$ rpki-client -vvf rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft File: s-7PFnJWFEpGodq0i4CA15DSBDw.mft (raw, json) Hash identifier: ci/DNo7XWtSBqSV6uqMz/gBVz0U5f9hfLaMLlo/fwoA= Subject key identifier: 13:05:32:23:E7:67:15:9C:5A:43:39:E3:83:9F:F6:87:4A:BC:24:4F Authority key identifier: B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C Certificate issuer: /CN=A9125F64/serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft Manifest number: 32 Signing time: Sat 23 Aug 2025 07:52:35 +0000 Manifest this update: Sat 23 Aug 2025 07:52:34 +0000 Manifest next update: Sat 30 Aug 2025 07:52:34 +0000 Files and hashes: 1: s-7PFnJWFEpGodq0i4CA15DSBDw.crl (hash: RfgpuUjzyoBK6a6tuDqi/3N1irhYFX43XrTR50a6lgA=) 2: E32B7E6E348811F0ABE70D36C4F9AE02.roa (hash: 7I16PahKXROEbW1mEKLvSzyE22KDspebhWlSBSWo4cY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125F64, serialNumber=B3EECF167256144A46A1DAB48B8080D790D2043C Validity Not Before: Aug 23 07:52:34 2025 GMT Not After : Aug 30 07:52:34 2025 GMT Subject: CN=68a97342-dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cd:e2:ec:24:96:1f:63:9d:26:e1:94:24:1d: 12:c9:1d:18:67:82:75:ed:9a:87:25:d8:69:bc:37: 17:b9:4e:9b:7f:79:88:d1:36:cd:4b:db:fc:29:09: c9:b5:d2:c6:57:3e:27:69:bf:59:4a:c6:6b:04:3d: 60:b1:b0:83:04:7f:85:c8:7a:a4:ee:6f:19:97:83: d1:06:72:08:d2:16:2f:ae:b2:77:67:15:1f:7c:db: 02:2d:ad:2b:aa:98:f8:85:67:24:ee:bf:8b:b7:0e: 84:98:2e:39:67:4a:17:47:9f:14:1b:62:76:ad:22: ec:84:85:ad:b3:54:bb:99:b2:c7:6b:dc:64:a5:1f: 34:1e:dd:71:b9:fd:5f:11:b0:7c:0d:dd:66:2d:5c: de:fd:a0:7a:fc:d9:40:a4:32:40:e0:c7:c3:e3:71: 1f:14:43:94:63:45:94:e4:86:b2:7f:ed:f4:8e:30: 16:67:77:a3:e1:78:03:b8:21:1f:1f:7f:be:7c:c8: 59:aa:2a:da:61:b2:4e:c7:4d:36:d4:d8:a1:c4:f7: 76:1b:8a:2a:6f:db:92:81:41:30:38:f5:f0:5c:50: e1:45:dd:5a:e9:0e:de:42:ed:5b:a8:16:43:1a:3c: 95:b4:81:38:7f:a7:41:91:54:d2:e5:34:da:9c:8b: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:05:32:23:E7:67:15:9C:5A:43:39:E3:83:9F:F6:87:4A:BC:24:4F X509v3 Authority Key Identifier: keyid:B3:EE:CF:16:72:56:14:4A:46:A1:DA:B4:8B:80:80:D7:90:D2:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-7PFnJWFEpGodq0i4CA15DSBDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125F64/A1E0D83A346711F0A2FAD549C4F9AE02/s-7PFnJWFEpGodq0i4CA15DSBDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:44:6e:7a:76:6c:67:76:46:89:0b:15:e8:41:df:0a:c9:72: 