$ rpki-client -vvf rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft File: 7C-kN5G65saorcWjDpmoUrYSj68.mft (raw, json) Hash identifier: /9hEXOCeD7tR9ULvD5eFicM2dgOlcQTB+u8WLGWE8qc= Subject key identifier: CF:4F:B3:A4:77:31:A6:E0:C2:B3:92:5D:F6:33:CD:32:C6:3B:59:D5 Authority key identifier: EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF Certificate issuer: /CN=A915A813/serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:31:38 +0000 Manifest this update: Fri 22 Aug 2025 14:31:38 +0000 Manifest next update: Fri 29 Aug 2025 14:31:38 +0000 Files and hashes: 1: 7C-kN5G65saorcWjDpmoUrYSj68.crl (hash: M/pG7XbZ31Awl0ChHeI3zYJa18uIkgHP46EEASMIriM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:31:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A813, serialNumber=EC2FA43791BAE6C6A8ADC5A30E99A852B6128FAF Validity Not Before: Aug 22 14:31:38 2025 GMT Not After : Aug 29 14:31:38 2025 GMT Subject: CN=68a87f4a-b070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:67:97:87:99:38:32:53:4d:01:69:9f:5e: a1:f5:57:2c:85:93:71:1f:44:cb:4d:29:13:aa:43: c7:cc:8a:e9:f9:88:23:c8:0a:55:d1:5d:53:b6:7f: 83:fd:2c:72:f9:ec:d6:43:4b:81:5f:6a:fb:cb:7e: 4e:e7:a3:ea:2c:8d:85:6a:fc:6f:57:5e:9b:cd:13: 4c:17:bb:0d:ff:37:cf:b1:ae:6a:d2:f0:49:52:43: ad:d2:e5:93:9f:78:03:e4:d3:3c:0f:1b:73:99:b3: 6a:1d:ed:c3:ec:7b:9d:f1:23:60:03:75:1d:ba:ce: 57:9b:84:fd:56:7b:bd:4d:7d:03:f8:c0:c3:84:fd: a2:35:19:f4:33:92:25:97:a0:b5:56:5d:1f:87:c3: e6:0c:5c:28:67:56:04:0d:88:98:cd:3e:ff:58:aa: bd:14:c0:88:e3:15:e1:73:0a:04:a0:4c:76:25:a4: 7b:c8:4e:f7:be:b6:fe:50:45:cb:f5:e9:9f:2d:7b: f2:ec:ba:1b:6a:5c:46:d7:17:d3:66:1b:b7:f4:15: d7:2a:43:3c:13:03:9f:d2:03:09:01:2b:d3:cf:9e: 95:e7:a1:ab:e7:e3:4f:b8:ba:08:39:4b:1f:c9:21: 54:e3:98:65:49:68:68:56:33:b7:d9:d8:b8:27:2f: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4F:B3:A4:77:31:A6:E0:C2:B3:92:5D:F6:33:CD:32:C6:3B:59:D5 X509v3 Authority Key Identifier: keyid:EC:2F:A4:37:91:BA:E6:C6:A8:AD:C5:A3:0E:99:A8:52:B6:12:8F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C-kN5G65saorcWjDpmoUrYSj68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A813/5B4D7F521D8911E2A42088E208B02CD2/7C-kN5G65saorcWjDpmoUrYSj68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e3:a4:a8:9b:cc:cf:0e:85:b0:e8:5a:3b:76:21:2f:d7:d2: 50:65:49:e5:2c:35:a1:7b:b5:b7:90:25:be:cd:25:a5:3e:c0: 72:c9:3a:f1:a1:28:02:1c:f3:0d:c2:9d:3f:57:e7:7f:9c:33: 33:f6:4d:61:6b:5c:2c:00:7b:ef:a0:5c:91:ec:66:27:a3:15: 03:b6:7e:14:78:2a:c7:92:ff:cc:43:cf:c4:b5:a7:d2:ba:f8: 64:44:07:f0:16:de:49:95:f2:00:e1:0d:25:57:3e:73:89:23: 4a:90:a8:63:c5:3e:9b:fc:2b:91:02:ee:9c:e5:5b:86:af:f4: d3:d7:9f:c0:35:fd:c0:f1:4d:39:6b:4f:f7:d1:56:d5:e0:18: f7:f3:10:d0:40:fe:d9:b5:7e:dd:a3:b9:93:0d:26:03:2a:4e: 8a:65:07:79:a3:45:b9:26:ab:c1:bb:34:f5:b6:60:e7:ba:00: 1b:85:48:bb:7b:7e:3f:44:6a:7f:c7:11:4e:e5:d0:ef:ff:0f: 8a:2b:16:c6:eb:1a:03:5f:5f:a2:6d:a5:3b:ec:75:fe:28:05: 79:51:d6:13:b7:3e:c5:b9:72:dc:ac:8e:5e:c3:cc:8e:88:1c: a2:b5:83:05:d5:4c:a5:6d:75:e1:e7:dd:bf:f5:5b:4d:75:76: 59:c6:62:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE4MTMxMTAvBgNVBAUTKEVDMkZBNDM3OTFCQUU2QzZBOEFEQzVBMzBFOTlBODUy QjYxMjhGQUYwHhcNMjUwODIyMTQzMTM4WhcNMjUwODI5MTQzMTM4WjAYMRYwFAYD VQQDEw02OGE4N2Y0YS1iMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtA1nl4eZODJTTQFpn16h9VcshZNxH0TLTSkTqkPHzIrp+YgjyApV0V1Ttn+D /Sxy+ezWQ0uBX2r7y35O56PqLI2FavxvV16bzRNMF7sN/zfPsa5q0vBJUkOt0uWT n3gD5NM8DxtzmbNqHe3D7Hud8SNgA3Udus5Xm4T9Vnu9TX0D+MDDhP2iNRn0M5Il l6C1Vl0fh8PmDFwoZ1YEDYiYzT7/WKq9FMCI4xXhcwoEoEx2JaR7yE73vrb+UEXL 9emfLXvy7LobalxG1xfTZhu39BXXKkM8EwOf0gMJASvTz56V56Gr5+NPuLoIOUsf ySFU45hlSWhoVjO32di4Jy/oTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9Ps6R3 MabgwrOSXfYzzTLGO1nVMB8GA1UdIwQYMBaAFOwvpDeRuubGqK3Fow6ZqFK2Eo+v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTgxMy81QjREN0Y1MjFE ODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVzYW9yY1dqRHBtb1VyWVNq NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdDLWtONUc2NXNhb3JjV2pEcG1vVXJZU2o2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTgxMy81QjREN0Y1MjFEODkxMUUyQTQyMDg4RTIwOEIwMkNEMi83Qy1rTjVHNjVz YW9yY1dqRHBtb1VyWVNqNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp46Som8zPDoWw6Fo7diEv19JQZUnlLDWhe7W3kCW+zSWlPsByyTrx oSgCHPMNwp0/V+d/nDMz9k1ha1wsAHvvoFyR7GYnoxUDtn4UeCrHkv/MQ8/EtafS uvhkRAfwFt5JlfIA4Q0lVz5ziSNKkKhjxT6b/CuRAu6c5VuGr/TT15/ANf3A8U05 a0/30VbV4Bj38xDQQP7ZtX7do7mTDSYDKk6KZQd5o0W5JqvBuzT1tmDnugAbhUi7 e34/RGp/xxFO5dDv/w+KKxbG6xoDX1+ibaU77HX+KAV5UdYTtz7FuXLcrI5ew8yO iByitYMF1UylbXXh592/9VtNdXZZxmLj -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:17 2025 by rpki-client