$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: JAU8c66EYZg2feZKxeMPxFTZw2+o4ZWWebvB8qLazTQ= Subject key identifier: A6:F1:CC:09:97:72:2E:D2:F2:71:EA:EA:08:80:97:BF:D5:3F:D2:D6 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 16FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16D5 Signing time: Tue 22 Jul 2025 16:49:00 +0000 Manifest this update: Tue 22 Jul 2025 16:49:00 +0000 Manifest next update: Tue 29 Jul 2025 16:49:00 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: 4ePjNAwDI5ychAN7SM0/AlOFclRWhKLhd0cn26mxt7c=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5885 (0x16fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Jul 22 16:49:00 2025 GMT Not After : Jul 29 16:49:00 2025 GMT Subject: CN=687fc0fc-2008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:3e:96:66:7a:ee:10:dc:99:f0:df:9b:d4: d4:69:26:4a:54:d3:e9:7e:de:07:49:45:9a:2a:be: d4:f9:d2:ef:6a:ac:2f:cf:8b:0d:14:ad:82:a3:37: 3a:cd:28:a2:2b:58:4e:f7:b7:68:a5:48:77:1f:0c: b9:00:73:21:ea:50:38:d3:ed:da:51:f3:9a:e2:52: 6d:2e:2f:91:f4:aa:7b:17:7a:ae:80:3c:89:7e:98: 77:80:56:cc:a8:0b:44:fc:75:ba:52:e2:47:5d:80: bd:6b:02:f8:2c:6c:ad:47:2b:1e:f5:8c:7f:a6:5d: d4:85:b4:f9:04:5e:4e:70:28:81:cf:aa:38:a2:37: 2e:29:94:41:e6:78:7e:fa:5b:9e:b4:89:6a:1a:bc: 80:f6:eb:f3:3b:9a:62:02:e6:63:29:3b:aa:db:e4: 69:97:58:06:a6:7c:35:0c:57:1a:35:aa:f5:e4:6c: 33:56:db:21:19:ef:1c:a7:ec:ad:59:a1:1f:70:f2: a7:f9:d4:ab:ec:09:6a:80:0f:ff:54:99:a2:2b:44: 1f:e7:1f:8c:50:f4:d6:56:60:72:d8:33:3c:6c:d5: 84:92:16:ec:90:9d:99:c9:b1:37:22:73:d1:61:9b: 6c:71:7f:03:d7:4b:37:e7:c1:ef:94:b4:1a:4b:6e: bc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F1:CC:09:97:72:2E:D2:F2:71:EA:EA:08:80:97:BF:D5:3F:D2:D6 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8e:27:e5:03:c7:3b:16:3e:ca:5a:8b:6b:21:b2:10:70:ec: 73:a6:e0:63:92:4d:f9:30:ef:dd:e4:4d:28:ec:dd:ed:00:fe: 1a:3c:6b:53:5f:f3:b9:31:2f:23:fa:75:36:cd:88:03:7f:81: d3:e1:f4:47:5e:cb:5b:5b:a2:b7:5d:34:84:86:80:36:8a:25: fa:4a:19:11:3a:92:29:fa:65:9d:09:cd:1f:ce:60:7e:29:93: 3d:14:14:f1:a9:63:91:05:dd:e1:ae:ba:39:2a:25:48:de:7d: af:c8:3f:d5:1b:8a:2d:5a:09:00:66:f0:92:ae:41:ae:49:2e: 28:b1:7d:dc:bc:c2:a3:ef:df:a4:9c:d9:3c:1c:8e:ec:2e:c4: 9e:88:ce:ef:a0:13:f1:18:e1:d7:e0:71:32:a9:cd:24:9f:83: 94:3f:e6:dc:da:4f:b6:e2:a3:9e:da:13:87:77:74:e3:f6:3d: bf:d1:d9:40:bd:34:8c:01:c5:52:bb:7f:ef:1e:16:53:0e:9a: 19:60:f5:8f:8b:b0:98:da:7a:60:f4:47:e6:b3:b4:77:31:e0: 49:79:75:21:f5:2e:41:e7:e3:45:14:b3:4d:f6:31:2d:a8:c0: cd:55:11:95:1e:af:a3:b0:45:8b:1d:2e:9e:b1:8d:81:91:7b: 2a:9b:53:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFv0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwNzIyMTY0OTAwWhcNMjUwNzI5MTY0OTAwWjAYMRYwFAYD VQQDEw02ODdmYzBmYy0yMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnzc+lmZ67hDcmfDfm9TUaSZKVNPpft4HSUWaKr7U+dLvaqwvz4sNFK2Cozc6 zSiiK1hO97dopUh3Hwy5AHMh6lA40+3aUfOa4lJtLi+R9Kp7F3qugDyJfph3gFbM qAtE/HW6UuJHXYC9awL4LGytRyse9Yx/pl3UhbT5BF5OcCiBz6o4ojcuKZRB5nh+ +luetIlqGryA9uvzO5piAuZjKTuq2+Rpl1gGpnw1DFcaNar15GwzVtshGe8cp+yt WaEfcPKn+dSr7AlqgA//VJmiK0Qf5x+MUPTWVmBy2DM8bNWEkhbskJ2ZybE3InPR YZtscX8D10s358HvlLQaS268PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbxzAmX ci7S8nHq6giAl7/VP9LWMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmjiflA8c7Fj7KWotrIbIQcOxzpuBjkk35MO/d5E0o7N3tAP4aPGtT X/O5MS8j+nU2zYgDf4HT4fRHXstbW6K3XTSEhoA2iiX6ShkROpIp+mWdCc0fzmB+ KZM9FBTxqWORBd3hrro5KiVI3n2vyD/VG4otWgkAZvCSrkGuSS4osX3cvMKj79+k nNk8HI7sLsSeiM7voBPxGOHX4HEyqc0kn4OUP+bc2k+24qOe2hOHd3Tj9j2/0dlA vTSMAcVSu3/vHhZTDpoZYPWPi7CY2npg9Efms7R3MeBJeXUh9S5B5+NFFLNN9jEt qMDNVRGVHq+jsEWLHS6esY2BkXsqm1Oa -----END CERTIFICATE-----Generated at Wed Jul 23 12:57:54 2025 by rpki-client