$ rpki-client -vvf rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft File: B7vs0OoIn8ZO4UDdyN26UufZENA.mft (raw, json) Hash identifier: b3C70SQrVrK/RhM2FTEIo5mHvKpPo9+G+uylzi/afZQ= Subject key identifier: 70:30:29:02:50:13:4C:F8:4E:4D:22:20:E1:85:94:C7:5F:FA:EC:9D Authority key identifier: 07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 Certificate issuer: /CN=A912E64A/serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Certificate serial: 0615 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft Manifest number: 0609 Signing time: Mon 08 Sep 2025 22:55:12 +0000 Manifest this update: Mon 08 Sep 2025 22:55:12 +0000 Manifest next update: Mon 15 Sep 2025 22:55:12 +0000 Files and hashes: 1: B7vs0OoIn8ZO4UDdyN26UufZENA.crl (hash: PfXODLIe7Saj6908F32UHIrAkcqwl4rwU4Y7xMvD0ag=) 2: 55B56780BABA11EB8A51C234C4F9AE02.roa (hash: 4+8EOl0IVC0WYPREjgU4SQ2gBQ7SWbeC1nS8R2xM7hU=) 3: 55056D1CBABA11EB8A51C234C4F9AE02.roa (hash: Jks+wAurz0A89wXrN9oPKVJZcdKUluPelZM2Gsz3YvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1557 (0x615) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E64A, serialNumber=07BBECD0EA089FC64EE140DDC8DDBA52E7D910D0 Validity Not Before: Sep 8 22:55:12 2025 GMT Not After : Sep 15 22:55:12 2025 GMT Subject: CN=68bf5ed0-accc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:0f:8d:de:fb:c0:d2:cd:d3:68:14:e8:2b: 79:9e:8b:82:b1:56:62:b9:dc:93:c8:b6:dc:91:77: 79:ff:24:a0:97:e4:f9:31:a7:e4:7b:3c:e1:02:27: 22:dd:57:20:83:dd:f8:26:1f:91:8c:2b:14:9a:21: 81:04:52:58:94:6e:8f:9b:a7:64:99:ab:de:dc:e3: 09:cd:bf:77:e1:54:a6:2c:59:97:96:af:00:fa:c8: 18:43:62:14:06:4c:20:0c:63:d0:f5:e0:cb:0c:28: 73:96:9e:01:57:14:b1:8f:2a:d0:59:a8:04:0a:02: 25:e4:ed:fd:e6:fe:8e:8d:98:a6:60:f0:5d:d7:62: c3:87:c6:bb:78:9e:fd:3c:0a:eb:5c:93:4b:d4:b9: 60:dc:3b:97:e2:c9:01:87:ec:3f:eb:82:c0:c5:20: 74:71:12:95:8a:a5:7d:ef:10:f2:2a:3b:c2:dc:da: af:9c:d8:d0:7d:a1:79:25:1c:a9:4e:d6:d2:c1:7e: 00:f7:7b:d2:20:e6:dd:a2:34:50:f0:be:b3:fd:bb: c9:3b:2a:04:93:d9:ae:4e:85:89:74:3c:53:c5:0e: ba:a5:21:45:2d:ce:ac:e9:04:89:ad:20:87:b1:87: f9:d5:ff:0d:0f:99:e0:b4:4b:68:fd:63:41:9c:2a: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:30:29:02:50:13:4C:F8:4E:4D:22:20:E1:85:94:C7:5F:FA:EC:9D X509v3 Authority Key Identifier: keyid:07:BB:EC:D0:EA:08:9F:C6:4E:E1:40:DD:C8:DD:BA:52:E7:D9:10:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7vs0OoIn8ZO4UDdyN26UufZENA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E64A/CCCA5F5EBAB711EBA302942DC4F9AE02/B7vs0OoIn8ZO4UDdyN26UufZENA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:54:96:6c:d2:c1:a8:3a:7c:19:96:23:58:af:9e:2d:33:9a: 