$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft File: 7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json) Hash identifier: NHoXw9LogaG9jwHSHfD+tVWKXUSlJr/GMvuqpgCaDzY= Subject key identifier: AE:F3:F4:94:A7:33:16:5A:07:30:DF:54:31:CD:CC:81:43:8B:45:1B Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F Certificate issuer: /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft Manifest number: 035C Signing time: Sat 23 Aug 2025 01:13:28 +0000 Manifest this update: Sat 23 Aug 2025 01:13:28 +0000 Manifest next update: Sat 30 Aug 2025 01:13:28 +0000 Files and hashes: 1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: /sJ3xHaV5j3CuxrIJlOjpuHWfjwDfk/lrBhETdqgry0=) 2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=) 3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F Validity Not Before: Aug 23 01:13:28 2025 GMT Not After : Aug 30 01:13:28 2025 GMT Subject: CN=68a915b8-255b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:4c:99:9a:9c:c8:98:b8:97:e0:52:8e:9a: 9b:bd:ea:4c:c4:81:97:27:81:df:82:30:2d:a7:71: 45:d6:ac:63:71:74:46:fa:f6:8c:36:93:17:17:a9: ac:01:ed:ed:17:ec:22:0e:60:2f:bf:b5:c3:a8:4f: 49:36:94:3f:81:3c:a4:8e:45:7f:25:2a:38:c7:b1: 99:53:1e:9f:a4:6e:04:44:e9:1d:09:02:31:09:c1: 83:c3:00:6a:bc:2c:17:82:51:e7:05:a7:17:99:e2: 2c:f8:bf:e2:1a:09:c8:b6:15:10:c1:f7:45:71:8f: a3:27:b1:25:95:81:96:6f:39:34:cc:94:2d:38:6a: 9f:ac:75:f7:90:96:b7:36:88:ae:b1:19:29:36:4d: db:d0:06:32:ff:5c:1f:c1:ac:ee:74:fc:00:fc:bb: 1a:af:ed:71:3b:04:09:b3:a0:a8:91:d8:6e:a7:64: 56:0f:65:c5:e9:32:00:90:b7:6e:de:df:bd:82:14: be:96:bf:d7:21:53:ac:98:ac:85:50:9a:1e:33:34: 7c:67:8a:7b:60:df:35:46:b5:97:a6:b9:2f:a6:53: 75:0e:3e:37:ee:a5:4f:85:b6:a0:61:ab:32:eb:e3: 75:92:f0:d6:10:5d:ad:9b:95:31:8e:b2:4d:6c:95: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:F4:94:A7:33:16:5A:07:30:DF:54:31:CD:CC:81:43:8B:45:1B X509v3 Authority Key Identifier: keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:da:5d:9f:33:0d:78:98:a0:dc:12:5b:c8:b9:de:97:4d:67: 8b:fd:7b:62:29:8f:13:84:d7:f9:48:73:f0:13:b0:8a:9f:c4: 29:ab:8a:f0:1b:18:f4:a4:30:6e:4b:3b:44:72:e3:7a:b7:8b: 0f:44:1b:55:23:2b:f9:47:9e:0f:b1:e0:47:0d:15:fa:c7:94: b0:94:0d:5c:b1:68:1a:9b:5b:ca:c0:64:80:89:c0:98:86:1d: 9d:ea:98:32:e6:7e:3f:46:c3:1f:41:fb:08:d9:22:05:d2:41: f8:a1:da:1b:29:0c:0a:e3:57:a8:e9:8a:1e:f5:55:cb:5a:1a: 79:86:39:13:68:ae:9b:8c:cf:d8:4d:78:2f:0c:7f:91:be:d8: 57:34:f9:b4:8f:25:22:6a:8d:b1:e8:30:be:53:7c:21:60:c3: 44:6a:85:4d:06:bd:cb:ab:9d:5f:0e:7b:c5:f8:cf:61:fe:0e: 29:8f:d5:98:e9:c3:47:62:cf:55:61:b4:1e:3e:cc:9c:2f:07: de:92:4c:f1:6d:8a:32:d9:f7:6b:39:28:7a:6c:77:fd:fa:a8: 0b:e1:92:f8:b6:0e:76:3f:f6:00:80:76:ab:d8:86:60:4a:aa: 9c:d9:31:42:7d:7a:50:4f:14:70:a0:56:83:03:4f:65:42:08: cc:7d:2e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF M0UwRjVENkYwHhcNMjUwODIzMDExMzI4WhcNMjUwODMwMDExMzI4WjAYMRYwFAYD VQQDEw02OGE5MTViOC0yNTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwmxMmZqcyJi4l+BSjpqbvepMxIGXJ4HfgjAtp3FF1qxjcXRG+vaMNpMXF6ms Ae3tF+wiDmAvv7XDqE9JNpQ/gTykjkV/JSo4x7GZUx6fpG4EROkdCQIxCcGDwwBq vCwXglHnBacXmeIs+L/iGgnIthUQwfdFcY+jJ7EllYGWbzk0zJQtOGqfrHX3kJa3 NoiusRkpNk3b0AYy/1wfwazudPwA/Lsar+1xOwQJs6Cokdhup2RWD2XF6TIAkLdu 3t+9ghS+lr/XIVOsmKyFUJoeMzR8Z4p7YN81RrWXprkvplN1Dj437qVPhbagYasy 6+N1kvDWEF2tm5UxjrJNbJVMHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7z9JSn MxZaBzDfVDHNzIFDi0UbMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2 MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC92l2fMw14mKDcElvIud6XTWeL/XtiKY8ThNf5SHPwE7CKn8Qpq4rw Gxj0pDBuSztEcuN6t4sPRBtVIyv5R54PseBHDRX6x5SwlA1csWgam1vKwGSAicCY hh2d6pgy5n4/RsMfQfsI2SIF0kH4odobKQwK41eo6Yoe9VXLWhp5hjkTaK6bjM/Y TXgvDH+RvthXNPm0jyUiao2x6DC+U3whYMNEaoVNBr3Lq51fDnvF+M9h/g4pj9WY 6cNHYs9VYbQePsycLwfekkzxbYoy2fdrOSh6bHf9+qgL4ZL4tg52P/YAgHar2IZg Sqqc2TFCfXpQTxRwoFaDA09lQgjMfS50 -----END CERTIFICATE-----Generated at Sat Aug 23 15:17:44 2025 by rpki-client