$ rpki-client -vvf rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft File: 7eL0zENHKMeciTkUFPbuA_tBaIw.mft (raw, json) Hash identifier: UIgK1IaaHP+EVUpRWp/UULmrMVKf1mdE5q3a0V6kMk4= Subject key identifier: E4:BC:87:25:92:CB:5D:35:21:7E:E4:99:DF:6D:D2:88:FA:DF:6C:5C Authority key identifier: ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C Certificate issuer: /CN=A912294F/serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft Manifest number: 016C Signing time: Sat 23 Aug 2025 04:02:07 +0000 Manifest this update: Sat 23 Aug 2025 04:02:06 +0000 Manifest next update: Sat 30 Aug 2025 04:02:06 +0000 Files and hashes: 1: 7eL0zENHKMeciTkUFPbuA_tBaIw.crl (hash: qNHSaB7d3Xt4wLUcEB1iQNHeRaMxNwuODQqMi0YlCsg=) 2: 099FC48C854911EF8C3F5275C4F9AE02.roa (hash: 1Y1b/QsKKP8Hjc1I0M3GlUj53Sw/Eb4ibtuIxI0mlJE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912294F, serialNumber=EDE2F4CC434728C79C89391414F6EE03FB41688C Validity Not Before: Aug 23 04:02:06 2025 GMT Not After : Aug 30 04:02:06 2025 GMT Subject: CN=68a93d3f-0dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:78:ad:c3:b2:fa:e5:98:d8:84:53:f6:0b:cc: 4a:b4:51:e6:16:1d:e1:7f:f0:04:bb:89:0b:71:ec: 89:28:f8:41:45:e2:23:10:93:58:be:58:70:05:ef: 90:12:11:c2:a3:9d:2e:c4:10:df:50:b0:28:f8:76: fa:9d:95:0c:18:61:6f:89:e3:59:54:e6:91:47:6a: 32:5a:cf:cc:c3:d2:f2:19:72:c3:52:e3:2e:a5:ee: 7d:9f:b7:08:bc:4f:a6:03:09:43:f2:aa:26:b1:63: a1:e7:72:3d:f7:e5:14:99:9a:2b:fe:5b:55:52:52: 4d:b3:b5:a0:23:e1:d7:ad:6f:f8:5c:b9:a8:6b:22: 17:23:10:c7:ce:0a:a6:5b:61:db:a6:57:e5:0a:52: 5b:78:67:cd:02:f2:c9:1d:ca:71:bc:71:de:b2:8f: f0:20:c2:b1:82:3c:75:ae:24:96:34:7b:7d:1c:12: 0c:73:9f:de:ed:34:df:68:9c:c8:c8:90:0c:a8:3b: 0e:c7:38:89:16:fd:b6:fe:bf:68:b1:a8:bb:e5:55: 61:2d:16:c4:21:fc:9f:94:7a:24:20:a7:6c:5a:c3: 95:93:18:48:45:5c:90:b1:2f:f9:7d:83:59:cf:17: db:9b:b5:8a:ff:0f:3f:43:18:83:d7:d6:83:d1:0b: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:BC:87:25:92:CB:5D:35:21:7E:E4:99:DF:6D:D2:88:FA:DF:6C:5C X509v3 Authority Key Identifier: keyid:ED:E2:F4:CC:43:47:28:C7:9C:89:39:14:14:F6:EE:03:FB:41:68:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7eL0zENHKMeciTkUFPbuA_tBaIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912294F/C989067257BA11EEA59D5A84C4F9AE02/7eL0zENHKMeciTkUFPbuA_tBaIw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:c5:56:14:35:a2:52:cd:1d:47:62:4b:00:d9:1c:4f:69: 