$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: fOZt+/qL0Wgu4kH9DJQPJJu2czV567//FJ7nBLEScqc= Subject key identifier: E1:C3:A0:6E:39:6B:E5:FD:BC:17:0C:9C:CD:D2:5A:9D:39:0E:4D:1D Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C6F Signing time: Fri 22 Aug 2025 18:31:51 +0000 Manifest this update: Fri 22 Aug 2025 18:31:50 +0000 Manifest next update: Fri 29 Aug 2025 18:31:50 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: +M/zHrTjT1OT2dEvQTnt9ivBGs/f7pm3WIV2Mv/syiU=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3193 (0xc79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Aug 22 18:31:50 2025 GMT Not After : Aug 29 18:31:50 2025 GMT Subject: CN=68a8b797-e0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:24:ea:a9:b2:8c:38:b2:da:40:ac:73:1a: f7:c4:e2:49:42:a5:a6:d5:8e:1c:52:ca:78:e1:22: a9:a8:ea:0d:d9:b2:ba:b2:8d:e4:84:3c:3f:7e:15: 9c:d9:c2:74:a6:ba:c9:c2:30:41:f8:6e:61:60:8a: 65:c9:17:09:de:64:1f:7f:54:4d:7b:3c:39:a8:3f: aa:6a:5c:50:bc:ea:91:fb:6c:14:04:1f:49:ec:ad: 12:6d:f2:ed:9b:d3:c5:25:c6:2c:33:52:9e:39:ad: a9:5c:4d:c0:13:34:16:12:f3:6c:81:1f:5b:f3:7c: a5:cf:5f:f1:3a:9a:bd:6c:50:d7:37:7d:9b:06:5a: 55:16:89:db:51:49:cf:e3:98:80:13:67:79:da:b8: ef:4f:1d:7c:6e:a7:b9:99:e2:70:60:3b:b4:a0:ab: 5a:91:54:23:c8:89:43:54:12:ca:7f:30:1f:2d:4f: 01:a8:df:85:c4:e0:82:53:18:e1:b5:9a:73:e0:4e: df:fc:13:c8:a4:2e:01:0a:e6:bb:3b:0c:2c:ed:de: a9:ff:02:17:10:36:21:c4:08:3d:1b:39:57:e3:c0: 95:39:95:d9:76:57:5c:cd:3e:55:a5:68:0b:f6:73: d1:96:52:e9:38:cf:40:ca:bd:df:1f:10:a2:28:89: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C3:A0:6E:39:6B:E5:FD:BC:17:0C:9C:CD:D2:5A:9D:39:0E:4D:1D X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:5f:2d:c7:7d:a7:74:24:43:d5:be:3a:3b:b6:64:1d:34:94: af:e8:9e:3a:f3:99:b9:dc:ce:d9:50:97:7e:90:51:f4:7a:fa: 43:95:32:16:a4:cc:af:09:7b:b6:a6:2d:89:ae:11:d8:7c:51: ad:08:ec:c4:7b:d1:99:d9:58:ff:ce:b8:06:d0:46:44:97:fd: 00:e2:93:fb:23:1e:1e:8e:0d:8d:05:85:f8:dc:68:83:a7:a9: 0b:6d:55:89:89:91:b3:1b:5e:42:6f:eb:bc:88:35:5e:1e:f8: 57:ca:03:d4:fb:55:41:9a:81:6c:2e:91:29:8c:cc:aa:4f:26: 3e:4f:76:b8:31:a1:09:88:1e:b1:2b:5f:34:1f:98:ef:d7:7b: 45:5c:8a:f4:95:72:89:35:08:0d:1c:54:5a:f5:0f:b4:ac:4e: bb:07:6d:8f:63:bf:ff:fa:c8:eb:7a:7c:f8:e8:f6:7f:bd:6d: 36:65:1f:9f:2b:73:a0:7e:2e:0b:92:ee:7e:4a:e0:0e:3f:12: 6f:cc:ed:16:0a:9e:4b:d2:3e:9c:f9:ad:6e:c5:6c:17:28:69: 94:49:8c:bd:e0:c4:4e:bf:50:08:da:a3:41:cc:ac:a7:7e:f9: 0d:3d:01:21:99:7a:61:71:ad:fa:e6:0f:ed:d5:89:68:f3:7e: b7:cb:1a:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUwODIyMTgzMTUwWhcNMjUwODI5MTgzMTUwWjAYMRYwFAYD VQQDEw02OGE4Yjc5Ny1lMGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Lck6qmyjDiy2kCscxr3xOJJQqWm1Y4cUsp44SKpqOoN2bK6so3khDw/fhWc 2cJ0prrJwjBB+G5hYIplyRcJ3mQff1RNezw5qD+qalxQvOqR+2wUBB9J7K0SbfLt m9PFJcYsM1KeOa2pXE3AEzQWEvNsgR9b83ylz1/xOpq9bFDXN32bBlpVFonbUUnP 45iAE2d52rjvTx18bqe5meJwYDu0oKtakVQjyIlDVBLKfzAfLU8BqN+FxOCCUxjh tZpz4E7f/BPIpC4BCua7Owws7d6p/wIXEDYhxAg9GzlX48CVOZXZdldczT5VpWgL 9nPRllLpOM9Ayr3fHxCiKImsiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOHDoG45 a+X9vBcMnM3SWp05Dk0dMB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpXy3Hfad0JEPVvjo7tmQdNJSv6J4685m53M7ZUJd+kFH0evpDlTIW pMyvCXu2pi2JrhHYfFGtCOzEe9GZ2Vj/zrgG0EZEl/0A4pP7Ix4ejg2NBYX43GiD p6kLbVWJiZGzG15Cb+u8iDVeHvhXygPU+1VBmoFsLpEpjMyqTyY+T3a4MaEJiB6x K180H5jv13tFXIr0lXKJNQgNHFRa9Q+0rE67B22PY7//+sjrenz46PZ/vW02ZR+f K3Ogfi4Lku5+SuAOPxJvzO0WCp5L0j6c+a1uxWwXKGmUSYy94MROv1AI2qNBzKyn fvkNPQEhmXphca365g/t1Ylo8363yxoj -----END CERTIFICATE-----Generated at Sat Aug 23 17:22:56 2025 by rpki-client