$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft File: 7SPwf-AyVEbdDVoZwaF-PIhh75c.mft (raw, json) Hash identifier: FOSHD/7lQN8tI+77LadrfzaTqFZWbtn0l4IFBNpSYRY= Subject key identifier: 29:6C:2A:18:18:CE:93:C3:8D:5A:3A:C3:51:62:FC:17:7C:A1:0D:FF Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 Certificate issuer: /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Certificate serial: 0C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft Manifest number: 0C6E Signing time: Wed 20 Aug 2025 18:29:47 +0000 Manifest this update: Wed 20 Aug 2025 18:29:46 +0000 Manifest next update: Wed 27 Aug 2025 18:29:46 +0000 Files and hashes: 1: 7SPwf-AyVEbdDVoZwaF-PIhh75c.crl (hash: V6mjJMYo4xwIcqXZijZ0Y3b3vil7x5+BPZq1EiTElb4=) 2: 83EDB54420E811EE97989E0DC4F9AE02.roa (hash: LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3192 (0xc78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136A3E, serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97 Validity Not Before: Aug 20 18:29:46 2025 GMT Not After : Aug 27 18:29:46 2025 GMT Subject: CN=68a6141b-6c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:ad:fd:ae:9f:b7:c1:e3:e3:dd:21:53:52: 7b:83:66:61:fb:0e:7b:63:2b:5a:59:c1:78:ab:f0: 42:b2:af:18:3d:a6:0a:8d:4b:42:c8:02:a7:5f:95: 84:b1:b7:57:df:c0:b9:d5:1b:e4:44:f3:00:c1:3d: 57:d5:30:41:82:18:d2:e2:42:4a:b0:86:b5:a6:77: 82:1a:69:5a:ab:44:01:d0:e2:0a:9e:d6:c3:56:89: 26:16:0a:fa:ce:38:f7:e6:0c:c6:89:be:5d:2d:a6: 07:44:cc:64:58:df:b6:f0:8e:9c:d0:24:fe:3d:88: 57:c4:1f:2f:54:81:37:71:aa:58:03:f9:c1:a3:0a: 91:f0:fe:fe:20:de:6d:c5:24:2f:9a:a7:ac:fc:65: 79:f4:5b:82:a7:bd:ca:3c:7b:25:08:9f:7c:bd:ca: 54:2b:65:ee:2c:fc:24:a5:1c:4b:c7:b8:ca:46:cf: 45:9f:e9:fc:c7:6f:f1:f3:a8:dd:0a:c8:af:0b:32: 14:9a:3b:88:8c:d1:e3:a2:8c:36:93:f3:40:b6:06: c6:ec:6f:e5:4d:34:16:b3:69:ee:a5:e0:8c:8d:61: 72:9c:76:e3:4b:32:b7:b5:5b:1d:ba:93:66:1f:be: 72:6b:ec:6f:a5:8b:e2:62:6c:07:ed:1d:f4:60:53: fd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6C:2A:18:18:CE:93:C3:8D:5A:3A:C3:51:62:FC:17:7C:A1:0D:FF X509v3 Authority Key Identifier: keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:fc:ff:72:40:a3:79:29:79:c4:27:86:f9:fd:d2:ad:a6:51: df:2c:c2:9e:82:57:e1:7c:b4:7f:80:bb:15:cb:84:44:72:93: cc:fa:3c:0a:6b:13:d9:74:be:13:9b:79:d7:b9:5c:24:f7:5d: 92:02:ae:a6:85:d6:15:ee:7e:f1:14:ae:f1:cd:b8:36:c1:7c: d8:3a:d1:18:04:dc:7b:87:20:d2:9c:d8:ca:66:0b:6f:03:9d: b4:1f:f7:68:40:8d:14:3d:7a:02:1e:64:65:77:0c:0e:b9:9e: 53:f7:f1:02:27:c7:95:cd:91:78:19:eb:5f:ad:0e:4e:87:7f: c2:78:d2:84:60:3d:df:9b:7a:4d:60:03:8b:02:b6:c4:6c:cf: 84:49:0f:db:32:59:fc:3b:79:70:4b:cb:da:ca:9b:1d:b9:46: 45:a6:33:d1:6c:6f:2b:ec:ba:88:88:87:e5:91:05:7f:25:f4: 7a:47:18:4a:3b:ff:4f:a1:36:d3:1e:27:97:ef:f4:5e:9e:36: 7e:fb:72:9b:45:cb:95:00:c0:57:b5:13:0a:0c:1f:3d:87:d3: 42:1a:d9:2a:21:7f:e7:db:76:2e:5d:b8:1a:bc:ea:6a:ac:4a: 4b:3d:84:88:c4:3f:36:c3:61:11:3d:54:d6:82:46:a0:1a:df: 40:be:dd:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZBM0UxMTAvBgNVBAUTKEVEMjNGMDdGRTAzMjU0NDZERDBENUExOUMxQTE3RTND ODg2MUVGOTcwHhcNMjUwODIwMTgyOTQ2WhcNMjUwODI3MTgyOTQ2WjAYMRYwFAYD VQQDEw02OGE2MTQxYi02YzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsR6t/a6ft8Hj490hU1J7g2Zh+w57YytaWcF4q/BCsq8YPaYKjUtCyAKnX5WE sbdX38C51RvkRPMAwT1X1TBBghjS4kJKsIa1pneCGmlaq0QB0OIKntbDVokmFgr6 zjj35gzGib5dLaYHRMxkWN+28I6c0CT+PYhXxB8vVIE3capYA/nBowqR8P7+IN5t xSQvmqes/GV59FuCp73KPHslCJ98vcpUK2XuLPwkpRxLx7jKRs9Fn+n8x2/x86jd CsivCzIUmjuIjNHjoow2k/NAtgbG7G/lTTQWs2nupeCMjWFynHbjSzK3tVsdupNm H75ya+xvpYviYmwH7R30YFP9ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClsKhgY zpPDjVo6w1Fi/Bd8oQ3/MB8GA1UdIwQYMBaAFO0j8H/gMlRG3Q1aGcGhfjyIYe+X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkEzRS8xOTM3NjE1MjA1 RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZFYmREVm9ad2FGLVBJaGg3 NWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdTUHdmLUF5VkViZERWb1p3YUYtUEloaDc1Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkEzRS8xOTM3NjE1MjA1RjYxMUVBODkxMkMxMjlDNEY5QUUwMi83U1B3Zi1BeVZF YmREVm9ad2FGLVBJaGg3NWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI/P9yQKN5KXnEJ4b5/dKtplHfLMKeglfhfLR/gLsVy4REcpPM+jwK axPZdL4Tm3nXuVwk912SAq6mhdYV7n7xFK7xzbg2wXzYOtEYBNx7hyDSnNjKZgtv A520H/doQI0UPXoCHmRldwwOuZ5T9/ECJ8eVzZF4GetfrQ5Oh3/CeNKEYD3fm3pN YAOLArbEbM+ESQ/bMln8O3lwS8vaypsduUZFpjPRbG8r7LqIiIflkQV/JfR6RxhK O/9PoTbTHieX7/RenjZ++3KbRcuVAMBXtRMKDB89h9NCGtkqIX/n23YuXbgavOpq rEpLPYSIxD82w2ERPVTWgkagGt9Avt0F -----END CERTIFICATE-----Generated at Fri Aug 22 16:29:49 2025 by rpki-client