$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft File: 7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json) Hash identifier: MI2M3qzg3SrEombxWnFRzW2TCGUzQsoOlt1OQHlFLLU= Subject key identifier: 69:A1:50:7A:94:4B:6D:EC:3B:27:76:53:48:CF:1C:3B:7A:E6:B9:B0 Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A Certificate issuer: /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Certificate serial: 0502 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft Manifest number: 0502 Signing time: Fri 22 Aug 2025 15:26:04 +0000 Manifest this update: Fri 22 Aug 2025 15:26:03 +0000 Manifest next update: Fri 29 Aug 2025 15:26:03 +0000 Files and hashes: 1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: q/F6bH+mr40XW9OYxVe4egINQ0gbtIPJCJGVuxk6ANI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1282 (0x502) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A Validity Not Before: Aug 22 15:26:03 2025 GMT Not After : Aug 29 15:26:03 2025 GMT Subject: CN=68a88c0b-b493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a2:05:6f:63:5d:e7:03:3f:94:3e:06:7b:6e: 8e:38:83:9a:e1:2b:c9:ce:44:e1:37:60:59:0b:9a: 99:2a:af:73:a0:d3:be:ca:3e:76:b1:07:fc:9a:8d: f9:90:06:fb:c5:87:62:61:42:d3:5d:4e:19:ca:1e: be:40:9d:09:27:22:c2:77:e5:ec:07:a3:03:55:9f: fd:d2:df:83:ac:b1:7e:20:9d:e3:30:16:09:f2:b6: d3:63:0f:5f:a7:02:ab:3d:63:33:35:cf:fc:50:7d: fd:98:8c:fa:26:14:30:c9:0d:85:f5:58:eb:fc:c5: b8:99:e2:5b:cc:3f:0f:4b:fe:ea:2e:ea:7f:0a:df: 46:b7:52:8b:f3:70:28:a8:ad:ba:13:0b:cd:56:20: 39:dc:5e:76:d5:1f:6c:de:e4:95:01:39:9f:27:ad: 9c:49:1d:5b:46:4b:a8:60:7d:f9:85:2a:55:42:ab: 53:8d:6f:ea:95:47:99:2b:f1:00:81:cb:f2:dc:6e: 53:a9:17:47:5c:f9:3c:e4:99:14:9b:6e:ba:0e:c0: 51:01:a2:72:57:29:93:f2:e5:aa:32:0d:05:23:1c: b3:aa:ae:af:02:1b:82:e7:d5:93:26:22:0f:46:f5: 82:39:e9:e8:f5:7a:0f:95:bc:33:66:98:72:69:38: c2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A1:50:7A:94:4B:6D:EC:3B:27:76:53:48:CF:1C:3B:7A:E6:B9:B0 X509v3 Authority Key Identifier: keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:31:eb:bf:58:51:b3:3d:f9:0e:c6:2b:da:6c:75:75:64:c7: 02:93:c3:d9:ff:6e:b2:62:88:29:eb:d7:01:0d:cc:62:f5:99: 90:bd:ee:f9:b6:fc:06:29:60:95:d0:45:63:99:67:37:1d:c8: 57:1b:19:7a:89:8d:e4:52:6c:6d:f0:77:36:82:68:28:1e:84: 7f:96:2b:8b:ab:89:8a:23:dd:da:69:fe:1d:cf:5b:a4:27:02: 58:f1:f8:42:c7:15:99:32:69:d3:fe:e7:91:00:88:24:48:58: 4c:fe:8c:6f:1f:75:1a:00:75:46:98:09:66:82:ee:e4:a4:a1: 23:60:c1:6c:b8:2f:58:da:fe:ed:59:36:2a:ad:60:2f:c2:ed: b2:22:06:14:48:53:69:9d:0d:d3:69:48:e3:bd:dc:1f:c4:af: 48:50:d0:de:f7:ff:50:23:d8:a0:37:46:77:71:1c:bf:d9:5a: 58:74:3f:04:f5:c4:30:f6:57:be:32:07:94:0f:6a:20:a3:d2: 72:63:fb:fc:95:13:16:17:4b:de:fd:53:9f:57:28:a9:83:51: f8:e1:c5:d1:52:53:75:32:fd:35:8d:f3:71:73:94:38:c3:bd: b7:ba:70:24:71:01:82:32:01:35:e0:83:19:38:72:3b:f2:e1: e6:c7:5d:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy NUUxRkQzOEEwHhcNMjUwODIyMTUyNjAzWhcNMjUwODI5MTUyNjAzWjAYMRYwFAYD VQQDEw02OGE4OGMwYi1iNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKIFb2Nd5wM/lD4Ge26OOIOa4SvJzkThN2BZC5qZKq9zoNO+yj52sQf8mo35 kAb7xYdiYULTXU4Zyh6+QJ0JJyLCd+XsB6MDVZ/90t+DrLF+IJ3jMBYJ8rbTYw9f pwKrPWMzNc/8UH39mIz6JhQwyQ2F9Vjr/MW4meJbzD8PS/7qLup/Ct9Gt1KL83Ao qK26EwvNViA53F521R9s3uSVATmfJ62cSR1bRkuoYH35hSpVQqtTjW/qlUeZK/EA gcvy3G5TqRdHXPk85JkUm266DsBRAaJyVymT8uWqMg0FIxyzqq6vAhuC59WTJiIP RvWCOeno9XoPlbwzZphyaTjCvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmhUHqU S23sOyd2U0jPHDt65rmwMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgMeu/WFGzPfkOxivabHV1ZMcCk8PZ/26yYogp69cBDcxi9ZmQve75 tvwGKWCV0EVjmWc3HchXGxl6iY3kUmxt8Hc2gmgoHoR/liuLq4mKI93aaf4dz1uk JwJY8fhCxxWZMmnT/ueRAIgkSFhM/oxvH3UaAHVGmAlmgu7kpKEjYMFsuC9Y2v7t WTYqrWAvwu2yIgYUSFNpnQ3TaUjjvdwfxK9IUNDe9/9QI9igN0Z3cRy/2VpYdD8E 9cQw9le+MgeUD2ogo9JyY/v8lRMWF0ve/VOfVyipg1H44cXRUlN1Mv01jfNxc5Q4 w723unAkcQGCMgE14IMZOHI78uHmx10b -----END CERTIFICATE-----Generated at Sat Aug 23 21:19:41 2025 by rpki-client