6a:1e:f2:5d:cf:40:77:9c:93:a1:dd:7e:a7:50:34:c6:8d:bc: bc:1a:77:88:54:c5:94:f1:56:e1:f5:16:03:00:40:4a:a4:86: 94:6b:ab:41:41:24:d4:e8:04:83:95:1d:10:be:8f:f6:4b:2c: 29:66:2d:dd:a1:93:ff:cb:ae:2d:a8:4d:88:6e:a9:b3:61:58: 24:c6:32:ba:2f:e0:b4:15:4a:83:5e:f8:aa:fc:fb:6d:6b:47: df:5a:40:03:f2:73:37:f5:79:67:4d:9c:a7:7c:f8:b3:44:b0: 7a:21:37:f0:d7:96:b6:43:7b:26:e5:d8:f8:41:10:a2:2b:14: bb:c2:19:e2:ba:97:e0:9e:93:b1:a5:29:09:65:3b:71:9c:ce: ff:3d:9f:a5:3f:4d:ee:c1:c1:a6:db:bf:b8:2a:00:62:4e:f3: 21:73:d6:e5:65:93:15:8b:ff:41:23:38:cc:9a:e0:d6:91:94: 40:05:f5:a0:ea:6b:cf:2b:f1:b9:89:7b:d4:95:0c:5d:74:b2: b1:23:92:bc:49:81:79:66:e2:75:0b:9b:06:eb:f3:7b:3b:47: 33:21:08:43:08:73:a1:f7:eb:60:e4:4e:6c:d2:f1:bc:f2:5b: 4e:7f:81:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NEYxMTAvBgNVBAUTKEVERTJGNENDNDM0NzI4Qzc5Qzg5MzkxNDE0RjZFRTAz RkI0MTY4OEMwHhcNMjUwODIzMDQwMjA2WhcNMjUwODMwMDQwMjA2WjAYMRYwFAYD VQQDEw02OGE5M2QzZi0wZGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+nitw7L65ZjYhFP2C8xKtFHmFh3hf/AEu4kLceyJKPhBReIjEJNYvlhwBe+Q EhHCo50uxBDfULAo+Hb6nZUMGGFvieNZVOaRR2oyWs/Mw9LyGXLDUuMupe59n7cI vE+mAwlD8qomsWOh53I99+UUmZor/ltVUlJNs7WgI+HXrW/4XLmoayIXIxDHzgqm W2HbplflClJbeGfNAvLJHcpxvHHeso/wIMKxgjx1riSWNHt9HBIMc5/e7TTfaJzI yJAMqDsOxziJFv22/r9osai75VVhLRbEIfyflHokIKdsWsOVkxhIRVyQsS/5fYNZ zxfbm7WK/w8/QxiD19aD0QsyPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOS8hyWS y101IX7kmd9t0oj632xcMB8GA1UdIwQYMBaAFO3i9MxDRyjHnIk5FBT27gP7QWiM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk0Ri9DOTg5MDY3MjU3 QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtNZWNpVGtVRlBidUFfdEJh SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdlTDB6RU5IS01lY2lUa1VGUGJ1QV90QmFJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk0Ri9DOTg5MDY3MjU3QkExMUVFQTU5RDVBODRDNEY5QUUwMi83ZUwwekVOSEtN ZWNpVGtVRlBidUFfdEJhSXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg98VWFDWiUs0dR2JLANkcT2lqHvJdz0B3nJOh3X6nUDTGjby8GneI VMWU8Vbh9RYDAEBKpIaUa6tBQSTU6ASDlR0Qvo/2SywpZi3doZP/y64tqE2Ibqmz YVgkxjK6L+C0FUqDXviq/Ptta0ffWkAD8nM39XlnTZynfPizRLB6ITfw15a2Q3sm 5dj4QRCiKxS7whniupfgnpOxpSkJZTtxnM7/PZ+lP03uwcGm27+4KgBiTvMhc9bl ZZMVi/9BIzjMmuDWkZRABfWg6mvPK/G5iXvUlQxddLKxI5K8SYF5ZuJ1C5sG6/N7 O0czIQhDCHOh9+tg5E5s0vG88ltOf4GA -----END CERTIFICATE-----Generated at Sun Aug 24 04:44:34 2025 by rpki-client