$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft File: 07sK_xlZ4CkmxzdUiny-QQ25CWs.mft (raw, json) Hash identifier: VvM5wq1xi/WEAU9mxHn8CM19QoN1pW4vRO5mmxoNz8Q= Subject key identifier: 42:B8:61:75:EA:DD:95:D7:FB:5E:B9:55:34:BE:97:0F:D2:54:71:14 Authority key identifier: D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B Certificate issuer: /CN=A9155A79/serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft Manifest number: 01C8 Signing time: Sat 19 Jul 2025 03:08:00 +0000 Manifest this update: Sat 19 Jul 2025 03:07:59 +0000 Manifest next update: Sat 26 Jul 2025 03:07:59 +0000 Files and hashes: 1: 07sK_xlZ4CkmxzdUiny-QQ25CWs.crl (hash: AotlwilFD8o0Lvz3ci+LYQ1kqRGlLaU3sT4POo3oO7M=) 2: A534BB46BDC611EE902E692DC4F9AE02.roa (hash: Wygmj2JKO4aGkrYbl9Bny2rS0iiXkwLAfqO4thXRj+k=) 3: 9A745DF6BDC611EE9C87EF29C4F9AE02.roa (hash: zelXEh8AZUnkEzzh5nIKoVPZYcm1u2v7VkQCFQEcMjQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:07:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A79, serialNumber=D3BB0AFF1959E02926C737548A7CBE410DB9096B Validity Not Before: Jul 19 03:07:59 2025 GMT Not After : Jul 26 03:07:59 2025 GMT Subject: CN=687b0c10-cd3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:2f:40:c1:2a:b0:ad:ba:94:74:78:84:82: 40:d6:c5:1b:d7:07:de:3a:01:5f:33:68:5b:a3:28: 2a:36:76:30:70:f8:c8:5a:77:d5:d4:02:eb:85:63: ab:7d:62:7c:29:bf:98:66:7c:f9:27:15:a6:cb:5e: e9:5e:67:00:b7:81:d3:10:03:dd:1b:bb:ad:58:c9: 5c:f6:2c:1e:ac:ca:4d:b2:fa:7d:1e:12:c4:3c:f1: b1:d6:35:9e:a6:42:16:2f:82:80:b6:3d:97:00:78: 10:7f:a1:3f:5b:99:d0:e8:38:c0:0b:5e:39:88:b6: d7:23:94:1f:f3:c4:36:26:87:30:c1:31:23:3a:05: c9:18:95:bb:34:1a:14:4f:a4:35:9d:57:c5:88:39: 9e:2d:13:7c:ce:50:5a:ef:5e:46:16:c8:f0:b9:f5: 2a:ca:49:00:15:e9:c1:ad:eb:a0:f4:52:12:48:2a: 98:b4:5d:66:ff:ab:af:74:69:a6:3a:c2:ef:7c:6d: a9:27:83:08:3b:a7:b5:3c:3a:3e:c5:99:cc:0c:26: 29:0e:f2:c2:33:47:60:24:6a:0b:11:73:b1:55:9c: 23:23:6a:1c:ef:a1:71:39:6b:10:25:f7:dc:49:aa: a3:d3:bf:51:28:55:c1:05:8c:64:f5:14:a3:f4:a3: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B8:61:75:EA:DD:95:D7:FB:5E:B9:55:34:BE:97:0F:D2:54:71:14 X509v3 Authority Key Identifier: keyid:D3:BB:0A:FF:19:59:E0:29:26:C7:37:54:8A:7C:BE:41:0D:B9:09:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07sK_xlZ4CkmxzdUiny-QQ25CWs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A79/1B5C1F40B0F211ED8DCBEB82C4F9AE02/07sK_xlZ4CkmxzdUiny-QQ25CWs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:3d:eb:43:b9:87:d2:9d:bc:16:37:d9:2f:99:a2:09:29:5f: