$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: 9Ojh/LtkKwL88aCdbN+L2EIvrVZb+uRGlXoKMz53bhw= Subject key identifier: 31:F3:37:0B:FA:96:58:98:FD:1B:CF:06:43:58:DB:15:E9:9E:FF:A6 Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E27 Signing time: Sun 24 Aug 2025 17:47:15 +0000 Manifest this update: Sun 24 Aug 2025 17:47:15 +0000 Manifest next update: Sun 31 Aug 2025 17:47:15 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: +aq14OWY3E/72Wtt31a6SmEkHUPw9YVT9MhLR46uAyI=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3632 (0xe30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Aug 24 17:47:15 2025 GMT Not After : Aug 31 17:47:15 2025 GMT Subject: CN=68ab5023-971d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:18:cd:2a:82:99:74:3e:44:3e:36:1d:c2: 21:de:47:7e:41:5e:67:56:43:85:85:8d:5e:b0:65: b6:67:36:d2:83:c6:c1:96:64:aa:0a:a8:a4:7b:44: 20:2e:ae:bd:01:bb:2e:94:09:e8:bd:78:26:91:b2: c2:73:82:f5:2e:20:f1:ea:3a:67:12:ef:b6:ce:c8: 9f:23:12:0b:cf:2e:b0:12:77:7f:5b:c3:f1:20:5c: f9:fd:95:df:f2:f3:57:92:f9:ad:2c:6e:21:39:4f: c6:91:6c:eb:21:55:17:15:4e:2a:0c:32:13:48:92: 60:4d:5f:f3:41:14:e7:11:52:db:f7:3a:3e:e6:4e: 83:ab:bd:d2:72:55:3a:2a:34:29:b1:78:00:9a:36: a2:90:df:e3:d2:25:91:e2:46:4a:10:70:f1:74:b6: cf:ed:f2:a7:56:ef:6f:53:4c:a1:74:c2:56:d7:d0: be:4a:2e:02:75:db:cf:9c:de:c6:e3:7d:f9:25:56: 2c:9d:ff:d0:b5:4f:4a:6e:07:03:38:5b:11:32:7a: 57:d3:09:f6:3e:e0:3e:2e:1c:b1:bd:8d:d6:29:44: e4:e1:7d:2a:6c:77:4c:78:57:66:e6:0e:9e:a0:63: 1f:bf:11:16:84:73:56:be:a6:b7:d4:65:4d:19:da: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:F3:37:0B:FA:96:58:98:FD:1B:CF:06:43:58:DB:15:E9:9E:FF:A6 X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:df:b6:8e:a9:a7:fd:f2:ce:41:19:72:15:cb:95:94:29:ae: 90:c3:ad:f2:e6:47:f5:ec:bd:cd:b6:d9:9e:7a:85:5a:07:4e: 2d:5e:30:56:7e:79:c8:4c:f3:66:08:e5:85:c9:f8:52:7c:15: 47:9c:e9:a3:ec:c5:de:3f:9f:91:65:4d:ca:d7:48:0c:4a:93: 56:8c:9f:cf:50:e8:21:e7:da:b7:62:62:c4:68:02:c6:06:77: 66:49:46:72:aa:91:4c:cf:f5:89:db:bf:58:55:07:9b:98:8f: 3f:d5:02:ff:54:68:db:aa:80:52:5e:c8:bb:f8:3c:c2:03:03: 62:01:02:e4:6f:f9:fb:5a:0b:56:5d:bc:6a:b5:77:f2:9a:60: c1:47:b6:40:f2:36:af:60:79:78:55:5d:cc:f2:a9:03:06:4b: bb:07:fa:cf:fd:ba:db:02:d9:f7:c1:b1:46:b5:f2:1d:c0:63: f3:ea:8d:b4:c3:e5:0d:2b:b4:e0:e7:ad:95:de:2c:e5:51:e8: 24:69:9e:44:0e:ec:a6:4a:3f:43:ca:4f:7e:d4:fc:fd:34:70: 64:04:29:55:ce:c3:f7:8c:72:fa:8d:24:d6:d4:aa:c3:fd:a8: c1:18:4b:e4:7b:09:9e:05:08:61:5f:6e:10:a8:14:27:48:fa: f7:53:cf:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwODI0MTc0NzE1WhcNMjUwODMxMTc0NzE1WjAYMRYwFAYD VQQDEw02OGFiNTAyMy05NzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdsYzSqCmXQ+RD42HcIh3kd+QV5nVkOFhY1esGW2ZzbSg8bBlmSqCqike0Qg Lq69AbsulAnovXgmkbLCc4L1LiDx6jpnEu+2zsifIxILzy6wEnd/W8PxIFz5/ZXf 8vNXkvmtLG4hOU/GkWzrIVUXFU4qDDITSJJgTV/zQRTnEVLb9zo+5k6Dq73SclU6 KjQpsXgAmjaikN/j0iWR4kZKEHDxdLbP7fKnVu9vU0yhdMJW19C+Si4CddvPnN7G 4335JVYsnf/QtU9KbgcDOFsRMnpX0wn2PuA+LhyxvY3WKUTk4X0qbHdMeFdm5g6e oGMfvxEWhHNWvqa31GVNGdqebwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHzNwv6 lliY/RvPBkNY2xXpnv+mMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAg37aOqaf98s5BGXIVy5WUKa6Qw63y5kf17L3NttmeeoVaB04tXjBW fnnITPNmCOWFyfhSfBVHnOmj7MXeP5+RZU3K10gMSpNWjJ/PUOgh59q3YmLEaALG BndmSUZyqpFMz/WJ279YVQebmI8/1QL/VGjbqoBSXsi7+DzCAwNiAQLkb/n7WgtW XbxqtXfymmDBR7ZA8javYHl4VV3M8qkDBku7B/rP/brbAtn3wbFGtfIdwGPz6o20 w+UNK7Tg562V3izlUegkaZ5EDuymSj9Dyk9+1Pz9NHBkBClVzsP3jHL6jSTW1KrD /ajBGEvkewmeBQhhX24QqBQnSPr3U8/Z -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:22 2025 by rpki-client