$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: w4h5c1GoM87OjA0BQDe6kpIgcxU0DWJEWa2LHCvIBBM= Subject key identifier: 37:2F:00:CD:A7:C9:33:7D:FD:A6:75:AB:9B:BA:B3:86:F3:9D:2E:D5 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: E0 Signing time: Sat 19 Jul 2025 05:42:15 +0000 Manifest this update: Sat 19 Jul 2025 05:42:14 +0000 Manifest next update: Sat 26 Jul 2025 05:42:14 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: KVldNACn3UyIqUb1XtFtdUIizCykQi5e9XX+MFk6sVk=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: zLl/IZu0xffl+i5k4Uqz4PGyZN+zw+IO5hcnnTBBL7Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Jul 19 05:42:14 2025 GMT Not After : Jul 26 05:42:14 2025 GMT Subject: CN=687b3037-5835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:c6:4c:ea:d4:28:04:c6:82:20:7f:6e:8e: 54:1e:38:d8:86:23:ea:35:e1:04:93:3f:d7:b8:2f: 04:28:29:0d:53:e1:3e:e0:96:7d:c4:8f:96:92:18: ce:0b:3f:2e:14:61:33:1a:18:7f:43:91:17:09:33: 46:03:71:c0:37:bd:a0:5f:df:fa:d8:6e:53:c9:48: 95:61:1d:3f:79:5d:af:40:e0:78:18:59:9e:27:87: 1d:c0:3c:b5:d2:26:a3:b8:bd:64:8e:39:2e:f2:e3: 9c:a4:f4:a3:5d:05:ef:0c:a4:87:e7:8b:34:01:eb: 10:94:e1:3c:31:2a:6e:8e:18:6d:db:01:a1:b1:27: 19:fa:ba:0f:01:f5:33:51:99:5c:5a:6f:13:bf:d7: 58:fd:df:a2:90:78:fa:30:a4:dc:c0:8d:09:20:d7: 1d:c7:81:92:88:65:dc:52:9b:43:97:8e:1d:28:2a: e2:08:42:f0:63:4c:94:c7:65:6f:6c:c6:d5:21:3f: 8c:fe:ad:3f:2c:95:1f:f4:a9:ea:f5:db:0a:f9:bb: ee:31:fc:ef:14:0c:a1:65:ab:e5:e0:7e:4d:9e:56: 73:a6:17:40:90:3b:1a:90:1d:97:e6:0e:cc:5b:aa: 96:79:82:c3:b1:0a:04:85:d8:b8:de:88:ad:9e:bf: a1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2F:00:CD:A7:C9:33:7D:FD:A6:75:AB:9B:BA:B3:86:F3:9D:2E:D5 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2d:0b:cb:eb:71:c0:c0:db:72:a3:49:6c:c0:b5:ed:b1:aa: e4:e0:e7:7d:36:63:30:81:75:97:ac:2a:d8:0b:14:0f:a7:3d: b3:f0:84:ed:56:a9:ec:53:1a:60:c2:99:0d:b9:b4:ae:e0:5f: fb:b0:18:93:88:ea:fd:00:27:ea:1d:7e:0d:8f:e9:43:a5:d4: 40:68:c3:fb:f8:c2:92:e6:b2:a1:37:37:a2:14:52:e1:81:7f: d3:8f:f1:6b:a7:7f:7b:cb:cb:75:35:7e:b9:c0:ec:40:9c:84: f6:98:d6:fd:c0:af:d7:8e:57:7b:a4:7e:0c:13:80:b8:e2:c8: 33:7f:3e:a3:03:51:66:5e:7a:4e:07:f1:a4:96:60:74:54:4a: 5d:c0:da:80:5a:61:57:50:fa:81:0e:b2:6f:96:f9:3a:5e:01: d3:15:7f:b2:d0:52:8f:5c:39:c0:ca:a6:84:ac:b0:cd:e5:82: 54:13:49:aa:36:d5:d0:af:55:c2:25:ef:9d:59:c4:6a:3a:1d: d2:31:f8:86:01:e7:7f:7e:f6:1b:94:d2:53:5f:2c:7f:a4:70: 3b:a9:62:bd:76:3f:d0:bb:d9:cb:86:9c:d1:83:12:c0:12:7d: 38:68:4b:f3:7a:68:35:58:c5:28:3f:30:e6:55:fa:36:0e:c4: 7b:a2:0e:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwNzE5MDU0MjE0WhcNMjUwNzI2MDU0MjE0WjAYMRYwFAYD VQQDEw02ODdiMzAzNy01ODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA21HGTOrUKATGgiB/bo5UHjjYhiPqNeEEkz/XuC8EKCkNU+E+4JZ9xI+WkhjO Cz8uFGEzGhh/Q5EXCTNGA3HAN72gX9/62G5TyUiVYR0/eV2vQOB4GFmeJ4cdwDy1 0iajuL1kjjku8uOcpPSjXQXvDKSH54s0AesQlOE8MSpujhht2wGhsScZ+roPAfUz UZlcWm8Tv9dY/d+ikHj6MKTcwI0JINcdx4GSiGXcUptDl44dKCriCELwY0yUx2Vv bMbVIT+M/q0/LJUf9Knq9dsK+bvuMfzvFAyhZavl4H5NnlZzphdAkDsakB2X5g7M W6qWeYLDsQoEhdi43oitnr+hzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDcvAM2n yTN9/aZ1q5u6s4bznS7VMB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbLQvL63HAwNtyo0lswLXtsark4Od9NmMwgXWXrCrYCxQPpz2z8ITt VqnsUxpgwpkNubSu4F/7sBiTiOr9ACfqHX4Nj+lDpdRAaMP7+MKS5rKhNzeiFFLh gX/Tj/Frp397y8t1NX65wOxAnIT2mNb9wK/Xjld7pH4ME4C44sgzfz6jA1FmXnpO B/GklmB0VEpdwNqAWmFXUPqBDrJvlvk6XgHTFX+y0FKPXDnAyqaErLDN5YJUE0mq NtXQr1XCJe+dWcRqOh3SMfiGAed/fvYblNJTXyx/pHA7qWK9dj/Qu9nLhpzRgxLA En04aEvzemg1WMUoPzDmVfo2DsR7og53 -----END CERTIFICATE-----Generated at Sun Jul 20 20:44:30 2025 by rpki-client