$ rpki-client -vvf rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft File: u7hAsFOTTV4f7dQN0CPvevQouuA.mft (raw, json) Hash identifier: jQ7GBkyD9SdwAPoazrPr4YnfRbYQbl0qymVoCLivvjk= Subject key identifier: ED:7D:33:38:7D:CC:AE:2F:07:3C:E9:49:2B:B4:44:7A:7F:B6:A4:AF Authority key identifier: BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 Certificate issuer: /CN=A912AD2E/serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Certificate serial: 17F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft Manifest number: 17E8 Signing time: Sun 24 Aug 2025 16:32:26 +0000 Manifest this update: Sun 24 Aug 2025 16:32:26 +0000 Manifest next update: Sun 31 Aug 2025 16:32:26 +0000 Files and hashes: 1: u7hAsFOTTV4f7dQN0CPvevQouuA.crl (hash: M8rM/DkkzBqN6MMXtnTFsDEqvE6eDjBaGacMNikAD7k=) 2: E3D5A6F4422411E8804DBC3AC4F9AE02.roa (hash: E/6I3qQjCBxjGs7jFLaCU1bmuGjPrQh25a7j/aLYowA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:32:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6132 (0x17f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AD2E, serialNumber=BBB840B053934D5E1FEDD40DD023EF7AF428BAE0 Validity Not Before: Aug 24 16:32:26 2025 GMT Not After : Aug 31 16:32:26 2025 GMT Subject: CN=68ab3e9a-1c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:68:1c:3f:d7:c3:6a:c8:b4:41:44:15:51:19: d7:8f:c7:28:9a:7a:94:e3:4e:90:b3:fe:aa:a7:c6: d2:0c:ad:e2:75:14:b5:e4:88:b3:fe:86:bb:ce:60: 17:19:94:d3:ee:48:20:83:47:24:26:39:34:59:b8: 0e:88:7e:69:a9:96:99:be:d8:8d:de:f8:f7:ee:b4: 2a:21:dd:01:e9:7a:0b:22:17:8c:fc:6e:14:fc:c4: 46:2b:75:24:f9:01:16:97:bb:ae:47:a4:86:40:7e: 00:6a:b8:cb:5f:cc:7d:f1:ab:74:d8:e8:43:87:d6: 90:70:31:ff:15:3f:fc:27:f3:8a:00:22:70:7d:c4: 80:cc:91:6a:db:1b:dc:7a:f3:86:b2:14:81:70:b1: 41:43:5d:3c:ff:c4:c9:90:5d:2d:0d:be:63:27:67: 8d:3a:3f:f5:49:74:dc:a9:20:ec:1d:b4:74:89:8e: 85:79:01:73:4a:5f:ff:67:a4:3a:1a:05:19:bf:a2: 47:1d:dd:06:15:38:f5:ee:53:f1:b9:d5:d6:c3:86: 99:e3:37:ac:0a:5d:e8:2e:90:b8:0d:62:96:ae:fd: f9:8b:c8:e4:4a:3f:41:2d:73:5d:ec:02:29:e6:88: f9:40:c0:1b:b7:7b:0b:f4:b7:0f:af:59:98:98:7d: d9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7D:33:38:7D:CC:AE:2F:07:3C:E9:49:2B:B4:44:7A:7F:B6:A4:AF X509v3 Authority Key Identifier: keyid:BB:B8:40:B0:53:93:4D:5E:1F:ED:D4:0D:D0:23:EF:7A:F4:28:BA:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7hAsFOTTV4f7dQN0CPvevQouuA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AD2E/078C62AAC53311E7A11DBB4AC4F9AE02/u7hAsFOTTV4f7dQN0CPvevQouuA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c8:1c:05:36:a2:64:64:6f:92:37:2e:5c:58:75:f5:2c:60: