$ rpki-client -vvf rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft File: r7pNwfpFiSSQIyMcb-7j96cdpA4.mft (raw, json) Hash identifier: vCikFp0ACn4TS5Yk1yrndN2eXJfwLevC6k9FBNP7lnM= Subject key identifier: 8A:34:59:72:CD:B5:58:AE:92:2B:E6:B2:C6:49:A3:6E:95:6D:29:D2 Authority key identifier: AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E Certificate issuer: /CN=A919B663/serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Certificate serial: 018C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft Manifest number: 0188 Signing time: Sat 23 Aug 2025 03:42:08 +0000 Manifest this update: Sat 23 Aug 2025 03:42:07 +0000 Manifest next update: Sat 30 Aug 2025 03:42:07 +0000 Files and hashes: 1: r7pNwfpFiSSQIyMcb-7j96cdpA4.crl (hash: xPs/1vLBy2Y+3d002qMV81OcWYhvzVJym8lTBJpscc0=) 2: 91F274442F2B11EE928A2881C4F9AE02.roa (hash: GyWEom6S3q07RtuEwFpriwJsgcHzGa54vXUp1K8wG2w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 396 (0x18c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B663, serialNumber=AFBA4DC1FA4589249023231C6FEEE3F7A71DA40E Validity Not Before: Aug 23 03:42:07 2025 GMT Not After : Aug 30 03:42:07 2025 GMT Subject: CN=68a9388f-ffe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bc:dc:7f:06:2e:d2:55:5b:df:7d:5d:cb:3a: 17:7c:fb:12:7f:f7:02:00:3d:43:fe:9f:9c:fc:29: b5:d5:d5:e2:70:6c:65:92:84:d3:2e:57:4e:38:41: 97:5b:ca:d5:b5:fb:fc:99:69:7c:35:6a:9c:29:38: 7d:e6:f3:78:d7:1a:c3:e2:c7:f3:35:7c:90:16:6f: de:36:32:4a:a3:6e:2c:72:25:35:cd:43:a7:98:9a: 2b:75:e6:8a:b2:97:fc:af:56:8a:d8:dc:04:41:82: 80:57:79:4f:56:10:f9:29:e0:89:04:df:45:68:35: 58:e5:4b:f9:1a:89:e4:f3:c9:c5:80:5d:93:d7:e6: 33:23:b0:3a:47:4d:12:94:9a:54:9b:1b:23:11:10: ff:b9:36:fc:6a:3d:c7:2a:b0:c0:20:fe:8d:21:38: 2f:9e:6b:ab:27:57:41:89:7b:d3:20:3a:17:a2:99: 21:3a:35:57:b2:59:c0:9b:c9:03:5d:f9:98:d9:5b: 18:78:05:af:3e:39:a6:9d:ae:a6:f1:1d:29:56:8c: ab:52:8c:01:b0:d4:93:03:ce:c2:3a:b6:bd:19:b8: f6:9b:b2:9f:f3:72:27:d4:d4:3e:00:b4:ce:7d:7c: 8c:59:48:8f:3f:93:9f:de:8f:11:4c:ce:cb:07:3d: a5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:59:72:CD:B5:58:AE:92:2B:E6:B2:C6:49:A3:6E:95:6D:29:D2 X509v3 Authority Key Identifier: keyid:AF:BA:4D:C1:FA:45:89:24:90:23:23:1C:6F:EE:E3:F7:A7:1D:A4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7pNwfpFiSSQIyMcb-7j96cdpA4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B663/4ECFEB982CE611EE94D7C92DC4F9AE02/r7pNwfpFiSSQIyMcb-7j96cdpA4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:c4:3c:f3:44:87:e5:e1:12:b1:b5:6b:1c:97:09:29:de:b3: 