$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: IdA9U876nhzahN9R2BObwO7LHPJpZIKOCFZX1gPMS5U= Subject key identifier: 0C:FC:1D:ED:FB:42:D0:6A:33:75:0A:FB:36:47:1D:C4:11:7D:8B:1A Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17E7 Signing time: Fri 22 Aug 2025 16:39:37 +0000 Manifest this update: Fri 22 Aug 2025 16:39:37 +0000 Manifest next update: Fri 29 Aug 2025 16:39:37 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: 8gVF12bRnYoMVkVNhK6sKAydZ9GzPXyBqgRzcGNLZpA=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: E/6I3qQjCBxjGs7jFLaCU1bmuGjPrQh25a7j/aLYowA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:39:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6131 (0x17f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Aug 22 16:39:37 2025 GMT Not After : Aug 29 16:39:37 2025 GMT Subject: CN=68a89d49-55fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:ae:89:73:5e:cf:4d:07:71:ad:26:27:57: 11:3a:d5:c1:d9:25:3f:59:62:41:35:5f:2f:00:39: b6:26:e1:e9:b5:75:7a:f7:d7:b1:7d:c7:74:c1:b6: 39:87:e1:6e:75:59:f3:18:1f:5b:6f:d1:92:cb:df: d1:97:1e:8f:59:1b:e5:05:2b:4b:77:de:e0:68:79: b8:ae:13:8b:36:a1:67:c2:0b:b0:d1:ce:12:4f:61: ef:ce:d0:d1:21:e1:5b:2d:10:19:e0:5d:a7:6e:a8: f1:8d:fb:b5:94:31:42:8d:df:56:2f:91:5b:1d:75: b8:6c:bc:99:b6:79:b3:1e:f1:b4:7a:b1:4c:18:bd: 3b:01:9e:3d:df:f3:20:7a:cd:db:1a:f0:3f:e0:46: 01:94:a2:8b:a3:9e:47:e4:92:b6:d9:3a:fa:87:63: c6:2b:30:32:b4:b3:3d:a9:18:9e:f8:b2:b2:8c:c8: 7e:66:ba:d8:ed:cc:ba:b0:4a:75:ae:45:b1:91:38: bf:60:7f:e1:34:ef:90:af:2f:72:d9:ca:ef:b9:ea: 23:03:fe:36:0f:28:9d:0b:eb:df:de:63:2e:4d:8f: f2:a1:cf:ee:71:fb:9f:bf:51:76:f4:47:48:79:0b: 27:46:35:d5:fe:20:b1:c2:12:04:cf:fa:47:49:7e: e0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FC:1D:ED:FB:42:D0:6A:33:75:0A:FB:36:47:1D:C4:11:7D:8B:1A X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:e4:3a:d7:46:4d:41:92:e0:9b:4e:0b:82:40:db:2e:8b:28: 7d:af:95:ac:e5:48:22:99:79:40:98:f1:15:16:8b:f9:40:42: 15:36:f0:a3:8c:bc:43:6f:33:21:fe:54:80:77:a0:5e:f2:70: 62:4e:fe:cd:c2:07:bd:d9:f6:c2:28:d7:46:dd:01:05:30:25: cd:0a:f1:f9:99:6c:75:6f:ac:e6:0f:72:6e:3c:5e:3b:5a:56: 13:4e:60:e5:dc:f4:5c:01:15:e8:c6:97:11:32:df:d6:d6:67: 41:de:fd:bc:16:2c:d4:f3:74:b3:84:3b:40:f2:b5:cb:1d:62: 26:4c:c5:55:63:f8:60:04:7d:b8:c8:b4:a1:a1:97:0f:3a:1d: 0f:73:e2:b3:86:03:01:ac:8f:0d:2c:c5:d0:ec:c8:ac:1d:0c: 99:48:9c:6f:df:d6:07:81:42:c6:bb:67:20:f9:f7:32:f5:d9: b6:55:c0:78:8d:a5:d3:09:3e:1c:c4:e0:c2:ac:03:c6:45:7c: 27:ad:ed:b2:1d:41:4b:b3:4e:9a:f6:c1:06:39:98:d6:03:a8: a2:a0:25:42:f9:b9:f4:60:af:94:c9:b4:d1:40:f9:5c:ef:f0: b4:14:b4:b5:fa:6b:b6:b6:16:69:71:96:ad:35:24:38:e8:ef: f5:88:56:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwODIyMTYzOTM3WhcNMjUwODI5MTYzOTM3WjAYMRYwFAYD VQQDEw02OGE4OWQ0OS01NWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUOuiXNez00Hca0mJ1cROtXB2SU/WWJBNV8vADm2JuHptXV699exfcd0wbY5 h+FudVnzGB9bb9GSy9/Rlx6PWRvlBStLd97gaHm4rhOLNqFnwguw0c4ST2HvztDR IeFbLRAZ4F2nbqjxjfu1lDFCjd9WL5FbHXW4bLyZtnmzHvG0erFMGL07AZ493/Mg es3bGvA/4EYBlKKLo55H5JK22Tr6h2PGKzAytLM9qRie+LKyjMh+ZrrY7cy6sEp1 rkWxkTi/YH/hNO+Qry9y2crvueojA/42DyidC+vf3mMuTY/yoc/ucfufv1F29EdI eQsnRjXV/iCxwhIEz/pHSX7glQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAz8He37 QtBqM3UK+zZHHcQRfYsaMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf5DrXRk1BkuCbTguCQNsuiyh9r5Ws5UgimXlAmPEVFov5QEIVNvCj jLxDbzMh/lSAd6Be8nBiTv7Nwge92fbCKNdG3QEFMCXNCvH5mWx1b6zmD3JuPF47 WlYTTmDl3PRcARXoxpcRMt/W1mdB3v28FizU83SzhDtA8rXLHWImTMVVY/hgBH24 yLShoZcPOh0Pc+KzhgMBrI8NLMXQ7MisHQyZSJxv39YHgULGu2cg+fcy9dm2VcB4 jaXTCT4cxODCrAPGRXwnre2yHUFLs06a9sEGOZjWA6iioCVC+bn0YK+UybTRQPlc 7/C0FLS1+mu2thZpcZatNSQ46O/1iFbv -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:18 2025 by rpki-client