$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft File: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json) Hash identifier: Sgt236n8nyKk/m+ZSkDquq3WTkFSKw7ER+9V4mDUH/o= Subject key identifier: 5F:5E:BA:F5:B3:EE:9E:2A:17:19:5D:7B:89:4C:66:08:FB:89:42:03 Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 Certificate issuer: /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Certificate serial: 0668 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft Manifest number: 065F Signing time: Mon 08 Sep 2025 22:38:52 +0000 Manifest this update: Mon 08 Sep 2025 22:38:51 +0000 Manifest next update: Mon 15 Sep 2025 22:38:51 +0000 Files and hashes: 1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: gqS+obAXl5c17tpvPcaq/4YovmPuHupj5Dhh0uHcpAo=) 2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:38:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64 Validity Not Before: Sep 8 22:38:51 2025 GMT Not After : Sep 15 22:38:51 2025 GMT Subject: CN=68bf5afb-90af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:51:48:31:ae:26:5f:91:ee:0c:c8:02:17:2c: 30:d2:fe:48:ee:48:58:7e:97:83:f5:d4:5b:a3:f9: 41:cd:cb:ec:6b:f9:e9:5b:bc:cd:70:66:47:6f:1c: 57:71:60:6a:cd:ce:d6:6a:30:3a:b6:f6:08:93:4d: 47:c6:77:84:41:0d:24:31:86:f5:22:f9:28:d0:a7: 14:a0:a1:2e:2a:7d:23:77:20:e6:b1:29:ac:44:f4: 96:c0:e8:71:b1:1b:82:80:c4:01:34:73:f2:9c:8e: 7c:0c:80:dc:b3:68:6b:2b:1b:87:f5:f0:9f:9b:4a: 18:6b:26:94:23:76:35:5a:81:26:e5:a1:17:4e:1a: b6:99:e4:53:97:a5:20:0c:26:d7:95:aa:b4:87:07: 1b:fb:84:e4:a0:25:89:9b:b3:dc:aa:1c:74:54:57: 90:37:e7:11:88:76:dd:3f:e8:73:e5:73:85:4d:cc: b3:ab:4f:e7:0b:07:be:81:ce:b1:27:54:36:72:a7: 24:9e:93:64:c4:85:f0:39:35:18:26:89:dc:a5:29: 0e:06:15:ff:c6:0a:4b:87:f3:26:f2:de:0f:70:d9: bb:79:32:35:04:d1:a1:2b:f5:d8:95:0b:1d:41:ff: af:f1:52:2e:25:6f:85:9c:74:a6:4e:9e:9b:2e:8a: a2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5E:BA:F5:B3:EE:9E:2A:17:19:5D:7B:89:4C:66:08:FB:89:42:03 X509v3 Authority Key Identifier: keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:c7:56:66:b9:38:47:3f:9a:44:fb:89:84:80:c3:fb:39: 92:a2:c2:11:ca:c9:91:92:f9:cb:ce:fa:01:eb:c9:bf:58:1e: 5b:c4:4e:fb:3d:28:0d:55:5b:ae:cd:dc:57:ba:e5:db:c6:33: 1e:71:fb:bd:d5:d0:86:a9:4e:1f:4f:15:c8:7c:59:e5:12:86: 4b:1a:a5:8f:98:72:95:91:1a:bd:30:a1:07:e8:7c:ed:64:04: 39:96:fa:a3:65:da:f2:b3:4e:6d:fa:bf:5f:68:47:a7:eb:3b: 74:af:63:b6:f4:41:e4:d7:08:18:c7:1f:eb:4d:0d:3d:be:bd: f2:09:00:24:5d:e5:e1:2b:03:16:16:4b:e7:85:1b:5f:3a:bc: 5e:38:32:00:94:98:5c:4e:85:32:27:b3:1a:b0:db:4a:c6:c9: 82:9c:2e:3e:8e:da:51:6c:e4:e0:6b:01:26:fc:d2:e0:0d:8b: e4:3f:3b:a7:38:c4:18:44:af:5c:6b:e9:b5:4a:e8:e9:58:09: 14:d3:64:b9:0e:71:0b:8c:45:6b:4d:91:8e:0f:d1:bc:7a:99: 25:f1:26:0b:67:3f:3e:7e:f2:03:9b:c1:4e:79:fa:e4:a0:ae: ec:3b:99:23:61:7b:9a:c4:cd:38:78:0c:6b:8f:da:65:1a:39: 47:ff:7c:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U3Q0ExMTAvBgNVBAUTKEZGQjUwM0YyMDIzMjBDRDg2OTczQUZFNjFBMTZGQkI1 QzZGMjhENjQwHhcNMjUwOTA4MjIzODUxWhcNMjUwOTE1MjIzODUxWjAYMRYwFAYD VQQDEw02OGJmNWFmYi05MGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFFIMa4mX5HuDMgCFyww0v5I7khYfpeD9dRbo/lBzcvsa/npW7zNcGZHbxxX cWBqzc7WajA6tvYIk01HxneEQQ0kMYb1Ivko0KcUoKEuKn0jdyDmsSmsRPSWwOhx sRuCgMQBNHPynI58DIDcs2hrKxuH9fCfm0oYayaUI3Y1WoEm5aEXThq2meRTl6Ug DCbXlaq0hwcb+4TkoCWJm7Pcqhx0VFeQN+cRiHbdP+hz5XOFTcyzq0/nCwe+gc6x J1Q2cqcknpNkxIXwOTUYJoncpSkOBhX/xgpLh/Mm8t4PcNm7eTI1BNGhK/XYlQsd Qf+v8VIuJW+FnHSmTp6bLoqi8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9euvWz 7p4qFxlde4lMZgj7iUIDMB8GA1UdIwQYMBaAFP+1A/ICMgzYaXOv5hoW+7XG8o1k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTdDQS8wMDNERTA2MDlB OTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeUROaHBjNl9tR2hiN3RjYnlq V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183VUQ4Z0l5RE5ocGM2X21HaGI3dGNieWpXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTdDQS8wMDNERTA2MDlBOTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeURO aHBjNl9tR2hiN3RjYnlqV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo2cdWZrk4Rz+aRPuJhIDD+zmSosIRysmRkvnLzvoB68m/WB5bxE77 PSgNVVuuzdxXuuXbxjMecfu91dCGqU4fTxXIfFnlEoZLGqWPmHKVkRq9MKEH6Hzt ZAQ5lvqjZdrys05t+r9faEen6zt0r2O29EHk1wgYxx/rTQ09vr3yCQAkXeXhKwMW FkvnhRtfOrxeODIAlJhcToUyJ7MasNtKxsmCnC4+jtpRbOTgawEm/NLgDYvkPzun OMQYRK9ca+m1SujpWAkU02S5DnELjEVrTZGOD9G8epkl8SYLZz8+fvIDm8FOefrk oK7sO5kjYXuaxM04eAxrj9plGjlH/3x+ -----END CERTIFICATE-----Generated at Wed Sep 10 12:03:34 2025 by rpki-client