$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: +A0zltRRbnjoi+kZJAriUMhAsbHQUjp/VTbSDHNi/NI= Subject key identifier: 2B:04:42:8A:75:E5:00:13:79:65:5D:02:BC:58:FA:CC:BF:88:DE:0E Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 12A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 129A Signing time: Sun 20 Jul 2025 17:06:36 +0000 Manifest this update: Sun 20 Jul 2025 17:06:36 +0000 Manifest next update: Sun 27 Jul 2025 17:06:36 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: WptCQYyM/qWrOD4Gbxx9/KEjwBKJkhEGbjPy0nz6z3E=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 17:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4772 (0x12a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Jul 20 17:06:36 2025 GMT Not After : Jul 27 17:06:36 2025 GMT Subject: CN=687d221c-f7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5a:47:56:f7:77:7e:cd:74:c7:25:51:0f:30: 64:b3:aa:91:ae:2d:7d:7d:fd:fd:d5:27:40:e6:24: 7c:77:d9:e7:e5:6e:38:78:f3:48:19:67:98:05:78: 3c:17:63:f1:e6:2c:b3:a6:c3:9f:f1:c8:5d:f5:45: 5b:95:d6:2d:63:8e:77:9c:5a:73:08:a5:de:fc:7a: 11:4e:a4:9e:c6:9f:4a:98:75:db:01:b5:76:dc:b9: 30:53:9f:48:96:19:f3:1b:21:4b:62:33:50:d2:24: 01:45:2c:10:11:2c:3a:45:d3:fd:40:7e:f2:3f:1b: 93:ec:42:ce:92:d1:78:56:1f:21:88:12:c1:63:9b: 21:29:de:21:d7:5a:3b:bd:12:5f:c2:b2:bf:44:ed: 7e:73:ae:19:c0:65:63:f4:c0:1f:4b:57:f5:17:82: e0:50:f1:ca:b8:0c:47:72:65:03:42:fc:09:dc:f2: b2:63:64:f7:84:88:37:3d:20:ac:82:ee:5b:c7:9c: d1:5e:8a:c2:9f:d7:2a:eb:6a:28:45:e8:86:06:a5: 59:8f:9c:3b:15:34:89:18:65:28:c8:38:09:50:7f: d9:99:e8:b2:48:1d:86:f2:b6:36:ad:d1:fa:45:18: 50:fd:72:2b:3c:56:18:6b:16:54:a6:5f:a4:ce:f7: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:04:42:8A:75:E5:00:13:79:65:5D:02:BC:58:FA:CC:BF:88:DE:0E X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:27:04:b8:c6:fa:6d:61:7d:74:79:97:c0:9a:53:48:67:44: 6f:01:7f:fb:a2:19:26:47:65:ab:14:48:82:0f:f4:05:30:71: 43:cc:d8:a8:38:68:9c:59:1c:dd:06:cf:eb:e6:7d:f5:99:9a: cc:14:0c:6d:39:39:cf:9a:ac:08:41:d1:50:81:c8:c2:7b:e7: 83:2e:16:09:c6:42:7b:40:96:2a:c3:ba:6c:5e:38:14:a5:af: 33:b9:18:28:09:78:d5:4b:05:8e:f2:e9:db:69:15:41:09:12: 65:b4:f9:f8:be:8a:e1:52:fa:06:a4:e5:77:c6:fa:7d:c5:0f: fd:e3:7f:a2:bb:21:6f:03:4f:a0:69:a2:a4:c2:44:58:54:80: f6:11:64:89:0b:75:66:36:57:a4:a9:cd:c0:48:d4:8f:28:12: b0:63:c1:46:40:4e:b3:1f:21:e8:5d:0f:f5:73:82:36:ff:09: a1:37:ee:79:ab:1e:b1:80:49:3a:54:c6:02:b0:50:80:be:fa: 19:96:48:95:05:05:9b:c3:3a:4f:56:1d:d7:e2:6a:d1:54:4a: 9d:12:74:17:8d:ec:97:4e:cb:f6:45:3b:d2:06:74:97:1c:31: 72:d6:c1:56:95:c0:e8:a7:ec:cd:20:83:a5:1b:03:cd:85:18: 45:82:10:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwNzIwMTcwNjM2WhcNMjUwNzI3MTcwNjM2WjAYMRYwFAYD VQQDEw02ODdkMjIxYy1mN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FpHVvd3fs10xyVRDzBks6qRri19ff391SdA5iR8d9nn5W44ePNIGWeYBXg8 F2Px5iyzpsOf8chd9UVbldYtY453nFpzCKXe/HoRTqSexp9KmHXbAbV23LkwU59I lhnzGyFLYjNQ0iQBRSwQESw6RdP9QH7yPxuT7ELOktF4Vh8hiBLBY5shKd4h11o7 vRJfwrK/RO1+c64ZwGVj9MAfS1f1F4LgUPHKuAxHcmUDQvwJ3PKyY2T3hIg3PSCs gu5bx5zRXorCn9cq62ooReiGBqVZj5w7FTSJGGUoyDgJUH/ZmeiySB2G8rY2rdH6 RRhQ/XIrPFYYaxZUpl+kzvejTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsEQop1 5QATeWVdArxY+sy/iN4OMB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEJwS4xvptYX10eZfAmlNIZ0RvAX/7ohkmR2WrFEiCD/QFMHFDzNio OGicWRzdBs/r5n31mZrMFAxtOTnPmqwIQdFQgcjCe+eDLhYJxkJ7QJYqw7psXjgU pa8zuRgoCXjVSwWO8unbaRVBCRJltPn4vorhUvoGpOV3xvp9xQ/943+iuyFvA0+g aaKkwkRYVID2EWSJC3VmNlekqc3ASNSPKBKwY8FGQE6zHyHoXQ/1c4I2/wmhN+55 qx6xgEk6VMYCsFCAvvoZlkiVBQWbwzpPVh3X4mrRVEqdEnQXjeyXTsv2RTvSBnSX HDFy1sFWlcDop+zNIIOlGwPNhRhFghAV -----END CERTIFICATE-----Generated at Mon Jul 21 02:15:16 2025 by rpki-client