTAvBgNVBAUTKEVGMUE5NkQxMTJERTE2MjJCMTFDOEM3RTk0QUVCMDQw RURENkFCMDAwHhcNMjUwNjMwMjExNTM4WhcNMjUwNzA3MjExNTM4WjAYMRYwFAYD VQQDEw02ODYyZmU3Yi1jMDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrDLQEkToXkARFHLunwT662LJyYmcu9r4NEr/4X2eYiQPwc0MR5XDxjQaULc 8Sq4ojF8qdnlVPd/EhkISMev95cy94hgXp13MWzZYovN+JJGH7zF9HSFOhBDhVH5 T+MRBa/470r4BdoRnRGl9X1CDMV1iX8eUa+jL6WEtXUgFz1KdsET0aIETwb684L5 V/clvmD2WzRJKRhuKC3jGS3+Hqjy4kv2AdVFtiTScb7ZI7s9+UHxp/kpugpVGbM1 y2LfSUbVIifSrBNIN++8K5JweEIWlvwG2O2uZCvChrEm7vtu1YnRQ/sgfZR6fO7F BcMtMORpcB+DorXLAkZCGgnIgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVl44Hh 94aAZY9yeZkFgYR8q0J5MB8GA1UdIwQYMBaAFO8altES3hYisRyMfpSusEDt1qsA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkQ4Qi9EMDBBQTg1Q0Y0 MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZpS3hISXgtbEs2d1FPM1dx d0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd4cVcwUkxlRmlLeEhJeC1sSzZ3UU8zV3F3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkQ4Qi9EMDBBQTg1Q0Y0MjExMUVBOTIxRUZCNTJDNEY5QUUwMi83eHFXMFJMZUZp S3hISXgtbEs2d1FPM1dxd0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFHwKqytHVpW5u1A2CYz28osEjUrTj/Y8ji/yxmb20rBawJ5Cz9yPQ wN+z876Ozr4mgT15BTZGk5qQ63jjTzOUEmClHD+jfRSAJAKu2dev6xy4y+/+hvLH ERSNmCUqJIwBE3Z4VrS+Ub0ijDYwsUawZ5OgbLwWdmooygylL5AhX8OTVj0ZYpSa ncol243sMkQ9cmoE+NTvF9OxR/ccrdnFY5F+tk+y/jUlcZqY89N+88tBP9ySOB8Q uALWjhP+CQjkJnjaZZVVRW+JNYdZrY29VJE6bTWg1DHaUB+hL6Y72MiBgifiUsLp rf1e1l3KHfD2c4GnbQn7R7IelLiLJwEj -----END CERTIFICATE-----Generated at Tue Jul 1 19:52:51 2025 by rpki-client