$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: 7/MCkC38X1b4hp421mvdTgpFHbJE4NijedBJV1+PNRg= Subject key identifier: 92:6C:B6:02:17:88:DD:CB:C6:E1:19:AE:86:B7:A8:96:44:A8:B4:85 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01CB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01C1 Signing time: Wed 23 Jul 2025 03:21:55 +0000 Manifest this update: Wed 23 Jul 2025 03:21:55 +0000 Manifest next update: Wed 30 Jul 2025 03:21:55 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: STgvY8jPzELYk3ue+MSTeo7VfqWvV4uSCNoXcbnUWIU=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 03:21:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Jul 23 03:21:55 2025 GMT Not After : Jul 30 03:21:55 2025 GMT Subject: CN=68805553-0785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ad:b5:47:90:64:0c:2e:1a:12:0e:d1:7d:e8: 54:bb:9f:39:48:8e:b6:68:81:b2:4d:8d:21:87:4d: a6:95:4a:01:33:79:e2:bc:f0:f7:8d:93:1a:c9:b8: ec:96:08:86:21:f6:22:ef:e7:53:8b:89:9e:ab:b9: e6:c0:66:af:da:04:4d:b3:6b:51:8c:4e:be:ea:b6: ba:26:d9:50:49:07:c6:06:25:3b:18:06:8b:9c:db: 59:c5:b7:17:60:26:a6:d4:15:88:a9:d1:d6:0b:4d: 10:fb:f5:5d:fc:e2:5c:6c:f8:0d:10:1e:ad:fc:23: 70:90:1d:49:99:82:19:6d:fc:4c:e3:06:84:14:fa: 7e:32:77:b9:b0:64:15:e2:a6:8b:a8:1e:ee:bc:52: 7a:bb:f9:f2:c7:2a:ba:27:14:06:52:a7:df:e9:2a: 86:14:11:27:3a:95:d5:00:24:94:b6:66:4c:d5:7f: 19:08:91:7d:f1:2a:5b:96:59:b4:2f:ca:70:f8:78: b1:c8:f2:13:8f:e6:26:82:b9:57:6e:c1:d4:36:e1: 33:cb:a4:71:48:a2:8e:9b:4c:6c:e4:07:2d:4d:e6: 5a:65:db:f1:b6:10:11:f4:0e:f8:ac:fc:27:6f:b1: 43:89:28:c2:73:9c:bc:0d:c4:b2:10:45:0f:a5:8c: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6C:B6:02:17:88:DD:CB:C6:E1:19:AE:86:B7:A8:96:44:A8:B4:85 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:13:ad:4a:ab:8e:d2:8b:1d:0c:65:36:48:e7:34:d9:72:92: 6b:53:40:d5:8f:da:ba:8f:b3:c1:95:ef:a8:7d:eb:9a:92:84: 77:39:e2:70:f9:6c:c1:d5:a4:0e:12:14:b8:e2:93:c6:77:14: 48:97:2b:6c:ae:74:73:fa:00:70:e3:52:bf:f7:8d:95:3c:76: d8:c7:fd:65:b0:92:fa:30:b7:0a:11:62:8f:7d:40:d7:b3:c3: bd:fc:54:a1:57:2e:bd:fe:3e:96:df:31:6e:80:70:9f:60:ff: 77:5b:ef:a8:f9:54:5a:a5:ac:76:2b:73:70:ad:0c:34:05:4c: 46:d8:93:b4:0b:28:a7:74:db:f6:91:0b:e4:ee:e7:67:79:ab: 90:8e:d4:ef:60:3d:6e:4c:b2:7c:63:56:62:30:08:05:89:ce: 36:a0:91:8d:23:e1:f5:be:6f:38:11:5b:ab:ab:ea:0f:8f:69: ad:50:bd:83:1a:70:4a:0a:3d:94:ae:b0:31:5f:c2:d9:f5:8e: b3:1d:97:52:af:5f:1d:95:2e:d9:bc:6c:fd:45:70:92:21:c6: 32:6f:18:8b:21:9d:5c:f0:9e:96:e0:64:8f:04:b9:65:4f:f8: e4:02:13:ed:53:6b:26:52:c0:e6:7c:eb:9a:ff:6f:29:ff:03: b5:79:b8:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwNzIzMDMyMTU1WhcNMjUwNzMwMDMyMTU1WjAYMRYwFAYD VQQDEw02ODgwNTU1My0wNzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6a21R5BkDC4aEg7RfehUu585SI62aIGyTY0hh02mlUoBM3nivPD3jZMaybjs lgiGIfYi7+dTi4meq7nmwGav2gRNs2tRjE6+6ra6JtlQSQfGBiU7GAaLnNtZxbcX YCam1BWIqdHWC00Q+/Vd/OJcbPgNEB6t/CNwkB1JmYIZbfxM4waEFPp+Mne5sGQV 4qaLqB7uvFJ6u/nyxyq6JxQGUqff6SqGFBEnOpXVACSUtmZM1X8ZCJF98Spbllm0 L8pw+HixyPITj+YmgrlXbsHUNuEzy6RxSKKOm0xs5ActTeZaZdvxthAR9A74rPwn b7FDiSjCc5y8DcSyEEUPpYw6YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJJstgIX iN3LxuEZroa3qJZEqLSFMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6E61Kq47Six0MZTZI5zTZcpJrU0DVj9q6j7PBle+ofeuakoR3OeJw +WzB1aQOEhS44pPGdxRIlytsrnRz+gBw41K/942VPHbYx/1lsJL6MLcKEWKPfUDX s8O9/FShVy69/j6W3zFugHCfYP93W++o+VRapax2K3NwrQw0BUxG2JO0CyindNv2 kQvk7udneauQjtTvYD1uTLJ8Y1ZiMAgFic42oJGNI+H1vm84EVurq+oPj2mtUL2D GnBKCj2UrrAxX8LZ9Y6zHZdSr18dlS7ZvGz9RXCSIcYybxiLIZ1c8J6W4GSPBLll T/jkAhPtU2smUsDmfOua/28p/wO1ebiw -----END CERTIFICATE-----Generated at Wed Jul 23 18:55:30 2025 by rpki-client