$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: 5KBFGvlsJCfE92nnaLnaNUFuSOTbQoabp8fmNt55jB0= Subject key identifier: 7E:2F:A9:EB:A8:E8:4D:DA:44:BE:3E:DE:E6:16:93:8B:DD:72:6D:A0 Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0C95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0C6F Signing time: Thu 18 Sep 2025 18:47:04 +0000 Manifest this update: Thu 18 Sep 2025 18:47:03 +0000 Manifest next update: Thu 25 Sep 2025 18:47:03 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: c/9qrCMVZtgs2hXj3s0MlN4izL99AicBHtH0vKBNwy0=) 2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: jLmFIeuFfW/kA9gB2qa9B520Ov6OJzEYyswQvxuxZy4=) 3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: Jod4UyMRx/RISNG7y9zB/lgaFI3cJMU1Lc5wZ68aw+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3221 (0xc95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Sep 18 18:47:03 2025 GMT Not After : Sep 25 18:47:03 2025 GMT Subject: CN=68cc53a8-a51f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1a:7a:27:0c:a7:c3:11:21:97:ca:c4:8b:c5: a6:7f:d8:b8:35:a3:df:d0:12:40:9f:c1:ac:4b:36: 67:98:97:0f:f0:42:32:f7:39:c7:37:1e:b7:d0:14: 38:7a:6f:ca:b2:cb:29:c5:2f:7f:3a:87:2d:2c:ad: dc:09:bc:ef:3e:db:48:6c:7d:8c:86:3d:14:47:62: 98:ad:7e:1b:ec:bf:ea:dd:d2:6d:de:fc:39:78:0b: f5:b0:67:68:31:3e:bf:40:c2:ed:bf:75:e4:b3:b9: 0d:c1:3e:0c:40:9c:72:19:d6:12:2a:78:49:34:0d: 3d:27:d6:1e:45:89:87:1a:ce:ab:6d:5f:40:8f:ba: ae:a1:a6:ed:c1:f0:f3:89:e2:a9:f2:36:62:19:2e: 1e:a0:7a:1b:ff:37:31:95:58:ab:29:8f:6b:7e:c3: 8d:93:17:d2:08:a0:0f:6f:8e:e9:6b:07:e6:d1:6d: 2f:f9:1c:ea:34:df:52:b5:36:27:3c:90:1d:21:91: a0:fa:61:8e:b5:a6:7c:65:c0:77:b3:eb:85:32:0f: f4:f9:f7:0e:f8:c9:36:b9:78:8e:2a:8b:32:12:34: 55:25:e0:e0:d3:4c:b5:12:e5:d4:1f:07:96:77:1c: ed:bc:16:cf:1f:61:50:a3:4b:42:30:f2:73:94:1a: 9f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2F:A9:EB:A8:E8:4D:DA:44:BE:3E:DE:E6:16:93:8B:DD:72:6D:A0 X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:54:78:e9:56:88:56:83:4e:ca:f5:95:1e:82:7d:25:ae:f6: 67:c1:06:8d:38:6a:13:76:88:d1:69:c3:da:bc:9f:14:73:2b: ec:79:b3:47:14:74:05:56:25:04:74:5a:38:31:98:a9:d3:b8: c2:e1:b2:a2:a7:03:0d:bb:84:9b:da:ee:90:73:1d:e5:29:c0: 84:fc:02:fe:02:5f:5b:ae:7d:fb:6d:d1:f3:41:72:bd:fd:83: 2b:48:46:7d:8c:24:98:b3:e6:e4:f7:f3:2f:0e:3b:1e:28:c6: a3:48:89:12:dc:64:ed:45:c2:11:ee:5a:fb:e4:6f:0a:c5:49: e5:86:d5:88:82:75:3e:8d:5d:94:4f:71:9a:3a:4c:7a:ef:0e: 0e:7c:ad:88:1c:3b:04:e3:d7:06:5c:fe:bf:f7:29:bd:f5:fd: 65:bb:69:bd:43:e0:96:1b:78:51:92:2a:68:05:3d:a1:4b:08: a7:8f:cf:d9:cc:d8:aa:f0:d2:24:cf:10:df:de:3a:e4:ce:ef: ae:cf:34:d1:c6:fc:a3:28:16:c2:2b:7f:b3:38:80:28:99:35: 88:64:ca:f0:75:4d:0f:b3:89:66:5c:06:81:1f:e6:1f:77:9c: e1:16:46:da:db:89:10:58:87:31:c5:ef:c2:10:84:aa:32:bc: 21:bf:97:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjUwOTE4MTg0NzAzWhcNMjUwOTI1MTg0NzAzWjAYMRYwFAYD VQQDEw02OGNjNTNhOC1hNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhp6JwynwxEhl8rEi8Wmf9i4NaPf0BJAn8GsSzZnmJcP8EIy9znHNx630BQ4 em/KssspxS9/OoctLK3cCbzvPttIbH2Mhj0UR2KYrX4b7L/q3dJt3vw5eAv1sGdo MT6/QMLtv3Xks7kNwT4MQJxyGdYSKnhJNA09J9YeRYmHGs6rbV9Aj7quoabtwfDz ieKp8jZiGS4eoHob/zcxlVirKY9rfsONkxfSCKAPb47pawfm0W0v+RzqNN9StTYn PJAdIZGg+mGOtaZ8ZcB3s+uFMg/0+fcO+Mk2uXiOKosyEjRVJeDg00y1EuXUHweW dxztvBbPH2FQo0tCMPJzlBqfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4vqeuo 6E3aRL4+3uYWk4vdcm2gMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfVHjpVohWg07K9ZUegn0lrvZnwQaNOGoTdojRacPavJ8UcyvsebNH FHQFViUEdFo4MZip07jC4bKipwMNu4Sb2u6Qcx3lKcCE/AL+Al9brn37bdHzQXK9 /YMrSEZ9jCSYs+bk9/MvDjseKMajSIkS3GTtRcIR7lr75G8KxUnlhtWIgnU+jV2U T3GaOkx67w4OfK2IHDsE49cGXP6/9ym99f1lu2m9Q+CWG3hRkipoBT2hSwinj8/Z zNiq8NIkzxDf3jrkzu+uzzTRxvyjKBbCK3+zOIAomTWIZMrwdU0Ps4lmXAaBH+Yf d5zhFkba24kQWIcxxe/CEISqMrwhv5dA -----END CERTIFICATE-----Generated at Fri Sep 19 02:36:45 2025 by rpki-client