$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft File: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft (raw, json) Hash identifier: 4Ueuki5ON+O+u1lYVzb1aMd1zlmNNdcV92fuLi/4jnM= Subject key identifier: B8:8E:C2:92:50:03:B8:11:79:F2:DC:01:2F:18:58:AA:0D:E3:7F:90 Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Certificate serial: 1971 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft Manifest number: 1958 Signing time: Wed 20 Aug 2025 16:29:29 +0000 Manifest this update: Wed 20 Aug 2025 16:29:29 +0000 Manifest next update: Wed 27 Aug 2025 16:29:29 +0000 Files and hashes: 1: 7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl (hash: dyRNH9i2Ttav/QOygEijPrZLe1S76hp393vxZaaNkUY=) 2: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (hash: KaPPxJGKEv/zZM9wb84aOdkpe/TGoMFG363mkjcQVQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 16:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6513 (0x1971) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C725, serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384 Validity Not Before: Aug 20 16:29:29 2025 GMT Not After : Aug 27 16:29:29 2025 GMT Subject: CN=68a5f7e9-812e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b7:88:08:4b:b3:a2:72:53:9e:a3:11:6d:81: e5:23:83:73:32:29:d6:49:fa:32:e5:37:cc:7f:66: 91:44:74:21:b6:e4:4d:ef:89:e3:ce:76:ca:c3:c5: ee:e7:da:2d:16:2c:7f:33:5a:00:51:3b:90:4a:fc: ec:5a:a2:17:ea:71:17:d1:db:db:2e:ab:42:81:df: 1f:b2:d2:9d:bb:14:eb:9b:22:90:d1:d9:7c:f4:63: 3e:11:f9:48:9e:3d:ad:14:ad:61:fa:84:92:3c:52: af:40:5a:ee:60:81:c8:47:47:a7:3e:72:ef:e5:ea: 0d:a0:84:0a:fe:48:e9:eb:5a:e4:04:ec:b8:10:bd: 4f:5b:fd:3b:29:8e:3a:29:1c:cc:32:1e:71:8a:58: d8:4d:72:73:3b:eb:38:dd:ba:1d:c1:15:89:75:f1: 3b:9b:ad:e7:f6:64:4b:2b:74:7b:18:1a:a9:3a:7c: c0:18:c7:2b:11:fe:be:ed:1d:ab:26:5c:b2:d1:12: ad:3e:8d:5c:a6:be:51:9e:02:22:e9:12:fd:62:e9: b5:6f:50:7a:2e:86:e8:ec:29:3f:cc:fe:c9:2c:c2: 75:00:48:6b:e1:cd:0b:dc:c2:00:d9:0e:6a:7a:fc: 68:79:ae:12:30:f6:0b:c4:78:f9:e4:76:16:74:da: 6d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:8E:C2:92:50:03:B8:11:79:F2:DC:01:2F:18:58:AA:0D:E3:7F:90 X509v3 Authority Key Identifier: keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:d4:a3:1e:53:95:5f:be:62:a1:58:d2:fb:54:1d:7a:7e: ef:ad:73:d7:b1:22:70:ff:33:ed:ec:82:49:59:3f:62:76:33: dc:fa:b2:13:4e:05:e6:b2:b9:b7:3f:eb:ab:de:94:d3:0c:5d: 88:d8:1b:50:b1:2a:47:c5:03:da:4a:d6:8c:3f:4f:18:42:fe: f3:da:94:13:c0:ec:07:8e:c6:14:9b:17:70:b6:c0:f6:66:5a: 5a:1c:0d:a2:8e:69:94:21:80:11:65:b0:a3:ef:d1:ce:72:bd: 16:34:33:02:18:35:3c:3b:6b:31:96:3d:58:4f:d5:2e:b8:45: bc:6a:2f:b7:8b:73:bd:60:23:cf:a6:e9:35:56:9f:2e:35:13: 17:f3:32:bb:23:03:81:7f:c6:52:7d:bb:06:f4:52:7f:9d:ff: f3:e9:09:6c:95:7c:2c:82:5c:1c:c7:cc:3a:ba:5b:18:21:eb: d0:5e:62:2b:7b:dc:b7:29:98:6c:72:5c:62:4c:22:8e:fb:e3: 66:49:fd:5d:14:53:b2:52:0b:4b:a7:b9:17:74:4a:a5:3e:f1: f7:81:68:59:34:de:ba:27:fb:74:5f:3f:96:49:ba:73:88:7e: cd:bd:16:bb:30:7a:22:9f:e8:0f:15:c2:5a:f9:11:ec:fd:56: 6e:6b:02:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM3MjUxMTAvBgNVBAUTKEVEMTdEMUJFM0Q1NzExQzZDOThDOENDQzU5QUFGNzM3 RTg2NUMzODQwHhcNMjUwODIwMTYyOTI5WhcNMjUwODI3MTYyOTI5WjAYMRYwFAYD VQQDEw02OGE1ZjdlOS04MTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA17eICEuzonJTnqMRbYHlI4NzMinWSfoy5TfMf2aRRHQhtuRN74njznbKw8Xu 59otFix/M1oAUTuQSvzsWqIX6nEX0dvbLqtCgd8fstKduxTrmyKQ0dl89GM+EflI nj2tFK1h+oSSPFKvQFruYIHIR0enPnLv5eoNoIQK/kjp61rkBOy4EL1PW/07KY46 KRzMMh5xiljYTXJzO+s43bodwRWJdfE7m63n9mRLK3R7GBqpOnzAGMcrEf6+7R2r Jlyy0RKtPo1cpr5RngIi6RL9Yum1b1B6Lobo7Ck/zP7JLMJ1AEhr4c0L3MIA2Q5q evxoea4SMPYLxHj55HYWdNptCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLiOwpJQ A7gRefLcAS8YWKoN43+QMB8GA1UdIwQYMBaAFO0X0b49VxHGyYyMzFmq9zfoZcOE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzcyNS8zMTg0NEMzNjgw OUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVjYkpqSXpNV2FyM04taGx3 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSZlJ2ajFYRWNiSmpJek1XYXIzTi1obHc0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzcyNS8zMTg0NEMzNjgwOUYxMUU3QkQ2QTZCMkVDNEY5QUUwMi83UmZSdmoxWEVj YkpqSXpNV2FyM04taGx3NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAz2NSjHlOVX75ioVjS+1Qden7vrXPXsSJw/zPt7IJJWT9idjPc+rIT TgXmsrm3P+ur3pTTDF2I2BtQsSpHxQPaStaMP08YQv7z2pQTwOwHjsYUmxdwtsD2 ZlpaHA2ijmmUIYARZbCj79HOcr0WNDMCGDU8O2sxlj1YT9UuuEW8ai+3i3O9YCPP puk1Vp8uNRMX8zK7IwOBf8ZSfbsG9FJ/nf/z6QlslXwsglwcx8w6ulsYIevQXmIr e9y3KZhsclxiTCKO++NmSf1dFFOyUgtLp7kXdEqlPvH3gWhZNN66J/t0Xz+WSbpz iH7NvRa7MHoin+gPFcJa+RHs/VZuawId -----END CERTIFICATE-----Generated at Thu Aug 21 05:20:11 2025 by rpki-client