$ rpki-client -vvf rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft File: 7CxkBsqh85689Fh1MVANVrlTYsA.mft (raw, json) Hash identifier: pUH97f3X9AtpKAL1ogZPupObmcPLKW9SXMpIg2Vs2BE= Subject key identifier: 67:4A:19:F5:4E:D0:74:08:BD:F8:B0:8B:F8:3D:B4:D6:E5:07:B0:F5 Authority key identifier: EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 Certificate issuer: /CN=A9174880/serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Certificate serial: 34F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft Manifest number: 34CD Signing time: Fri 22 Aug 2025 14:16:47 +0000 Manifest this update: Fri 22 Aug 2025 14:16:46 +0000 Manifest next update: Fri 29 Aug 2025 14:16:46 +0000 Files and hashes: 1: 7CxkBsqh85689Fh1MVANVrlTYsA.crl (hash: HTPlODqaQ6GD4m3BBhbTWGFDv/HWfiPLlcQNJCDTIzw=) 2: 3768DFB41C6011EEAF58FB61C4F9AE02.roa (hash: Un+gRmwEe7RmL1YJ6V7sBXAGRc3bNfxPT16yGupUBnU=) 3: 316EEFD4AAE511E68EBE4D52C4F9AE02.roa (hash: JRg1LZXcFPzNHPCZgdhpiNiCJWsLCkY/WCIHJGUF1Yc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13555 (0x34f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9174880, serialNumber=EC2C6406CAA1F39EBCF4587531500D56B95362C0 Validity Not Before: Aug 22 14:16:46 2025 GMT Not After : Aug 29 14:16:46 2025 GMT Subject: CN=68a87bcf-aafa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:80:e0:28:e1:2d:4b:17:60:7f:2f:d6:88: 74:2c:3c:cb:5f:1c:69:70:c4:b7:65:ad:b1:61:27: 5b:c1:5e:19:0f:6e:83:53:c3:28:69:2f:d8:4b:39: ea:ef:06:73:b9:8f:44:14:fb:3a:02:6c:1b:df:f8: f4:38:d1:5c:36:fc:8c:20:e2:9b:36:7d:e6:50:e5: 9f:1e:69:1f:34:65:85:80:ec:51:f8:8f:2b:e3:1a: 49:d9:14:00:e9:2d:00:61:bf:e3:3c:ee:b9:98:7f: 7d:6a:74:69:ad:d4:ca:ae:ac:8b:64:75:5a:1c:0b: 8e:a7:3f:1c:03:e1:1f:d9:d0:c5:09:7c:de:76:03: f5:80:f3:21:f9:86:86:dd:f1:e8:2d:ef:f7:6c:bc: b7:f2:63:8a:22:0b:cb:3c:81:42:44:31:aa:8f:13: 1b:a4:1c:ed:8c:e0:8c:4c:da:d0:95:c1:af:aa:64: 67:a4:c3:0d:c1:9c:66:2f:2a:9f:1b:9b:03:ce:41: 63:fa:4b:eb:4b:ec:45:6e:ff:11:61:9e:74:4c:57: f5:6e:55:39:b1:22:99:a3:de:99:d4:e3:dd:0d:91: c3:05:2d:30:c4:a8:5d:12:86:56:b3:96:97:17:14: 3b:5c:5b:f5:21:08:3e:e3:61:51:91:29:ed:52:e1: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4A:19:F5:4E:D0:74:08:BD:F8:B0:8B:F8:3D:B4:D6:E5:07:B0:F5 X509v3 Authority Key Identifier: keyid:EC:2C:64:06:CA:A1:F3:9E:BC:F4:58:75:31:50:0D:56:B9:53:62:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7CxkBsqh85689Fh1MVANVrlTYsA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174880/4E86450C1D6A11E2BB7014A808B02CD2/7CxkBsqh85689Fh1MVANVrlTYsA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:17:f5:8a:7d:1d:f8:1b:43:bb:58:b5:28:d3:a5:a3:17:af: 