$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: B2mf5HsOK/Z0YXr9Iw4jbspkQcGCAwaDesYVTa8Zfts= Subject key identifier: 7C:2E:98:E7:17:2D:D2:9E:19:DB:8E:99:D0:2B:BB:94:23:A8:75:98 Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 34B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 34B2 Signing time: Fri 22 Aug 2025 14:16:34 +0000 Manifest this update: Fri 22 Aug 2025 14:16:34 +0000 Manifest next update: Fri 29 Aug 2025 14:16:34 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: ZsqdBF2At1T/rZvO5t5y/fgZbXQuUjXT5UoLyp6nTQ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:16:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13490 (0x34b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: Aug 22 14:16:34 2025 GMT Not After : Aug 29 14:16:34 2025 GMT Subject: CN=68a87bc2-7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:d3:58:0d:3f:45:92:47:23:56:22:00:9f: 06:39:31:bd:9b:b2:a0:56:97:37:00:14:04:b1:e8: 41:ea:4b:df:83:f7:a4:59:02:d8:64:dd:2c:a0:30: 6f:87:41:48:7c:ea:5d:2c:88:53:e1:33:23:65:99: a1:b7:c5:f9:5b:63:4f:10:96:76:32:91:26:5f:82: 3e:b8:bb:2f:ac:54:24:36:b2:59:22:e4:d1:c8:37: eb:35:ec:36:5b:db:5d:ec:71:ec:ee:ff:05:85:74: 7a:ee:e3:aa:d0:fa:eb:ac:f4:23:a8:4c:70:97:02: 57:a6:d9:d6:c6:bb:d5:7f:4f:f7:06:5e:6a:cc:9b: 34:1a:87:93:7a:70:e6:85:cb:14:ea:19:5f:88:1b: b9:20:9e:6c:1a:89:3c:a9:72:87:40:1f:26:92:3f: 12:1a:a8:60:86:83:dd:26:3a:58:88:5a:7e:72:cb: 8f:85:d2:d1:e4:16:ce:d1:6f:c1:ad:c0:90:de:02: 77:44:cb:45:f0:7d:da:0c:dc:fb:e3:00:3b:5e:91: 38:32:2e:a3:0d:e0:c7:bb:ec:66:22:e3:f0:7a:97: 3a:d8:1c:de:2d:cd:25:0d:5d:e7:93:39:47:e5:c7: 79:2b:d7:60:05:2c:f2:89:19:d9:e7:2c:67:46:5f: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:98:E7:17:2D:D2:9E:19:DB:8E:99:D0:2B:BB:94:23:A8:75:98 X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d0:21:44:99:49:24:1e:ff:21:f0:86:4a:af:f8:a9:65:db: 36:2c:4b:9c:99:60:04:82:4c:7e:6f:79:f9:73:b2:96:97:12: 64:3a:c8:b4:79:bd:8b:6f:bc:c3:4d:f5:cf:ee:9e:95:c1:a7: 59:d7:56:48:75:35:a1:b8:10:52:cd:df:30:36:45:b2:0e:a0: 26:73:b9:93:b2:2a:80:5b:22:47:cd:09:02:35:e7:74:e0:71: 3f:cc:eb:56:50:f5:36:4a:6b:90:13:75:b4:d9:6e:9c:76:19: 92:97:ab:d0:d4:bb:c6:bb:97:bd:6f:d2:dd:f6:df:ec:ca:cb: c1:09:6d:c1:fb:4f:b9:fc:7b:5a:50:f9:51:96:61:d3:74:da: 74:7f:ad:db:8d:08:43:c5:c4:b7:53:fa:f0:1b:3b:b8:1b:32: bf:45:63:67:17:41:2e:f0:87:a0:6d:19:37:c9:af:b7:14:0f: 08:d1:89:db:8e:0d:c0:af:bf:c9:36:4d:b0:28:69:78:4c:92: 49:c9:36:fd:14:03:c0:ae:53:ab:c5:dc:d9:39:d6:ce:dd:a7: be:d2:0e:4c:d0:ea:da:88:99:c1:75:c4:ca:c2:40:0b:9b:c4: 1e:bb:cf:eb:51:c8:df:f3:bd:92:09:91:fd:b1:e1:c4:79:8d: da:2e:fd:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwODIyMTQxNjM0WhcNMjUwODI5MTQxNjM0WjAYMRYwFAYD VQQDEw02OGE4N2JjMi03ZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDbTWA0/RZJHI1YiAJ8GOTG9m7KgVpc3ABQEsehB6kvfg/ekWQLYZN0soDBv h0FIfOpdLIhT4TMjZZmht8X5W2NPEJZ2MpEmX4I+uLsvrFQkNrJZIuTRyDfrNew2 W9td7HHs7v8FhXR67uOq0PrrrPQjqExwlwJXptnWxrvVf0/3Bl5qzJs0GoeTenDm hcsU6hlfiBu5IJ5sGok8qXKHQB8mkj8SGqhghoPdJjpYiFp+csuPhdLR5BbO0W/B rcCQ3gJ3RMtF8H3aDNz74wA7XpE4Mi6jDeDHu+xmIuPwepc62BzeLc0lDV3nkzlH 5cd5K9dgBSzyiRnZ5yxnRl+DRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHwumOcX LdKeGduOmdAru5QjqHWYMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP0CFEmUkkHv8h8IZKr/ipZds2LEucmWAEgkx+b3n5c7KWlxJkOsi0 eb2Lb7zDTfXP7p6VwadZ11ZIdTWhuBBSzd8wNkWyDqAmc7mTsiqAWyJHzQkCNed0 4HE/zOtWUPU2SmuQE3W02W6cdhmSl6vQ1LvGu5e9b9Ld9t/sysvBCW3B+0+5/Hta UPlRlmHTdNp0f63bjQhDxcS3U/rwGzu4GzK/RWNnF0Eu8IegbRk3ya+3FA8I0Ynb jg3Ar7/JNk2wKGl4TJJJyTb9FAPArlOrxdzZOdbO3ae+0g5M0OraiJnBdcTKwkAL m8Qeu8/rUcjf872SCZH9seHEeY3aLv3i -----END CERTIFICATE-----Generated at Sat Aug 23 19:02:56 2025 by rpki-client