$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft File: I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft (raw, json) Hash identifier: MifdAjJy3kg7jBQ/Lol7RJuslko8wdzrbzC8a8+ZDMY= Subject key identifier: D8:7A:5D:AF:A3:66:B9:7E:A7:21:04:11:E3:FD:27:05:99:98:D7:26 Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC Certificate issuer: /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Certificate serial: 06C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft Manifest number: 06BB Signing time: Fri 18 Jul 2025 22:24:27 +0000 Manifest this update: Fri 18 Jul 2025 22:24:27 +0000 Manifest next update: Fri 25 Jul 2025 22:24:27 +0000 Files and hashes: 1: I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl (hash: 3taRg8MgbZnwJAyQmssUAbNHmKzBUsidYQuAugghBY4=) 2: 1396BBE630E811EEAE1F1212C4F9AE02.roa (hash: XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1732 (0x6c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC Validity Not Before: Jul 18 22:24:27 2025 GMT Not After : Jul 25 22:24:27 2025 GMT Subject: CN=687ac99b-396b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:71:85:af:c3:2a:3d:d5:a1:c6:cb:a9:15:07: cf:f8:1e:95:bb:7f:cc:ce:14:eb:4e:91:5f:19:32: 49:4a:46:ac:f4:74:ad:ed:83:55:82:4f:e4:a2:fd: ba:6c:8c:b8:fc:04:f7:75:14:94:37:57:1e:1d:c7: 54:d8:76:b2:ad:28:1f:97:b3:7c:f0:c0:0a:c2:9d: dc:af:19:9c:e3:99:db:b9:63:ca:cc:25:a4:cf:fd: 29:e4:76:11:81:a9:2c:2e:78:d8:aa:8f:a0:c6:e4: bc:62:a2:0d:c2:3d:18:d6:8e:41:c3:50:eb:77:b8: e1:21:c9:b8:a0:fc:06:e5:c7:4b:6b:97:98:50:51: 20:b3:01:44:4a:1a:6f:6c:2d:44:9c:66:d5:d0:d0: dc:7b:00:f6:01:1d:ca:ed:25:5b:15:d5:a8:cf:48: ac:75:94:42:15:29:dd:19:85:d6:59:d2:ba:28:b4: b8:a9:aa:14:64:78:b5:64:01:7e:30:ca:ba:4e:45: 11:c6:a0:e6:5b:12:32:e6:2a:79:94:f5:c5:a8:c4: 31:a3:3f:0f:84:aa:98:35:09:86:12:28:71:71:b1: d0:9d:c8:1d:ad:40:88:70:f7:ec:df:7b:91:e5:1f: cd:12:b2:5f:8f:21:0e:76:5e:ef:14:87:8f:31:ef: f7:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7A:5D:AF:A3:66:B9:7E:A7:21:04:11:E3:FD:27:05:99:98:D7:26 X509v3 Authority Key Identifier: keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:e9:fc:c0:71:3e:d6:6d:1a:13:a6:e6:35:68:ac:84:b0:f5: cf:35:51:7b:5c:26:e5:bd:a7:d0:fc:ee:04:4c:7c:ac:ce:98: 82:81:5b:ca:5e:94:5c:94:f9:0c:2c:13:1d:4f:77:f2:53:5c: e9:44:c5:19:67:27:81:59:6e:fb:e0:02:5d:69:62:a9:e3:dd: f8:78:e9:74:f9:b1:2e:b5:3f:60:0c:70:b9:d0:0c:4e:7c:61: df:02:b3:d7:c9:54:d5:39:5f:04:f8:d6:1d:4c:4e:7c:36:fb: 65:65:d0:25:5f:1a:0d:ec:ab:69:cc:fa:7b:56:e3:ca:7c:ab: 52:60:22:67:d3:d2:18:65:8b:ff:c7:1d:6a:a9:05:b0:2c:be: 1f:a3:d5:fb:b7:d6:fe:4a:b0:94:82:e1:53:11:43:23:50:9a: a7:9b:78:3c:f2:1e:e9:7c:48:49:02:20:01:00:54:fa:04:cc: 40:c6:2a:be:d7:86:af:d2:aa:5b:a9:f0:45:43:95:64:b1:97: 1d:e6:4f:3b:9a:2a:dd:81:62:6d:1f:52:f8:a0:db:0b:49:99: ae:47:0e:e1:37:0c:35:51:a0:20:24:c4:14:b7:a1:45:7e:8c: 8a:97:20:f3:2a:34:8e:fe:0d:50:53:7a:07:cc:e9:80:4a:d4: 5a:55:2e:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGM0MxMTAvBgNVBAUTKDIzQjMzQjkwMTZFMzExRUVBNkI3MjFDOEI5MzkzOUZC MUE4NzBCRUMwHhcNMjUwNzE4MjIyNDI3WhcNMjUwNzI1MjIyNDI3WjAYMRYwFAYD VQQDEw02ODdhYzk5Yi0zOTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2XGFr8MqPdWhxsupFQfP+B6Vu3/MzhTrTpFfGTJJSkas9HSt7YNVgk/kov26 bIy4/AT3dRSUN1ceHcdU2HayrSgfl7N88MAKwp3crxmc45nbuWPKzCWkz/0p5HYR gaksLnjYqo+gxuS8YqINwj0Y1o5Bw1Drd7jhIcm4oPwG5cdLa5eYUFEgswFEShpv bC1EnGbV0NDcewD2AR3K7SVbFdWoz0isdZRCFSndGYXWWdK6KLS4qaoUZHi1ZAF+ MMq6TkURxqDmWxIy5ip5lPXFqMQxoz8PhKqYNQmGEihxcbHQncgdrUCIcPfs33uR 5R/NErJfjyEOdl7vFIePMe/3gQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh6Xa+j Zrl+pyEEEeP9JwWZmNcmMB8GA1UdIwQYMBaAFCOzO5AW4xHuprchyLk5Ofsahwvs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUYzQy80Nzg2ODM2QTZB QzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVlNm10eUhJdVRrNS14cUhD LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k3TTdrQmJqRWU2bXR5SEl1VGs1LXhxSEMtdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUYzQy80Nzg2ODM2QTZBQzkxMUVCODZDQjZCMjBDNEY5QUUwMi9JN003a0JiakVl Nm10eUhJdVRrNS14cUhDLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBE6fzAcT7WbRoTpuY1aKyEsPXPNVF7XCblvafQ/O4ETHyszpiCgVvK XpRclPkMLBMdT3fyU1zpRMUZZyeBWW774AJdaWKp4934eOl0+bEutT9gDHC50AxO fGHfArPXyVTVOV8E+NYdTE58NvtlZdAlXxoN7KtpzPp7VuPKfKtSYCJn09IYZYv/ xx1qqQWwLL4fo9X7t9b+SrCUguFTEUMjUJqnm3g88h7pfEhJAiABAFT6BMxAxiq+ 14av0qpbqfBFQ5VksZcd5k87mirdgWJtH1L4oNsLSZmuRw7hNww1UaAgJMQUt6FF foyKlyDzKjSO/g1QU3oHzOmAStRaVS5M -----END CERTIFICATE-----Generated at Sun Jul 20 07:25:16 2025 by rpki-client