$ rpki-client -vvf rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft File: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft (raw, json) Hash identifier: WLKlbBzMCbc0YslV6jvuLlxADxnILjdKJQ5jdwPdfQ4= Subject key identifier: 2B:2C:3F:AB:95:14:B6:26:E7:18:0C:7D:08:9E:AB:7F:A4:8C:B3:C0 Authority key identifier: ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 Certificate issuer: /CN=A912D70A/serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Certificate serial: 0C14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft Manifest number: 0BFD Signing time: Fri 22 Aug 2025 18:54:09 +0000 Manifest this update: Fri 22 Aug 2025 18:54:08 +0000 Manifest next update: Fri 29 Aug 2025 18:54:08 +0000 Files and hashes: 1: 7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl (hash: y/onF4ozoKYvdE7RVVSMq+5Fo+tL31AJ9a37O+Rlzls=) 2: 61EE7C6C281211EA881CC32DC4F9AE02.roa (hash: cpZDWElJkWHfyDoaFzzaYvQgJmBavPZ5GGxiNrY4lcE=) 3: 57A5ACF20FE911EBB5AE5524C4F9AE02.roa (hash: Ia7YlzfnZVrXXaoAHWfWApYxD2x/ixMau7CG/ipkyT8=) 4: 627B1438281211EA881CC32DC4F9AE02.roa (hash: uO9dKN19ATuVxFqwADIfuDOdZhJHHOsW2uFtJZD9uM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:54:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3092 (0xc14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D70A, serialNumber=ED330820FFABD0AB2841BA93E902EA682992DAA9 Validity Not Before: Aug 22 18:54:08 2025 GMT Not After : Aug 29 18:54:08 2025 GMT Subject: CN=68a8bcd0-d664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:a3:49:20:8b:88:53:78:ad:56:dd:04:ca: 87:25:ad:65:44:1c:3d:85:0a:11:5e:24:3f:46:cb: b5:1c:ba:da:d3:9a:b6:4d:0b:f5:e3:52:b6:59:cf: 2b:ad:d8:b5:20:56:cd:1b:38:04:bb:5f:fb:5b:90: 78:4c:5c:79:5f:e6:63:28:52:f1:0e:49:0a:c7:fc: a2:1b:74:5b:1b:7e:85:94:fc:ec:6d:f2:17:8b:05: c4:11:16:4a:17:35:f7:0b:3f:19:1f:fc:85:55:d5: 41:f3:5c:da:40:fe:cd:5c:39:59:08:43:b4:f6:05: 41:32:6f:a0:7f:1c:5f:f5:19:7f:26:81:4b:f7:a5: ca:08:e4:38:45:dd:c4:4a:31:1f:55:a4:40:45:bd: d5:f4:f6:07:a7:4f:fb:43:71:23:b1:a6:d1:0f:68: b0:94:3a:ad:c5:62:9e:f1:cb:f0:1e:cd:5d:51:9a: 04:86:32:1b:75:b7:d4:8d:c7:f5:b6:17:ea:65:0a: 36:1c:3d:d9:e3:3f:01:98:6b:67:95:0f:bc:21:71: f0:52:47:38:31:b8:81:0d:c0:62:08:7d:84:fb:45: da:6f:64:76:21:67:78:11:1b:44:a5:26:10:3e:ca: 36:a9:03:b2:d6:3b:bc:2b:3a:b0:be:55:5c:ad:0b: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2C:3F:AB:95:14:B6:26:E7:18:0C:7D:08:9E:AB:7F:A4:8C:B3:C0 X509v3 Authority Key Identifier: