$ rpki-client -vvf rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft File: c7-jegclQ-L9dR5OBQw603ABDFk.mft (raw, json) Hash identifier: 6DPt/IR7Ow8E+axtx9DSxImcGIAMLxblo7K2C+8IMwE= Subject key identifier: CA:C9:D6:3B:58:E7:5A:8F:93:55:9C:2B:02:54:2D:E8:40:BA:E6:62 Authority key identifier: 73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 Certificate issuer: /CN=A9195AA2/serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Certificate serial: 07E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft Manifest number: 1419 Signing time: Tue 10 Jun 2025 18:23:26 +0000 Manifest this update: Tue 10 Jun 2025 18:23:26 +0000 Manifest next update: Tue 17 Jun 2025 18:23:26 +0000 Files and hashes: 1: c7-jegclQ-L9dR5OBQw603ABDFk.crl (hash: ZahWD+NDTubPYC+PT9aebr7ihvq2zhrZMnBlrKF11og=) 2: 9839F630765111EDA744AE3AC4F9AE02.roa (hash: wVNJXIBMdOA17Qx14FaFmrSL3yk1+Qgxj7UVSyMJrHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2025 (0x7e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195AA2, serialNumber=73BFA37A072543E2FD751E4E050C3AD370010C59 Validity Not Before: Jun 10 18:23:26 2025 GMT Not After : Jun 17 18:23:26 2025 GMT Subject: CN=6848781e-edb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:c9:2e:69:8b:15:8d:e0:13:cd:dd:d4:24: 33:e2:9d:ff:d7:c5:6a:1e:b9:09:72:d1:66:c3:23: 64:f4:f4:4d:c7:28:d6:65:ef:ef:fc:4a:fc:f2:fb: 98:ab:0a:3b:55:66:d1:fc:e4:f9:9e:b7:69:14:72: d5:28:e3:83:9f:c8:fb:c0:16:1d:07:97:0d:27:e1: 70:d8:98:74:03:b4:ab:55:c9:30:a5:02:b0:64:fc: ff:05:cb:c9:cb:74:58:b5:1e:10:b5:08:84:0e:1e: 19:68:77:03:74:c2:5b:5c:06:28:8e:30:5b:bb:ed: e9:e9:6a:83:ec:ba:d6:99:ee:ef:2b:e0:7a:b1:37: c6:6d:bf:66:cf:cb:79:57:90:47:6e:ae:03:dd:90: 73:dc:6c:de:46:a2:e9:99:15:2f:4e:dd:6e:cf:6a: ce:2a:5a:63:e2:82:59:05:c6:8e:a0:a5:63:6e:f9: 45:02:a0:5a:3c:4d:d4:b0:ae:9a:c0:42:03:2d:e8: 68:d3:ed:7f:c2:9d:94:ce:61:c9:77:d5:02:e4:f2: 2f:a9:4d:4f:88:c9:f2:23:d6:1c:a0:89:65:77:04: 9b:48:a0:94:91:c7:56:84:ad:44:1d:a1:ee:2a:9f: fa:9a:2b:e8:79:8b:3a:e1:03:40:f6:73:d9:ef:45: 25:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C9:D6:3B:58:E7:5A:8F:93:55:9C:2B:02:54:2D:E8:40:BA:E6:62 X509v3 Authority Key Identifier: keyid:73:BF:A3:7A:07:25:43:E2:FD:75:1E:4E:05:0C:3A:D3:70:01:0C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7-jegclQ-L9dR5OBQw603ABDFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195AA2/1FE357D406C511EA888ED919C4F9AE02/c7-jegclQ-L9dR5OBQw603ABDFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:32:5d:d2:e7:de:cb:9e:09:b5:87:04:cf:30:2e:7b:d3:8a: 