$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: Os2S3C1BuatJP+oRrLeWvpLEwMbGzUle7r2+6h7Ahk0= Subject key identifier: 72:B4:0D:7F:EB:92:9F:12:8F:86:D0:7B:D0:B6:EE:88:A6:D1:1A:D6 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 6B Signing time: Mon 07 Jul 2025 07:19:40 +0000 Manifest this update: Mon 07 Jul 2025 07:19:39 +0000 Manifest next update: Mon 14 Jul 2025 07:19:39 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: rbDffnFABhcnGmT5dYYMxYCcsQsesoMsEO6l5UPISWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Jul 2025 07:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Jul 7 07:19:39 2025 GMT Not After : Jul 14 07:19:39 2025 GMT Subject: CN=686b750b-4015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fe:96:bf:4d:9e:64:0d:3f:a2:d0:1a:5f:86: 01:5e:5b:ff:64:5d:c5:94:8b:5a:2b:a5:47:f1:ac: 73:54:76:be:fe:96:97:ce:ac:33:8b:f0:ba:24:39: 48:2d:0b:01:a3:4e:17:34:a3:cc:59:11:8d:f3:33: 1d:06:82:4f:93:c4:b1:75:49:c1:f4:93:9e:7e:86: 81:36:ee:85:d3:7a:1a:5b:f4:85:d1:b8:09:0d:ff: 45:2d:ef:03:1d:ff:bf:91:91:24:9f:86:82:5b:51: f3:91:0b:d5:bb:de:d5:bf:8b:17:3c:43:cf:1c:38: bd:ea:37:7b:c6:08:79:b4:0a:58:c4:64:70:f7:3d: a4:d2:38:36:ce:3a:f7:a9:f5:c3:9d:30:1d:d5:0a: 92:7e:35:7c:6a:0a:be:ab:a5:8b:e1:6e:76:a1:f8: 02:8f:07:80:3e:9f:e9:37:79:35:bc:db:21:02:85: 84:61:34:e3:fa:d5:aa:ec:8a:7a:7d:0f:ae:07:66: eb:ec:e3:72:de:ed:be:ec:b1:77:2e:a0:18:e1:31: 25:95:8b:72:e8:56:a5:54:6e:25:d5:cb:43:9f:ac: 13:ce:b6:e8:1a:2d:c5:ee:18:bd:5a:cb:ef:89:26: e2:ce:8d:1b:8e:3e:d4:bc:c1:e8:05:69:4f:59:5e: 7a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B4:0D:7F:EB:92:9F:12:8F:86:D0:7B:D0:B6:EE:88:A6:D1:1A:D6 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:b5:2b:91:4d:1c:d8:fa:2c:4f:ca:7e:c7:a7:5a:7b:43:7f: d6:68:e7:63:87:a1:e5:4b:f9:d6:a3:0b:a9:d9:89:b8:56:b5: 1b:dd:ea:f4:d3:fc:45:5f:26:f7:e8:26:bf:e7:e1:25:43:4b: 6c:b5:64:ad:8f:8e:d1:d4:d8:18:db:54:6e:d8:55:31:84:6a: ed:d3:ff:5b:75:05:1f:fc:1c:22:08:59:f5:b8:d6:f6:db:b2: 7b:c1:56:8d:de:b4:7c:55:22:04:28:c4:29:f9:59:e3:df:89: 6d:f3:21:d6:c4:f9:1d:d5:e9:0a:fa:82:ac:51:f7:a0:cf:05: 1d:c3:ea:66:9a:fc:96:15:d9:46:0d:d3:32:dd:f4:14:32:69: bc:5c:fa:e6:36:3e:b4:3e:6f:b6:c0:3b:db:e1:a2:ce:ed:08: 5a:a1:7d:7f:76:ec:05:d9:99:2f:ea:a6:4a:e9:56:79:23:74: ae:10:6a:28:c5:30:8c:5a:56:0a:ca:99:20:fb:07:b9:e2:74: d8:44:25:e6:b6:96:fc:3c:15:2f:1d:f8:19:61:cb:14:3f:59: 29:0a:c6:6d:4d:11:53:6b:ff:71:d9:fc:2e:73:32:bc:56:6c: 23:f7:b7:a6:71:ec:4d:0a:77:d6:11:da:c1:a5:86:e6:2c:56: bd:4a:41:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA3MDcwNzE5MzlaFw0yNTA3MTQwNzE5MzlaMBgxFjAUBgNV BAMTDTY4NmI3NTBiLTQwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCg/pa/TZ5kDT+i0BpfhgFeW/9kXcWUi1orpUfxrHNUdr7+lpfOrDOL8LokOUgt CwGjThc0o8xZEY3zMx0Ggk+TxLF1ScH0k55+hoE27oXTehpb9IXRuAkN/0Ut7wMd /7+RkSSfhoJbUfORC9W73tW/ixc8Q88cOL3qN3vGCHm0CljEZHD3PaTSODbOOvep 9cOdMB3VCpJ+NXxqCr6rpYvhbnah+AKPB4A+n+k3eTW82yEChYRhNOP61arsinp9 D64HZuvs43Le7b7ssXcuoBjhMSWVi3LoVqVUbiXVy0OfrBPOtugaLcXuGL1ay++J JuLOjRuOPtS8wegFaU9ZXnr3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcrQNf+uS nxKPhtB70LbuiKbRGtYwHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIO1K5FNHNj6LE/KfsenWntDf9Zo52OHoeVL+dajC6nZibhWtRvd6vTT /EVfJvfoJr/n4SVDS2y1ZK2PjtHU2BjbVG7YVTGEau3T/1t1BR/8HCIIWfW41vbb snvBVo3etHxVIgQoxCn5WePfiW3zIdbE+R3V6Qr6gqxR96DPBR3D6maa/JYV2UYN 0zLd9BQyabxc+uY2PrQ+b7bAO9vhos7tCFqhfX927AXZmS/qpkrpVnkjdK4QaijF MIxaVgrKmSD7B7nidNhEJea2lvw8FS8d+BlhyxQ/WSkKxm1NEVNr/3HZ/C5zMrxW bCP3t6Zx7E0Kd9YR2sGlhuYsVr1KQdw= -----END CERTIFICATE-----Generated at Wed Jul 9 09:56:44 2025 by rpki-client