$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft File: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json) Hash identifier: 5upiXvXqWyMofMLGJYI+cUOHGziw9DLFTJ74yhKnkWs= Subject key identifier: 49:DD:90:3F:13:84:DD:F0:14:99:FD:0C:FC:A5:F9:1A:6F:91:2A:BE Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 Certificate issuer: /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Certificate serial: 064E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft Manifest number: 0645 Signing time: Sun 20 Jul 2025 22:49:59 +0000 Manifest this update: Sun 20 Jul 2025 22:49:58 +0000 Manifest next update: Sun 27 Jul 2025 22:49:58 +0000 Files and hashes: 1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: moH07FQ9Pt75Afs2IMEyHgbCdVVxQUiWS7x2NooKu/U=) 2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1614 (0x64e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Validity Not Before: Jul 20 22:49:58 2025 GMT Not After : Jul 27 22:49:58 2025 GMT Subject: CN=687d7297-23e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:16:4a:84:48:34:2e:e6:3f:78:dc:79:25:ef: 73:07:da:92:31:c3:5c:7d:f6:36:3a:29:73:3d:fc: f6:00:a2:7d:75:6b:11:fe:3e:1b:bf:4d:5d:4f:7a: 5a:bf:36:3e:eb:08:e4:34:90:09:90:53:38:fc:29: 8c:33:31:1d:fb:b4:5e:7c:65:3d:de:73:aa:85:2f: 0f:a3:d6:9a:a3:fc:2e:a6:9e:14:87:59:f2:77:55: ee:6b:7c:a0:27:94:05:c5:d1:27:29:8a:ce:7b:53: ed:db:9f:b3:44:92:b7:f4:28:2f:cb:c1:40:d4:04: 51:2d:a1:0e:1a:f9:34:06:df:5e:79:07:ea:07:45: 3e:88:01:55:35:d2:4d:7f:7b:3f:65:2e:b1:70:cd: 02:01:d7:69:a7:44:ba:a0:a8:f5:82:c8:97:f8:99: d1:1c:1b:07:01:91:ab:2e:8f:ea:3f:41:95:f7:23: 44:25:ed:a1:8d:63:5b:ef:47:47:cb:5b:ae:7b:87: a6:09:66:c0:49:2b:89:83:bf:50:2f:bf:a8:64:75: 10:0b:43:10:f5:e6:15:3a:a2:4a:1d:31:d4:70:4d: 28:68:b7:94:b6:30:21:62:bc:bb:12:5a:06:d8:d9: 07:bc:9f:e9:b0:75:c7:72:95:f7:3a:60:bb:36:73: cd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:90:3F:13:84:DD:F0:14:99:FD:0C:FC:A5:F9:1A:6F:91:2A:BE X509v3 Authority Key Identifier: keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:ea:3f:03:a1:76:54:8b:8b:8c:b2:b0:eb:76:47:af:98:5b: fc:32:1f:3a:13:ef:73:1a:7f:84:72:89:91:3c:dd:3d:75:08: 93:89:a4:fb:f8:19:67:43:2d:aa:2f:7c:0b:68:2d:08:86:89: 01:0b:c2:2b:c9:1e:2d:03:50:bd:b9:f6:5e:15:38:47:28:b1: 04:40:fa:d3:9b:4d:91:92:23:67:a5:df:a4:9a:4d:b2:1f:9b: 43:78:a1:70:b5:27:13:54:1f:91:a6:4a:10:1e:84:1b:83:9f: a5:4c:fe:fe:26:35:81:71:fa:b8:db:5c:91:5b:bb:3a:6a:16: 6f:3b:7f:30:40:d0:80:51:41:ed:b0:8d:55:ad:19:2d:4e:72: 14:e6:68:1c:7d:dc:97:f5:f4:e5:a9:e7:63:9a:5c:b8:f6:7c: 9a:ab:8f:d9:e4:4b:2a:6f:04:c4:53:24:21:62:f9:93:da:be: b7:4f:09:42:f0:d7:99:90:d7:71:c1:03:64:45:fa:6c:bb:97: 0f:07:a6:f5:13:34:20:ea:cd:6e:0d:62:3d:cd:6f:1a:34:84: 25:80:5d:be:79:28:ea:d3:ce:fd:7e:19:3b:47:60:b5:dc:d8: ba:5c:5c:85:cb:24:03:3c:48:2a:54:e0:7e:c5:4b:49:b2:11: 1b:7a:e4:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U3Q0ExMTAvBgNVBAUTKEZGQjUwM0YyMDIzMjBDRDg2OTczQUZFNjFBMTZGQkI1 QzZGMjhENjQwHhcNMjUwNzIwMjI0OTU4WhcNMjUwNzI3MjI0OTU4WjAYMRYwFAYD VQQDEw02ODdkNzI5Ny0yM2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BZKhEg0LuY/eNx5Je9zB9qSMcNcffY2OilzPfz2AKJ9dWsR/j4bv01dT3pa vzY+6wjkNJAJkFM4/CmMMzEd+7RefGU93nOqhS8Po9aao/wupp4Uh1nyd1Xua3yg J5QFxdEnKYrOe1Pt25+zRJK39Cgvy8FA1ARRLaEOGvk0Bt9eeQfqB0U+iAFVNdJN f3s/ZS6xcM0CAddpp0S6oKj1gsiX+JnRHBsHAZGrLo/qP0GV9yNEJe2hjWNb70dH y1uue4emCWbASSuJg79QL7+oZHUQC0MQ9eYVOqJKHTHUcE0oaLeUtjAhYry7EloG 2NkHvJ/psHXHcpX3OmC7NnPNxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEndkD8T hN3wFJn9DPyl+RpvkSq+MB8GA1UdIwQYMBaAFP+1A/ICMgzYaXOv5hoW+7XG8o1k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTdDQS8wMDNERTA2MDlB OTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeUROaHBjNl9tR2hiN3RjYnlq V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183VUQ4Z0l5RE5ocGM2X21HaGI3dGNieWpXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTdDQS8wMDNERTA2MDlBOTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeURO aHBjNl9tR2hiN3RjYnlqV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE6j8DoXZUi4uMsrDrdkevmFv8Mh86E+9zGn+EcomRPN09dQiTiaT7 +BlnQy2qL3wLaC0IhokBC8IryR4tA1C9ufZeFThHKLEEQPrTm02RkiNnpd+kmk2y H5tDeKFwtScTVB+RpkoQHoQbg5+lTP7+JjWBcfq421yRW7s6ahZvO38wQNCAUUHt sI1VrRktTnIU5mgcfdyX9fTlqedjmly49nyaq4/Z5EsqbwTEUyQhYvmT2r63TwlC 8NeZkNdxwQNkRfpsu5cPB6b1EzQg6s1uDWI9zW8aNIQlgF2+eSjq0879fhk7R2C1 3Ni6XFyFyyQDPEgqVOB+xUtJshEbeuQr -----END CERTIFICATE-----Generated at Tue Jul 22 00:01:25 2025 by rpki-client