62:f3:94:d3:38:e8:49:87:df:1e:d7:b5:bb:e7:28:49:c2:b7: de:64:0e:f7:c5:b9:da:ac:1c:44:52:b3:93:c2:cd:41:a1:c8: aa:bf:eb:91:dd:6e:b7:54:02:db:4b:74:46:11:48:d7:c1:80: 47:bf:ab:ed:f9:9e:74:d8:dd:63:52:a5:3d:d2:2c:ef:05:c7: 27:f3:f0:0a:b6:8e:fe:2a:bc:08:8f:e3:76:bc:e4:c2:04:db: e6:b6:9d:e1:a6:b1:32:9e:9b:54:94:34:0e:b9:10:b6:95:da: 64:fe:b0:2e:61:86:2c:96:28:3e:f6:b7:52:7f:d5:7d:05:3a: f4:d8:31:d5:2c:72:3e:dd:5c:5f:a1:bf:13:fa:25:ee:76:f0: c0:56:70:81:69:9e:34:dd:6c:d4:d0:c0:e4:cf:d4:33:4c:ec: ab:9a:91:26:ed:6d:81:fe:fc:79:13:7c:20:96:43:9e:a0:ec: 32:44:d9:8f:9d:0d:8e:61:99:94:bd:66:c8:d4:10:3e:05:cf: 5a:d1:56:05:74:cd:52:9e:5a:dc:d1:97:55:a0:88:4a:7b:d5: 4d:71:0d:dc:ba:cd:32:d3:41:42:a6:b8:34:fd:b3:7d:b8:4e: c9:4f:0b:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzQ4ODAxMTAvBgNVBAUTKEVDMkM2NDA2Q0FBMUYzOUVCQ0Y0NTg3NTMxNTAwRDU2 Qjk1MzYyQzAwHhcNMjUwODIyMTQxNjQ2WhcNMjUwODI5MTQxNjQ2WjAYMRYwFAYD VQQDEw02OGE4N2JjZi1hYWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63mA4CjhLUsXYH8v1oh0LDzLXxxpcMS3Za2xYSdbwV4ZD26DU8MoaS/YSznq 7wZzuY9EFPs6Amwb3/j0ONFcNvyMIOKbNn3mUOWfHmkfNGWFgOxR+I8r4xpJ2RQA 6S0AYb/jPO65mH99anRprdTKrqyLZHVaHAuOpz8cA+Ef2dDFCXzedgP1gPMh+YaG 3fHoLe/3bLy38mOKIgvLPIFCRDGqjxMbpBztjOCMTNrQlcGvqmRnpMMNwZxmLyqf G5sDzkFj+kvrS+xFbv8RYZ50TFf1blU5sSKZo96Z1OPdDZHDBS0wxKhdEoZWs5aX FxQ7XFv1IQg+42FRkSntUuGs9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdKGfVO 0HQIvfiwi/g9tNblB7D1MB8GA1UdIwQYMBaAFOwsZAbKofOevPRYdTFQDVa5U2LA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDg4MC80RTg2NDUwQzFE NkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1Njg5RmgxTVZBTlZybFRZ c0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdDeGtCc3FoODU2ODlGaDFNVkFOVnJsVFlzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NDg4MC80RTg2NDUwQzFENkExMUUyQkI3MDE0QTgwOEIwMkNEMi83Q3hrQnNxaDg1 Njg5RmgxTVZBTlZybFRZc0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaF/WKfR34G0O7WLUo06WjF69i85TTOOhJh98e17W75yhJwrfeZA73 xbnarBxEUrOTws1Bociqv+uR3W63VALbS3RGEUjXwYBHv6vt+Z502N1jUqU90izv Bccn8/AKto7+KrwIj+N2vOTCBNvmtp3hprEynptUlDQOuRC2ldpk/rAuYYYslig+ 9rdSf9V9BTr02DHVLHI+3Vxfob8T+iXudvDAVnCBaZ403WzU0MDkz9QzTOyrmpEm 7W2B/vx5E3wglkOeoOwyRNmPnQ2OYZmUvWbI1BA+Bc9a0VYFdM1Snlrc0ZdVoIhK e9VNcQ3cus0y00FCprg0/bN9uE7JTwth -----END CERTIFICATE-----Generated at Sat Aug 23 10:59:29 2025 by rpki-client