$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft File: DL7Sere2gbyZZqziRPy_KX5lyhk.mft (raw, json) Hash identifier: EWbEyHCSzbvSh0eBejwn/j9yVSFejrfdEEmmwTisN6o= Subject key identifier: D2:ED:24:5F:2D:03:32:0B:B7:B1:A0:8C:27:A9:9F:06:E3:81:28:C2 Authority key identifier: 0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 Certificate issuer: /CN=A9163BEF/serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Certificate serial: 04FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft Manifest number: 04F3 Signing time: Fri 22 Aug 2025 23:53:34 +0000 Manifest this update: Fri 22 Aug 2025 23:53:34 +0000 Manifest next update: Fri 29 Aug 2025 23:53:34 +0000 Files and hashes: 1: DL7Sere2gbyZZqziRPy_KX5lyhk.crl (hash: TMrWnnLV37h5nLb95HVcCXl6MfLz2JSYwDwc0Q7/vnQ=) 2: 8A9545AE6D1011EFA13D6E2BC4F9AE02.roa (hash: RwcRY83ScxlbqM04nHpwXB0Y4y38xjFyFzwqEWYpGkc=) 3: 8A190AB66D1011EFA13D6E2BC4F9AE02.roa (hash: AAv9iRZkCrIdjmlojo08VQ3Lr0iHsrSZtwCxTUl/qrA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1275 (0x4fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163BEF, serialNumber=0CBED27AB7B681BC9966ACE244FCBF297E65CA19 Validity Not Before: Aug 22 23:53:34 2025 GMT Not After : Aug 29 23:53:34 2025 GMT Subject: CN=68a902fe-db56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:1c:46:eb:ee:5e:a3:1a:b6:7e:c6:8f:65: a4:78:65:bf:0b:9f:a8:8b:c1:f4:0f:54:c7:41:e2: 8f:63:4c:2d:a4:a2:ad:ee:5a:16:00:24:ef:73:bf: 5d:6d:7a:9e:88:d9:66:67:c2:49:2d:66:16:1f:18: 51:6f:8f:b4:6b:18:9c:95:77:25:2f:45:02:e5:8e: c3:94:54:4d:b8:02:47:dd:8b:0b:39:d5:66:53:a3: 7b:73:1a:9e:0c:90:0d:b9:80:4a:44:68:df:88:3c: ee:ba:4e:c8:cb:7d:d0:4e:f6:83:24:9e:d3:75:af: 41:79:c0:76:bd:02:79:8e:c1:05:14:40:95:f2:1d: 5c:4f:79:a5:a5:78:84:d4:03:69:a3:ba:87:b5:cf: 3e:48:c3:23:f8:dd:a2:c7:d0:2a:f6:6e:40:06:10: 08:28:3b:1f:63:4f:4a:f0:3b:29:1c:89:6f:de:e9: a0:b5:4f:be:bd:0b:ea:ac:80:10:7b:e4:7b:26:b2: 73:43:51:b6:7a:11:85:ff:bc:4f:03:09:4a:5d:e9: 3f:8f:db:7e:fe:55:95:94:74:df:a4:77:50:e0:6f: 99:13:bd:bf:d9:89:07:54:01:72:c8:e0:e6:65:48: 65:45:1e:87:3b:f7:cc:5e:9f:3e:a3:19:4a:6d:32: 67:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:ED:24:5F:2D:03:32:0B:B7:B1:A0:8C:27:A9:9F:06:E3:81:28:C2 X509v3 Authority Key Identifier: keyid:0C:BE:D2:7A:B7:B6:81:BC:99:66:AC:E2:44:FC:BF:29:7E:65:CA:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DL7Sere2gbyZZqziRPy_KX5lyhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BEF/8AAFE28C25CF11EC8B4A992EC4F9AE02/DL7Sere2gbyZZqziRPy_KX5lyhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:f2:64:1c:e5:d7:c6:91:3b:9d:0a:d9:ed:01:0c:31:b8:ca: 