$ rpki-client -vvf rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft File: J7eqjlEecNijC7NtAsrwhXkMmcM.mft (raw, json) Hash identifier: CIRyADd/iC+WDn+IUYbjvCMTK+OEXS2fi8rxFoTvGkI= Subject key identifier: 62:3D:31:C7:35:EE:C5:A9:18:0D:95:5C:99:BF:AF:3B:99:92:6A:3E Authority key identifier: 27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 Certificate issuer: /CN=A914284F/serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Certificate serial: 05C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft Manifest number: 05B1 Signing time: Sun 20 Jul 2025 23:20:19 +0000 Manifest this update: Sun 20 Jul 2025 23:20:19 +0000 Manifest next update: Sun 27 Jul 2025 23:20:19 +0000 Files and hashes: 1: J7eqjlEecNijC7NtAsrwhXkMmcM.crl (hash: ZqxgXQszkl40phBs4JsN5Da2vky4hQHVR2Xu3dytPOg=) 2: C6E2CBD4558011EDA4773D7FC4F9AE02.roa (hash: ZEf3tktj8tsQa/GPBkU/T2j5p4mzyySZpNdpL6R/nPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 23:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1472 (0x5c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914284F, serialNumber=27B7AA8E511E70D8A30BB36D02CAF085790C99C3 Validity Not Before: Jul 20 23:20:19 2025 GMT Not After : Jul 27 23:20:19 2025 GMT Subject: CN=687d79b3-dc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a9:2e:b0:85:ca:44:fe:ae:79:21:74:80:72: cd:c6:be:5b:28:61:cd:c1:00:13:45:de:db:57:29: fe:2b:55:36:c1:5a:38:b3:f6:64:bb:ec:cb:c0:57: 49:df:fa:23:b3:28:cc:be:c3:16:ef:2d:04:3e:cf: c8:a3:31:b0:de:cc:e3:06:5a:a8:8a:3b:f3:35:f6: b2:02:97:25:68:a4:d5:f7:80:51:b6:eb:a9:4d:7f: 6c:41:ae:8e:bf:3d:6a:d8:47:9a:c7:56:37:8e:8a: cc:3e:f3:44:9b:61:51:d1:ad:89:21:8e:28:17:84: 25:81:7f:1f:b2:2f:ae:85:be:f9:e5:ca:9c:9c:c9: 64:ac:fd:75:71:8b:9b:5b:60:2c:81:10:19:9f:79: 7d:2e:ff:8f:7b:d7:66:26:85:30:65:e6:df:ea:8e: 0c:eb:9a:5a:8c:0d:28:ab:c8:33:48:67:41:eb:38: 06:d2:6d:b3:c2:20:b6:69:46:e7:5d:3a:19:b3:d0: 7a:ca:95:a8:58:8f:94:08:67:25:3a:20:74:f9:eb: 87:dd:2d:88:43:68:48:01:d0:46:ff:50:dc:ca:2a: 7a:c9:9a:52:6b:27:ae:79:c1:18:da:04:e6:ed:30: b0:7f:fc:3a:a8:e1:ae:da:91:0d:d4:ee:d4:3d:1a: 56:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3D:31:C7:35:EE:C5:A9:18:0D:95:5C:99:BF:AF:3B:99:92:6A:3E X509v3 Authority Key Identifier: keyid:27:B7:AA:8E:51:1E:70:D8:A3:0B:B3:6D:02:CA:F0:85:79:0C:99:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J7eqjlEecNijC7NtAsrwhXkMmcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914284F/93085C80D7AE11EBA5EB316CC4F9AE02/J7eqjlEecNijC7NtAsrwhXkMmcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c2:f2:73:60:10:dc:4b:79:ae:fd:7e:9d:d2:e0:2f:aa:df: 