$ rpki-client -vvf rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft File: 0N7PEI0mgBt8l-NJAprx_PkKhV4.mft (raw, json) Hash identifier: HgUZlNJ+Z1LFeJH4YYzPu6ZafIjYzah8Y+tqKc7JVrY= Subject key identifier: 5C:E3:E8:47:0D:E3:E6:8A:AB:2A:E9:D5:71:0B:1C:27:13:87:98:91 Authority key identifier: D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E Certificate issuer: /CN=A915408A/serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft Manifest number: F8 Signing time: Sun 07 Sep 2025 05:29:16 +0000 Manifest this update: Sun 07 Sep 2025 05:29:15 +0000 Manifest next update: Sun 14 Sep 2025 05:29:15 +0000 Files and hashes: 1: 0N7PEI0mgBt8l-NJAprx_PkKhV4.crl (hash: H7xtLs3qAiSTOpwAzgcwCZqcLtHWZilM09819snKYGM=) 2: 421FF25E18AD11EF99EAA661C4F9AE02.roa (hash: 9jOhdF/kHfoeUCq9Rv7j7FuoVMJgstRNSAmVQVVYx6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915408A, serialNumber=D0DECF108D26801B7C97E349029AF1FCF90A855E Validity Not Before: Sep 7 05:29:15 2025 GMT Not After : Sep 14 05:29:15 2025 GMT Subject: CN=68bd182c-93b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:91:55:73:ff:60:fd:f4:5d:22:db:e5:bb: 59:b8:c7:40:19:d6:e0:de:d2:76:01:c3:6f:7b:b0: db:c4:ec:29:7a:df:d6:68:13:cf:e8:de:cf:be:d4: 1c:e0:87:bd:6d:81:ca:88:c3:e0:c7:53:8d:cb:be: 5f:36:65:a5:ff:e7:20:43:82:3b:63:a2:7f:2a:9d: 56:95:2d:b3:4c:e1:f9:b8:51:b7:c9:e4:27:4e:29: da:97:5f:fe:79:ec:28:18:0c:bc:e1:12:cc:63:d6: 4a:b6:44:e6:31:c2:98:5a:f7:b8:f7:47:77:31:19: 4d:48:64:d7:db:39:8a:d6:40:2f:79:94:ed:aa:14: 0c:20:50:e0:7e:7c:02:d0:2e:f0:3c:55:73:53:5f: 47:c1:f4:d3:1c:ff:a8:a3:e6:db:1b:7f:24:f1:83: 60:b1:7d:a7:b2:05:75:e1:41:1a:3f:8b:1c:e3:56: e8:cf:a5:83:a7:68:9b:77:ed:ff:8e:ca:9d:2e:b9: 1e:f7:68:7a:57:39:ba:79:ca:6d:f8:99:a1:6b:03: c4:db:6f:1b:ae:91:4c:81:49:a0:9c:43:e1:17:b3: fd:aa:ca:d4:07:8e:00:e0:c0:18:59:87:d3:3f:72: 06:40:f5:06:fc:d4:58:60:b2:9d:1b:7d:40:76:86: 8a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E3:E8:47:0D:E3:E6:8A:AB:2A:E9:D5:71:0B:1C:27:13:87:98:91 X509v3 Authority Key Identifier: keyid:D0:DE:CF:10:8D:26:80:1B:7C:97:E3:49:02:9A:F1:FC:F9:0A:85:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0N7PEI0mgBt8l-NJAprx_PkKhV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915408A/18845F6C18AC11EFB6F48137C4F9AE02/0N7PEI0mgBt8l-NJAprx_PkKhV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0d:19:ab:be:19:ec:a4:46:9a:28:11:83:2a:6f:fd:87:e5: 