$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: qixy9jzbQRsvUyNZWZ8i00sU78EhwbtQIhgyDmRWoD4= Subject key identifier: BD:36:94:44:1A:2D:86:FD:21:8E:D8:A2:91:A7:6E:D7:F8:2C:4E:22 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01DA Signing time: Tue 09 Sep 2025 02:55:25 +0000 Manifest this update: Tue 09 Sep 2025 02:55:25 +0000 Manifest next update: Tue 16 Sep 2025 02:55:25 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: Ug9yQ7SqThTXWldkiSGpq1TNRx13JHHkIPRDibdYNx0=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Sep 9 02:55:25 2025 GMT Not After : Sep 16 02:55:25 2025 GMT Subject: CN=68bf971d-6634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f1:48:e0:91:1c:3c:3e:01:ab:79:df:d6:94: 2d:18:ed:96:a0:0f:61:9b:b7:50:25:34:87:41:68: bc:1b:75:05:8e:f5:a5:53:84:a5:0d:30:b8:4b:bb: 07:22:45:7f:39:47:17:56:b3:16:ba:27:a1:53:05: 97:35:b1:da:c0:d0:52:33:50:3c:55:6f:9f:4c:87: 01:6d:c5:77:be:ce:a2:74:74:95:72:10:ec:64:28: 2d:76:57:03:33:97:99:c8:c8:f0:62:ab:63:3d:16: e1:ac:c4:e2:76:f8:db:b2:a6:e4:23:41:30:23:b4: ca:b0:20:0d:74:41:27:0d:c2:4d:47:11:3a:8a:f9: 2b:31:c2:ce:78:ff:5c:84:f8:43:91:e5:d2:74:08: b5:32:f0:e3:d0:8e:c5:0e:55:13:d8:50:25:29:df: df:6f:d3:e0:5b:58:c7:97:73:1b:a2:c3:bc:4d:05: 0b:74:55:42:e8:d9:48:a2:11:8c:d0:7e:a6:07:8c: ea:3a:70:15:e3:94:2b:a0:c0:3e:7c:c9:ec:37:de: 3f:80:9c:c4:c5:06:04:e7:b2:ee:24:93:45:bf:97: 06:7b:65:ea:cd:c4:f5:29:a1:b0:d8:2a:74:75:f8: c9:ce:3b:60:79:81:b3:26:af:e3:8b:b3:5e:b1:4d: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:36:94:44:1A:2D:86:FD:21:8E:D8:A2:91:A7:6E:D7:F8:2C:4E:22 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:52:26:75:ae:30:40:9d:ba:f9:08:5f:7d:77:40:10:cb:b8: 8e:35:d1:04:a3:31:3e:d7:2d:0c:5f:56:50:4a:08:2f:31:8f: 60:64:0c:8c:2d:0e:5a:8f:4f:d8:d9:9e:63:81:ad:77:91:34: b2:8c:4b:1c:28:ef:ed:84:12:38:61:bf:0f:e3:e3:8a:b2:2a: 3d:d6:22:9c:a8:85:e9:e2:5c:b1:ba:b3:ec:61:67:d3:b6:28: ba:8f:dd:96:49:9a:2b:82:5f:f8:85:95:5e:f7:22:7f:ab:fe: 4b:0e:5e:ec:c5:a0:4a:7e:9d:3c:a6:61:27:27:d6:93:90:52: d9:8b:1b:be:94:76:41:a2:45:16:bd:fa:70:08:bf:70:68:7d: 0e:b5:ab:0b:28:7e:28:ab:c4:78:a8:2c:89:1e:3a:28:cb:f9: 18:b7:5c:ae:68:73:d9:86:db:d4:b9:4f:32:a2:f7:30:c7:dd: 34:8e:b6:86:fc:c5:b0:99:2e:4e:4b:9f:fa:59:6d:a4:c3:a4: bf:18:ce:ec:8c:17:43:a0:19:35:c3:70:98:55:15:09:d2:56: 8a:fd:a3:95:08:3e:8e:d5:da:7c:e9:8f:20:d3:de:eb:57:27: 73:45:dd:99:91:3d:4b:fd:e6:bc:33:68:0d:54:ec:35:f0:58: 19:9a:f4:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwOTA5MDI1NTI1WhcNMjUwOTE2MDI1NTI1WjAYMRYwFAYD VQQDEw02OGJmOTcxZC02NjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/FI4JEcPD4Bq3nf1pQtGO2WoA9hm7dQJTSHQWi8G3UFjvWlU4SlDTC4S7sH IkV/OUcXVrMWuiehUwWXNbHawNBSM1A8VW+fTIcBbcV3vs6idHSVchDsZCgtdlcD M5eZyMjwYqtjPRbhrMTidvjbsqbkI0EwI7TKsCANdEEnDcJNRxE6ivkrMcLOeP9c hPhDkeXSdAi1MvDj0I7FDlUT2FAlKd/fb9PgW1jHl3MbosO8TQULdFVC6NlIohGM 0H6mB4zqOnAV45QroMA+fMnsN94/gJzExQYE57LuJJNFv5cGe2XqzcT1KaGw2Cp0 dfjJzjtgeYGzJq/ji7NesU0b8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL02lEQa LYb9IY7YopGnbtf4LE4iMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUiZ1rjBAnbr5CF99d0AQy7iONdEEozE+1y0MX1ZQSggvMY9gZAyM LQ5aj0/Y2Z5jga13kTSyjEscKO/thBI4Yb8P4+OKsio91iKcqIXp4lyxurPsYWfT tii6j92WSZorgl/4hZVe9yJ/q/5LDl7sxaBKfp08pmEnJ9aTkFLZixu+lHZBokUW vfpwCL9waH0OtasLKH4oq8R4qCyJHjooy/kYt1yuaHPZhtvUuU8yovcwx900jraG /MWwmS5OS5/6WW2kw6S/GM7sjBdDoBk1w3CYVRUJ0laK/aOVCD6O1dp86Y8g097r VydzRd2ZkT1L/ea8M2gNVOw18FgZmvTi -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:27 2025 by rpki-client