$ rpki-client -vvf rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft File: 7LSEAFYEaoqTIoTqXx4EagIzHOk.mft (raw, json) Hash identifier: RzAjZW6DgSgcF85JLD01E8NZ1jadNsFZGPRdnfAtKWI= Subject key identifier: E9:9A:A2:42:7E:ED:15:5E:45:91:1A:8B:5C:71:01:17:65:61:06:93 Authority key identifier: EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 Certificate issuer: /CN=A9149E50/serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Certificate serial: A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft Manifest number: A1 Signing time: Thu 21 Aug 2025 06:33:35 +0000 Manifest this update: Thu 21 Aug 2025 06:33:34 +0000 Manifest next update: Thu 28 Aug 2025 06:33:34 +0000 Files and hashes: 1: 7LSEAFYEaoqTIoTqXx4EagIzHOk.crl (hash: MRq1/RtSq4bJrMcMbPYV1DAm9JdpMVZB2E3VhLbK9Rg=) 2: 99AA0D12924111EFB764DA22C4F9AE02.roa (hash: /mhXFSUm8wgJtNfejG+rJ98B0FGC7kHmpO9IfNRXQCI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149E50, serialNumber=ECB4840056046A8A932284EA5F1E046A02331CE9 Validity Not Before: Aug 21 06:33:34 2025 GMT Not After : Aug 28 06:33:34 2025 GMT Subject: CN=68a6bdbf-706b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:49:4b:e8:1f:b2:67:43:f5:bd:12:11:58:ee: 58:6d:e6:75:23:5d:45:94:34:df:cf:19:54:6e:04: a0:4d:5a:53:1a:15:35:9e:d7:13:0b:7c:ba:4f:7e: f9:52:3a:b8:58:98:74:48:f4:96:b6:0c:95:af:d7: d7:f4:85:9b:29:3c:59:67:ba:6d:4e:ba:35:87:ad: e6:8b:05:3a:45:03:75:52:6b:77:ca:e0:fc:44:82: ff:df:b4:d2:7b:9a:09:27:41:9d:43:f3:7b:73:53: 12:0d:67:9d:c6:2a:bd:a2:bd:fd:b7:d4:83:9c:60: 1b:64:67:31:29:78:dd:6f:9b:87:66:17:91:b9:40: 4d:dd:d0:fb:b2:cf:6c:d4:a5:f5:48:c9:52:27:11: 07:bc:a8:f9:c4:a1:bd:95:0c:93:77:d0:22:c0:27: 19:08:5f:cd:7f:f7:d5:f2:4f:0a:f1:f3:6f:cb:a5: 15:83:3d:aa:11:d2:48:63:42:6b:6f:37:75:54:15: 90:56:93:95:6f:99:00:c4:e9:02:76:b8:2d:e0:c0: 4a:e3:fb:a5:ef:67:6e:80:25:d9:91:dc:34:36:f1: 40:79:e8:68:ba:89:d6:e5:91:92:5b:da:0b:6d:cd: a4:9a:cd:cc:ec:5c:ca:1c:c9:42:56:83:cb:0a:ce: 29:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9A:A2:42:7E:ED:15:5E:45:91:1A:8B:5C:71:01:17:65:61:06:93 X509v3 Authority Key Identifier: keyid:EC:B4:84:00:56:04:6A:8A:93:22:84:EA:5F:1E:04:6A:02:33:1C:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7LSEAFYEaoqTIoTqXx4EagIzHOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149E50/2DD7638C924111EFA56CCE21C4F9AE02/7LSEAFYEaoqTIoTqXx4EagIzHOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:75:69:7f:8f:e2:5f:de:7d:7c:60:11:3a:8d:50:a3:69:18: 