$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: Nw0h2hTXGjSutOOMHxy6tDyjfVp7Oa4Tg7lCKRnxo6k= Subject key identifier: F0:D4:94:E9:27:09:07:0C:24:29:4B:2D:7C:E4:7F:8E:71:4C:4C:51 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E26 Signing time: Fri 22 Aug 2025 17:56:25 +0000 Manifest this update: Fri 22 Aug 2025 17:56:24 +0000 Manifest next update: Fri 29 Aug 2025 17:56:24 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: vqZoiZpaFrVVi8TunxfGk7jKwWyxxak4EKdmBBls2QQ=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:56:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3631 (0xe2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Aug 22 17:56:24 2025 GMT Not After : Aug 29 17:56:24 2025 GMT Subject: CN=68a8af48-c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:50:4d:aa:ee:97:1a:4f:93:e9:8e:98:c2:6e: 87:fa:0a:ed:85:ae:3b:a6:c4:a4:91:d0:a5:db:e5: e2:08:c0:68:ba:96:8c:37:0b:de:71:74:cc:69:49: ff:3d:13:17:73:23:cb:e2:17:33:12:b7:77:ac:f0: 9c:57:6c:da:45:e7:4b:4b:da:f2:41:57:fb:16:d2: 15:ee:57:80:95:06:78:3b:76:00:e1:a9:80:25:5c: 2a:d8:2e:a8:7d:0f:53:c2:5a:5f:b5:82:53:40:4d: 75:02:4f:76:a0:f7:6f:7c:69:11:c4:ea:93:a5:61: 84:61:c0:e9:ce:4b:bf:7c:86:40:6f:e4:6d:b4:3b: 47:a8:55:b8:c8:48:e6:43:2e:5d:6e:84:be:34:99: fb:ca:93:11:25:f7:68:37:ac:2e:3e:57:14:71:54: 61:3c:3d:d7:ab:53:db:ca:57:62:3a:99:02:87:b5: 79:01:f3:9e:74:9a:5d:3b:2d:69:96:50:51:d7:b5: dd:1c:48:3c:2c:01:17:3c:cf:d6:28:29:0e:cf:a1: fc:ac:32:3d:66:78:0c:fa:b7:fc:bf:b7:2c:d4:4a: d7:db:36:77:75:ae:29:ba:51:c3:b8:aa:32:18:54: 7c:f7:08:e9:09:58:d7:61:cc:c2:ab:73:67:8e:bb: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D4:94:E9:27:09:07:0C:24:29:4B:2D:7C:E4:7F:8E:71:4C:4C:51 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:fe:cb:b9:14:28:f9:65:64:e4:bd:28:1e:84:1a:88:9d:b0: 8d:63:19:0d:34:17:4e:d1:4a:55:a6:43:50:46:25:31:b6:60: 6b:60:a0:3f:98:1d:1c:ee:84:50:5d:ac:80:b5:ba:4e:ef:b1: 85:ae:9a:9c:6c:26:66:e7:3f:fa:75:66:ef:7c:e3:4f:66:33: 78:60:3c:64:61:04:c6:ce:41:87:92:cf:6c:31:27:a1:4a:4b: 5b:61:01:97:45:cb:7a:17:16:11:b0:a5:21:63:22:4e:e0:33: d4:cb:27:31:a8:28:16:7a:02:88:89:5e:d8:f2:9c:30:3b:da: 2e:79:23:7d:1e:a5:d3:d0:97:49:89:7e:72:f4:24:36:a5:7f: 23:ed:d6:3c:67:52:45:6a:c6:dd:0a:7f:3e:ab:24:96:8a:46: f8:05:6f:02:73:2a:4c:84:8f:8e:ac:d0:54:4b:59:17:c2:ff: a4:60:ff:4d:6a:3d:9b:7f:8f:1c:33:5d:c3:c8:48:22:21:9a: 91:a6:20:ad:17:0d:15:da:33:86:27:46:27:85:1f:99:e1:92: ac:e6:b5:4b:24:f3:81:8a:09:ff:fc:88:89:79:47:d4:34:4e: 5f:c1:0c:46:61:b8:cd:b7:ba:ad:29:22:5d:81:21:71:56:2e: 29:bf:35:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwODIyMTc1NjI0WhcNMjUwODI5MTc1NjI0WjAYMRYwFAYD VQQDEw02OGE4YWY0OC1jM2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA31BNqu6XGk+T6Y6Ywm6H+grtha47psSkkdCl2+XiCMBoupaMNwvecXTMaUn/ PRMXcyPL4hczErd3rPCcV2zaRedLS9ryQVf7FtIV7leAlQZ4O3YA4amAJVwq2C6o fQ9TwlpftYJTQE11Ak92oPdvfGkRxOqTpWGEYcDpzku/fIZAb+RttDtHqFW4yEjm Qy5dboS+NJn7ypMRJfdoN6wuPlcUcVRhPD3Xq1PbyldiOpkCh7V5AfOedJpdOy1p llBR17XdHEg8LAEXPM/WKCkOz6H8rDI9ZngM+rf8v7cs1ErX2zZ3da4pulHDuKoy GFR89wjpCVjXYczCq3NnjrtFgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDUlOkn CQcMJClLLXzkf45xTExRMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH/su5FCj5ZWTkvSgehBqInbCNYxkNNBdO0UpVpkNQRiUxtmBrYKA/ mB0c7oRQXayAtbpO77GFrpqcbCZm5z/6dWbvfONPZjN4YDxkYQTGzkGHks9sMSeh SktbYQGXRct6FxYRsKUhYyJO4DPUyycxqCgWegKIiV7Y8pwwO9oueSN9HqXT0JdJ iX5y9CQ2pX8j7dY8Z1JFasbdCn8+qySWikb4BW8CcypMhI+OrNBUS1kXwv+kYP9N aj2bf48cM13DyEgiIZqRpiCtFw0V2jOGJ0YnhR+Z4ZKs5rVLJPOBign//IiJeUfU NE5fwQxGYbjNt7qtKSJdgSFxVi4pvzVD -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:10 2025 by rpki-client