$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: b43gqEtHYrAoPPl6a9ln8byip+hoYTsw4cQ0lYz/86w= Subject key identifier: 21:9B:8D:71:75:EF:94:84:B1:57:59:5B:2E:D9:29:08:CE:F5:79:FB Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 19CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 19B7 Signing time: Fri 22 Aug 2025 16:28:31 +0000 Manifest this update: Fri 22 Aug 2025 16:28:31 +0000 Manifest next update: Fri 29 Aug 2025 16:28:31 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: Ye83j/F83aOD1hBp+P9f5RQ++BFQUAE/1bK2RwDSIdU=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: 0hRL6yZO6PYkNxlevkrCS0rz63r1YCZDrVAR2Fyxyls=) 3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM=) 4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: l9XdWoi7pZ0Z/aLBaCXXv7SbiureJhqjsfmA2AlQcsM=) 5: DCD75050315011F0BC916269C4F9AE02.roa (hash: Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:28:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6604 (0x19cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Aug 22 16:28:31 2025 GMT Not After : Aug 29 16:28:31 2025 GMT Subject: CN=68a89aaf-731b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fa:31:8e:d4:f8:6c:4d:a6:f6:d9:df:b8:a0: 58:8e:75:0a:9a:e8:fa:cb:a4:5f:09:ef:83:78:f9: ad:c2:b4:75:20:5c:3f:87:dd:2c:af:69:f6:52:4a: 5f:dd:23:c4:a9:b4:54:ce:78:aa:ca:cf:df:41:ef: 77:98:be:14:4b:34:a7:b3:60:dd:25:75:a5:30:09: eb:dd:54:0d:83:e8:1c:5a:10:39:f1:68:03:47:d9: 63:cf:39:68:cb:ef:0d:3d:74:e0:65:b3:a3:a0:5a: 8e:fa:5e:1a:07:be:93:72:5c:47:7b:d0:66:e3:12: d8:42:23:2d:b0:a9:39:aa:a6:6f:3f:07:01:8f:41: 8b:29:9e:ed:16:62:71:64:23:a1:6a:65:03:0f:3d: 01:8c:fc:46:43:f0:fc:23:9d:b6:1c:4b:0c:04:82: e3:f1:8d:8e:92:a2:af:ff:30:52:84:35:0f:53:8c: 5b:5e:43:6b:f0:7a:7c:cf:db:26:62:07:e8:a9:c4: 59:01:df:37:88:03:f8:3f:00:d4:74:d2:d2:ce:e2: a0:1a:3a:ba:8b:05:4d:9a:7d:86:87:fe:d5:98:ab: a6:7d:16:96:04:d4:08:e4:50:bb:b0:ed:49:71:ff: ac:92:76:79:8f:6f:4c:99:5d:be:6f:86:62:7b:ac: c6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9B:8D:71:75:EF:94:84:B1:57:59:5B:2E:D9:29:08:CE:F5:79:FB X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:20:aa:47:65:ea:eb:f8:45:89:2b:44:38:ae:2c:40:8c: f1:df:3c:b1:c2:c7:1f:ec:ce:c2:bd:c0:68:78:e6:93:7b:be: 38:ef:49:42:5a:f1:3d:6e:c3:00:4a:fd:16:cf:0e:8f:84:84: ad:22:c4:6b:2c:0d:77:dc:2f:51:b9:ab:91:7d:84:9f:ca:7a: 2e:49:25:cd:e0:e8:43:35:eb:02:27:9e:0e:e6:0c:0d:86:5f: 48:af:c3:4c:90:3f:c2:66:7b:73:4f:14:48:c8:db:36:58:fd: cc:cc:b9:8e:9a:fc:a5:f7:dc:07:f7:42:05:ca:67:51:2f:5e: d6:6c:7b:71:82:f4:b1:40:a6:a6:ab:d2:1e:b9:63:64:b7:d8: 52:2a:0b:eb:b2:f2:dd:51:f5:95:3f:ac:3c:58:6f:38:29:19: 1b:22:4a:32:c1:a9:a6:a6:c4:f2:7d:db:85:6a:08:3b:ca:bf: 0e:04:d4:20:18:e9:29:7d:d4:67:5d:0c:19:4c:19:d4:69:40: 6f:e5:2d:b5:48:a8:29:9b:e9:54:b2:2e:23:08:24:93:7f:70: b6:39:1e:34:b2:22:5f:dc:be:4c:d6:5a:20:db:49:80:ec:e8: 88:40:27:c1:ce:7b:12:36:64:68:68:3f:30:08:eb:07:9c:e2: e8:b0:81:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwODIyMTYyODMxWhcNMjUwODI5MTYyODMxWjAYMRYwFAYD VQQDEw02OGE4OWFhZi03MzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAovoxjtT4bE2m9tnfuKBYjnUKmuj6y6RfCe+DePmtwrR1IFw/h90sr2n2Ukpf 3SPEqbRUzniqys/fQe93mL4USzSns2DdJXWlMAnr3VQNg+gcWhA58WgDR9ljzzlo y+8NPXTgZbOjoFqO+l4aB76TclxHe9Bm4xLYQiMtsKk5qqZvPwcBj0GLKZ7tFmJx ZCOhamUDDz0BjPxGQ/D8I522HEsMBILj8Y2OkqKv/zBShDUPU4xbXkNr8Hp8z9sm YgfoqcRZAd83iAP4PwDUdNLSzuKgGjq6iwVNmn2Gh/7VmKumfRaWBNQI5FC7sO1J cf+sknZ5j29MmV2+b4Zie6zGxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCGbjXF1 75SEsVdZWy7ZKQjO9Xn7MB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE5yCqR2Xq6/hFiStEOK4sQIzx3zyxwscf7M7CvcBoeOaTe74470lC WvE9bsMASv0Wzw6PhIStIsRrLA133C9RuauRfYSfynouSSXN4OhDNesCJ54O5gwN hl9Ir8NMkD/CZntzTxRIyNs2WP3MzLmOmvyl99wH90IFymdRL17WbHtxgvSxQKam q9IeuWNkt9hSKgvrsvLdUfWVP6w8WG84KRkbIkoywammpsTyfduFagg7yr8OBNQg GOkpfdRnXQwZTBnUaUBv5S21SKgpm+lUsi4jCCSTf3C2OR40siJf3L5M1log20mA 7OiIQCfBznsSNmRoaD8wCOsHnOLosIGG -----END CERTIFICATE-----Generated at Sun Aug 24 00:16:56 2025 by rpki-client