$ rpki-client -vvf rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft File: ecf8XRpe7wspjgByMmq3Noa9_ng.mft (raw, json) Hash identifier: OWlyiWhKM8LW5OMOiLC2N41M+/GAflrz+aBRd31csYA= Subject key identifier: C2:74:CA:2B:12:86:63:A2:2D:3A:C0:57:E9:87:F2:76:8C:52:98:D0 Authority key identifier: 79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 Certificate issuer: /CN=A9123918/serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Certificate serial: 76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft Manifest number: 74 Signing time: Sat 19 Jul 2025 07:06:53 +0000 Manifest this update: Sat 19 Jul 2025 07:06:52 +0000 Manifest next update: Sat 26 Jul 2025 07:06:52 +0000 Files and hashes: 1: ecf8XRpe7wspjgByMmq3Noa9_ng.crl (hash: EHvhVCQgP63q/YME8k5xBCgveeBBNlL4pZFgLQ6tEMU=) 2: AD3C9B54BE2611EFA4133323C4F9AE02.roa (hash: 2/xqAVW2RjqNg3GXYQ9uSs72OTWvi6aXWMtqLBm8vdk=) 3: 345F7BDCF80C11EF831DA737C4F9AE02.roa (hash: dqTwEXk6/WsKatxBnEyYDrfeHsARE7OU6TqF9rX2NCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 118 (0x76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9123918, serialNumber=79C7FC5D1A5EEF0B298E0072326AB73686BDFE78 Validity Not Before: Jul 19 07:06:52 2025 GMT Not After : Jul 26 07:06:52 2025 GMT Subject: CN=687b440d-c04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:68:16:cc:15:66:b2:b2:6d:3b:3b:87:9c: fb:67:2c:cc:49:5e:fc:eb:e4:3f:31:e6:68:7b:0c: 99:3d:d8:a8:a8:a0:fb:e4:6f:00:eb:8f:ce:1c:bf: 1b:9a:25:2b:ea:b3:07:02:7d:0a:7a:8c:8e:a7:a8: 62:fa:5c:b9:c7:5a:31:b5:70:0f:78:56:65:ff:15: 0f:ba:f1:f0:cd:a6:d6:43:8e:b9:09:7b:2d:f2:f0: ae:ed:d1:8d:b0:be:a4:9a:d8:e3:63:5a:69:00:00: 74:3d:c3:91:85:65:9c:82:34:9f:7d:67:7f:23:3c: 63:e6:73:96:38:37:ff:dc:38:b9:84:62:54:43:87: fe:2e:06:c8:5d:fd:ed:6f:9e:93:88:6f:09:2c:e9: fa:6d:b5:bb:3b:09:01:05:03:f8:d5:82:fc:bd:8c: 36:cb:2d:12:96:52:ad:61:80:14:45:b2:25:1e:92: f5:ad:2e:1f:b8:65:af:9f:74:21:57:f1:82:03:56: 2f:e4:1d:77:1f:3b:76:71:8e:c5:3e:1e:19:82:57: 1a:71:75:5f:01:56:a2:13:ad:82:c5:c4:8b:46:70: b1:26:9f:98:a0:f4:96:e1:a4:8c:f3:9d:4e:89:aa: 35:7f:ad:45:f0:bf:23:91:0b:d3:55:65:c7:46:e5: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:74:CA:2B:12:86:63:A2:2D:3A:C0:57:E9:87:F2:76:8C:52:98:D0 X509v3 Authority Key Identifier: keyid:79:C7:FC:5D:1A:5E:EF:0B:29:8E:00:72:32:6A:B7:36:86:BD:FE:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ecf8XRpe7wspjgByMmq3Noa9_ng.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123918/8EE71486B6C411EFB10EDE58C4F9AE02/ecf8XRpe7wspjgByMmq3Noa9_ng.