$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: eyBE3V2FebWjrwLTjDuYcwx9DyWUIjzAdc/IjXlQaSY= Subject key identifier: 0A:47:45:C2:5B:D7:65:21:9D:41:15:EB:C1:9D:8F:6F:37:2D:A6:A2 Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 1250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 1240 Signing time: Fri 22 Aug 2025 17:15:12 +0000 Manifest this update: Fri 22 Aug 2025 17:15:11 +0000 Manifest next update: Fri 29 Aug 2025 17:15:11 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: GFlNJtwMqzJbC3egqm0lJ9NHI+ZNSwQrVkoRLb5blA0=) 2: 5EF78FE650FF11F0B4CEA331C4F9AE02.roa (hash: Z62B0jnHVvY2jzsG/dfRq87dnZ8pUku0hBYOhlqYi64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4688 (0x1250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Aug 22 17:15:11 2025 GMT Not After : Aug 29 17:15:11 2025 GMT Subject: CN=68a8a5a0-df1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5a:14:be:46:6e:5c:48:0f:bc:a9:c9:68:41: 7e:55:df:82:37:5b:c0:a2:52:9a:e3:1b:a7:f6:67: e6:a2:42:2b:85:61:4d:3d:28:a2:78:94:b9:1d:d4: c2:4b:b7:97:73:8b:71:d5:72:16:ee:09:53:d0:15: 16:d1:39:1a:cd:15:ff:fa:d8:14:78:db:23:29:d4: b4:15:10:4d:b6:eb:76:42:90:07:bc:80:d4:61:78: 0f:3c:6a:4d:fe:41:95:c2:89:20:4b:fb:3d:08:b3: da:f2:4c:e8:8b:49:52:08:f1:71:3c:a0:5e:24:c8: e9:41:5d:38:02:d7:e8:a9:29:7b:02:b7:70:c6:65: 08:37:c9:06:49:d5:96:67:13:bf:dd:de:1a:0f:79: 12:a6:be:d9:c1:bb:96:b0:0a:aa:cb:60:14:63:10: 5c:47:dc:34:40:71:d5:c3:6f:32:e4:19:86:c0:70: a0:54:ba:2f:c1:cd:84:e1:e1:bf:93:23:87:21:29: bd:82:28:70:17:a3:4f:ef:e2:25:e4:05:07:31:05: 03:7b:e7:05:c6:3e:92:8c:16:9e:94:0a:64:ae:11: c1:13:ad:f1:94:c4:2f:e0:45:14:5a:f3:88:66:02: e9:f2:85:eb:88:95:6c:31:1c:05:77:b7:be:0c:0e: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:47:45:C2:5B:D7:65:21:9D:41:15:EB:C1:9D:8F:6F:37:2D:A6:A2 X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:00:61:b7:99:e1:83:d8:7d:4d:08:d8:41:08:5c:43:19:81: 79:18:1e:8a:86:18:fe:d4:fd:6f:fb:ea:9e:0b:6c:b8:40:eb: c1:61:b8:9b:fd:64:77:51:8c:37:c8:c9:da:62:72:4d:54:ce: 69:5b:d3:cc:17:b8:32:e7:01:5f:2f:07:37:45:b5:24:8b:9d: df:e9:e4:e1:e6:33:5e:8d:21:6f:d7:8f:48:0b:3c:d3:1d:7c: 40:20:9e:9c:a4:bb:07:0c:05:e1:89:69:37:35:53:3b:cf:25: 47:24:e2:9c:62:62:77:d8:03:48:bf:82:7c:d6:69:3b:9d:11: 98:27:3f:29:7e:50:cd:43:aa:6c:ee:80:05:f0:d4:41:d7:e8: 3e:ab:dc:4c:12:c4:d6:a8:14:27:f1:e8:57:a1:ce:a5:0c:fc: f9:12:27:d1:a1:2a:17:46:4e:70:a0:42:86:f8:cb:d7:4f:20: f8:b8:64:dd:27:50:d1:65:21:e7:ba:da:9f:3c:a8:dd:5c:3f: 18:8e:b0:26:0d:cc:94:a0:29:51:65:56:75:ab:95:8e:3b:9f: 27:e5:c0:df:cf:b3:11:59:f8:52:6e:59:fa:4d:46:78:f4:11: 1d:03:0c:70:9a:75:ed:18:50:38:85:af:48:40:d0:a0:3e:c6: 81:9a:64:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICElAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUwODIyMTcxNTExWhcNMjUwODI5MTcxNTExWjAYMRYwFAYD VQQDEw02OGE4YTVhMC1kZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwFoUvkZuXEgPvKnJaEF+Vd+CN1vAolKa4xun9mfmokIrhWFNPSiieJS5HdTC S7eXc4tx1XIW7glT0BUW0TkazRX/+tgUeNsjKdS0FRBNtut2QpAHvIDUYXgPPGpN /kGVwokgS/s9CLPa8kzoi0lSCPFxPKBeJMjpQV04AtfoqSl7ArdwxmUIN8kGSdWW ZxO/3d4aD3kSpr7ZwbuWsAqqy2AUYxBcR9w0QHHVw28y5BmGwHCgVLovwc2E4eG/ kyOHISm9gihwF6NP7+Il5AUHMQUDe+cFxj6SjBaelApkrhHBE63xlMQv4EUUWvOI ZgLp8oXriJVsMRwFd7e+DA7VpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApHRcJb 12UhnUEV68Gdj283LaaiMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqAGG3meGD2H1NCNhBCFxDGYF5GB6Khhj+1P1v++qeC2y4QOvBYbib /WR3UYw3yMnaYnJNVM5pW9PMF7gy5wFfLwc3RbUki53f6eTh5jNejSFv149ICzzT HXxAIJ6cpLsHDAXhiWk3NVM7zyVHJOKcYmJ32ANIv4J81mk7nRGYJz8pflDNQ6ps 7oAF8NRB1+g+q9xMEsTWqBQn8ehXoc6lDPz5EifRoSoXRk5woEKG+MvXTyD4uGTd J1DRZSHnutqfPKjdXD8YjrAmDcyUoClRZVZ1q5WOO58n5cDfz7MRWfhSbln6TUZ4 9BEdAwxwmnXtGFA4ha9IQNCgPsaBmmQT -----END CERTIFICATE-----Generated at Sat Aug 23 20:38:19 2025 by rpki-client