$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: 1PQOUzQglr+T5Qo1YLjpRx7OBU5vS2xxz6u03+320s0= Subject key identifier: DA:04:43:9C:4A:AD:5F:5B:E8:BE:F3:F7:D0:07:EF:1B:47:D6:93:F3 Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 01BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 01B7 Signing time: Sat 23 Aug 2025 03:12:11 +0000 Manifest this update: Sat 23 Aug 2025 03:12:11 +0000 Manifest next update: Sat 30 Aug 2025 03:12:11 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: Krt3d5X8fY0Hd3GcDJxcx6HkPKaBGc16dljqj/bnAoA=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 442 (0x1ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Aug 23 03:12:11 2025 GMT Not After : Aug 30 03:12:11 2025 GMT Subject: CN=68a9318b-d4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:d1:38:f5:0b:46:91:38:1f:d1:62:9c:59: df:88:30:ca:63:58:7b:dd:66:07:75:ab:d0:e0:5c: de:9f:87:56:5e:d3:ba:ae:2f:b2:a0:19:cd:1d:13: 47:ae:42:7c:89:b5:95:14:a8:45:91:5c:33:0f:25: 30:47:4d:af:4c:5a:0f:25:e1:3a:64:58:e3:98:b8: 7a:13:18:7f:80:1b:73:5c:b5:a6:50:9f:55:89:32: eb:06:ed:cb:7e:2d:00:eb:34:28:6b:d8:53:15:1f: 20:ef:1b:cd:6d:1f:89:b3:fa:12:f3:64:50:df:57: 40:60:6b:06:85:72:ea:1c:14:bf:d7:8c:6b:92:94: b2:6f:f8:eb:86:bf:86:ed:61:8f:2e:e0:5e:c9:b9: f6:ce:db:eb:f5:b2:11:d2:d8:0a:37:b3:9d:00:a5: 20:d9:14:f4:65:5e:cf:b7:3b:24:11:65:f4:d9:ce: ef:4c:27:d1:b1:73:59:ad:55:b2:ca:99:11:69:4f: 7b:36:99:79:7d:f6:6f:c2:dd:37:00:b6:61:32:dd: 50:99:16:a7:27:10:52:9a:72:3f:8f:25:35:91:56: 4b:46:3a:63:10:6d:be:51:34:23:f1:77:d1:39:cb: 95:98:74:bc:ca:54:c5:d4:2b:80:f6:a4:a0:18:6b: 22:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:04:43:9C:4A:AD:5F:5B:E8:BE:F3:F7:D0:07:EF:1B:47:D6:93:F3 X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:08:b3:6f:f7:90:10:53:01:82:7e:c2:55:6c:08:18:e2:75: 76:51:67:d0:f2:04:86:43:23:7e:fe:a8:7f:9c:30:81:76:71: 09:95:3d:ac:cc:70:f1:d0:97:48:40:a4:40:0d:bf:b5:b4:7d: bd:22:5f:69:14:d0:cc:ff:13:9f:a9:10:59:fe:0a:9b:98:bd: f9:0d:a3:d3:c5:86:fe:7c:c9:d3:3e:96:1d:a7:4f:ce:a6:75: 91:9d:da:5c:8d:be:2e:fb:58:2e:ea:7a:f2:f2:4b:73:16:5c: 4b:c9:e4:09:30:6f:c0:c3:ea:0d:f5:d0:af:e4:d9:c4:ed:82: f9:29:7c:83:a4:ef:94:80:1b:ac:19:8a:77:94:e0:aa:a8:65: aa:fe:db:ce:74:40:90:7c:ae:f9:2e:33:3b:de:cc:40:7d:af: b2:21:1e:e1:c2:f1:73:c1:5c:2f:d0:f1:7a:44:a1:de:fb:ee: db:44:64:45:07:3a:cf:5a:e0:2c:12:a6:10:06:99:e8:06:8a: c8:1f:29:bd:76:1d:d1:3a:0e:19:02:0f:10:d1:c9:65:64:fb: 2e:4a:d1:43:73:cf:0e:13:12:b5:99:52:66:52:21:a6:8f:95: b7:3d:16:94:07:7c:7d:08:10:f1:63:68:63:8d:0f:55:76:0a: cd:9f:fd:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwODIzMDMxMjExWhcNMjUwODMwMDMxMjExWjAYMRYwFAYD VQQDEw02OGE5MzE4Yi1kNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMPROPULRpE4H9FinFnfiDDKY1h73WYHdavQ4Fzen4dWXtO6ri+yoBnNHRNH rkJ8ibWVFKhFkVwzDyUwR02vTFoPJeE6ZFjjmLh6Exh/gBtzXLWmUJ9ViTLrBu3L fi0A6zQoa9hTFR8g7xvNbR+Js/oS82RQ31dAYGsGhXLqHBS/14xrkpSyb/jrhr+G 7WGPLuBeybn2ztvr9bIR0tgKN7OdAKUg2RT0ZV7PtzskEWX02c7vTCfRsXNZrVWy ypkRaU97Npl5ffZvwt03ALZhMt1QmRanJxBSmnI/jyU1kVZLRjpjEG2+UTQj8XfR OcuVmHS8ylTF1CuA9qSgGGsiNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoEQ5xK rV9b6L7z99AH7xtH1pPzMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFCLNv95AQUwGCfsJVbAgY4nV2UWfQ8gSGQyN+/qh/nDCBdnEJlT2s zHDx0JdIQKRADb+1tH29Il9pFNDM/xOfqRBZ/gqbmL35DaPTxYb+fMnTPpYdp0/O pnWRndpcjb4u+1gu6nry8ktzFlxLyeQJMG/Aw+oN9dCv5NnE7YL5KXyDpO+UgBus GYp3lOCqqGWq/tvOdECQfK75LjM73sxAfa+yIR7hwvFzwVwv0PF6RKHe++7bRGRF BzrPWuAsEqYQBpnoBorIHym9dh3ROg4ZAg8Q0cllZPsuStFDc88OExK1mVJmUiGm j5W3PRaUB3x9CBDxY2hjjQ9VdgrNn/3X -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:04 2025 by rpki-client