5c:7e:82:83:56:d9:ee:3b:4d:4f:15:67:09:c2:ef:7b:7c:b5: af:d1:0c:f8:a4:9c:90:41:6f:b7:b3:f1:71:45:8c:e0:e0:ef: 1b:b3:5c:a5:24:90:4b:cf:b6:40:cd:2d:cd:80:46:42:c4:53: e6:53:ad:34:d7:aa:1e:5a:d9:ab:02:80:22:7a:0f:ed:ae:e3: 05:07:42:38:8b:38:77:ae:bc:ae:29:9f:bd:1f:27:42:99:79: fe:f2:63:43:55:4b:2c:33:da:f5:c0:d1:95:43:df:9d:25:d7: f5:be:9d:3c:6a:93:9d:d4:53:23:c2:44:78:9e:ba:9e:d2:6a: 44:45:17:a5:2d:f4:a6:e4:cd:30:81:c5:95:b1:7b:7c:8d:22: c9:fc:3d:3f:c5:dc:48:e7:19:d6:c8:91:af:25:d6:a1:dc:1e: 7d:ec:e3:71:68:6e:93:b5:ac:e4:aa:32:07:cc:03:79:16:b8: 1c:34:0d:d1:65:bb:f2:15:26:58:b0:b8:27:3e:0b:e4:62:78: af:3b:61:c7:f2:c5:3e:98:57:be:79:a4:7f:0f:91:68:81:6c: c6:a5:7a:f1:e8:f7:95:b5:75:fd:62:0e:62:9c:78:c7:fb:50: 99:17:16:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2NjMxMTAvBgNVBAUTKEFGQkE0REMxRkE0NTg5MjQ5MDIzMjMxQzZGRUVFM0Y3 QTcxREE0MEUwHhcNMjUwODIzMDM0MjA3WhcNMjUwODMwMDM0MjA3WjAYMRYwFAYD VQQDEw02OGE5Mzg4Zi1mZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rzcfwYu0lVb331dyzoXfPsSf/cCAD1D/p+c/Cm11dXicGxlkoTTLldOOEGX W8rVtfv8mWl8NWqcKTh95vN41xrD4sfzNXyQFm/eNjJKo24sciU1zUOnmJordeaK spf8r1aK2NwEQYKAV3lPVhD5KeCJBN9FaDVY5Uv5Gonk88nFgF2T1+YzI7A6R00S lJpUmxsjERD/uTb8aj3HKrDAIP6NITgvnmurJ1dBiXvTIDoXopkhOjVXslnAm8kD XfmY2VsYeAWvPjmmna6m8R0pVoyrUowBsNSTA87COra9Gbj2m7Kf83In1NQ+ALTO fXyMWUiPP5Of3o8RTM7LBz2l7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIo0WXLN tViukivmssZJo26VbSnSMB8GA1UdIwQYMBaAFK+6TcH6RYkkkCMjHG/u4/enHaQO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjY2My80RUNGRUI5ODJD RTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlTU1FJeU1jYi03ajk2Y2Rw QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3cE53ZnBGaVNTUUl5TWNiLTdqOTZjZHBBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjY2My80RUNGRUI5ODJDRTYxMUVFOTREN0M5MkRDNEY5QUUwMi9yN3BOd2ZwRmlT U1FJeU1jYi03ajk2Y2RwQTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVxDzzRIfl4RKxtWsclwkp3rNcfoKDVtnuO01PFWcJwu97fLWv0Qz4 pJyQQW+3s/FxRYzg4O8bs1ylJJBLz7ZAzS3NgEZCxFPmU60016oeWtmrAoAieg/t ruMFB0I4izh3rryuKZ+9HydCmXn+8mNDVUssM9r1wNGVQ9+dJdf1vp08apOd1FMj wkR4nrqe0mpERRelLfSm5M0wgcWVsXt8jSLJ/D0/xdxI5xnWyJGvJdah3B597ONx aG6TtazkqjIHzAN5FrgcNA3RZbvyFSZYsLgnPgvkYnivO2HH8sU+mFe+eaR/D5Fo gWzGpXrx6PeVtXX9Yg5inHjH+1CZFxaY -----END CERTIFICATE-----Generated at Sat Aug 23 15:18:57 2025 by rpki-client