keyid:ED:33:08:20:FF:AB:D0:AB:28:41:BA:93:E9:02:EA:68:29:92:DA:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TMIIP-r0KsoQbqT6QLqaCmS2qk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D70A/41ABD29E1B8611EA9C9AF243C4F9AE02/7TMIIP-r0KsoQbqT6QLqaCmS2qk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:07:c7:6c:1f:1d:2c:ce:15:c4:48:1e:a7:5b:2f:c8:d7:09: ed:a5:47:76:d2:00:3c:c7:9f:42:95:1d:e5:27:7c:cc:87:79: 46:34:29:09:3b:50:8a:62:ce:4c:3c:fa:27:7b:02:e4:74:ba: ad:29:59:17:6d:4a:7f:81:34:df:38:b6:c2:52:64:c6:cf:99: 39:e2:d0:50:65:dc:33:8a:83:d0:25:59:f0:cc:b7:8c:ef:a7: f0:58:ff:ae:df:94:d3:28:ff:3b:72:d5:1e:2e:63:cf:cc:68: 30:1e:d3:aa:7e:01:a8:7f:0e:95:3b:00:07:3d:b4:4b:06:65: f3:41:66:f5:e8:af:4b:9e:fb:45:9a:f1:d5:59:b4:c8:d7:8d: b2:ed:86:33:37:1f:81:68:f7:ec:70:e7:c9:20:45:9b:57:c7: a1:3f:43:6a:00:8c:65:03:97:63:e1:92:77:d3:f6:93:e3:e7: ba:8a:28:f9:f4:38:4e:cf:d7:75:f9:b8:80:40:ab:4c:83:dd: c1:63:69:0b:c0:69:f2:ad:3e:03:3f:d6:16:ec:43:f4:d2:d7: a3:48:32:d5:4f:60:82:88:0f:9f:af:81:97:b1:10:66:7d:21: 47:fb:eb:cd:54:11:99:92:94:24:e4:28:55:a8:3e:79:46:8c: c4:d4:cb:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ3MEExMTAvBgNVBAUTKEVEMzMwODIwRkZBQkQwQUIyODQxQkE5M0U5MDJFQTY4 Mjk5MkRBQTkwHhcNMjUwODIyMTg1NDA4WhcNMjUwODI5MTg1NDA4WjAYMRYwFAYD VQQDEw02OGE4YmNkMC1kNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1ajSSCLiFN4rVbdBMqHJa1lRBw9hQoRXiQ/Rsu1HLra05q2TQv141K2Wc8r rdi1IFbNGzgEu1/7W5B4TFx5X+ZjKFLxDkkKx/yiG3RbG36FlPzsbfIXiwXEERZK FzX3Cz8ZH/yFVdVB81zaQP7NXDlZCEO09gVBMm+gfxxf9Rl/JoFL96XKCOQ4Rd3E SjEfVaRARb3V9PYHp0/7Q3EjsabRD2iwlDqtxWKe8cvwHs1dUZoEhjIbdbfUjcf1 thfqZQo2HD3Z4z8BmGtnlQ+8IXHwUkc4MbiBDcBiCH2E+0Xab2R2IWd4ERtEpSYQ Pso2qQOy1ju8KzqwvlVcrQvIDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCssP6uV FLYm5xgMfQieq3+kjLPAMB8GA1UdIwQYMBaAFO0zCCD/q9CrKEG6k+kC6mgpktqp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDcwQS80MUFCRDI5RTFC ODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBLc29RYnFUNlFMcWFDbVMy cWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUTUlJUC1yMEtzb1FicVQ2UUxxYUNtUzJxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDcwQS80MUFCRDI5RTFCODYxMUVBOUM5QUYyNDNDNEY5QUUwMi83VE1JSVAtcjBL c29RYnFUNlFMcWFDbVMycWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+B8dsHx0szhXESB6nWy/I1wntpUd20gA8x59ClR3lJ3zMh3lGNCkJ O1CKYs5MPPonewLkdLqtKVkXbUp/gTTfOLbCUmTGz5k54tBQZdwzioPQJVnwzLeM 76fwWP+u35TTKP87ctUeLmPPzGgwHtOqfgGofw6VOwAHPbRLBmXzQWb16K9LnvtF mvHVWbTI142y7YYzNx+BaPfscOfJIEWbV8ehP0NqAIxlA5dj4ZJ30/aT4+e6iij5 9DhOz9d1+biAQKtMg93BY2kLwGnyrT4DP9YW7EP00tejSDLVT2CCiA+fr4GXsRBm fSFH++vNVBGZkpQk5ChVqD55RozE1MsA -----END CERTIFICATE-----Generated at Sat Aug 23 21:30:24 2025 by rpki-client