$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: GUngiCG76XzA7ruoiQa3+Mm8kww0HddPj1kplU4O0Kg= Subject key identifier: BB:33:B6:70:80:C8:7E:3A:F5:24:74:2B:D6:A9:9E:4E:B6:05:36:8D Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 4E Signing time: Sat 19 Jul 2025 07:35:29 +0000 Manifest this update: Sat 19 Jul 2025 07:35:28 +0000 Manifest next update: Sat 26 Jul 2025 07:35:28 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: P99k5lBLCH3y+U+xtSRaa1ivriwxVrd9XXLB+aoC3Ok=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Jul 19 07:35:28 2025 GMT Not After : Jul 26 07:35:28 2025 GMT Subject: CN=687b4ac0-d58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b4:19:f2:cc:76:71:b4:98:f5:b4:a4:33:0d: 26:51:cc:c1:7e:88:b1:bd:cc:3d:52:da:8f:91:17: e6:ac:e5:ef:08:eb:a0:47:a5:74:00:e6:66:43:6f: 55:e8:f2:c3:71:c1:e4:0e:1c:74:c9:5e:3f:71:fb: c3:b9:58:bb:48:c7:6f:41:f2:c3:19:10:ae:fc:98: dc:ed:bf:0b:ea:fd:36:e4:1a:d5:ee:b5:0e:5b:a5: 68:43:73:0c:f9:a1:b7:ae:37:bf:10:f9:7a:a6:cc: 05:89:e1:c3:3c:62:26:d3:36:40:ef:f1:f5:e5:64: f2:f9:dd:35:39:a3:a9:81:7e:bb:7b:b2:0c:88:c2: 75:14:e9:3e:e0:cf:dd:4a:87:80:ac:ae:c1:0f:d6: 71:57:25:ee:a2:d3:e4:b0:10:f5:a3:e3:0b:39:81: 91:52:d3:fd:b1:ca:69:f5:49:38:4c:6c:2e:ee:ff: 46:40:9e:08:6a:c2:e2:13:2d:8e:c9:ad:9b:14:00: 15:53:99:a7:0a:d3:af:ff:d2:f5:5f:cd:b3:73:9a: bc:6b:e5:fd:9b:c2:51:c4:91:d6:03:d9:88:c3:6b: 66:56:1d:cd:70:d5:e1:a6:c8:52:f8:f2:ef:37:cb: 6f:a2:02:f7:a1:34:d9:9b:60:9a:1f:50:fa:0b:19: 2d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:33:B6:70:80:C8:7E:3A:F5:24:74:2B:D6:A9:9E:4E:B6:05:36:8D X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:95:bc:33:af:b8:e4:36:d6:93:19:76:38:78:a3:5e:30:a4: 37:c5:c0:31:72:27:cb:5e:19:50:77:61:77:ea:46:38:d5:17: 49:a8:11:42:0e:b5:48:fd:72:dd:e5:e2:40:64:bd:6a:f1:c6: 09:9a:5b:f3:bb:42:e6:ee:af:02:73:9d:b6:b0:c6:c0:86:08: 32:48:aa:74:b7:74:e6:ed:f2:c2:82:d5:05:c7:df:e4:b9:6b: 13:9e:f2:67:26:54:69:9e:7e:df:8a:03:fd:66:9e:a7:0d:29: 5b:7f:ef:26:27:c7:70:c0:c4:c0:80:1e:f3:a8:1c:e4:31:d4: 7f:54:76:86:0f:9b:fd:9d:78:61:4e:03:19:9c:11:39:31:c1: 7b:5e:62:73:ca:13:10:16:3e:cd:07:44:cd:7a:1c:9a:de:8c: 83:1b:e3:8c:4f:4c:29:38:74:9f:af:4a:5e:94:b0:9f:3e:99: fc:ac:50:90:be:b2:d3:4a:03:78:76:ee:3b:9e:bd:08:1c:4e: 33:3c:d9:73:92:e3:e2:84:c6:a7:18:8f:04:9e:af:e3:64:0c: 01:e7:3b:ba:35:c2:9d:9a:1b:07:26:f0:1f:84:f1:ce:80:a8: ee:b2:8c:8d:50:2b:4f:45:92:f6:1f:dd:64:66:db:c1:50:6a: c4:d5:e0:fa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA3MTkwNzM1MjhaFw0yNTA3MjYwNzM1MjhaMBgxFjAUBgNV BAMTDTY4N2I0YWMwLWQ1OGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRtBnyzHZxtJj1tKQzDSZRzMF+iLG9zD1S2o+RF+as5e8I66BHpXQA5mZDb1Xo 8sNxweQOHHTJXj9x+8O5WLtIx29B8sMZEK78mNztvwvq/TbkGtXutQ5bpWhDcwz5 obeuN78Q+XqmzAWJ4cM8YibTNkDv8fXlZPL53TU5o6mBfrt7sgyIwnUU6T7gz91K h4CsrsEP1nFXJe6i0+SwEPWj4ws5gZFS0/2xymn1SThMbC7u/0ZAnghqwuITLY7J rZsUABVTmacK06//0vVfzbNzmrxr5f2bwlHEkdYD2YjDa2ZWHc1w1eGmyFL48u83 y2+iAvehNNmbYJofUPoLGS2nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuzO2cIDI fjr1JHQr1qmeTrYFNo0wHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuVvDOvuOQ21pMZdjh4o14wpDfFwDFyJ8teGVB3YXfqRjjVF0moEUIO tUj9ct3l4kBkvWrxxgmaW/O7QuburwJznbawxsCGCDJIqnS3dObt8sKC1QXH3+S5 axOe8mcmVGmeft+KA/1mnqcNKVt/7yYnx3DAxMCAHvOoHOQx1H9UdoYPm/2deGFO AxmcETkxwXteYnPKExAWPs0HRM16HJrejIMb44xPTCk4dJ+vSl6UsJ8+mfysUJC+ stNKA3h27juevQgcTjM82XOS4+KExqcYjwSer+NkDAHnO7o1wp2aGwcm8B+E8c6A qO6yjI1QK09FkvYf3WRm28FQasTV4Po= -----END CERTIFICATE-----Generated at Sun Jul 20 20:13:50 2025 by rpki-client