3d:0f:97:24:4e:2f:66:d0:69:a1:79:17:ec:e9:39:df:45:f4: ac:e6:6c:44:11:f7:2f:78:a0:ac:b1:2e:b7:cc:0a:0d:9c:a4: 53:a0:38:88:1c:9a:a4:b5:e1:74:3f:53:0b:c3:53:41:11:12: 51:3c:07:33:1d:d6:00:f4:28:19:7e:1e:fe:18:e0:d3:eb:ae: ea:a3:80:5e:68:74:5c:2c:3c:0e:fc:f8:70:c6:5f:23:d9:1c: d8:60:98:23:3b:23:d9:6e:0f:f5:27:46:cf:76:17:16:2e:af: bb:32:93:5b:ed:bf:01:c3:19:4b:39:64:76:9c:91:1f:b6:cb: 03:51:21:e0:2d:e7:be:ab:92:43:16:59:4c:7e:e6:bd:b0:69: 9a:d0:44:38:b8:d3:c8:74:bd:c6:c8:b7:d5:b6:77:e9:f2:3d: c8:10:d5:e2:fd:4b:9b:20:e4:53:98:0e:6a:dd:4d:4c:37:60: 0f:2a:a6:0a:af:a5:38:76:9b:31:62:6e:e8:5f:0f:cb:66:95: 7f:ee:5b:60:af:dc:b3:92:4b:e0:6b:9a:fb:90:c5:a3:54:b5: 6c:14:c9:00:05:6e:71:6f:e7:fb:12:0a:3b:28:01:68:15:3d: 9e:a7:0b:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVBQTIxMTAvBgNVBAUTKDczQkZBMzdBMDcyNTQzRTJGRDc1MUU0RTA1MEMzQUQz NzAwMTBDNTkwHhcNMjUwNjEwMTgyMzI2WhcNMjUwNjE3MTgyMzI2WjAYMRYwFAYD VQQDEw02ODQ4NzgxZS1lZGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvyDJLmmLFY3gE83d1CQz4p3/18VqHrkJctFmwyNk9PRNxyjWZe/v/Er88vuY qwo7VWbR/OT5nrdpFHLVKOODn8j7wBYdB5cNJ+Fw2Jh0A7SrVckwpQKwZPz/BcvJ y3RYtR4QtQiEDh4ZaHcDdMJbXAYojjBbu+3p6WqD7LrWme7vK+B6sTfGbb9mz8t5 V5BHbq4D3ZBz3GzeRqLpmRUvTt1uz2rOKlpj4oJZBcaOoKVjbvlFAqBaPE3UsK6a wEIDLeho0+1/wp2UzmHJd9UC5PIvqU1PiMnyI9YcoIlldwSbSKCUkcdWhK1EHaHu Kp/6mivoeYs64QNA9nPZ70Ul4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrJ1jtY 51qPk1WcKwJULehAuuZiMB8GA1UdIwQYMBaAFHO/o3oHJUPi/XUeTgUMOtNwAQxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUFBMi8xRkUzNTdENDA2 QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEtTDlkUjVPQlF3NjAzQUJE RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3LWplZ2NsUS1MOWRSNU9CUXc2MDNBQkRGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUFBMi8xRkUzNTdENDA2QzUxMUVBODg4RUQ5MTlDNEY5QUUwMi9jNy1qZWdjbFEt TDlkUjVPQlF3NjAzQUJERmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiMl3S597Lngm1hwTPMC5704o9D5ckTi9m0GmheRfs6TnfRfSs5mxE EfcveKCssS63zAoNnKRToDiIHJqkteF0P1MLw1NBERJRPAczHdYA9CgZfh7+GODT 667qo4BeaHRcLDwO/Phwxl8j2RzYYJgjOyPZbg/1J0bPdhcWLq+7MpNb7b8BwxlL OWR2nJEftssDUSHgLee+q5JDFllMfua9sGma0EQ4uNPIdL3GyLfVtnfp8j3IENXi /UubIORTmA5q3U1MN2APKqYKr6U4dpsxYm7oXw/LZpV/7ltgr9yzkkvga5r7kMWj VLVsFMkABW5xb+f7Ego7KAFoFT2epwvH -----END CERTIFICATE-----Generated at Wed Jun 11 20:23:54 2025 by rpki-client