96:9a:44:e7:df:a4:c1:5a:e4:c6:42:f6:42:47:a6:49:06:05: bd:02:ed:85:4a:3f:4a:64:46:73:f8:f1:f4:05:c0:57:00:02: 31:72:a5:60:95:f5:b8:74:b9:b5:3e:a5:4e:2e:b8:25:b0:74: 96:99:e4:99:c5:6c:20:b5:98:22:7e:67:ca:c3:f9:aa:3b:8c: 0d:91:86:4f:40:19:54:9c:b1:a3:f0:31:2d:cc:82:d1:e6:1d: 54:63:2a:e1:a5:d8:bf:f4:f2:ce:7e:8e:f9:92:ed:72:97:2c: 6e:75:f0:1c:5a:a1:ed:12:d4:44:30:e8:02:2d:a4:ab:68:1f: a5:bc:9b:d2:ba:52:0a:20:8d:f3:e6:b2:f1:45:18:7a:3e:00: 37:ce:07:ed:5f:a4:be:9e:49:ab:dc:ed:f6:b6:a4:b8:87:84: 9e:a9:13:4b:88:c2:13:27:69:c7:7e:10:fc:38:ec:4b:5e:cb: 75:69:73:a1:16:bf:80:ef:4e:a2:6c:50:46:9b:c0:2d:b7:8e: 26:1e:00:68:6b:46:41:de:5d:6e:77:31:4f:8b:45:30:02:ea: d4:5d:1f:09:12:c8:3c:28:88:ed:cc:61:14:71:1e:4d:22:3f: 28:7f:8c:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjNCRUYxMTAvBgNVBAUTKDBDQkVEMjdBQjdCNjgxQkM5OTY2QUNFMjQ0RkNCRjI5 N0U2NUNBMTkwHhcNMjUwODIyMjM1MzM0WhcNMjUwODI5MjM1MzM0WjAYMRYwFAYD VQQDEw02OGE5MDJmZS1kYjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp3IcRuvuXqMatn7Gj2WkeGW/C5+oi8H0D1THQeKPY0wtpKKt7loWACTvc79d bXqeiNlmZ8JJLWYWHxhRb4+0axiclXclL0UC5Y7DlFRNuAJH3YsLOdVmU6N7cxqe DJANuYBKRGjfiDzuuk7Iy33QTvaDJJ7Tda9BecB2vQJ5jsEFFECV8h1cT3mlpXiE 1ANpo7qHtc8+SMMj+N2ix9Aq9m5ABhAIKDsfY09K8DspHIlv3umgtU++vQvqrIAQ e+R7JrJzQ1G2ehGF/7xPAwlKXek/j9t+/lWVlHTfpHdQ4G+ZE72/2YkHVAFyyODm ZUhlRR6HO/fMXp8+oxlKbTJnYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLtJF8t AzILt7GgjCepnwbjgSjCMB8GA1UdIwQYMBaAFAy+0nq3toG8mWas4kT8vyl+ZcoZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2M0JFRi84QUFGRTI4QzI1 Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdieVpacXppUlB5X0tYNWx5 aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0RMN1NlcmUyZ2J5WlpxemlSUHlfS1g1bHloay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 M0JFRi84QUFGRTI4QzI1Q0YxMUVDOEI0QTk5MkVDNEY5QUUwMi9ETDdTZXJlMmdi eVpacXppUlB5X0tYNWx5aGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn8mQc5dfGkTudCtntAQwxuMqWmkTn36TBWuTGQvZCR6ZJBgW9Au2F Sj9KZEZz+PH0BcBXAAIxcqVglfW4dLm1PqVOLrglsHSWmeSZxWwgtZgifmfKw/mq O4wNkYZPQBlUnLGj8DEtzILR5h1UYyrhpdi/9PLOfo75ku1ylyxudfAcWqHtEtRE MOgCLaSraB+lvJvSulIKII3z5rLxRRh6PgA3zgftX6S+nkmr3O32tqS4h4SeqRNL iMITJ2nHfhD8OOxLXst1aXOhFr+A706ibFBGm8Att44mHgBoa0ZB3l1udzFPi0Uw AurUXR8JEsg8KIjtzGEUcR5NIj8of4yu -----END CERTIFICATE-----Generated at Sun Aug 24 05:02:06 2025 by rpki-client