$ rpki-client -vvf rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft File: 07pE2ly9wcxRJeLBAHts233c3IU.mft (raw, json) Hash identifier: skf7uch5bUpWoF7+b0qgChJwKrKYvyludVwnTEoK6xw= Subject key identifier: F9:07:02:02:BF:8B:F6:FE:DD:8E:A1:D4:1E:CA:27:42:85:CA:B0:02 Authority key identifier: D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 Certificate issuer: /CN=A9129757/serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft Manifest number: 89 Signing time: Sat 23 Aug 2025 06:51:49 +0000 Manifest this update: Sat 23 Aug 2025 06:51:49 +0000 Manifest next update: Sat 30 Aug 2025 06:51:49 +0000 Files and hashes: 1: 07pE2ly9wcxRJeLBAHts233c3IU.crl (hash: GONaWvCZtjbyeRCe2QGKw+5TCDF6xTu1PxoNcFQcMIk=) 2: 46A6690EB41911EFA68E0826C4F9AE02.roa (hash: PLX4kBW7Q6lIgEXicoBPIcX2q4HXvsbwpw0VmOF96dY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129757, serialNumber=D3BA44DA5CBDC1CC5125E2C1007B6CDB7DDCDC85 Validity Not Before: Aug 23 06:51:49 2025 GMT Not After : Aug 30 06:51:49 2025 GMT Subject: CN=68a96505-df39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8a:f1:3a:7f:f0:05:5f:cb:c0:9f:9b:d2:c5: c1:97:c4:03:62:a4:18:9e:61:81:02:22:74:94:0c: 79:55:66:92:fa:6e:f0:a2:2f:74:26:28:82:ca:e2: 2f:e2:36:06:31:88:bc:c7:78:02:29:ac:7c:40:40: 2f:eb:9e:8f:5c:66:08:2a:ea:e8:0a:07:1f:80:21: 54:1d:73:ce:1b:72:cd:93:21:9d:6b:4b:d3:06:25: 34:d2:fc:2b:ac:29:7e:d3:8e:eb:a0:95:24:96:7b: 0a:06:a7:8d:e2:af:3c:11:64:14:de:48:b1:49:8f: 40:f6:3f:80:4c:b2:2c:96:cb:33:fe:0c:ee:e5:fb: 25:88:36:a9:02:c3:b8:38:57:85:79:d5:70:9c:6a: 61:6f:33:38:d8:e5:07:83:f5:10:85:1a:75:b8:dd: ca:55:37:ab:e2:83:0f:f4:db:6f:6b:4c:54:f9:d7: f0:0b:83:25:0c:fc:5a:bb:76:d6:74:9c:e9:96:22: 17:50:7f:4c:77:2d:9f:01:56:d8:9d:48:a3:d4:ea: 9c:1d:65:59:ee:75:25:a7:74:9a:c3:74:dc:7f:6d: 18:9b:8c:1c:30:11:67:69:1c:ae:70:4d:96:15:8a: 42:5a:e5:a3:30:b2:55:35:6c:7b:43:c5:f0:2f:90: e3:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:07:02:02:BF:8B:F6:FE:DD:8E:A1:D4:1E:CA:27:42:85:CA:B0:02 X509v3 Authority Key Identifier: keyid:D3:BA:44:DA:5C:BD:C1:CC:51:25:E2:C1:00:7B:6C:DB:7D:DC:DC:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07pE2ly9wcxRJeLBAHts233c3IU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129757/32934CECB37A11EF9C07C65BC4F9AE02/07pE2ly9wcxRJeLBAHts233c3IU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:ac:8f:6b:97:a3:90:06:c8:5b:d0:96:0f:e3:b7:6d:74:4f: 