60:d4:db:eb:d1:42:e1:ac:bd:2f:4d:2b:ff:6c:42:f5:ef:4d: 18:46:07:7a:09:50:78:aa:54:ed:9e:11:97:66:41:f0:6b:eb: db:9f:e1:1d:f9:58:6a:26:69:f4:16:5c:30:10:2f:47:91:ec: b0:74:d8:db:57:97:e6:5d:e9:d5:22:98:d6:2c:e8:75:03:8f: 0b:04:4b:82:6b:94:10:8c:38:3c:75:cb:fe:1e:9f:e2:3e:98: 46:fa:34:7b:d9:9a:ea:e7:ef:9a:33:ae:30:6f:2d:ec:14:69: 25:21:e0:31:35:2d:f9:b2:3e:8f:81:8f:dc:78:56:e9:21:c4: a7:40:ea:cb:54:3b:70:3a:d9:e0:9f:3f:69:6a:8d:30:cd:0b: 99:05:a1:69:fd:f4:41:d7:52:e9:38:47:44:92:5c:cb:49:a8: 16:d5:7f:92:36:3b:de:81:9b:45:3a:e9:54:c6:bc:a1:72:fd: ab:8d:88:f5:bb:84:0b:af:6d:6c:36:62:21:d8:47:9a:a8:40: 32:e5:8d:a7:2d:87:4d:bc:de:ac:a1:57:ef:56:42:49:7a:f7: fc:2c:57:d5:f1:f3:89:9b:d9:b6:50:81:59:7c:62:93:39:23: 47:06:f1:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQwOEExMTAvBgNVBAUTKEQwREVDRjEwOEQyNjgwMUI3Qzk3RTM0OTAyOUFGMUZD RjkwQTg1NUUwHhcNMjUwOTA3MDUyOTE1WhcNMjUwOTE0MDUyOTE1WjAYMRYwFAYD VQQDEw02OGJkMTgyYy05M2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+ORVXP/YP30XSLb5btZuMdAGdbg3tJ2AcNve7DbxOwpet/WaBPP6N7PvtQc 4Ie9bYHKiMPgx1ONy75fNmWl/+cgQ4I7Y6J/Kp1WlS2zTOH5uFG3yeQnTinal1/+ eewoGAy84RLMY9ZKtkTmMcKYWve490d3MRlNSGTX2zmK1kAveZTtqhQMIFDgfnwC 0C7wPFVzU19HwfTTHP+oo+bbG38k8YNgsX2nsgV14UEaP4sc41boz6WDp2ibd+3/ jsqdLrke92h6Vzm6ecpt+JmhawPE228brpFMgUmgnEPhF7P9qsrUB44A4MAYWYfT P3IGQPUG/NRYYLKdG31AdoaKjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzj6EcN 4+aKqyrp1XELHCcTh5iRMB8GA1UdIwQYMBaAFNDezxCNJoAbfJfjSQKa8fz5CoVe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDA4QS8xODg0NUY2QzE4 QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdCdDhsLU5KQXByeF9Qa0to VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBON1BFSTBtZ0J0OGwtTkpBcHJ4X1BrS2hWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDA4QS8xODg0NUY2QzE4QUMxMUVGQjZGNDgxMzdDNEY5QUUwMi8wTjdQRUkwbWdC dDhsLU5KQXByeF9Qa0toVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAADRmrvhnspEaaKBGDKm/9h+Vg1Nvr0ULhrL0vTSv/bEL1700YRgd6 CVB4qlTtnhGXZkHwa+vbn+Ed+VhqJmn0FlwwEC9HkeywdNjbV5fmXenVIpjWLOh1 A48LBEuCa5QQjDg8dcv+Hp/iPphG+jR72Zrq5++aM64wby3sFGklIeAxNS35sj6P gY/ceFbpIcSnQOrLVDtwOtngnz9pao0wzQuZBaFp/fRB11LpOEdEklzLSagW1X+S NjvegZtFOulUxryhcv2rjYj1u4QLr21sNmIh2EeaqEAy5Y2nLYdNvN6soVfvVkJJ evf8LFfV8fOJm9m2UIFZfGKTOSNHBvE3 -----END CERTIFICATE-----Generated at Mon Sep 8 00:32:53 2025 by rpki-client