44:17:fb:06:9c:ca:bb:87:8b:98:3b:1c:e8:96:0f:e4:ae:14: d7:32:5e:95:4c:7d:fe:6f:a4:97:b9:66:17:1e:59:cb:eb:51: f7:0f:87:0b:41:9c:c1:c0:e8:c7:70:56:93:aa:fd:f9:20:d6: e2:c0:54:74:fd:28:75:cb:e5:e3:cc:d9:60:2c:95:fe:6c:55: 40:37:98:ce:2e:59:56:ae:c2:82:6c:f1:c6:4b:2d:53:af:e5: a2:fd:0e:bd:3c:93:c4:88:73:aa:dd:fa:e3:45:2b:06:2b:87: 55:d2:b2:72:b9:b6:88:ae:0d:62:29:b2:f2:69:63:ec:97:86: 20:a7:05:f8:f1:ba:03:f5:3e:64:8b:00:fa:ac:65:25:9d:d7: 3c:df:99:d4:cf:6a:7b:3c:75:f4:5f:2f:c5:e6:60:6a:a8:58: 2c:05:b7:a1:41:48:59:bc:50:6d:4e:7a:09:43:7b:b4:ae:5c: 11:34:bb:7b:4c:62:d3:f9:f3:ea:3c:fb:17:5e:7f:0b:bc:75: 68:89:f5:7d:0f:c2:da:06:69:da:3e:b9:b0:2d:26:e3:0b:be: 2b:37:56:5a:d5:77:36:c8:e1:f6:a5:ba:a1:73:64:49:32:61: 6b:b2:a7:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI4NEYxMTAvBgNVBAUTKDI3QjdBQThFNTExRTcwRDhBMzBCQjM2RDAyQ0FGMDg1 NzkwQzk5QzMwHhcNMjUwNzIwMjMyMDE5WhcNMjUwNzI3MjMyMDE5WjAYMRYwFAYD VQQDEw02ODdkNzliMy1kYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6kusIXKRP6ueSF0gHLNxr5bKGHNwQATRd7bVyn+K1U2wVo4s/Zku+zLwFdJ 3/ojsyjMvsMW7y0EPs/IozGw3szjBlqoijvzNfayApclaKTV94BRtuupTX9sQa6O vz1q2Eeax1Y3jorMPvNEm2FR0a2JIY4oF4QlgX8fsi+uhb755cqcnMlkrP11cYub W2AsgRAZn3l9Lv+Pe9dmJoUwZebf6o4M65pajA0oq8gzSGdB6zgG0m2zwiC2aUbn XToZs9B6ypWoWI+UCGclOiB0+euH3S2IQ2hIAdBG/1Dcyip6yZpSayeuecEY2gTm 7TCwf/w6qOGu2pEN1O7UPRpWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGI9Mcc1 7sWpGA2VXJm/rzuZkmo+MB8GA1UdIwQYMBaAFCe3qo5RHnDYowuzbQLK8IV5DJnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjg0Ri85MzA4NUM4MEQ3 QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNOaWpDN050QXNyd2hYa01t Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0o3ZXFqbEVlY05pakM3TnRBc3J3aFhrTW1jTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Mjg0Ri85MzA4NUM4MEQ3QUUxMUVCQTVFQjMxNkNDNEY5QUUwMi9KN2VxamxFZWNO aWpDN050QXNyd2hYa01tY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIwvJzYBDcS3mu/X6d0uAvqt9EF/sGnMq7h4uYOxzolg/krhTXMl6V TH3+b6SXuWYXHlnL61H3D4cLQZzBwOjHcFaTqv35INbiwFR0/Sh1y+XjzNlgLJX+ bFVAN5jOLllWrsKCbPHGSy1Tr+Wi/Q69PJPEiHOq3frjRSsGK4dV0rJyubaIrg1i KbLyaWPsl4YgpwX48boD9T5kiwD6rGUlndc835nUz2p7PHX0Xy/F5mBqqFgsBbeh QUhZvFBtTnoJQ3u0rlwRNLt7TGLT+fPqPPsXXn8LvHVoifV9D8LaBmnaPrmwLSbj C74rN1Za1Xc2yOH2pbqhc2RJMmFrsqfd -----END CERTIFICATE-----Generated at Mon Jul 21 18:20:29 2025 by rpki-client