$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: QhkHR7JcnpeX9m+9bhu5apTfQ0PiRmJBbb7h4jv/Ar0= Subject key identifier: 24:84:36:A3:E2:CA:F4:0E:0E:B0:F7:AD:7E:A9:0E:FE:54:D4:52:F6 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 05E7 Signing time: Fri 22 Aug 2025 23:12:19 +0000 Manifest this update: Fri 22 Aug 2025 23:12:19 +0000 Manifest next update: Fri 29 Aug 2025 23:12:19 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: Vl+S3x+eRK1toovtFs7OZh2/33lqWYniZe90DZ1XSRY=) 2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Aug 22 23:12:19 2025 GMT Not After : Aug 29 23:12:19 2025 GMT Subject: CN=68a8f953-de99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:7d:5d:02:77:92:6a:7c:6f:f5:f7:73:6f: a9:21:09:ae:47:7f:38:a1:70:80:4c:58:eb:6d:04: d5:a8:36:66:79:21:c8:48:b4:91:af:b6:e1:ea:33: 64:4e:28:95:fc:85:94:04:83:ba:5b:92:72:92:ab: d4:07:21:a7:6a:c6:32:6f:5a:a3:c3:7b:43:6d:9f: 06:3b:eb:a5:7e:93:dd:31:29:ff:62:8b:b6:c5:ab: 3a:cc:1f:df:58:10:b6:08:6d:b3:6b:b0:10:e7:0e: 1a:8a:f8:96:d5:2f:63:f5:99:31:42:74:e2:86:99: 63:92:a5:32:f6:31:0f:6e:84:3b:c6:6a:35:8b:04: d0:e6:df:56:bf:38:4a:82:06:f6:27:59:62:a5:18: c5:f1:02:63:8b:05:8d:49:df:e5:b1:9d:0a:ea:ea: fc:9c:11:98:88:9a:9a:ae:a8:8e:73:38:2f:53:20: 29:75:b3:c5:6e:4d:ce:ad:8f:87:f6:3e:26:43:26: 15:75:58:c5:05:08:7d:47:c5:ca:54:bf:23:2d:6b: bd:26:56:3e:59:b1:46:9e:ab:9a:b7:c4:96:96:cc: 19:93:84:7b:e7:fa:6d:2b:97:90:7b:1a:1e:cb:4d: 42:f2:c2:c8:98:18:7f:61:cf:1e:13:3b:45:b3:6d: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:84:36:A3:E2:CA:F4:0E:0E:B0:F7:AD:7E:A9:0E:FE:54:D4:52:F6 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:a8:d6:86:cb:30:26:42:ca:ec:50:36:39:87:29:b0:a8:7c: 99:c8:fd:44:17:58:61:77:ce:4b:1f:c6:47:44:7a:76:52:e7: f2:bd:71:8f:3b:d5:2c:f2:23:19:b4:c1:5b:35:3c:9f:4f:c5: 31:1d:11:14:13:f8:d5:5a:80:8f:ea:8a:ac:ae:87:a7:7a:db: 86:27:88:f6:b6:06:ef:64:aa:15:d7:d7:18:b2:e6:3f:1c:7b: 80:48:44:d4:4a:ff:0c:72:34:34:1b:8a:02:e4:5c:4e:97:ab: d5:09:8e:5c:ac:6c:e3:1f:31:ec:32:0e:ed:fe:8d:02:0b:ef: 34:f0:d4:7b:a8:6f:6b:54:d4:df:a4:5e:b2:e2:5b:eb:fd:ea: c0:8e:ba:2f:d9:5a:40:0a:06:72:05:38:4b:cd:8b:01:96:38: 35:24:25:01:8d:9a:59:04:95:2f:2b:e0:6f:33:1b:bf:27:67: 75:34:77:aa:d2:1b:e3:43:ce:c8:66:fd:58:8d:e9:94:ec:d4: fa:aa:51:3b:b5:f9:0c:bf:dd:fe:89:8b:e7:57:40:ee:10:c1: 82:54:e0:80:fa:24:c3:b1:bb:36:17:ae:52:56:4b:23:f3:01: 9c:17:13:0b:57:5e:bb:5a:04:91:b6:53:ed:42:27:16:85:98: 00:d1:2f:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwODIyMjMxMjE5WhcNMjUwODI5MjMxMjE5WjAYMRYwFAYD VQQDEw02OGE4Zjk1My1kZTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46d9XQJ3kmp8b/X3c2+pIQmuR384oXCATFjrbQTVqDZmeSHISLSRr7bh6jNk TiiV/IWUBIO6W5JykqvUByGnasYyb1qjw3tDbZ8GO+ulfpPdMSn/You2xas6zB/f WBC2CG2za7AQ5w4aiviW1S9j9ZkxQnTihpljkqUy9jEPboQ7xmo1iwTQ5t9WvzhK ggb2J1lipRjF8QJjiwWNSd/lsZ0K6ur8nBGYiJqarqiOczgvUyApdbPFbk3OrY+H 9j4mQyYVdVjFBQh9R8XKVL8jLWu9JlY+WbFGnquat8SWlswZk4R75/ptK5eQexoe y01C8sLImBh/Yc8eEztFs2035wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCSENqPi yvQODrD3rX6pDv5U1FL2MB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkqNaGyzAmQsrsUDY5hymwqHyZyP1EF1hhd85LH8ZHRHp2UufyvXGP O9Us8iMZtMFbNTyfT8UxHREUE/jVWoCP6oqsroenetuGJ4j2tgbvZKoV19cYsuY/ HHuASETUSv8McjQ0G4oC5FxOl6vVCY5crGzjHzHsMg7t/o0CC+808NR7qG9rVNTf pF6y4lvr/erAjrov2VpACgZyBThLzYsBljg1JCUBjZpZBJUvK+BvMxu/J2d1NHeq 0hvjQ87IZv1YjemU7NT6qlE7tfkMv93+iYvnV0DuEMGCVOCA+iTDsbs2F65SVksj 8wGcFxMLV167WgSRtlPtQicWhZgA0S8F -----END CERTIFICATE-----Generated at Sat Aug 23 11:00:36 2025 by rpki-client