$ rpki-client -vvf rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft File: f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft (raw, json) Hash identifier: 5mqxmQOnCzF0aN58N6xbfIktGbv2167XOylEJopQlWk= Subject key identifier: 81:CC:5F:CC:19:E2:F0:0E:E7:87:6E:18:3C:5D:32:E8:43:FE:C5:59 Authority key identifier: 7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 Certificate issuer: /CN=A912C738/serialNumber=7FB23916037E9332966376F2E075541224162AF4 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft Manifest number: 05EE Signing time: Thu 04 Sep 2025 23:16:05 +0000 Manifest this update: Thu 04 Sep 2025 23:16:05 +0000 Manifest next update: Thu 11 Sep 2025 23:16:05 +0000 Files and hashes: 1: f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl (hash: kCbeWDZD28IEYekzpDBKf8PY2HgxlVLHFtGQd4tPxcA=) 2: B2FCD95C55AA11F09B8A7E4AC4F9AE02.roa (hash: a4WQSUXqPLBs6hBYXUzBgrWs1nsWnI2pLDicQNKog6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C738, serialNumber=7FB23916037E9332966376F2E075541224162AF4 Validity Not Before: Sep 4 23:16:05 2025 GMT Not After : Sep 11 23:16:05 2025 GMT Subject: CN=68ba1db5-c94b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:9a:fd:4a:73:fe:2c:c5:11:7c:aa:3a:d5: bd:36:74:f5:18:19:2f:3c:42:42:63:27:2e:01:60: a7:ed:4b:29:b7:ed:75:cc:fd:79:ff:29:c6:65:fa: bc:29:d5:af:d0:65:34:b2:b5:15:f4:be:c9:7b:49: 90:45:9b:aa:72:20:69:f0:ee:8c:5c:aa:56:7b:f3: eb:6e:84:9b:2a:8b:d7:8f:27:d0:22:80:1a:27:3f: c3:d9:ce:62:91:99:47:db:c9:f6:01:a3:9a:23:6e: 42:d9:9a:38:a1:ac:83:23:a2:96:1c:0c:a9:26:35: 34:ed:b7:a0:6d:d0:ab:9e:42:99:9c:d6:7a:70:46: 7b:fb:8b:fa:19:cc:53:74:f3:7a:b0:b7:d9:b5:0f: d9:91:e1:e9:60:fd:df:65:b3:78:02:87:18:37:7b: 59:23:d6:76:b0:e9:e9:f0:3a:27:48:eb:f3:44:c0: fa:4a:60:6d:38:a9:ac:06:58:8b:f8:5e:4d:95:e2: 35:3c:62:93:99:2d:a1:6d:8e:61:cc:02:bb:14:b8: 68:a9:b4:94:36:d8:c6:3d:bd:ae:13:fc:02:7a:7f: 0a:bc:1a:dc:e9:a3:2f:7f:a9:5b:81:b0:f6:ab:b7: d7:f8:bd:b4:3e:e7:a8:b0:54:dd:1d:b6:a4:50:29: 4c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:CC:5F:CC:19:E2:F0:0E:E7:87:6E:18:3C:5D:32:E8:43:FE:C5:59 X509v3 Authority Key Identifier: keyid:7F:B2:39:16:03:7E:93:32:96:63:76:F2:E0:75:54:12:24:16:2A:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/f7I5FgN-kzKWY3by4HVUEiQWKvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C738/320C3A9AC9D111EB8DC5D210C4F9AE02/f7I5FgN-kzKWY3by4HVUEiQWKvQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:04:5a:25:9a:7c:13:28:13:28:68:ae:53:f9:7e:60:cd:b5: