$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: dZ3FaFyMQFCtppA+qrTAVJJL5GBVtT+dTrlvh4dh38U= Subject key identifier: 70:46:E6:78:9D:95:EC:7E:7D:1A:19:30:92:B8:5C:18:AE:34:EA:01 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 0340 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 032F Signing time: Fri 19 Sep 2025 01:34:53 +0000 Manifest this update: Fri 19 Sep 2025 01:34:52 +0000 Manifest next update: Fri 26 Sep 2025 01:34:52 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: vBT/P2hc+cBajmJZ7ZxrKlFrKR08ngB7Hh60hv5m5YM=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 01:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 832 (0x340) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: Sep 19 01:34:52 2025 GMT Not After : Sep 26 01:34:52 2025 GMT Subject: CN=68ccb33d-fde2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:a9:d3:df:77:80:fc:6c:3d:c5:5b:b8:20: b7:9d:ea:40:0a:57:c3:6f:11:87:19:99:fe:6e:b1: 15:de:3a:c7:2d:0c:d3:ac:05:aa:04:f8:22:4f:9d: f2:ec:7c:2c:89:c6:57:f6:d9:f6:af:33:e3:78:18: 79:06:a9:e7:3c:4e:73:7a:2c:73:c6:70:6a:71:d8: db:21:ba:0d:68:6d:7a:ea:4b:c8:b3:71:b6:e6:b8: 8e:10:ae:0e:c3:5d:6c:bc:80:45:65:72:8a:c0:c1: e1:7b:64:41:c9:7a:ec:f1:f0:ae:9d:19:b1:1f:19: 72:c4:18:26:e9:d2:37:d7:ef:e9:e4:67:71:f5:ad: 24:04:1d:f5:54:27:c9:5f:28:2b:e7:c6:ee:32:2a: ae:bd:3a:4b:7e:09:48:be:12:5a:87:ea:d1:2b:a0: e7:de:75:c7:41:62:64:d5:25:f5:cb:8a:86:72:c3: 39:92:5b:09:a8:ab:9b:aa:85:05:d4:b6:30:75:6c: 09:dc:6f:38:60:ad:88:b5:fb:26:d8:30:39:9e:3c: 5f:54:91:3d:a5:f4:9d:e4:aa:fd:40:90:fe:a3:1e: 9b:2b:bf:4b:52:4c:e6:cf:82:ec:cc:6d:6c:63:66: 37:33:9d:13:63:16:4f:19:d6:fd:4f:ec:9c:96:f4: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:E6:78:9D:95:EC:7E:7D:1A:19:30:92:B8:5C:18:AE:34:EA:01 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:b3:5a:e7:72:87:85:71:01:42:45:26:4d:d1:44:57:2f:6e: 64:ed:35:42:5e:27:6e:07:02:34:03:54:2c:75:d6:0d:16:96: b5:fa:f9:2f:6a:cc:68:79:74:e7:54:9d:e8:4b:33:06:99:31: fd:8e:89:63:ef:9a:f0:3b:99:d4:0f:88:5b:de:b1:65:da:2e: 3f:70:e5:54:cc:31:93:65:83:50:21:da:3f:49:66:54:c1:6e: d1:db:47:ca:b0:da:ea:e1:fa:2d:67:50:05:99:a3:17:48:4e: f6:a7:34:63:d3:97:81:b1:f6:ed:8b:93:ea:05:2d:65:16:c6: 13:43:67:24:41:e9:a5:03:2d:86:3b:1c:4a:6a:e9:9d:48:db: 1e:d4:86:fe:27:d1:c2:7e:ac:26:43:e5:fa:86:c3:b9:5d:9d: 4f:2a:26:da:1e:bd:d6:c6:c8:0c:a5:57:d8:f6:26:e9:0f:cb: 89:ba:22:da:08:16:93:b3:75:b7:e1:fe:37:76:11:8b:78:02: c7:81:c4:e3:ee:c6:ea:c2:be:42:bd:ae:e2:b2:96:25:82:03: f6:fa:cf:b3:15:1c:34:23:38:c3:be:b3:97:c9:cb:50:92:17: 1e:09:d3:cb:14:cf:b3:93:42:80:77:33:19:e5:72:e2:2d:56: 7e:5f:7e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwOTE5MDEzNDUyWhcNMjUwOTI2MDEzNDUyWjAYMRYwFAYD VQQDEw02OGNjYjMzZC1mZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQyp0993gPxsPcVbuCC3nepAClfDbxGHGZn+brEV3jrHLQzTrAWqBPgiT53y 7HwsicZX9tn2rzPjeBh5BqnnPE5zeixzxnBqcdjbIboNaG166kvIs3G25riOEK4O w11svIBFZXKKwMHhe2RByXrs8fCunRmxHxlyxBgm6dI31+/p5Gdx9a0kBB31VCfJ Xygr58buMiquvTpLfglIvhJah+rRK6Dn3nXHQWJk1SX1y4qGcsM5klsJqKubqoUF 1LYwdWwJ3G84YK2Itfsm2DA5njxfVJE9pfSd5Kr9QJD+ox6bK79LUkzmz4LszG1s Y2Y3M50TYxZPGdb9T+yclvTjIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBG5nid lex+fRoZMJK4XBiuNOoBMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhs1rncoeFcQFCRSZN0URXL25k7TVCXiduBwI0A1QsddYNFpa1+vkv asxoeXTnVJ3oSzMGmTH9jolj75rwO5nUD4hb3rFl2i4/cOVUzDGTZYNQIdo/SWZU wW7R20fKsNrq4fotZ1AFmaMXSE72pzRj05eBsfbti5PqBS1lFsYTQ2ckQemlAy2G OxxKaumdSNse1Ib+J9HCfqwmQ+X6hsO5XZ1PKibaHr3WxsgMpVfY9ibpD8uJuiLa CBaTs3W34f43dhGLeALHgcTj7sbqwr5Cva7ispYlggP2+s+zFRw0IzjDvrOXyctQ khceCdPLFM+zk0KAdzMZ5XLiLVZ+X36V -----END CERTIFICATE-----Generated at Fri Sep 19 06:56:53 2025 by rpki-client