$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: Y1qtXWeczZ3PZMCEmikag1dpArHlhSX6efAs4rPJwfw= Subject key identifier: 38:7B:1F:71:3F:EC:35:5C:6A:05:74:E8:C8:7D:2F:21:C9:5A:A7:F1 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0623 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 061D Signing time: Fri 22 Aug 2025 22:58:39 +0000 Manifest this update: Fri 22 Aug 2025 22:58:38 +0000 Manifest next update: Fri 29 Aug 2025 22:58:38 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: 91heapliPuXIEb46kMXmBiqKQh7Brds9WE6is2+NSYE=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1571 (0x623) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Aug 22 22:58:38 2025 GMT Not After : Aug 29 22:58:38 2025 GMT Subject: CN=68a8f61f-b467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:70:8c:c1:0e:2a:8d:66:c1:21:4e:99:a1: 1e:c4:07:66:d7:53:6b:02:21:c2:0d:de:bc:e9:fb: dd:cb:0f:2c:97:8f:f1:e3:31:b4:fe:62:51:db:53: 3a:fe:30:8b:c9:70:78:db:00:14:5a:72:c2:04:4c: 9f:c0:59:be:e1:80:c0:22:82:30:6e:2c:2a:47:c2: f8:b5:85:10:32:b7:17:3d:6b:97:40:56:1b:91:21: d4:7e:96:b9:c2:71:1f:56:d2:76:3a:12:ab:df:d2: 68:f2:88:f5:f2:61:45:be:77:26:ac:7a:f7:d6:4e: 3f:67:b8:3e:d4:c8:82:ef:d9:1c:39:9f:b7:0c:da: 34:33:10:1b:b4:ac:90:56:0d:9a:df:cb:b8:a5:f8: 5d:48:08:8e:28:39:16:4b:f3:b6:88:c0:88:30:9b: 06:66:47:d4:ee:d8:f2:a3:3e:ad:b2:8e:28:44:f1: 00:bb:9e:c9:3d:e3:dc:70:77:1a:fd:18:92:54:30: 57:ca:b6:1c:23:a0:f3:ce:dc:da:ca:1b:53:10:2e: a7:25:02:c2:c0:cb:c1:61:97:cb:d7:39:8e:1a:af: df:4c:c3:0d:d4:f3:4f:a7:9d:fe:e3:27:32:db:0d: 2a:83:33:35:fe:c3:96:ac:5f:79:ac:3e:69:c6:e7: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7B:1F:71:3F:EC:35:5C:6A:05:74:E8:C8:7D:2F:21:C9:5A:A7:F1 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1e:44:21:57:e5:36:ef:f4:b4:2c:52:31:7f:d4:25:ad:d3: 6f:f9:7b:2e:b8:2c:1a:97:4f:50:1e:26:c3:e1:dd:b7:33:f5: 80:7c:b8:61:d0:e6:ed:18:93:cd:ed:fb:98:11:c7:70:69:e3: 51:6a:40:5a:0f:06:d4:18:9c:8e:03:66:9b:11:ba:89:0b:57: 81:52:87:0f:7a:c2:7a:68:21:61:c4:69:63:9e:6b:68:e7:50: d7:b3:f5:5b:37:bc:07:af:2f:9e:91:be:bc:31:38:c1:55:91: bc:df:32:47:a2:f3:c7:19:72:1d:28:ea:15:4f:6b:1e:50:8f: ff:79:03:fd:78:59:6f:19:74:88:38:1b:45:9c:c4:f9:0e:aa: 11:c4:63:7c:b8:bf:82:8e:17:a3:69:36:94:40:c2:f4:87:bd: a4:70:0d:89:a5:43:ba:ef:9c:4e:f9:33:43:e2:08:4e:96:5c: f9:a1:75:71:9c:80:be:61:50:21:62:d3:ae:26:fa:0c:cb:30: b5:2c:ed:a9:29:27:4f:1d:2b:1f:fd:80:c1:ca:b5:5c:f9:04: 00:d5:66:c9:c3:f9:9b:08:e7:5d:22:9d:69:b7:a1:99:7a:71: 97:4a:87:77:96:c8:bb:20:90:f9:73:34:13:ff:01:bc:f1:db: 78:a8:d3:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjUwODIyMjI1ODM4WhcNMjUwODI5MjI1ODM4WjAYMRYwFAYD VQQDEw02OGE4ZjYxZi1iNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/BwjMEOKo1mwSFOmaEexAdm11NrAiHCDd686fvdyw8sl4/x4zG0/mJR21M6 /jCLyXB42wAUWnLCBEyfwFm+4YDAIoIwbiwqR8L4tYUQMrcXPWuXQFYbkSHUfpa5 wnEfVtJ2OhKr39Jo8oj18mFFvncmrHr31k4/Z7g+1MiC79kcOZ+3DNo0MxAbtKyQ Vg2a38u4pfhdSAiOKDkWS/O2iMCIMJsGZkfU7tjyoz6tso4oRPEAu57JPePccHca /RiSVDBXyrYcI6DzztzayhtTEC6nJQLCwMvBYZfL1zmOGq/fTMMN1PNPp53+4ycy 2w0qgzM1/sOWrF95rD5pxufZcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDh7H3E/ 7DVcagV06Mh9LyHJWqfxMB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8HkQhV+U27/S0LFIxf9QlrdNv+XsuuCwal09QHibD4d23M/WAfLhh 0ObtGJPN7fuYEcdwaeNRakBaDwbUGJyOA2abEbqJC1eBUocPesJ6aCFhxGljnmto 51DXs/VbN7wHry+ekb68MTjBVZG83zJHovPHGXIdKOoVT2seUI//eQP9eFlvGXSI OBtFnMT5DqoRxGN8uL+CjhejaTaUQML0h72kcA2JpUO675xO+TND4ghOllz5oXVx nIC+YVAhYtOuJvoMyzC1LO2pKSdPHSsf/YDByrVc+QQA1WbJw/mbCOddIp1pt6GZ enGXSod3lsi7IJD5czQT/wG88dt4qNO3 -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:32 2025 by rpki-client