01:8d:45:1b:35:39:7d:93:4f:a7:0d:29:2d:5f:a6:a1:c0:e4: e9:d3:60:b4:dc:b3:b5:48:30:92:b4:b1:3c:93:fa:62:fe:e6: 70:e3:7a:4f:50:62:eb:74:b4:43:62:29:94:0f:bf:99:89:5e: 90:bc:6b:72:d1:65:84:3a:b3:62:7d:7b:fa:fd:aa:58:49:6e: 6b:62:fe:83:34:ff:5f:b5:1c:84:d1:29:5a:b5:c1:5c:b2:35: e8:17:cf:50:d6:a7:d3:ff:0a:ee:9f:9e:4b:fa:ed:3a:34:bd: 7b:10:84:32:a7:b7:7a:22:d0:7b:ba:21:91:88:74:90:19:98: ea:24:60:41:d8:d9:cd:4f:d6:90:a8:91:8a:84:70:fb:54:f0: 66:11:65:a3:13:d4:99:62:f0:dd:11:be:57:d5:90:af:5d:aa: da:33:cd:dd:b0:96:6b:64:d8:2e:cb:f7:9d:f5:2e:89:7a:a3: 22:d6:4c:00:c9:f0:bd:53:ed:f1:42:3e:38:b3:89:bd:b1:d8: 15:e8:73:4a:03:18:1e:8e:30:c1:07:c2:13:d5:03:ea:d0:c7: 0a:47:01:e4:2f:e6:49:5d:68:46:48:01:f8:86:24:4f:0f:06: 94:e3:60:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NUY2NDExMC8GA1UEBRMoQjNFRUNGMTY3MjU2MTQ0QTQ2QTFEQUI0OEI4MDgwRDc5 MEQyMDQzQzAeFw0yNTA4MjMwNzUyMzRaFw0yNTA4MzAwNzUyMzRaMBgxFjAUBgNV BAMTDTY4YTk3MzQyLWRmZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDezeLsJJYfY50m4ZQkHRLJHRhngnXtmocl2Gm8Nxe5Tpt/eYjRNs1L2/wpCcm1 0sZXPidpv1lKxmsEPWCxsIMEf4XIeqTubxmXg9EGcgjSFi+usndnFR982wItrSuq mPiFZyTuv4u3DoSYLjlnShdHnxQbYnatIuyEha2zVLuZssdr3GSlHzQe3XG5/V8R sHwN3WYtXN79oHr82UCkMkDgx8PjcR8UQ5RjRZTkhrJ/7fSOMBZnd6PheAO4IR8f f758yFmqKtphsk7HTTbU2KHE93Ybiipv25KBQTA49fBcUOFF3VrpDt5C7VuoFkMa PJW0gTh/p0GRVNLlNNqci/1dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEwUyI+dn FZxaQznjg5/2h0q8JE8wHwYDVR0jBBgwFoAUs+7PFnJWFEpGodq0i4CA15DSBDww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1RjY0L0ExRTBEODNBMzQ2 NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVwR29kcTBpNENBMTVEU0JE dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcy03UEZuSldGRXBHb2RxMGk0Q0ExNURTQkR3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 RjY0L0ExRTBEODNBMzQ2NzExRjBBMkZBRDU0OUM0RjlBRTAyL3MtN1BGbkpXRkVw R29kcTBpNENBMTVEU0JEdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI1Ebnp2bGd2RokLFehB3wrJcgGNRRs1OX2TT6cNKS1fpqHA5OnTYLTc s7VIMJK0sTyT+mL+5nDjek9QYut0tENiKZQPv5mJXpC8a3LRZYQ6s2J9e/r9qlhJ bmti/oM0/1+1HITRKVq1wVyyNegXz1DWp9P/Cu6fnkv67To0vXsQhDKnt3oi0Hu6 IZGIdJAZmOokYEHY2c1P1pCokYqEcPtU8GYRZaMT1Jli8N0RvlfVkK9dqtozzd2w lmtk2C7L9531Lol6oyLWTADJ8L1T7fFCPjizib2x2BXoc0oDGB6OMMEHwhPVA+rQ xwpHAeQv5kldaEZIAfiGJE8PBpTjYII= -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:50 2025 by rpki-client