$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: /+9bxPtpAhUA8e/PK3Vaol/KjO1jxtGeQMOQbCBRX1c= Subject key identifier: DF:88:35:A4:65:9A:89:CA:9A:5E:DD:28:DE:21:12:C8:72:71:58:A8 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0997 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0990 Signing time: Fri 22 Aug 2025 20:13:30 +0000 Manifest this update: Fri 22 Aug 2025 20:13:29 +0000 Manifest next update: Fri 29 Aug 2025 20:13:29 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: c2uf6p2zJMtZPqHeEfGPJK5bklD2nd1GLK1Y0EIplU0=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2455 (0x997) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Aug 22 20:13:29 2025 GMT Not After : Aug 29 20:13:29 2025 GMT Subject: CN=68a8cf6a-1ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:18:ec:43:0b:b8:d4:bf:8b:dd:84:d8:95: 0d:7d:f9:5b:29:95:06:d5:84:1e:e2:de:9c:3e:1c: 1b:53:48:f8:38:5b:5a:48:a4:07:59:90:49:a4:c0: c4:2b:d3:7e:c8:bc:d3:fd:ac:ea:7c:d8:02:96:e6: 95:e8:26:0d:f0:45:0b:93:ba:f8:cc:04:f5:2b:25: 7f:70:d6:75:be:3a:71:09:ff:7d:12:2b:3d:2b:38: 73:33:e6:76:c5:fc:6e:46:a3:e2:a2:54:a3:3a:37: 3c:7a:f0:2f:92:9a:9b:c1:64:1d:00:61:b7:49:f7: 93:43:7f:8d:24:ce:95:a1:a8:38:b6:07:ce:36:a0: c3:aa:ec:72:e5:af:2d:29:57:48:89:15:65:1c:4f: 0a:03:00:56:cf:65:7c:f3:21:54:95:7d:da:9b:7e: 3d:99:4d:00:fb:d9:e5:a6:4a:b2:9b:ca:97:e0:70: 46:ea:2f:f3:b6:38:dc:00:72:b3:2f:09:24:1f:22: 1f:27:27:c0:3d:a5:bd:db:d9:17:de:2a:56:55:4b: c3:d1:89:83:56:65:00:40:a8:1b:96:59:8d:ab:b5: 18:68:91:3f:b0:d1:0a:7d:3d:fc:96:5a:82:70:3a: c6:13:45:b5:87:37:98:2a:7a:f2:ea:56:6c:45:1e: e3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:88:35:A4:65:9A:89:CA:9A:5E:DD:28:DE:21:12:C8:72:71:58:A8 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:91:2e:5c:6b:67:24:d7:e8:24:64:14:6d:26:a5:2c:97:cf: ec:5b:9e:a0:7b:82:3b:49:9f:60:73:89:1d:b2:14:e9:3b:bb: 30:8c:54:f2:eb:5c:41:b1:f8:9f:ad:66:70:17:73:e7:c3:47: 9c:1c:d6:46:f3:d2:7e:20:1d:73:69:f0:98:e7:a5:8c:ec:de: 20:fa:6a:79:29:47:44:9c:6f:61:db:d8:67:71:f7:93:f2:16: c2:39:63:64:24:ee:9d:33:fc:cd:83:c6:19:62:e7:f6:72:27: 1a:97:03:8c:fd:4a:03:49:87:56:bf:c2:7b:f7:fd:e3:74:5f: 81:83:71:80:09:23:74:43:f0:95:d5:f1:44:52:85:3b:c3:ca: fd:d1:a6:e8:b8:08:14:68:09:88:95:5f:72:31:ae:b4:44:bf: 28:19:55:5f:12:2f:67:3c:b8:5a:db:ed:b4:92:35:c3:56:71: 12:6c:bc:29:10:df:43:b4:ca:1a:d2:7f:65:22:60:a6:a2:dc: 94:6e:a4:f3:a6:03:04:0d:73:47:42:f5:3d:5f:ab:90:2a:3c: fd:32:dc:64:9b:a0:b9:35:c8:7c:ae:36:30:5e:a3:9b:7a:27: db:59:b6:e4:af:31:21:bd:ab:43:96:62:67:93:df:8b:14:d4: c8:2e:8b:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwODIyMjAxMzI5WhcNMjUwODI5MjAxMzI5WjAYMRYwFAYD VQQDEw02OGE4Y2Y2YS0xZWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWsY7EMLuNS/i92E2JUNfflbKZUG1YQe4t6cPhwbU0j4OFtaSKQHWZBJpMDE K9N+yLzT/azqfNgCluaV6CYN8EULk7r4zAT1KyV/cNZ1vjpxCf99Eis9KzhzM+Z2 xfxuRqPiolSjOjc8evAvkpqbwWQdAGG3SfeTQ3+NJM6Voag4tgfONqDDquxy5a8t KVdIiRVlHE8KAwBWz2V88yFUlX3am349mU0A+9nlpkqym8qX4HBG6i/ztjjcAHKz LwkkHyIfJyfAPaW929kX3ipWVUvD0YmDVmUAQKgbllmNq7UYaJE/sNEKfT38llqC cDrGE0W1hzeYKnry6lZsRR7jyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN+INaRl monKml7dKN4hEshycVioMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKkS5ca2ck1+gkZBRtJqUsl8/sW56ge4I7SZ9gc4kdshTpO7swjFTy 61xBsfifrWZwF3Pnw0ecHNZG89J+IB1zafCY56WM7N4g+mp5KUdEnG9h29hncfeT 8hbCOWNkJO6dM/zNg8YZYuf2cicalwOM/UoDSYdWv8J79/3jdF+Bg3GACSN0Q/CV 1fFEUoU7w8r90abouAgUaAmIlV9yMa60RL8oGVVfEi9nPLha2+20kjXDVnESbLwp EN9DtMoa0n9lImCmotyUbqTzpgMEDXNHQvU9X6uQKjz9Mtxkm6C5Nch8rjYwXqOb eifbWbbkrzEhvatDlmJnk9+LFNTILot4 -----END CERTIFICATE-----Generated at Sat Aug 23 20:23:54 2025 by rpki-client