de:af:84:c5:4a:f9:75:53:82:d2:c8:9d:ce:1f:e9:47:d9:f4: 4e:fb:e1:87:66:19:68:1e:07:5f:f0:92:ca:69:13:22:6a:a6: 2a:e1:b1:db:5a:29:9f:82:0d:5c:92:cb:78:aa:0d:a5:ab:25: df:31:8d:0f:b5:d3:1f:1b:17:38:c4:47:6c:ba:08:99:be:00: c6:fc:26:1e:77:15:3f:01:f2:00:49:ad:2c:ab:5f:b3:fb:eb: 55:77:d2:7c:ad:7e:65:53:65:e0:87:b9:f3:62:25:68:fe:cc: d1:41:9d:35:2b:30:bb:4d:80:27:ad:2a:b4:6d:6d:35:e4:ee: bf:b8:9f:c0:d5:2e:e3:5a:d2:fd:80:97:9b:6b:1c:80:70:97: fc:cb:b8:97:96:bc:62:8e:79:cd:3c:ac:23:be:e6:d6:63:1a: 75:f7:93:44:fa:07:4d:82:de:cf:e1:ca:81:33:bc:3f:26:1a: b4:bc:89:29:c3:31:d4:8b:e6:ef:45:ec:f5:5a:82:f9:9b:7c: 3c:ee:18:b1:f1:62:17:33:5f:2b:58:d1:6a:30:8d:dd:b8:3b: 21:8a:56:8b:84:56:01:84:b6:f9:a6:81:01:fe:f0:39:2e:61: 55:e8:91:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFEMkUxMTAvBgNVBAUTKEJCQjg0MEIwNTM5MzRENUUxRkVERDQwREQwMjNFRjdB RjQyOEJBRTAwHhcNMjUwODI0MTYzMjI2WhcNMjUwODMxMTYzMjI2WjAYMRYwFAYD VQQDEw02OGFiM2U5YS0xYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3mgcP9fDasi0QUQVURnXj8comnqU406Qs/6qp8bSDK3idRS15Iiz/oa7zmAX GZTT7kggg0ckJjk0WbgOiH5pqZaZvtiN3vj37rQqId0B6XoLIheM/G4U/MRGK3Uk +QEWl7uuR6SGQH4AarjLX8x98at02OhDh9aQcDH/FT/8J/OKACJwfcSAzJFq2xvc evOGshSBcLFBQ108/8TJkF0tDb5jJ2eNOj/1SXTcqSDsHbR0iY6FeQFzSl//Z6Q6 GgUZv6JHHd0GFTj17lPxudXWw4aZ4zesCl3oLpC4DWKWrv35i8jkSj9BLXNd7AIp 5oj5QMAbt3sL9LcPr1mYmH3ZqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO19Mzh9 zK4vBzzpSSu0RHp/tqSvMB8GA1UdIwQYMBaAFLu4QLBTk01eH+3UDdAj73r0KLrg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUQyRS8wNzhDNjJBQUM1 MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRWNGY3ZFFOMENQdmV2UW91 dUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U3aEFzRk9UVFY0ZjdkUU4wQ1B2ZXZRb3V1QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUQyRS8wNzhDNjJBQUM1MzMxMUU3QTExREJCNEFDNEY5QUUwMi91N2hBc0ZPVFRW NGY3ZFFOMENQdmV2UW91dUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPyBwFNqJkZG+SNy5cWHX1LGDer4TFSvl1U4LSyJ3OH+lH2fRO++GH ZhloHgdf8JLKaRMiaqYq4bHbWimfgg1ckst4qg2lqyXfMY0PtdMfGxc4xEdsugiZ vgDG/CYedxU/AfIASa0sq1+z++tVd9J8rX5lU2Xgh7nzYiVo/szRQZ01KzC7TYAn rSq0bW015O6/uJ/A1S7jWtL9gJebaxyAcJf8y7iXlrxijnnNPKwjvubWYxp195NE +gdNgt7P4cqBM7w/Jhq0vIkpwzHUi+bvRez1WoL5m3w87hix8WIXM18rWNFqMI3d uDshilaLhFYBhLb5poEB/vA5LmFV6JFQ -----END CERTIFICATE-----Generated at Sun Aug 24 21:29:09 2025 by rpki-client