6a:cf:79:6b:77:61:ff:62:dc:93:9f:6e:80:17:db:4c:18:35: 4d:5b:8d:72:9a:42:25:cb:ef:e7:94:83:d2:58:7d:76:3b:53: 4a:29:f2:c3:23:4b:dc:8a:d5:81:e5:22:67:1f:11:f4:be:8c: da:9a:35:9e:19:0d:79:85:d3:de:b3:a0:75:dd:1d:d5:36:8b: 4a:66:87:91:79:91:6d:ba:97:0d:b2:4d:82:e0:b7:40:d7:4c: f6:95:db:14:f2:e7:eb:7c:18:e5:72:2f:39:4d:8d:a0:8b:ff: 3b:06:52:ee:92:3a:21:df:d6:a1:f0:d1:dc:3b:50:35:0c:de: 16:62:72:86:80:c9:ba:29:b2:a8:02:b9:4e:20:e5:07:6e:72: 77:fb:2f:10:d6:09:f8:5c:a9:a7:1c:74:1e:39:7f:9d:a6:50: e6:fa:32:34:44:20:d0:84:76:84:80:fa:ee:80:a6:d5:3d:25: aa:81:03:f0:0d:e8:cd:91:aa:7a:b6:af:f7:5c:34:e2:12:89: 39:d3:7d:12:bc:3d:9e:41:99:d2:9f:34:0d:99:d4:39:83:d9: d0:f6:3d:4a:cc:65:37:82:c6:a7:86:67:90:c1:b3:63:89:89: a8:d0:af:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU2NEExMTAvBgNVBAUTKDA3QkJFQ0QwRUEwODlGQzY0RUUxNDBEREM4RERCQTUy RTdEOTEwRDAwHhcNMjUwOTA4MjI1NTEyWhcNMjUwOTE1MjI1NTEyWjAYMRYwFAYD VQQDEw02OGJmNWVkMC1hY2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuAPjd77wNLN02gU6Ct5nouCsVZiudyTyLbckXd5/ySgl+T5MafkezzhAici 3Vcgg934Jh+RjCsUmiGBBFJYlG6Pm6dkmave3OMJzb934VSmLFmXlq8A+sgYQ2IU BkwgDGPQ9eDLDChzlp4BVxSxjyrQWagECgIl5O395v6OjZimYPBd12LDh8a7eJ79 PArrXJNL1Llg3DuX4skBh+w/64LAxSB0cRKViqV97xDyKjvC3NqvnNjQfaF5JRyp TtbSwX4A93vSIObdojRQ8L6z/bvJOyoEk9muToWJdDxTxQ66pSFFLc6s6QSJrSCH sYf51f8ND5ngtEto/WNBnCqq7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAwKQJQ E0z4Tk0iIOGFlMdf+uydMB8GA1UdIwQYMBaAFAe77NDqCJ/GTuFA3cjdulLn2RDQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTY0QS9DQ0NBNUY1RUJB QjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44Wk80VURkeU4yNlV1ZlpF TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I3dnMwT29JbjhaTzRVRGR5TjI2VXVmWkVOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTY0QS9DQ0NBNUY1RUJBQjcxMUVCQTMwMjk0MkRDNEY5QUUwMi9CN3ZzME9vSW44 Wk80VURkeU4yNlV1ZlpFTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7VJZs0sGoOnwZliNYr54tM5pqz3lrd2H/YtyTn26AF9tMGDVNW41y mkIly+/nlIPSWH12O1NKKfLDI0vcitWB5SJnHxH0vozamjWeGQ15hdPes6B13R3V NotKZoeReZFtupcNsk2C4LdA10z2ldsU8ufrfBjlci85TY2gi/87BlLukjoh39ah 8NHcO1A1DN4WYnKGgMm6KbKoArlOIOUHbnJ3+y8Q1gn4XKmnHHQeOX+dplDm+jI0 RCDQhHaEgPrugKbVPSWqgQPwDejNkap6tq/3XDTiEok5030SvD2eQZnSnzQNmdQ5 g9nQ9j1KzGU3gsanhmeQwbNjiYmo0K8O -----END CERTIFICATE-----Generated at Tue Sep 9 13:31:25 2025 by rpki-client