$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: q6s9/qinCD6o9eyAV3yzm5Ndy3IhgDswigxnEzARG64= Subject key identifier: 19:65:81:0C:CE:92:02:02:76:63:9D:24:04:00:08:AC:42:E2:91:2F Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01DA Signing time: Sat 23 Aug 2025 02:52:15 +0000 Manifest this update: Sat 23 Aug 2025 02:52:15 +0000 Manifest next update: Sat 30 Aug 2025 02:52:14 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: BKvOGUqHfKkYKWAQvY3UmE/kvD8uYqmPHDOLRcywY1s=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:52:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Aug 23 02:52:15 2025 GMT Not After : Aug 30 02:52:14 2025 GMT Subject: CN=68a92cdf-fbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:65:b7:98:f5:f3:61:80:e4:5b:75:d2:cf: cf:a2:6e:57:90:45:c6:24:6a:1d:6c:77:9e:5a:36: 44:7a:c4:27:6f:fb:f8:0b:1e:53:ca:3c:1e:22:f5: 9d:28:ea:13:4b:d9:a9:44:0c:4f:f8:ec:4b:0b:77: ae:b0:c2:34:a1:d0:13:bf:5b:6c:01:ce:83:78:40: 92:0f:d4:e6:4f:44:a1:3d:9b:f9:f9:6b:d5:be:0b: c3:1e:19:b5:fe:9c:c0:e9:3c:d2:48:82:63:32:b7: d6:b6:6c:3f:e2:49:e1:b9:22:d8:c1:09:0e:91:5e: 1b:11:43:52:cc:a4:fc:44:ef:6f:51:ef:43:a7:34: 46:ff:51:bb:8f:1a:b7:3e:4e:75:70:ba:30:c2:8a: 71:12:c4:8d:70:00:ab:61:70:d3:8d:57:0e:7f:3d: 33:b7:db:b4:0f:be:d3:3d:c0:cd:56:18:57:5c:17: f2:8c:5c:e9:fb:46:9e:c7:07:57:9d:a1:33:1d:7e: 47:b4:1a:aa:37:4b:2d:51:1c:f9:83:e9:6c:e2:72: 2d:89:1a:94:cc:e9:c7:c1:b0:7c:d7:49:f3:93:5c: 6a:2e:e0:10:fd:2d:27:64:bf:7d:21:0e:13:9b:4a: 40:04:f7:bc:1a:08:3a:32:de:37:3b:f7:e5:cf:bf: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:65:81:0C:CE:92:02:02:76:63:9D:24:04:00:08:AC:42:E2:91:2F X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:9f:f9:70:39:44:e3:a5:ba:00:91:7f:1d:38:30:e1:bf:5a: ef:b9:1e:88:77:99:fb:44:c0:d2:76:01:88:76:a3:1f:88:6f: 55:0a:dd:0b:06:09:d5:bf:c6:a8:d9:03:4a:64:ba:c5:c2:b2: 6b:d9:4a:54:9d:37:32:e8:cb:76:fa:0c:f3:62:e5:f3:b4:c4: 92:9f:32:f7:c3:c3:3e:3d:70:a2:0a:18:e8:e2:ec:07:96:09: 6a:25:ba:93:d5:ed:b0:c6:2f:78:05:15:73:f8:00:4c:04:72: da:12:9d:87:8d:26:cc:4b:b5:4b:55:5b:e8:2a:4d:84:2e:d6: 72:7c:f3:44:ad:af:3d:71:56:9a:cd:30:51:a6:31:1c:3d:28: 69:49:6a:fe:28:a9:4a:b6:39:13:dd:7d:f4:01:3f:76:ae:78: f2:5f:c7:bb:a0:c9:a7:25:11:ae:93:ba:b6:bc:90:05:db:a8: 9d:56:61:46:02:a0:f8:79:e7:9c:88:b8:f1:27:69:c0:cc:58: ff:26:9a:dd:ee:64:cd:75:4f:1f:0d:72:17:82:70:68:77:4d: 19:4e:2e:0d:d1:73:a7:52:9b:5d:48:21:2c:f4:27:77:af:d9: 25:34:c0:73:a6:2a:0f:8e:fe:45:c5:c7:e0:5c:79:c7:6b:cf: 3b:0b:fd:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwODIzMDI1MjE1WhcNMjUwODMwMDI1MjE0WjAYMRYwFAYD VQQDEw02OGE5MmNkZi1mYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoYdlt5j182GA5Ft10s/Pom5XkEXGJGodbHeeWjZEesQnb/v4Cx5TyjweIvWd KOoTS9mpRAxP+OxLC3eusMI0odATv1tsAc6DeECSD9TmT0ShPZv5+WvVvgvDHhm1 /pzA6TzSSIJjMrfWtmw/4knhuSLYwQkOkV4bEUNSzKT8RO9vUe9DpzRG/1G7jxq3 Pk51cLowwopxEsSNcACrYXDTjVcOfz0zt9u0D77TPcDNVhhXXBfyjFzp+0aexwdX naEzHX5HtBqqN0stURz5g+ls4nItiRqUzOnHwbB810nzk1xqLuAQ/S0nZL99IQ4T m0pABPe8Ggg6Mt43O/flz7/nFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBllgQzO kgICdmOdJAQACKxC4pEvMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfn/lwOUTjpboAkX8dODDhv1rvuR6Id5n7RMDSdgGIdqMfiG9VCt0L BgnVv8ao2QNKZLrFwrJr2UpUnTcy6Mt2+gzzYuXztMSSnzL3w8M+PXCiChjo4uwH lglqJbqT1e2wxi94BRVz+ABMBHLaEp2HjSbMS7VLVVvoKk2ELtZyfPNEra89cVaa zTBRpjEcPShpSWr+KKlKtjkT3X30AT92rnjyX8e7oMmnJRGuk7q2vJAF26idVmFG AqD4eeeciLjxJ2nAzFj/Jprd7mTNdU8fDXIXgnBod00ZTi4N0XOnUptdSCEs9Cd3 r9klNMBzpioPjv5FxcfgXHnHa887C/32 -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:07 2025 by rpki-client