13:9b:c8:27:67:85:d0:57:dc:5c:77:67:e5:0d:1f:45:b6:e9: 70:85:1c:57:07:14:eb:54:17:d7:53:6d:9e:52:cb:60:4a:d3: 67:51:10:35:f8:ad:12:4d:77:ee:0c:06:49:04:0c:a6:28:51: 11:6d:7e:f6:74:de:60:e4:1d:16:73:83:44:69:9b:39:c5:96: 88:d2:c2:17:cf:33:e9:3b:2c:ff:66:d7:26:27:88:4b:d4:52: 70:14:dc:b2:f9:17:75:53:8a:7f:45:ea:61:35:f7:d1:b7:63: 08:0d:db:7e:96:a8:a1:76:77:c3:af:f5:f5:71:26:bb:e4:03: 2b:63:15:f2:61:c0:bf:4a:86:22:55:47:c4:f7:33:a2:d4:ae: d9:f0:4b:d6:ea:f1:2c:4a:08:d8:26:88:68:b4:8e:6d:38:51: 65:69:0a:ba:88:0d:96:3d:ee:d6:34:f0:a2:c3:8f:c8:06:59: 44:94:44:6e:bb:c2:a0:85:c7:f9:1f:dd:88:48:62:9c:16:4f: ea:3b:bf:19:9c:7e:d3:36:65:71:c4:0f:c9:c2:1c:ad:b3:88: 26:28:4b:92:22:b6:2b:8e:dc:36:31:cf:90:f4:0d:e9:e2:ea: 8d:72:73:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlFNTAxMTAvBgNVBAUTKEVDQjQ4NDAwNTYwNDZBOEE5MzIyODRFQTVGMUUwNDZB MDIzMzFDRTkwHhcNMjUwODIxMDYzMzM0WhcNMjUwODI4MDYzMzM0WjAYMRYwFAYD VQQDEw02OGE2YmRiZi03MDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArklL6B+yZ0P1vRIRWO5YbeZ1I11FlDTfzxlUbgSgTVpTGhU1ntcTC3y6T375 Ujq4WJh0SPSWtgyVr9fX9IWbKTxZZ7ptTro1h63miwU6RQN1Umt3yuD8RIL/37TS e5oJJ0GdQ/N7c1MSDWedxiq9or39t9SDnGAbZGcxKXjdb5uHZheRuUBN3dD7ss9s 1KX1SMlSJxEHvKj5xKG9lQyTd9AiwCcZCF/Nf/fV8k8K8fNvy6UVgz2qEdJIY0Jr bzd1VBWQVpOVb5kAxOkCdrgt4MBK4/ul72dugCXZkdw0NvFAeehouonW5ZGSW9oL bc2kms3M7FzKHMlCVoPLCs4pEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmaokJ+ 7RVeRZEai1xxARdlYQaTMB8GA1UdIwQYMBaAFOy0hABWBGqKkyKE6l8eBGoCMxzp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUU1MC8yREQ3NjM4Qzky NDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFvcVRJb1RxWHg0RWFnSXpI T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdMU0VBRllFYW9xVElvVHFYeDRFYWdJekhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUU1MC8yREQ3NjM4QzkyNDExMUVGQTU2Q0NFMjFDNEY5QUUwMi83TFNFQUZZRWFv cVRJb1RxWHg0RWFnSXpIT2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYdWl/j+Jf3n18YBE6jVCjaRgTm8gnZ4XQV9xcd2flDR9FtulwhRxX BxTrVBfXU22eUstgStNnURA1+K0STXfuDAZJBAymKFERbX72dN5g5B0Wc4NEaZs5 xZaI0sIXzzPpOyz/ZtcmJ4hL1FJwFNyy+Rd1U4p/RephNffRt2MIDdt+lqihdnfD r/X1cSa75AMrYxXyYcC/SoYiVUfE9zOi1K7Z8EvW6vEsSgjYJohotI5tOFFlaQq6 iA2WPe7WNPCiw4/IBllElERuu8Kghcf5H92ISGKcFk/qO78ZnH7TNmVxxA/Jwhyt s4gmKEuSIrYrjtw2Mc+Q9A3p4uqNcnNj -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:11 2025 by rpki-client