$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: 6teCZZW7bPgalwtRoDy0QU0NaigbxNOIhzgLyq7In9U= Subject key identifier: 27:80:EB:DF:D0:DD:30:8A:A3:7B:A5:B4:08:C7:86:A3:FB:3F:71:D7 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: A2 Signing time: Sat 23 Aug 2025 06:34:21 +0000 Manifest this update: Sat 23 Aug 2025 06:34:20 +0000 Manifest next update: Sat 30 Aug 2025 06:34:20 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: SuZ93xybJAAUURF4b4iHzADlpK06ttn48HiwMZ7kwqI=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Aug 23 06:34:20 2025 GMT Not After : Aug 30 06:34:20 2025 GMT Subject: CN=68a960ec-6acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8c:6d:5e:81:b5:67:88:da:30:31:a6:92:25: cd:2a:ea:83:1e:94:2e:74:d6:e8:4b:1a:67:b0:b8: 12:30:f7:8e:e4:ae:ce:5c:6e:e1:e6:ac:54:47:88: ff:e5:1f:c4:87:c2:f7:87:2c:90:16:c6:c7:a6:15: 2e:1e:78:99:77:de:90:0a:51:db:2a:a3:6e:27:53: 7c:72:e1:09:66:8a:7e:b9:88:63:8c:d1:d8:2f:cf: fb:f7:8d:39:04:86:3f:a8:1f:0e:67:99:65:3e:fc: e7:59:5d:a8:51:8c:11:41:68:82:c3:6e:f4:bb:66: e8:b4:29:35:4e:43:7f:d0:33:7e:94:6c:92:a7:0b: b9:db:35:94:b6:59:6d:b1:7f:1f:ac:20:da:f2:2b: 00:1c:b9:3f:7e:58:fa:80:22:c5:da:7e:b2:31:1d: 09:40:48:18:34:fa:97:16:be:0f:66:5e:bb:55:e5: 14:cb:91:d8:3b:31:4e:2d:88:23:47:98:73:f9:53: 70:7b:2c:93:b0:aa:b4:95:fc:97:7c:7b:6f:82:33: a2:ac:3a:ff:f1:54:d2:10:70:cc:a4:90:ae:c1:c1: d7:f3:16:b2:b4:ce:cd:a0:40:72:9a:29:fd:d3:56: b9:4c:93:64:54:ed:64:97:f0:3e:f9:da:eb:14:38: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:80:EB:DF:D0:DD:30:8A:A3:7B:A5:B4:08:C7:86:A3:FB:3F:71:D7 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:9f:d5:86:10:fe:24:d4:aa:3a:58:0f:71:98:43:91:9a:19: ac:f2:4d:6b:15:70:ab:d7:5c:b8:b1:d3:dd:26:9c:c7:d5:2e: f6:7a:e6:0e:33:d4:7c:7c:c7:9e:7c:e1:17:07:9e:c8:0c:f1: d2:f9:ee:2a:4d:de:9d:9f:60:08:5c:20:be:65:b0:fd:b7:b9: 57:42:54:91:95:84:a4:a2:5c:d6:9d:48:94:1c:e3:37:5a:89: 08:d4:dd:22:07:a4:bf:5a:47:fd:c9:ec:99:a2:b7:d6:0b:a6: d9:96:7c:ab:55:0d:3c:e5:db:0a:fd:3c:f8:05:7e:5a:35:36: 11:92:3c:9b:ba:d3:73:09:80:61:31:bb:92:ca:40:5b:5c:1a: 7e:67:f6:9d:78:40:5f:44:e8:e0:11:aa:3c:2f:e0:bf:f3:55: 1c:d1:b6:22:d8:f2:b2:92:07:1d:82:50:5e:97:83:91:0f:ee: 94:e9:3b:e0:58:ce:d9:90:f2:f5:35:6e:5f:bf:53:aa:9b:89: 99:e3:dd:43:33:80:28:88:0d:be:8b:49:59:9c:85:6a:45:a0: 31:7f:3b:91:7e:77:3b:56:f7:16:07:72:f2:1c:b0:4d:c8:5b: a3:8a:49:fd:c3:e9:ac:5b:7e:c3:2d:62:9e:0b:65:8b:c7:68: 12:72:82:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUwODIzMDYzNDIwWhcNMjUwODMwMDYzNDIwWjAYMRYwFAYD VQQDEw02OGE5NjBlYy02YWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0oxtXoG1Z4jaMDGmkiXNKuqDHpQudNboSxpnsLgSMPeO5K7OXG7h5qxUR4j/ 5R/Eh8L3hyyQFsbHphUuHniZd96QClHbKqNuJ1N8cuEJZop+uYhjjNHYL8/79405 BIY/qB8OZ5llPvznWV2oUYwRQWiCw270u2botCk1TkN/0DN+lGySpwu52zWUtllt sX8frCDa8isAHLk/flj6gCLF2n6yMR0JQEgYNPqXFr4PZl67VeUUy5HYOzFOLYgj R5hz+VNweyyTsKq0lfyXfHtvgjOirDr/8VTSEHDMpJCuwcHX8xaytM7NoEBymin9 01a5TJNkVO1kl/A++drrFDisQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeA69/Q 3TCKo3ultAjHhqP7P3HXMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvn9WGEP4k1Ko6WA9xmEORmhms8k1rFXCr11y4sdPdJpzH1S72euYO M9R8fMeefOEXB57IDPHS+e4qTd6dn2AIXCC+ZbD9t7lXQlSRlYSkolzWnUiUHOM3 WokI1N0iB6S/Wkf9yeyZorfWC6bZlnyrVQ085dsK/Tz4BX5aNTYRkjybutNzCYBh MbuSykBbXBp+Z/adeEBfROjgEao8L+C/81Uc0bYi2PKykgcdglBel4ORD+6U6Tvg WM7ZkPL1NW5fv1Oqm4mZ491DM4AoiA2+i0lZnIVqRaAxfzuRfnc7VvcWB3LyHLBN yFujikn9w+msW37DLWKeC2WLx2gScoLL -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:33 2025 by rpki-client