$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: nxqnxOnUp712BBjqddttS0YSucpH0Lruj0snF5UQVLs= Subject key identifier: B0:5D:5B:6E:AD:AB:B5:9D:79:BB:06:FA:E1:DD:FC:E4:71:40:BC:E1 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 60 Signing time: Sat 23 Aug 2025 07:21:36 +0000 Manifest this update: Sat 23 Aug 2025 07:21:36 +0000 Manifest next update: Sat 30 Aug 2025 07:21:36 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: UwYGQi1XMyCS0NVfYA6Wwxj6WkrEhh3aiKZhoHtJEEE=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Aug 23 07:21:36 2025 GMT Not After : Aug 30 07:21:36 2025 GMT Subject: CN=68a96c00-ad46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:c2:57:54:05:a2:98:eb:1d:17:6c:14:4c: 34:e0:b4:ed:78:44:78:57:5d:2f:96:04:ba:98:96: 60:10:e5:0d:72:fb:6e:f6:ea:17:5d:c3:1c:cf:df: 91:36:ab:2f:da:c5:21:fe:6b:c8:fb:18:35:5e:65: a6:a2:e2:92:2a:85:a4:05:a2:d7:ca:a5:49:c9:55: af:c7:fd:12:b1:8a:47:4c:aa:4f:99:fd:3d:e1:44: 59:b0:2d:65:b5:f8:88:7e:4f:d9:3f:25:6c:ea:b7: e7:bb:75:97:d9:d8:ef:43:1b:80:f7:42:be:89:39: 9d:59:dc:06:d9:5e:67:9b:ca:00:93:6b:ab:33:60: a0:cf:0d:e6:da:a7:9c:f8:7c:56:30:4e:4c:be:88: 9a:7b:bf:d0:23:ff:cf:52:fa:5b:3b:23:01:69:c4: 74:db:3a:70:aa:09:07:e7:75:62:7e:f1:89:cd:57: 49:32:a7:8f:a4:65:95:c3:02:da:16:d9:06:bb:10: a3:7e:1a:20:d2:34:4c:40:81:ec:06:fe:91:a2:cc: 10:63:f0:14:d7:d9:81:63:e2:14:c6:71:d5:a6:d6: 04:ed:cc:91:38:8c:0f:c8:a2:69:1c:ec:47:d8:85: 61:7e:10:cb:bd:cb:70:45:7b:7d:dd:9a:f9:19:22: 21:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5D:5B:6E:AD:AB:B5:9D:79:BB:06:FA:E1:DD:FC:E4:71:40:BC:E1 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:f5:23:9b:38:21:af:64:be:f9:95:9f:01:b7:69:e9:56: 4c:63:bc:77:40:5d:a9:d5:c3:c0:4b:07:23:e7:17:a4:98:1c: ba:b2:c2:79:5a:19:35:c2:e6:33:fa:47:e4:ff:83:cf:f7:31: 95:45:b1:f7:f9:de:4e:83:3e:76:2f:34:73:45:6f:74:80:c7: 73:51:ed:1a:fd:7b:d1:36:c0:8a:e9:53:55:f9:67:92:3f:5e: f7:46:2f:61:36:d8:92:8e:91:db:85:d3:1c:33:f4:26:50:ed: ee:b9:ca:0a:8a:64:47:9b:d6:27:21:71:e8:e5:18:24:a8:6b: b2:f3:44:da:f0:81:e4:e8:60:8c:f7:69:0c:fb:b6:d2:0d:a5: bd:52:a6:0d:2d:a5:53:a1:99:cd:f6:e3:d2:d1:ba:1c:66:d8: 3b:4a:1c:18:32:41:7d:c6:bd:4b:2c:70:fa:b5:5f:dc:84:9c: 92:01:6a:c0:58:61:18:9b:1f:b2:68:98:85:3a:b9:cb:96:39: 1b:43:42:06:d3:11:5a:8c:83:74:b3:22:4d:6f:85:16:18:1a: a0:85:7b:d0:98:2d:59:98:52:86:c5:51:1d:66:a7:ff:09:78: c6:95:31:3b:67:a7:78:77:12:d7:65:8c:20:c4:af:60:b5:e4: e0:4d:a9:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA4MjMwNzIxMzZaFw0yNTA4MzAwNzIxMzZaMBgxFjAUBgNV BAMTDTY4YTk2YzAwLWFkNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTZsJXVAWimOsdF2wUTDTgtO14RHhXXS+WBLqYlmAQ5Q1y+2726hddwxzP35E2 qy/axSH+a8j7GDVeZaai4pIqhaQFotfKpUnJVa/H/RKxikdMqk+Z/T3hRFmwLWW1 +Ih+T9k/JWzqt+e7dZfZ2O9DG4D3Qr6JOZ1Z3AbZXmebygCTa6szYKDPDebap5z4 fFYwTky+iJp7v9Aj/89S+ls7IwFpxHTbOnCqCQfndWJ+8YnNV0kyp4+kZZXDAtoW 2Qa7EKN+GiDSNExAgewG/pGizBBj8BTX2YFj4hTGcdWm1gTtzJE4jA/Iomkc7EfY hWF+EMu9y3BFe33dmvkZIiFTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsF1bbq2r tZ15uwb64d385HFAvOEwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFsA9SObOCGvZL75lZ8Bt2npVkxjvHdAXanVw8BLByPnF6SYHLqywnla GTXC5jP6R+T/g8/3MZVFsff53k6DPnYvNHNFb3SAx3NR7Rr9e9E2wIrpU1X5Z5I/ XvdGL2E22JKOkduF0xwz9CZQ7e65ygqKZEeb1ichcejlGCSoa7LzRNrwgeToYIz3 aQz7ttINpb1Spg0tpVOhmc3249LRuhxm2DtKHBgyQX3GvUsscPq1X9yEnJIBasBY YRibH7JomIU6ucuWORtDQgbTEVqMg3SzIk1vhRYYGqCFe9CYLVmYUobFUR1mp/8J eMaVMTtnp3h3EtdljCDEr2C15OBNqZI= -----END CERTIFICATE-----Generated at Sat Aug 23 17:52:02 2025 by rpki-client