bc:a0:1d:1d:cc:dd:e4:e2:d5:1a:95:a9:c4:33:a5:c6:a6:3a: ef:e7:ee:d2:e8:ec:ec:4a:9d:58:db:83:93:91:a5:bb:1b:eb: bc:12:3c:86:d6:a8:19:6e:d8:9f:35:95:cb:a6:ca:44:b1:bf: d5:d0:a0:e9:fd:ad:90:4d:c1:2e:67:bc:bf:75:6a:54:b5:4f: ad:02:96:9c:60:a7:d8:87:c1:6e:9a:12:a9:d6:94:2c:c6:b7: fb:ff:0e:b2:ee:f8:f1:f3:22:69:98:aa:a9:98:7c:8d:74:cf: 61:95:f9:9e:b6:ae:cd:81:5d:e1:ef:ee:a1:70:4e:1d:6a:d2: ee:9a:c5:2a:e4:e9:c2:a7:88:c6:29:70:25:84:3e:57:56:4a: b2:f9:69:ce:48:52:eb:a6:f1:fc:8a:da:69:9c:96:43:3f:9a: 69:c7:e6:a6:83:fd:71:1f:39:97:61:75:75:69:12:d9:6a:da: 17:e8:bd:1d:a9:e4:63:d1:36:8b:97:2b:b4:10:31:72:bb:d6: 6f:fb:91:d3:c8:e8:ee:ae:17:92:9b:67:92:4c:dd:96:c1:d8: 4e:ed:ed:ba:63:0f:bc:00:a0:a6:17:b6:df:c2:1a:90:3b:15: 75:e6:a2:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNzkxMTAvBgNVBAUTKEQzQkIwQUZGMTk1OUUwMjkyNkM3Mzc1NDhBN0NCRTQx MERCOTA5NkIwHhcNMjUwNzE5MDMwNzU5WhcNMjUwNzI2MDMwNzU5WjAYMRYwFAYD VQQDEw02ODdiMGMxMC1jZDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKwvQMEqsK26lHR4hIJA1sUb1wfeOgFfM2hboygqNnYwcPjIWnfV1ALrhWOr fWJ8Kb+YZnz5JxWmy17pXmcAt4HTEAPdG7utWMlc9iwerMpNsvp9HhLEPPGx1jWe pkIWL4KAtj2XAHgQf6E/W5nQ6DjAC145iLbXI5Qf88Q2JocwwTEjOgXJGJW7NBoU T6Q1nVfFiDmeLRN8zlBa715GFsjwufUqykkAFenBreug9FISSCqYtF1m/6uvdGmm OsLvfG2pJ4MIO6e1PDo+xZnMDCYpDvLCM0dgJGoLEXOxVZwjI2oc76FxOWsQJffc Saqj079RKFXBBYxk9RSj9KNaBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEK4YXXq 3ZXX+165VTS+lw/SVHEUMB8GA1UdIwQYMBaAFNO7Cv8ZWeApJsc3VIp8vkENuQlr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE3OS8xQjVDMUY0MEIw RjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRDa214emRVaW55LVFRMjVD V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3c0tfeGxaNENrbXh6ZFVpbnktUVEyNUNXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE3OS8xQjVDMUY0MEIwRjIxMUVEOERDQkVCODJDNEY5QUUwMi8wN3NLX3hsWjRD a214emRVaW55LVFRMjVDV3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgPetDuYfSnbwWN9kvmaIJKV+8oB0dzN3k4tUalanEM6XGpjrv5+7S 6OzsSp1Y24OTkaW7G+u8EjyG1qgZbtifNZXLpspEsb/V0KDp/a2QTcEuZ7y/dWpU tU+tApacYKfYh8FumhKp1pQsxrf7/w6y7vjx8yJpmKqpmHyNdM9hlfmetq7NgV3h 7+6hcE4datLumsUq5OnCp4jGKXAlhD5XVkqy+WnOSFLrpvH8itppnJZDP5ppx+am g/1xHzmXYXV1aRLZatoX6L0dqeRj0TaLlyu0EDFyu9Zv+5HTyOjurheSm2eSTN2W wdhO7e26Yw+8AKCmF7bfwhqQOxV15qKA -----END CERTIFICATE-----Generated at Sun Jul 20 15:03:43 2025 by rpki-client