$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: 6L0Gk0QMiZSp+DkqYL1iSRzW4GFFYLeCFR3jeNByjGY= Subject key identifier: 72:00:24:E7:91:A9:98:91:58:81:A4:F3:73:80:64:A7:82:0A:9F:21 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 34B2 Signing time: Mon 30 Jun 2025 14:16:39 +0000 Manifest this update: Mon 30 Jun 2025 14:16:38 +0000 Manifest next update: Mon 07 Jul 2025 14:16:38 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: 7BFZjnXqtP/xQki0CXGztFRm6a6IWqshi+SVu1kW+yE=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Jun 30 14:16:38 2025 GMT Not After : Jul 7 14:16:38 2025 GMT Subject: CN=68629c46-2ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:92:04:a9:cc:18:2b:5c:d1:a2:87:23:7c: 5d:ce:68:16:33:30:72:07:8c:00:11:b5:bf:df:57: a9:d3:49:eb:c2:b6:9d:bf:ce:36:fa:c1:34:23:19: 72:5c:c5:86:f1:9f:5d:50:37:dc:e6:76:9b:39:1f: ef:b2:82:20:f0:82:9f:fd:bb:4f:d7:a6:b1:e8:ae: cb:f3:d2:3e:9e:56:35:5a:c5:7c:b6:f9:d2:53:bf: 0c:0d:66:1e:91:b5:41:26:6a:c4:f6:78:6d:7f:ab: 2c:6a:02:76:95:00:a5:aa:b9:e7:88:72:13:88:c8: f1:72:f9:1d:6f:23:9d:64:96:94:e3:e7:58:03:00: 36:e9:1b:b4:87:c1:3d:8f:9e:ba:2c:d1:94:c5:92: a8:ef:90:e4:91:67:0b:8a:3e:3e:aa:56:02:bc:a9: 5c:95:47:43:d1:0e:c6:a6:6f:6e:43:9d:33:fe:17: 19:90:df:d7:db:c0:c6:a9:4f:9b:97:25:02:ca:7f: 7c:df:23:9c:73:f3:f8:88:b0:c1:7e:d5:c3:c5:ef: 8b:d4:e8:a7:87:a8:ca:08:5e:f3:a3:fb:14:2e:ce: 26:3d:bb:f7:20:de:e1:20:45:f7:4b:22:06:80:b4: 79:49:69:bd:64:d0:1a:9d:c8:62:4d:db:29:f1:04: ca:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:24:E7:91:A9:98:91:58:81:A4:F3:73:80:64:A7:82:0A:9F:21 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:38:ee:28:e4:62:47:34:7e:53:e4:02:85:68:74:9e:1f:75: 27:92:09:43:28:4b:52:94:04:15:2d:79:a9:2a:36:67:e2:1e: e0:04:75:c8:27:7d:8d:cd:e1:63:b8:2b:fb:3d:92:d1:40:33: 45:af:27:d5:95:93:9c:05:6d:9b:82:44:ba:4c:1f:98:2a:39: ff:19:9d:33:36:b2:54:90:78:37:0c:df:4a:7f:d5:f9:a3:36: 43:ea:b2:d2:d4:27:a9:85:cb:9b:93:1f:47:d4:9d:37:44:2b: 0f:b3:21:38:3a:83:3c:5b:8d:71:30:3c:ec:b8:27:15:6e:3e: ae:e3:18:6f:c6:5c:09:75:29:95:5f:11:b7:fc:19:f0:64:c7: 12:1d:f8:17:39:d9:d7:03:3e:c9:d9:5e:d7:e5:72:38:f8:6b: ad:a0:65:ac:8a:ee:70:df:88:bb:e1:ab:e4:5e:04:2e:9a:50: 60:bc:f1:c1:09:50:cf:ab:d2:01:bd:91:36:68:59:28:a2:3b: ee:68:0c:80:2b:b3:73:a3:f9:b1:1c:77:e4:33:58:2c:1e:70: 99:fc:f6:50:dd:b8:f9:ca:bf:63:4e:d8:7e:1d:6c:d2:cc:64: 8e:a1:4e:f1:ff:e6:98:14:64:55:32:0b:4b:2c:49:b9:b2:d4: b1:71:cb:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwNjMwMTQxNjM4WhcNMjUwNzA3MTQxNjM4WjAYMRYwFAYD VQQDEw02ODYyOWM0Ni0yZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4yySBKnMGCtc0aKHI3xdzmgWMzByB4wAEbW/31ep00nrwradv842+sE0Ixly XMWG8Z9dUDfc5nabOR/vsoIg8IKf/btP16ax6K7L89I+nlY1WsV8tvnSU78MDWYe kbVBJmrE9nhtf6ssagJ2lQClqrnniHITiMjxcvkdbyOdZJaU4+dYAwA26Ru0h8E9 j566LNGUxZKo75DkkWcLij4+qlYCvKlclUdD0Q7Gpm9uQ50z/hcZkN/X28DGqU+b lyUCyn983yOcc/P4iLDBftXDxe+L1Oinh6jKCF7zo/sULs4mPbv3IN7hIEX3SyIG gLR5SWm9ZNAanchiTdsp8QTKgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIAJOeR qZiRWIGk83OAZKeCCp8hMB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjOO4o5GJHNH5T5AKFaHSeH3UnkglDKEtSlAQVLXmpKjZn4h7gBHXI J32NzeFjuCv7PZLRQDNFryfVlZOcBW2bgkS6TB+YKjn/GZ0zNrJUkHg3DN9Kf9X5 ozZD6rLS1Cephcubkx9H1J03RCsPsyE4OoM8W41xMDzsuCcVbj6u4xhvxlwJdSmV XxG3/BnwZMcSHfgXOdnXAz7J2V7X5XI4+GutoGWsiu5w34i74avkXgQumlBgvPHB CVDPq9IBvZE2aFkoojvuaAyAK7Nzo/mxHHfkM1gsHnCZ/PZQ3bj5yr9jTth+HWzS zGSOoU7x/+aYFGRVMgtLLEm5stSxcctb -----END CERTIFICATE-----Generated at Wed Jul 2 13:21:21 2025 by rpki-client