$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: XjdXzDsKSYY2V3eno+W4H+JzzqdQz+OY42eBGgXBXP4= Subject key identifier: AF:B1:90:D8:86:93:44:03:93:4D:18:A8:CA:77:2C:2B:68:7F:A6:E1 Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1B1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1B17 Signing time: Fri 22 Aug 2025 16:22:35 +0000 Manifest this update: Fri 22 Aug 2025 16:22:34 +0000 Manifest next update: Fri 29 Aug 2025 16:22:34 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: vCJhkoFBu1zn04MR4QqncnQEbflsnJ/1gwF9BW8291c=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6942 (0x1b1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: Aug 22 16:22:34 2025 GMT Not After : Aug 29 16:22:34 2025 GMT Subject: CN=68a8994a-71a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:5f:60:bb:59:d4:d2:7a:9c:a3:e8:15:3e: 44:20:80:e3:2f:0f:44:8e:8f:00:25:c5:e4:24:28: 4f:f6:9b:ab:3a:5f:2b:85:e7:35:49:70:ca:63:33: 09:28:cf:51:4b:eb:01:7c:d4:28:d1:fd:4c:5c:cd: e9:7e:5d:54:50:be:0b:dc:2f:4c:ec:18:81:a0:13: 3d:82:50:d6:5a:79:d5:6c:d8:9c:3c:af:59:b6:87: 7f:b4:30:1e:d4:4f:ef:d3:dc:59:45:a2:5b:48:e7: 8a:41:be:97:e5:3d:d4:4f:f3:04:04:3b:2b:e9:76: 73:7c:73:2c:88:21:9d:1b:b3:77:1f:71:e0:f8:df: a2:18:d6:72:d8:0b:33:45:b1:10:b7:ee:a7:82:31: 37:52:91:2c:ef:6b:67:e6:eb:23:89:41:61:90:bb: 01:82:3c:0f:8f:db:1d:2d:36:1c:94:00:fc:b2:14: 49:80:83:66:ab:73:70:a9:44:af:55:98:8a:e3:ce: 2d:7b:d5:dd:60:24:9f:13:c2:a4:9d:06:36:5e:4c: ab:06:35:f0:d3:b4:79:56:47:eb:bf:30:0f:30:23: 81:ad:fc:a8:8d:10:28:d4:ba:73:e9:50:c0:d8:38: 9d:88:69:21:67:12:fb:d8:7e:79:f8:76:cd:f4:5d: 9c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B1:90:D8:86:93:44:03:93:4D:18:A8:CA:77:2C:2B:68:7F:A6:E1 X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:42:1e:fb:21:13:3a:f7:38:13:f8:1a:d4:3c:6f:33:d2: 0b:5e:db:4b:a7:70:9e:69:7f:c2:91:95:f3:4e:4e:3b:29:b7: 07:1b:5b:79:a1:e4:5d:bf:17:67:7a:3c:6c:5f:87:9f:9e:6b: d2:d0:e8:21:4f:35:d2:84:43:f4:fd:b3:16:c1:f6:0f:95:2e: c0:9e:a4:fa:df:d3:a2:7d:7b:7d:ec:da:5a:69:e8:66:44:7f: bb:4a:2c:99:0d:a8:9b:cd:04:8b:2f:a9:3d:13:49:b1:3c:18: 71:e7:4e:34:96:84:65:f4:a7:e5:56:de:65:b8:be:dd:87:ff: d5:42:f4:8e:82:fd:d3:97:e0:bd:51:73:c9:13:e9:6a:6e:1c: a5:3e:7b:59:e3:b9:70:b9:96:c5:ed:03:75:b3:de:f6:0f:30: a0:b4:c2:9e:a9:bb:6f:d3:19:13:29:bd:fa:ef:33:27:f2:e8: 2a:88:c5:48:78:6d:88:92:df:bd:57:7b:ba:c6:6b:ff:66:cd: aa:40:e0:22:21:38:5d:2d:c3:5a:e0:36:0d:f8:f6:f8:7c:4e: 43:5b:d6:64:99:62:62:b3:e9:a0:fb:6e:c0:69:9e:ef:d0:c1: f5:9a:e4:80:be:35:43:92:0a:76:29:cf:4f:f3:d7:c3:64:d6: 1b:68:b6:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUwODIyMTYyMjM0WhcNMjUwODI5MTYyMjM0WjAYMRYwFAYD VQQDEw02OGE4OTk0YS03MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NJfYLtZ1NJ6nKPoFT5EIIDjLw9Ejo8AJcXkJChP9purOl8rhec1SXDKYzMJ KM9RS+sBfNQo0f1MXM3pfl1UUL4L3C9M7BiBoBM9glDWWnnVbNicPK9Ztod/tDAe 1E/v09xZRaJbSOeKQb6X5T3UT/MEBDsr6XZzfHMsiCGdG7N3H3Hg+N+iGNZy2Asz RbEQt+6ngjE3UpEs72tn5usjiUFhkLsBgjwPj9sdLTYclAD8shRJgINmq3NwqUSv VZiK484te9XdYCSfE8KknQY2XkyrBjXw07R5VkfrvzAPMCOBrfyojRAo1Lpz6VDA 2DidiGkhZxL72H55+HbN9F2cOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+xkNiG k0QDk00YqMp3LCtof6bhMB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQz0Ie+yETOvc4E/ga1DxvM9ILXttLp3CeaX/CkZXzTk47KbcHG1t5 oeRdvxdnejxsX4efnmvS0OghTzXShEP0/bMWwfYPlS7AnqT639OifXt97Npaaehm RH+7SiyZDaibzQSLL6k9E0mxPBhx5040loRl9KflVt5luL7dh//VQvSOgv3Tl+C9 UXPJE+lqbhylPntZ47lwuZbF7QN1s972DzCgtMKeqbtv0xkTKb367zMn8ugqiMVI eG2Ikt+9V3u6xmv/Zs2qQOAiIThdLcNa4DYN+Pb4fE5DW9ZkmWJis+mg+27AaZ7v 0MH1muSAvjVDkgp2Kc9P89fDZNYbaLYY -----END CERTIFICATE-----Generated at Sun Aug 24 00:46:29 2025 by rpki-client