$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft File: S-7HT0dvsXHcjtr5SR1swnv4Di8.mft (raw, json) Hash identifier: tYPf9U40DR49nYZxBfxRnxVNWH57tMRQQGZpa8zghiM= Subject key identifier: FE:F8:4A:6C:09:4D:B1:7D:33:91:97:6B:82:35:F2:C9:29:88:2B:93 Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F Certificate issuer: /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft Manifest number: 57 Signing time: Sat 23 Aug 2025 07:25:28 +0000 Manifest this update: Sat 23 Aug 2025 07:25:27 +0000 Manifest next update: Sat 30 Aug 2025 07:25:27 +0000 Files and hashes: 1: S-7HT0dvsXHcjtr5SR1swnv4Di8.crl (hash: LEHw72AGYcZq8nQACn6BuFf0fBZ02qZjkWLQLXM0xFY=) 2: D0D1D812FB0D11EFABB24730C4F9AE02.roa (hash: FptmFY6XaETE0B5U8dohhb5+IR8DEmGWZVTlRovACOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:25:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F Validity Not Before: Aug 23 07:25:27 2025 GMT Not After : Aug 30 07:25:27 2025 GMT Subject: CN=68a96ce8-7962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8e:9a:fe:39:b5:75:db:26:19:da:13:fc:42: de:74:1f:d1:fe:d0:c0:42:73:3f:20:2d:ba:e0:6a: 49:94:8d:61:f1:f8:2b:b3:73:9a:72:5e:0d:cf:dd: 93:2d:d2:43:5c:59:c9:f5:30:76:49:ff:eb:13:bf: c9:39:50:94:e3:0f:05:33:ea:0e:8b:fd:a9:2b:ff: 57:65:0b:7b:5e:88:ca:b8:c2:c1:cc:20:2c:2c:25: 8d:d9:aa:79:14:10:60:cd:72:f2:fe:52:a0:56:e3: f6:38:61:66:c1:e7:e1:a7:15:f6:f1:44:c2:5a:52: a2:4c:99:e6:21:40:98:29:a4:85:b5:84:35:c6:32: a5:97:c6:59:14:30:7f:f7:68:85:76:e7:95:5f:e2: ab:60:75:64:9d:e6:d6:92:cb:33:ab:8d:02:02:7c: b8:c2:90:c7:89:46:cd:52:c9:29:be:5a:8a:bf:98: 7e:3d:dd:5f:fe:49:44:9f:e6:2d:dd:90:49:21:4d: 97:54:30:0a:50:d5:0c:af:0b:fe:e0:ea:c5:ee:b3: 5f:e3:25:78:c9:0a:ec:16:af:af:a4:2c:63:6e:74: 16:d4:51:31:2f:ed:12:b3:3e:93:00:15:fc:33:6b: 5f:0c:29:2b:4d:ae:95:a7:3a:aa:42:9d:77:24:99: 13:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F8:4A:6C:09:4D:B1:7D:33:91:97:6B:82:35:F2:C9:29:88:2B:93 X509v3 Authority Key Identifier: keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ae:a1:85:d9:6d:e2:1d:6d:e6:a7:ed:ff:61:b9:b9:c5:83: 54:ae:34:b7:95:b8:48:b2:20:fa:d8:c8:d1:f3:15:61:89:9f: c6:40:77:65:cd:71:7e:8c:fa:93:f3:1c:96:c6:d9:38:c4:5a: 87:13:13:6e:ba:4a:91:f1:50:b5:5e:25:68:cb:e0:3b:f0:91: 39:8b:96:77:29:46:27:98:1c:02:55:a3:51:55:dd:d6:8d:ad: 08:85:44:9b:88:b0:bd:40:7a:3b:ba:5d:cd:22:65:11:9e:23: 22:24:ed:2d:c9:f4:d1:b3:d9:e4:41:e7:06:13:21:58:4e:8f: 14:8c:c9:a1:44:c8:da:ef:c2:55:b0:df:78:ab:5a:ed:0e:fa: 74:d9:89:21:51:a9:d9:28:27:40:05:e2:88:70:43:45:3e:40: 73:6a:e5:a4:71:2d:d9:6b:58:ee:ca:9c:84:04:4a:19:d5:11: 6f:a1:d3:a1:88:08:d3:29:c7:5a:d0:bf:99:89:df:48:33:91: 5a:ff:14:47:40:4e:9d:e4:bf:e1:24:55:e6:a0:66:f9:7e:0e: 25:f7:96:cf:6d:4d:e3:75:5c:26:00:43:04:27:ce:ce:af:30: 49:c8:80:b9:b9:7b:79:0b:db:ae:97:49:45:8b:4f:8b:51:8c: f1:3e:68:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 Rjk2MTExMC8GA1UEBRMoNEJFRUM3NEY0NzZGQjE3MURDOEVEQUY5NDkxRDZDQzI3 QkY4MEUyRjAeFw0yNTA4MjMwNzI1MjdaFw0yNTA4MzAwNzI1MjdaMBgxFjAUBgNV BAMTDTY4YTk2Y2U4LTc5NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyjpr+ObV12yYZ2hP8Qt50H9H+0MBCcz8gLbrgakmUjWHx+Cuzc5pyXg3P3ZMt 0kNcWcn1MHZJ/+sTv8k5UJTjDwUz6g6L/akr/1dlC3teiMq4wsHMICwsJY3ZqnkU EGDNcvL+UqBW4/Y4YWbB5+GnFfbxRMJaUqJMmeYhQJgppIW1hDXGMqWXxlkUMH/3 aIV255Vf4qtgdWSd5taSyzOrjQICfLjCkMeJRs1SySm+Woq/mH493V/+SUSf5i3d kEkhTZdUMApQ1QyvC/7g6sXus1/jJXjJCuwWr6+kLGNudBbUUTEv7RKzPpMAFfwz a18MKStNrpWnOqpCnXckmRNNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/vhKbAlN sX0zkZdrgjXyySmIK5MwHwYDVR0jBBgwFoAUS+7HT0dvsXHcjtr5SR1swnv4Di8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGOTYxLzA1QjIxQjEwRkIw RDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hIY2p0cjVTUjFzd252NERp OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUy03SFQwZHZzWEhjanRyNVNSMXN3bnY0RGk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG OTYxLzA1QjIxQjEwRkIwRDExRUZCMjQ2NDMyN0M0RjlBRTAyL1MtN0hUMGR2c1hI Y2p0cjVTUjFzd252NERpOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAICuoYXZbeIdbean7f9hubnFg1SuNLeVuEiyIPrYyNHzFWGJn8ZAd2XN cX6M+pPzHJbG2TjEWocTE266SpHxULVeJWjL4DvwkTmLlncpRieYHAJVo1FV3daN rQiFRJuIsL1Aeju6Xc0iZRGeIyIk7S3J9NGz2eRB5wYTIVhOjxSMyaFEyNrvwlWw 33irWu0O+nTZiSFRqdkoJ0AF4ohwQ0U+QHNq5aRxLdlrWO7KnIQEShnVEW+h06GI CNMpx1rQv5mJ30gzkVr/FEdATp3kv+EkVeagZvl+DiX3ls9tTeN1XCYAQwQnzs6v MEnIgLm5e3kL266XSUWLT4tRjPE+aOU= -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:23 2025 by rpki-client