$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: zdSofTzssndgDvxITOr0WLKTYEP/xA8R0P9bGHEo/M8= Subject key identifier: DA:40:C7:DF:0C:5A:6C:1B:21:6A:6B:9A:EC:C5:5C:73:A2:07:AA:00 Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 12B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 12AB Signing time: Fri 22 Aug 2025 17:12:23 +0000 Manifest this update: Fri 22 Aug 2025 17:12:23 +0000 Manifest next update: Fri 29 Aug 2025 17:12:23 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: PjzIjQ24YFQiWm6Pq19X9+Ps0SroYKyKNDAO6Rwllhw=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4789 (0x12b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Aug 22 17:12:23 2025 GMT Not After : Aug 29 17:12:23 2025 GMT Subject: CN=68a8a4f7-7e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:13:75:95:81:49:e0:12:51:05:59:39:23:45: f2:fc:bb:f0:9e:ab:fc:d5:9a:e1:d9:b2:0b:61:c7: 1c:c2:c1:85:61:96:33:8a:f4:42:54:0c:b5:02:c8: 57:cb:ac:74:3c:49:0f:de:0b:db:15:f0:e1:22:6b: 8a:c5:41:d3:ce:40:7b:48:98:e9:53:65:1b:82:93: 7b:42:3d:8d:31:bf:ca:02:5c:f7:51:b1:b6:82:f9: 56:84:37:8d:a0:9e:d9:10:d2:c6:44:e7:49:b7:a3: af:d6:7f:79:bc:3b:8c:0e:c5:80:44:4f:01:d1:51: bf:16:bc:57:3a:77:6f:34:d0:21:9d:87:62:83:d8: 1e:98:64:45:1f:69:a0:a0:4d:31:a1:a6:e4:61:d2: 3e:7d:00:bb:57:52:4f:1b:6e:4c:21:ce:b5:ac:5f: 5f:da:e5:12:5f:c2:b9:0d:b1:6f:df:66:1d:a8:b0: 25:18:f1:ff:6f:85:9a:bb:1a:48:33:3f:5a:56:3c: 25:46:ae:cf:38:91:d1:e1:fd:f7:e5:68:5c:03:e4: 08:32:c0:25:01:4e:ef:5a:53:69:1c:36:d0:ef:76: 9a:c1:d8:99:44:ac:d6:1e:9e:b8:ba:68:df:45:f4: 10:28:02:98:99:23:52:ec:f3:10:ef:9d:d1:be:5c: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:C7:DF:0C:5A:6C:1B:21:6A:6B:9A:EC:C5:5C:73:A2:07:AA:00 X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:40:2e:e1:b0:69:fa:2e:8b:19:f0:21:a8:e7:2b:83:71:ca: 81:c0:42:36:49:03:c6:05:d7:7a:ca:25:8b:da:8b:db:9c:47: a8:56:68:2b:8e:0a:c0:d0:08:fd:b0:83:aa:ef:16:f0:dc:63: a3:31:99:41:44:4e:2f:cc:3c:f7:4c:0e:62:33:8f:c4:80:c8: bd:8b:20:78:93:f9:bf:5c:d5:cf:4a:0f:54:83:20:a6:47:5b: 04:16:fb:f7:6e:3b:9e:ba:d8:05:7b:e3:f2:d0:75:41:90:ae: 2d:c5:a1:4d:46:77:e4:fb:50:39:8f:b3:96:df:da:e6:37:47: 6a:e5:29:03:5c:d0:d6:47:88:ca:5e:a0:ba:bc:88:91:74:b9: ff:ed:10:02:dd:b8:6c:6a:7c:5f:3a:26:06:34:46:2b:13:94: 0a:e9:1a:43:5f:c9:84:d2:99:b8:76:82:e1:b1:4a:d8:17:1c: 21:fc:47:27:fc:2a:1f:47:02:22:11:77:c9:05:c2:98:0f:8f: 3b:f7:00:b7:5f:a5:24:58:9d:f8:31:35:c8:47:3a:f1:5c:ed: 45:66:1f:8b:8e:5d:91:83:4d:3a:35:e5:8e:73:d7:46:f8:96: 77:d8:b8:90:91:9f:d6:97:19:40:b1:35:98:ba:f6:33:97:a0: fe:a2:18:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICErUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwODIyMTcxMjIzWhcNMjUwODI5MTcxMjIzWjAYMRYwFAYD VQQDEw02OGE4YTRmNy03ZThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2xN1lYFJ4BJRBVk5I0Xy/Lvwnqv81Zrh2bILYcccwsGFYZYzivRCVAy1AshX y6x0PEkP3gvbFfDhImuKxUHTzkB7SJjpU2UbgpN7Qj2NMb/KAlz3UbG2gvlWhDeN oJ7ZENLGROdJt6Ov1n95vDuMDsWARE8B0VG/FrxXOndvNNAhnYdig9gemGRFH2mg oE0xoabkYdI+fQC7V1JPG25MIc61rF9f2uUSX8K5DbFv32YdqLAlGPH/b4WauxpI Mz9aVjwlRq7POJHR4f335WhcA+QIMsAlAU7vWlNpHDbQ73aawdiZRKzWHp64umjf RfQQKAKYmSNS7PMQ753RvlzuVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpAx98M WmwbIWprmuzFXHOiB6oAMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2QC7hsGn6LosZ8CGo5yuDccqBwEI2SQPGBdd6yiWL2ovbnEeoVmgr jgrA0Aj9sIOq7xbw3GOjMZlBRE4vzDz3TA5iM4/EgMi9iyB4k/m/XNXPSg9UgyCm R1sEFvv3bjueutgFe+Py0HVBkK4txaFNRnfk+1A5j7OW39rmN0dq5SkDXNDWR4jK XqC6vIiRdLn/7RAC3bhsanxfOiYGNEYrE5QK6RpDX8mE0pm4doLhsUrYFxwh/Ecn /CofRwIiEXfJBcKYD4879wC3X6UkWJ34MTXIRzrxXO1FZh+Ljl2Rg006NeWOc9dG +JZ32LiQkZ/WlxlAsTWYuvYzl6D+ohiJ -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:06 2025 by rpki-client