$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: wm+ePtO5wm5dilTI8JP1G8XGcf5vd3aCjoRswtSarYU= Subject key identifier: 65:7F:6E:69:BF:5E:1A:68:37:48:F7:9D:26:76:8A:0F:72:D7:78:B8 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 09F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09F2 Signing time: Sun 20 Jul 2025 19:59:09 +0000 Manifest this update: Sun 20 Jul 2025 19:59:08 +0000 Manifest next update: Sun 27 Jul 2025 19:59:08 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: r0456LgN3hGew7F4RaQPL2jqDgU5FLKjLQ6TCRrIAio=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2553 (0x9f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Jul 20 19:59:08 2025 GMT Not After : Jul 27 19:59:08 2025 GMT Subject: CN=687d4a8c-9b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:b6:fa:52:3d:e1:df:0e:8f:1b:9d:15:a3: 19:2b:c9:28:75:8e:1f:25:6e:a9:dd:e9:5d:2e:1e: 36:56:30:fd:dc:75:7d:96:9e:2d:f0:f9:75:12:b0: ee:6c:da:45:2e:f9:e4:0d:b6:a8:b3:48:a6:47:a4: 01:ba:f4:d1:31:60:d5:9d:d2:4d:02:3c:8b:c6:4f: cf:a3:bf:9d:17:94:46:ce:6e:1f:98:a3:05:2b:28: b3:6d:c3:44:79:a1:c6:17:41:3c:1d:65:6e:60:9d: 0f:e0:36:d6:55:72:ed:12:83:5c:41:72:d1:9d:c9: 85:6e:1f:39:f8:7e:dd:b9:5c:e3:0d:e2:d7:25:2d: e4:2b:00:e6:b4:93:67:39:1a:21:4c:71:7e:b8:78: 7b:49:4f:69:88:6a:7b:be:50:21:9e:0c:8d:77:3c: 02:87:da:60:5f:20:2f:f1:74:ac:36:8d:ea:84:f5: b5:99:16:31:c3:d0:a4:f7:d3:93:c1:f3:a3:57:f0: cc:d9:b0:c2:f8:61:94:94:82:7f:93:d6:7b:a6:d3: 2f:18:b5:83:ff:95:94:07:a6:eb:b7:d3:32:bc:b9: 85:f9:b2:08:9a:b9:42:e4:5b:f9:e7:9a:f8:91:07: d6:50:f3:3d:13:62:f4:e5:ab:6a:d2:a0:3a:3c:4b: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7F:6E:69:BF:5E:1A:68:37:48:F7:9D:26:76:8A:0F:72:D7:78:B8 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:33:52:de:28:f4:3b:75:62:b2:86:29:fd:bf:7b:57:53:b9: 4d:f5:3a:6a:89:ce:50:8c:e9:50:8b:e5:36:90:d7:92:8a:f4: 48:ab:1e:33:a0:e0:19:51:63:08:fb:46:51:5c:65:e4:ea:74: 66:3b:20:47:f4:35:fe:10:06:d3:7c:f7:d7:42:43:cd:6f:95: 37:78:f4:46:52:e7:b1:eb:32:46:80:c1:d6:a0:1e:50:3f:27: 9c:01:a9:cb:87:ef:82:ce:d8:ce:76:af:b4:a6:5e:f3:6c:7e: 47:94:16:a8:24:d6:a6:5a:37:73:6f:ea:03:4e:4d:e2:06:7f: 8c:56:dd:77:bb:a2:f9:03:bd:96:e6:74:4d:f2:46:c7:38:5f: 47:75:51:4c:96:36:b8:17:b3:3f:9d:91:13:39:50:d7:f4:84: 70:7b:a0:e5:c8:00:49:24:59:5d:30:d0:6a:61:51:f4:d0:16: 4a:aa:16:ca:98:bc:d2:67:54:c6:a6:1c:ce:c6:00:b4:56:ba: ac:d3:78:36:2a:c7:04:22:ef:bc:dc:9b:a2:82:09:d5:47:e1: 15:51:02:88:b1:d4:9d:7b:45:62:a0:60:4e:0b:88:ad:99:f8: 16:27:a7:77:04:2e:03:d5:12:9a:c1:9b:fd:53:06:ec:e1:c9: 10:1a:76:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwNzIwMTk1OTA4WhcNMjUwNzI3MTk1OTA4WjAYMRYwFAYD VQQDEw02ODdkNGE4Yy05YjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9e2+lI94d8OjxudFaMZK8kodY4fJW6p3eldLh42VjD93HV9lp4t8Pl1ErDu bNpFLvnkDbaos0imR6QBuvTRMWDVndJNAjyLxk/Po7+dF5RGzm4fmKMFKyizbcNE eaHGF0E8HWVuYJ0P4DbWVXLtEoNcQXLRncmFbh85+H7duVzjDeLXJS3kKwDmtJNn ORohTHF+uHh7SU9piGp7vlAhngyNdzwCh9pgXyAv8XSsNo3qhPW1mRYxw9Ck99OT wfOjV/DM2bDC+GGUlIJ/k9Z7ptMvGLWD/5WUB6brt9MyvLmF+bIImrlC5Fv555r4 kQfWUPM9E2L05atq0qA6PEsyKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGV/bmm/ XhpoN0j3nSZ2ig9y13i4MB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJM1LeKPQ7dWKyhin9v3tXU7lN9Tpqic5QjOlQi+U2kNeSivRIqx4z oOAZUWMI+0ZRXGXk6nRmOyBH9DX+EAbTfPfXQkPNb5U3ePRGUuex6zJGgMHWoB5Q PyecAanLh++CztjOdq+0pl7zbH5HlBaoJNamWjdzb+oDTk3iBn+MVt13u6L5A72W 5nRN8kbHOF9HdVFMlja4F7M/nZETOVDX9IRwe6DlyABJJFldMNBqYVH00BZKqhbK mLzSZ1TGphzOxgC0Vrqs03g2KscEIu+83JuiggnVR+EVUQKIsdSde0VioGBOC4it mfgWJ6d3BC4D1RKawZv9Uwbs4ckQGnYC -----END CERTIFICATE-----Generated at Mon Jul 21 02:10:35 2025 by rpki-client