$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: KpJYIjLbMNNeRfDQVoVYHcgk7gKoSn5+MtnICdyWil0= Subject key identifier: 60:4B:1C:35:95:D9:7A:DF:CA:8B:B7:CF:B1:6B:11:CF:F7:CE:62:3D Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01D1 Signing time: Sat 23 Aug 2025 03:04:41 +0000 Manifest this update: Sat 23 Aug 2025 03:04:40 +0000 Manifest next update: Sat 30 Aug 2025 03:04:40 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: zc9/fiYkf4CJ+t0gROnczMGxKJMRGIsdOlEyWOizFmg=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 475 (0x1db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Aug 23 03:04:40 2025 GMT Not After : Aug 30 03:04:40 2025 GMT Subject: CN=68a92fc8-64ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:de:d7:71:92:f6:ec:7f:2c:aa:ad:96:9d:b8: 79:dd:32:c5:c9:16:47:1c:22:09:8d:0f:9e:2e:ae: 31:74:ac:1f:8f:4f:17:dc:b0:5a:78:fa:1e:65:57: fe:6f:13:94:59:ec:2a:b9:b6:0c:b2:04:b7:7d:9a: da:44:90:a0:f7:15:82:62:c6:fc:e9:69:30:de:3d: 0e:4e:a3:1f:65:de:90:78:d5:10:8b:b7:4d:18:96: 5f:3e:86:36:60:b4:6d:d3:e3:e1:81:fe:6f:54:6c: 61:77:e8:57:f0:ea:20:8c:81:82:56:6e:c3:97:5b: 76:c2:b6:2a:1d:5f:41:21:d0:ac:9b:f5:34:6a:d6: 40:83:cf:0b:05:2b:17:d1:3d:d0:a4:29:ae:e6:7b: d7:fd:b3:dd:df:cd:34:26:8f:5a:fe:2c:af:1c:d7: ff:e1:e0:18:d1:12:00:d9:22:5a:12:dc:4a:8b:c1: e9:fc:65:70:e6:8c:83:97:75:57:bf:13:ad:a6:45: 3d:b8:26:a4:08:d7:ff:33:ec:38:32:fa:2e:0c:f9: 55:7e:48:41:da:c7:72:6d:96:23:3d:57:01:7a:ad: 86:68:1f:50:14:b3:26:d2:b5:1c:98:80:ac:5d:65: 4b:4d:db:a1:be:e3:83:0c:0b:43:97:ed:b4:54:c9: 58:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:1C:35:95:D9:7A:DF:CA:8B:B7:CF:B1:6B:11:CF:F7:CE:62:3D X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:ac:69:79:71:b3:1d:93:7b:8d:8b:af:2a:b6:92:09:5f:91: 8e:d1:30:83:13:51:70:72:26:4b:3e:a5:04:b1:64:81:7d:af: e9:bc:53:d1:53:c2:ca:52:81:69:4e:ec:d7:40:76:0e:42:52: 4a:6f:8a:43:91:80:88:bc:66:52:80:5c:29:d0:c3:e1:71:b5: 25:18:ec:ec:dc:d9:92:9d:d7:f6:df:74:9a:a7:6c:c0:99:9f: 34:3f:67:c1:2d:01:2d:2b:5b:f8:92:ae:aa:ff:8a:dc:a5:43: eb:a7:64:fa:e9:e2:c0:7f:34:b1:ac:ee:1c:07:b7:16:96:60: 3e:ce:a0:64:9b:eb:45:71:07:1e:96:3d:55:f8:d8:d9:c9:10: b5:7f:21:50:f7:4e:29:02:f0:45:f8:08:b7:96:71:da:3d:74: 5b:e2:fd:fa:a2:1f:4e:29:0d:2c:1a:2f:81:91:e7:9e:31:d4: 01:d3:dd:e1:ee:22:b6:f5:c0:e4:9f:20:b0:6d:2b:50:98:a1: 48:c0:49:29:5a:e7:ff:9e:32:4f:ad:d5:d0:10:e7:1c:e0:bf: e9:d1:07:90:17:1b:85:8d:39:bb:c6:8a:fe:a1:aa:b5:3b:d9: ad:29:49:c4:cf:8b:e5:8d:95:df:69:da:53:8b:3f:ef:c6:81: d3:cb:54:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwODIzMDMwNDQwWhcNMjUwODMwMDMwNDQwWjAYMRYwFAYD VQQDEw02OGE5MmZjOC02NGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA597XcZL27H8sqq2Wnbh53TLFyRZHHCIJjQ+eLq4xdKwfj08X3LBaePoeZVf+ bxOUWewqubYMsgS3fZraRJCg9xWCYsb86Wkw3j0OTqMfZd6QeNUQi7dNGJZfPoY2 YLRt0+Phgf5vVGxhd+hX8OogjIGCVm7Dl1t2wrYqHV9BIdCsm/U0atZAg88LBSsX 0T3QpCmu5nvX/bPd3800Jo9a/iyvHNf/4eAY0RIA2SJaEtxKi8Hp/GVw5oyDl3VX vxOtpkU9uCakCNf/M+w4MvouDPlVfkhB2sdybZYjPVcBeq2GaB9QFLMm0rUcmICs XWVLTduhvuODDAtDl+20VMlYaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBLHDWV 2Xrfyou3z7FrEc/3zmI9MB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxrGl5cbMdk3uNi68qtpIJX5GO0TCDE1FwciZLPqUEsWSBfa/pvFPR U8LKUoFpTuzXQHYOQlJKb4pDkYCIvGZSgFwp0MPhcbUlGOzs3NmSndf233Sap2zA mZ80P2fBLQEtK1v4kq6q/4rcpUPrp2T66eLAfzSxrO4cB7cWlmA+zqBkm+tFcQce lj1V+NjZyRC1fyFQ904pAvBF+Ai3lnHaPXRb4v36oh9OKQ0sGi+BkeeeMdQB093h 7iK29cDknyCwbStQmKFIwEkpWuf/njJPrdXQEOcc4L/p0QeQFxuFjTm7xor+oaq1 O9mtKUnEz4vljZXfadpTiz/vxoHTy1S7 -----END CERTIFICATE-----Generated at Sat Aug 23 20:35:20 2025 by rpki-client