$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft File: CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft (raw, json) Hash identifier: /H/MHPWOvqm5YRN7mmMX6jzNjAIAtDLoeDIDOGqOK4k= Subject key identifier: 14:CA:43:DD:51:79:1D:80:18:25:FC:46:17:4C:65:7E:C1:23:03:0A Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 Certificate issuer: /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft Manifest number: 8D Signing time: Sat 23 Aug 2025 06:45:36 +0000 Manifest this update: Sat 23 Aug 2025 06:45:35 +0000 Manifest next update: Sat 30 Aug 2025 06:45:35 +0000 Files and hashes: 1: CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl (hash: S6AO395v03Lk/nGFPo2GTIAEB+gR1JCpO2awF2bFa9M=) 2: 4F148EC8A89211EFBE18B52EC4F9AE02.roa (hash: Ac/uc/BnLL5OC5L/oElWDyPEyaU4HTEnF9nDubVxykg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4 Validity Not Before: Aug 23 06:45:35 2025 GMT Not After : Aug 30 06:45:35 2025 GMT Subject: CN=68a9638f-2ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bc:84:71:78:91:8a:a0:f1:6d:ae:c8:8d:c2: d0:bb:58:1e:6d:5d:14:0a:eb:7d:e9:4a:21:a7:6e: 43:3b:a2:fe:b3:16:b7:aa:e6:8f:2f:4f:6a:cd:c9: ea:05:4a:e6:43:81:94:84:5a:13:95:62:f7:f2:2a: c4:46:ca:7c:5c:ed:ed:7e:f7:d2:6a:5c:80:f0:aa: f6:67:cb:4b:31:08:6e:98:71:e3:79:e0:1b:51:4c: b9:14:4b:d5:ae:e5:42:00:32:2f:fc:73:75:3a:00: ea:02:6b:1d:6c:f7:f1:b6:b8:c1:9f:ee:2a:cf:7a: e1:78:87:e7:73:56:4d:76:1a:50:a1:1b:6e:01:e5: 63:93:ed:f5:0e:c2:4b:ce:76:a5:41:14:a9:90:d3: a2:01:dd:a6:bc:2c:a3:92:3d:8f:41:b6:d4:b9:fd: f7:5d:bb:4c:72:25:6e:15:d4:b9:48:c9:ce:fa:7f: 2a:e9:33:f2:4b:08:5b:bb:c5:6f:aa:f4:6e:f8:d1: 94:16:24:f8:9a:9c:d2:79:ec:7c:b9:92:7e:e7:81: 98:1a:de:a1:76:83:3d:56:f2:a1:5e:dc:66:8a:c8: b1:21:88:64:4d:04:de:44:b8:8a:df:60:18:f1:0d: b9:fb:05:7f:bf:63:f1:e3:0c:a1:c3:3e:09:5f:83: a1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:43:DD:51:79:1D:80:18:25:FC:46:17:4C:65:7E:C1:23:03:0A X509v3 Authority Key Identifier: keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:aa:af:ba:73:f8:f3:31:d1:cc:ff:54:52:f3:b0:58:9a:ef: dc:f4:b3:a8:8b:43:c7:37:23:5e:b6:29:9e:26:59:c3:19:62: 44:50:8c:56:6c:ad:e5:37:03:ee:10:20:15:55:2c:e3:70:28: 8b:15:93:bd:dd:cd:80:49:58:a7:c2:95:c9:04:41:74:88:f1: e7:dc:ed:85:c8:25:d5:5b:27:a1:6f:55:61:22:4b:fb:f0:0d: 40:bd:e2:57:15:a7:c6:27:eb:c0:60:ae:45:81:4d:4c:ce:a4: fd:1e:20:9d:46:ee:11:a2:c7:ce:d6:c5:10:a4:92:5e:c4:26: 10:d9:9d:ad:d8:ef:18:47:dd:1f:0d:08:d2:76:a1:b4:b8:9b: 7d:12:9f:4a:b2:e7:71:58:8b:5e:21:55:b3:55:e2:c5:34:8b: 92:30:d4:70:3d:fb:42:c5:9f:af:a5:ff:29:46:5d:e5:fc:17: d5:be:44:e2:e3:8b:18:89:11:3a:02:aa:21:c8:8c:21:45:87: 64:9f:82:80:48:1c:d8:e4:97:e5:fe:48:ed:34:bc:3f:82:53: 2d:db:c4:4a:21:c1:43:0f:f4:b2:57:32:5d:b9:b0:ea:84:64: e0:4b:9d:30:8d:f4:aa:ee:aa:c4:66:57:5a:1b:3e:89:52:35: 18:69:5c:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc2MjcxMTAvBgNVBAUTKDA4MEVDMTRBMDAxMjVEOTE0QzdFNjI4NURFOUM1NjY4 OUM1ODcyQTQwHhcNMjUwODIzMDY0NTM1WhcNMjUwODMwMDY0NTM1WjAYMRYwFAYD VQQDEw02OGE5NjM4Zi0yZWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LyEcXiRiqDxba7IjcLQu1gebV0UCut96Uohp25DO6L+sxa3quaPL09qzcnq BUrmQ4GUhFoTlWL38irERsp8XO3tfvfSalyA8Kr2Z8tLMQhumHHjeeAbUUy5FEvV ruVCADIv/HN1OgDqAmsdbPfxtrjBn+4qz3rheIfnc1ZNdhpQoRtuAeVjk+31DsJL znalQRSpkNOiAd2mvCyjkj2PQbbUuf33XbtMciVuFdS5SMnO+n8q6TPySwhbu8Vv qvRu+NGUFiT4mpzSeex8uZJ+54GYGt6hdoM9VvKhXtxmisixIYhkTQTeRLiK32AY 8Q25+wV/v2Px4wyhwz4JX4OhTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTKQ91R eR2AGCX8RhdMZX7BIwMKMB8GA1UdIwQYMBaAFAgOwUoAEl2RTH5ihd6cVmicWHKk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzYyNy9FN0QyNTc4NkE4 OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1haRk1mbUtGM3B4V2FKeFlj cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NBN0JTZ0FTWFpGTWZtS0YzcHhXYUp4WWNxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzYyNy9FN0QyNTc4NkE4OTExMUVGOTI2ODhCMkJDNEY5QUUwMi9DQTdCU2dBU1ha Rk1mbUtGM3B4V2FKeFljcVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDqq+6c/jzMdHM/1RS87BYmu/c9LOoi0PHNyNetimeJlnDGWJEUIxW bK3lNwPuECAVVSzjcCiLFZO93c2ASVinwpXJBEF0iPHn3O2FyCXVWyehb1VhIkv7 8A1AveJXFafGJ+vAYK5FgU1MzqT9HiCdRu4RosfO1sUQpJJexCYQ2Z2t2O8YR90f DQjSdqG0uJt9Ep9KsudxWIteIVWzVeLFNIuSMNRwPftCxZ+vpf8pRl3l/BfVvkTi 44sYiRE6AqohyIwhRYdkn4KASBzY5Jfl/kjtNLw/glMt28RKIcFDD/SyVzJdubDq hGTgS50wjfSq7qrEZldaGz6JUjUYaVyU -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:57 2025 by rpki-client