$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: g9pa1qhNIdJMHc4YdNZazyMOJhbUINbf0N8DhknMKS0= Subject key identifier: 7A:2C:6C:7F:7C:03:64:FB:75:AC:FA:FD:2C:87:5B:FD:A7:22:77:12 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 04DB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 04DB Signing time: Fri 06 Jun 2025 15:28:13 +0000 Manifest this update: Fri 06 Jun 2025 15:28:12 +0000 Manifest next update: Fri 13 Jun 2025 15:28:12 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: 2sF2eRJ4E+4z8axCfr14slrCv12YLnu2k1m3cvMfqwk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 14:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1243 (0x4db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Jun 6 15:28:12 2025 GMT Not After : Jun 13 15:28:12 2025 GMT Subject: CN=6843090d-b6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:8d:63:69:fe:39:2a:7c:8f:2e:f5:dc:08: b7:d0:a4:43:a7:8e:6d:18:9d:a5:eb:91:64:10:03: e7:c9:c7:51:e0:e0:7a:aa:61:90:d6:e0:ab:fb:e2: cf:2d:4e:ee:7f:9d:fa:07:cf:5d:33:00:09:59:12: 5b:4c:ea:75:0f:2f:cb:d6:46:01:58:db:f4:19:de: 0d:45:3f:90:8d:8d:ce:05:67:4a:58:0a:e5:61:ca: 1e:b5:04:35:79:4e:3b:fb:37:6b:2a:8e:00:50:19: 97:94:b5:9f:8e:22:14:e0:d3:a3:a6:cc:c9:3e:02: 95:46:10:90:ef:d8:88:11:75:18:27:db:e4:b4:85: 95:7d:f7:0f:66:a2:67:18:3a:09:3f:43:6a:68:f9: c3:0d:22:0c:c5:8c:88:ee:88:e1:17:6c:72:f9:14: f1:46:09:b2:30:d3:19:af:68:f5:e8:76:0a:14:0b: 18:6d:d0:fb:2b:38:b8:f2:37:c8:ec:26:4c:e8:57: ea:b8:57:0d:e9:70:8d:59:ab:c5:60:0e:16:03:af: e8:a4:96:00:86:ca:ec:1f:f3:bd:dc:e0:26:f7:26: f8:08:63:2b:03:cd:f8:96:5b:c6:df:e2:0d:24:cb: bd:6f:dd:f9:aa:7d:c1:28:c6:70:24:22:15:6c:c2: 80:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2C:6C:7F:7C:03:64:FB:75:AC:FA:FD:2C:87:5B:FD:A7:22:77:12 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b2:0d:55:47:1d:29:ad:8b:18:14:b9:51:69:d8:a1:13:6f: 2e:e4:53:41:85:65:51:a3:e0:94:c4:0b:f2:1c:9a:1d:d7:7a: 18:78:21:8c:80:68:ff:e9:35:42:e1:da:0d:0d:58:11:75:74: be:ff:4c:ab:6e:17:7f:9e:bb:ab:d4:92:ae:66:f0:ce:84:9e: a5:34:d0:b3:d6:27:85:98:d0:50:0c:1a:6f:11:36:7d:dd:e8: 95:a9:cc:bb:f2:24:35:c5:94:68:eb:6e:e6:36:be:c3:23:64: b3:40:bb:31:5e:1c:85:5f:16:6a:a2:13:a3:20:60:8f:4e:b0: 8a:93:f2:e7:c0:97:01:68:83:97:35:9f:ed:7f:e8:64:b8:8b: 80:9f:d4:ee:b2:3e:83:f2:86:7e:05:24:4b:15:38:4c:e9:09: aa:aa:55:1c:80:68:3d:0b:37:be:f1:9b:1b:72:09:fa:dc:c3: 82:12:a7:b0:f2:3e:67:ec:1b:32:7a:74:20:98:73:8d:bf:31: 06:4c:8e:df:32:e8:6c:e1:e1:27:5d:68:32:25:d6:58:b2:ff: 6c:82:0b:9e:f0:c2:e8:f2:f4:53:a5:de:de:69:e7:07:b5:9b: 7b:ba:e6:c6:94:c8:46:5e:e1:74:44:c3:1b:97:94:0a:5b:fd: 17:7d:d3:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUwNjA2MTUyODEyWhcNMjUwNjEzMTUyODEyWjAYMRYwFAYD VQQDEw02ODQzMDkwZC1iNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIiNY2n+OSp8jy713Ai30KRDp45tGJ2l65FkEAPnycdR4OB6qmGQ1uCr++LP LU7uf536B89dMwAJWRJbTOp1Dy/L1kYBWNv0Gd4NRT+QjY3OBWdKWArlYcoetQQ1 eU47+zdrKo4AUBmXlLWfjiIU4NOjpszJPgKVRhCQ79iIEXUYJ9vktIWVffcPZqJn GDoJP0NqaPnDDSIMxYyI7ojhF2xy+RTxRgmyMNMZr2j16HYKFAsYbdD7Kzi48jfI 7CZM6FfquFcN6XCNWavFYA4WA6/opJYAhsrsH/O93OAm9yb4CGMrA834llvG3+IN JMu9b935qn3BKMZwJCIVbMKA/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHosbH98 A2T7daz6/SyHW/2nIncSMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfsg1VRx0prYsYFLlRadihE28u5FNBhWVRo+CUxAvyHJod13oYeCGM gGj/6TVC4doNDVgRdXS+/0yrbhd/nrur1JKuZvDOhJ6lNNCz1ieFmNBQDBpvETZ9 3eiVqcy78iQ1xZRo627mNr7DI2SzQLsxXhyFXxZqohOjIGCPTrCKk/LnwJcBaIOX NZ/tf+hkuIuAn9Tusj6D8oZ+BSRLFThM6QmqqlUcgGg9Cze+8Zsbcgn63MOCEqew 8j5n7BsyenQgmHONvzEGTI7fMuhs4eEnXWgyJdZYsv9sggue8MLo8vRTpd7eaecH tZt7uubGlMhGXuF0RMMbl5QKW/0XfdPq -----END CERTIFICATE-----Generated at Fri Jun 6 16:56:28 2025 by rpki-client