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:8f:4a:7f:f6:07:6a:fd:a9:f2:53:57:32:9b:e0:f3:52:3e: bf:07:e1:e5:28:97:d0:10:50:c1:36:eb:2a:4a:62:f8:48:39: d5:83:26:0d:70:0c:99:bc:c1:2d:7e:c6:ae:3c:3c:d3:cd:55: 58:8c:2e:82:bd:1b:aa:d3:44:0e:ba:99:46:e4:44:cb:31:52: 2a:79:4d:b9:ab:92:41:ed:c0:94:1f:4b:cb:61:8b:74:a1:bc: 2a:b0:58:eb:a9:df:86:d4:2f:44:50:3c:56:6a:44:80:60:e0: 69:6e:7a:e4:94:70:9c:c6:c4:0e:db:45:97:c1:35:69:a5:cf: 0b:47:a4:ba:87:e4:83:5b:ef:60:2e:9a:fd:1f:43:be:76:b0: d6:a3:bf:af:cd:75:52:8c:da:f5:b8:48:2f:35:70:d7:91:dd: 98:78:73:ef:7e:69:3f:73:11:68:32:df:b9:b0:6e:33:2c:bc: fd:6e:b2:8b:66:f3:27:c4:ef:a6:6b:fe:ef:1d:9f:2f:d9:9e: 62:33:a9:de:5f:9f:e0:56:a0:c5:1c:e3:9f:15:94:47:ad:ed: 97:b6:46:c5:4a:4b:55:3e:3e:31:42:91:2e:a9:93:4c:37:d0: 93:cd:07:a9:2a:5f:0f:da:45:a5:d2:cd:17:30:b5:a5:22:c6: b2:28:52:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MzkxODExMC8GA1UEBRMoNzlDN0ZDNUQxQTVFRUYwQjI5OEUwMDcyMzI2QUI3MzY4 NkJERkU3ODAeFw0yNTA3MTkwNzA2NTJaFw0yNTA3MjYwNzA2NTJaMBgxFjAUBgNV BAMTDTY4N2I0NDBkLWMwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7rmgWzBVmsrJtOzuHnPtnLMxJXvzr5D8x5mh7DJk92KiooPvkbwDrj84cvxua JSvqswcCfQp6jI6nqGL6XLnHWjG1cA94VmX/FQ+68fDNptZDjrkJey3y8K7t0Y2w vqSa2ONjWmkAAHQ9w5GFZZyCNJ99Z38jPGPmc5Y4N//cOLmEYlRDh/4uBshd/e1v npOIbwks6fpttbs7CQEFA/jVgvy9jDbLLRKWUq1hgBRFsiUekvWtLh+4Za+fdCFX 8YIDVi/kHXcfO3ZxjsU+HhmCVxpxdV8BVqITrYLFxItGcLEmn5ig9JbhpIzznU6J qjV/rUXwvyORC9NVZcdG5fG/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwnTKKxKG Y6ItOsBX6YfydoxSmNAwHwYDVR0jBBgwFoAUecf8XRpe7wspjgByMmq3Noa9/ngw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIzOTE4LzhFRTcxNDg2QjZD NDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dzcGpnQnlNbXEzTm9hOV9u Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWNmOFhScGU3d3NwamdCeU1tcTNOb2E5X25nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIz OTE4LzhFRTcxNDg2QjZDNDExRUZCMTBFREU1OEM0RjlBRTAyL2VjZjhYUnBlN3dz cGpnQnlNbXEzTm9hOV9uZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADOPSn/2B2r9qfJTVzKb4PNSPr8H4eUol9AQUME26ypKYvhIOdWDJg1w DJm8wS1+xq48PNPNVViMLoK9G6rTRA66mUbkRMsxUip5TbmrkkHtwJQfS8thi3Sh vCqwWOup34bUL0RQPFZqRIBg4GlueuSUcJzGxA7bRZfBNWmlzwtHpLqH5INb72Au mv0fQ752sNajv6/NdVKM2vW4SC81cNeR3Zh4c+9+aT9zEWgy37mwbjMsvP1usotm 8yfE76Zr/u8dny/ZnmIzqd5fn+BWoMUc458VlEet7Ze2RsVKS1U+PjFCkS6pk0w3 0JPNB6kqXw/aRaXSzRcwtaUixrIoUoI= -----END CERTIFICATE-----Generated at Sun Jul 20 13:40:28 2025 by rpki-client