7e:63:f7:04:18:68:f2:a1:ca:58:0d:43:13:ca:6c:29:14:ff: 0e:fc:24:37:45:4d:4f:7c:34:c7:39:df:ef:19:d1:3e:bf:51: a6:db:1c:a1:5e:b9:36:65:fa:d1:d2:b3:32:33:15:ab:3d:6d: 72:55:f6:04:a3:22:c0:dd:df:7b:0d:8d:04:3e:73:0b:14:af: b0:0d:a2:87:9b:6f:a5:ed:45:28:cd:6b:37:52:61:25:f3:44: 95:2d:21:69:60:9c:5f:89:1c:31:4c:7e:f8:9f:4e:ea:fc:0f: 32:fc:f2:a3:5e:f0:56:03:e2:ce:0e:52:d4:b5:aa:83:0a:56: eb:d1:2b:58:b0:69:6a:eb:f5:e6:6c:0c:0c:bc:b3:56:cc:af: b4:fb:83:e5:ba:31:6b:9d:65:c9:89:0d:4d:64:cc:d9:4f:b2: e4:be:a1:6f:a9:f7:fc:3a:b0:ff:c6:95:c9:67:ea:18:92:b7: 05:e4:e4:e8:e9:66:22:aa:68:3f:56:2e:ce:d9:f0:79:90:33: 3a:18:58:0a:df:bc:ef:cb:99:76:f6:13:db:d6:d8:ab:fc:96: d9:0e:93:49:94:1c:ea:50:22:fa:b6:2b:14:29:fc:c8:73:12: 80:50:4c:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3NTcxMTAvBgNVBAUTKEQzQkE0NERBNUNCREMxQ0M1MTI1RTJDMTAwN0I2Q0RC N0REQ0RDODUwHhcNMjUwODIzMDY1MTQ5WhcNMjUwODMwMDY1MTQ5WjAYMRYwFAYD VQQDEw02OGE5NjUwNS1kZjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYrxOn/wBV/LwJ+b0sXBl8QDYqQYnmGBAiJ0lAx5VWaS+m7woi90JiiCyuIv 4jYGMYi8x3gCKax8QEAv656PXGYIKuroCgcfgCFUHXPOG3LNkyGda0vTBiU00vwr rCl+047roJUklnsKBqeN4q88EWQU3kixSY9A9j+ATLIslssz/gzu5fsliDapAsO4 OFeFedVwnGphbzM42OUHg/UQhRp1uN3KVTer4oMP9Ntva0xU+dfwC4MlDPxau3bW dJzpliIXUH9Mdy2fAVbYnUij1OqcHWVZ7nUlp3Saw3Tcf20Ym4wcMBFnaRyucE2W FYpCWuWjMLJVNWx7Q8XwL5DjNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkHAgK/ i/b+3Y6h1B7KJ0KFyrACMB8GA1UdIwQYMBaAFNO6RNpcvcHMUSXiwQB7bNt93NyF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc1Ny8zMjkzNENFQ0Iz N0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdjeFJKZUxCQUh0czIzM2Mz SVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3cEUybHk5d2N4UkplTEJBSHRzMjMzYzNJVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc1Ny8zMjkzNENFQ0IzN0ExMUVGOUMwN0M2NUJDNEY5QUUwMi8wN3BFMmx5OXdj eFJKZUxCQUh0czIzM2MzSVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTrI9rl6OQBshb0JYP47dtdE9+Y/cEGGjyocpYDUMTymwpFP8O/CQ3 RU1PfDTHOd/vGdE+v1Gm2xyhXrk2ZfrR0rMyMxWrPW1yVfYEoyLA3d97DY0EPnML FK+wDaKHm2+l7UUozWs3UmEl80SVLSFpYJxfiRwxTH74n07q/A8y/PKjXvBWA+LO DlLUtaqDClbr0StYsGlq6/XmbAwMvLNWzK+0+4PlujFrnWXJiQ1NZMzZT7LkvqFv qff8OrD/xpXJZ+oYkrcF5OTo6WYiqmg/Vi7O2fB5kDM6GFgK37zvy5l29hPb1tir /JbZDpNJlBzqUCL6tisUKfzIcxKAUExV -----END CERTIFICATE-----Generated at Sat Aug 23 13:49:51 2025 by rpki-client