d0:68:13:ff:49:31:08:a6:e8:15:ea:3f:8d:bd:f8:58:b2:e1: 31:11:eb:30:f4:64:a1:96:61:48:60:e2:77:c9:74:c9:40:62: b8:57:c3:08:95:45:d4:61:92:0d:df:35:eb:44:34:11:09:9e: cd:77:f2:8e:ce:f2:08:0b:46:ec:fd:4c:1b:ce:f4:ad:7e:e5: fa:d9:2d:eb:fc:a1:14:42:75:a6:8c:1b:d9:c1:4c:11:8d:39: 18:15:e2:6c:6b:23:56:ae:2a:de:2d:8e:67:4b:be:ce:28:91: 32:d8:51:0a:80:d1:aa:f5:a6:9f:74:df:f9:1c:2c:a2:af:cc: b7:42:a1:e5:7a:06:32:e3:83:16:b8:1c:ac:58:e4:ae:63:12: b7:59:a8:d9:f5:a2:62:f8:e9:29:17:43:45:cc:83:e3:8a:06: 6b:be:7d:fd:81:94:59:f6:86:09:d6:af:71:8f:23:ac:09:71: e2:00:26:9e:58:a7:fd:86:4f:27:ed:b3:7f:fc:0e:0f:7e:e6: cf:4f:bf:c8:98:59:78:35:5b:64:ee:77:81:70:00:38:50:84: 55:d8:4d:80:88:eb:99:6d:51:a3:8e:b9:ec:d3:86:c1:61:5a: be:42:22:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3MzgxMTAvBgNVBAUTKDdGQjIzOTE2MDM3RTkzMzI5NjYzNzZGMkUwNzU1NDEy MjQxNjJBRjQwHhcNMjUwOTA0MjMxNjA1WhcNMjUwOTExMjMxNjA1WjAYMRYwFAYD VQQDEw02OGJhMWRiNS1jOTRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvia/Upz/izFEXyqOtW9NnT1GBkvPEJCYycuAWCn7Uspt+11zP15/ynGZfq8 KdWv0GU0srUV9L7Je0mQRZuqciBp8O6MXKpWe/PrboSbKovXjyfQIoAaJz/D2c5i kZlH28n2AaOaI25C2Zo4oayDI6KWHAypJjU07begbdCrnkKZnNZ6cEZ7+4v6GcxT dPN6sLfZtQ/ZkeHpYP3fZbN4AocYN3tZI9Z2sOnp8DonSOvzRMD6SmBtOKmsBliL +F5NleI1PGKTmS2hbY5hzAK7FLhoqbSUNtjGPb2uE/wCen8KvBrc6aMvf6lbgbD2 q7fX+L20PueosFTdHbakUClMrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHMX8wZ 4vAO54duGDxdMuhD/sVZMB8GA1UdIwQYMBaAFH+yORYDfpMylmN28uB1VBIkFir0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzczOC8zMjBDM0E5QUM5 RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6S1dZM2J5NEhWVUVpUVdL dlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2Y3STVGZ04ta3pLV1kzYnk0SFZVRWlRV0t2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzczOC8zMjBDM0E5QUM5RDExMUVCOERDNUQyMTBDNEY5QUUwMi9mN0k1RmdOLWt6 S1dZM2J5NEhWVUVpUVdLdlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwBFolmnwTKBMoaK5T+X5gzbXQaBP/STEIpugV6j+NvfhYsuExEesw 9GShlmFIYOJ3yXTJQGK4V8MIlUXUYZIN3zXrRDQRCZ7Nd/KOzvIIC0bs/UwbzvSt fuX62S3r/KEUQnWmjBvZwUwRjTkYFeJsayNWrireLY5nS77OKJEy2FEKgNGq9aaf dN/5HCyir8y3QqHlegYy44MWuBysWOSuYxK3WajZ9aJi+OkpF0NFzIPjigZrvn39 gZRZ9oYJ1q9xjyOsCXHiACaeWKf9hk8n7bN//A4PfubPT7/ImFl4NVtk7neBcAA4 UIRV2E2AiOuZbVGjjrns04bBYVq+QiLv -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client