$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft File: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft (raw, json) Hash identifier: +czA2lIEUpwJLDm4fiQmgekb7pkRvHLtzzHsSpddFdk= Subject key identifier: 01:15:36:4C:54:FB:E8:C7:C0:11:F6:B6:FA:F1:43:F6:E8:D6:12:16 Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF Certificate issuer: /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft Manifest number: E4 Signing time: Fri 05 Sep 2025 05:49:49 +0000 Manifest this update: Fri 05 Sep 2025 05:49:48 +0000 Manifest next update: Fri 12 Sep 2025 05:49:48 +0000 Files and hashes: 1: 7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl (hash: 3kBusQC5V8uTBkANllP3hBUIXj/RsoxWyFme1Lmi4+M=) 2: 6C722C5A6C8311EF90BD1B76C4F9AE02.roa (hash: C2fRd73u6c1TtG+Y4uQ1VIRzkyl10Cv6nEiy2Ao9xH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:49:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF Validity Not Before: Sep 5 05:49:48 2025 GMT Not After : Sep 12 05:49:48 2025 GMT Subject: CN=68ba79fc-03e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:81:e1:c2:fc:ad:c0:4b:8e:c1:f5:69:03: 24:c7:38:10:5c:70:1e:de:f1:c9:a2:45:83:0c:b2: a0:d3:ff:1d:f7:7d:69:04:03:11:78:56:cc:79:c5: 6d:31:1c:2b:41:79:1d:a7:a2:09:b8:ff:7a:0a:7a: 2f:a3:56:7e:7b:7f:8c:e6:22:fd:7c:b4:e2:96:13: be:cf:4a:9e:d4:bb:44:58:55:3d:15:34:b3:c5:f3: b7:09:9e:87:aa:bc:63:72:4e:3c:8a:20:5d:fd:cd: 60:f5:ba:25:c0:2c:7f:3a:18:0d:c2:e5:05:e2:05: a0:7c:5a:26:9a:63:0c:08:e3:10:d4:0c:cd:6d:5f: e9:ec:98:80:08:46:0a:4e:5f:c4:f9:65:3d:7a:5c: a3:99:97:fb:25:1b:83:13:cd:3e:d2:54:f4:1e:41: b5:83:fe:50:43:bf:06:f3:50:42:22:c1:3b:74:f3: 27:71:73:95:8e:98:87:19:51:55:e3:97:59:88:93: ec:7a:60:23:9e:8d:42:b3:bc:ff:4e:45:09:9c:55: 7b:02:93:ad:fa:d9:95:09:2f:4b:2d:b3:e3:4a:de: 7d:ec:a3:29:b5:b1:40:85:bf:e6:25:81:53:94:e1: b5:fb:a8:f0:0b:65:3c:02:3f:d5:2f:1e:28:7d:ff: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:15:36:4C:54:FB:E8:C7:C0:11:F6:B6:FA:F1:43:F6:E8:D6:12:16 X509v3 Authority Key Identifier: keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:97:79:68:5d:dd:fa:e4:0d:32:97:2f:9c:52:ab:4d:f4:b0: 41:d6:4d:0a:1e:fe:8a:1c:04:f6:ae:32:0a:8e:3a:b3:87:24: d6:ac:b6:2c:f4:3a:0a:dc:a7:1d:32:36:d4:fd:90:ec:e9:a9: 4a:69:33:40:b5:35:9d:77:8a:40:7f:90:83:f5:34:89:b4:fb: a5:fd:df:f4:a4:6a:0e:6c:be:22:c7:11:b5:ab:6c:e6:e0:4a: cb:4e:cb:29:f2:74:c4:2a:33:5d:45:74:84:fa:45:62:bb:26: eb:4f:b7:89:73:9c:d8:e0:89:3c:7a:e2:d3:59:04:b2:8a:ef: 66:de:72:33:cd:dc:3b:b1:05:ff:53:33:ee:7a:52:19:a4:83: 2c:b2:65:b1:ee:79:7d:cb:e8:48:84:e0:75:cf:f9:30:dd:5f: 24:44:5b:a0:3f:16:89:25:fc:5b:2e:19:1e:a3:f6:f9:1d:9e: be:89:86:47:c3:2e:1e:03:b3:10:3f:18:ca:be:db:0e:88:58: 28:f8:6d:5a:b8:82:5d:11:bf:3e:14:9a:01:18:8e:40:d7:1b: 00:51:a6:28:e1:c1:3c:13:64:b1:4d:1a:ad:6b:94:26:21:70: 0d:6b:32:33:07:3d:56:c8:46:6a:9a:f6:46:51:13:76:ed:e5: 69:e8:71:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkRCNzIxMTAvBgNVBAUTKEVDRTJFMDE2MDE2MUI2Rjc3RkM3NDk3NkZBN0Q0NkMz RTQyMzJERUYwHhcNMjUwOTA1MDU0OTQ4WhcNMjUwOTEyMDU0OTQ4WjAYMRYwFAYD VQQDEw02OGJhNzlmYy0wM2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsuyB4cL8rcBLjsH1aQMkxzgQXHAe3vHJokWDDLKg0/8d931pBAMReFbMecVt MRwrQXkdp6IJuP96Cnovo1Z+e3+M5iL9fLTilhO+z0qe1LtEWFU9FTSzxfO3CZ6H qrxjck48iiBd/c1g9bolwCx/OhgNwuUF4gWgfFommmMMCOMQ1AzNbV/p7JiACEYK Tl/E+WU9elyjmZf7JRuDE80+0lT0HkG1g/5QQ78G81BCIsE7dPMncXOVjpiHGVFV 45dZiJPsemAjno1Cs7z/TkUJnFV7ApOt+tmVCS9LLbPjSt597KMptbFAhb/mJYFT lOG1+6jwC2U8Aj/VLx4off/hWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEVNkxU ++jHwBH2tvrxQ/bo1hIWMB8GA1UdIwQYMBaAFOzi4BYBYbb3f8dJdvp9RsPkIy3v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi83RDk5QUNBQzMx RjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2ZF94MGwyLW4xR3ctUWpM ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdPTGdGZ0ZodHZkX3gwbDItbjFHdy1RakxlOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 REI3Mi83RDk5QUNBQzMxRjQxMUVGQUU5MUEwMENDNEY5QUUwMi83T0xnRmdGaHR2 ZF94MGwyLW4xR3ctUWpMZTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByl3loXd365A0yly+cUqtN9LBB1k0KHv6KHAT2rjIKjjqzhyTWrLYs 9DoK3KcdMjbU/ZDs6alKaTNAtTWdd4pAf5CD9TSJtPul/d/0pGoObL4ixxG1q2zm 4ErLTssp8nTEKjNdRXSE+kViuybrT7eJc5zY4Ik8euLTWQSyiu9m3nIzzdw7sQX/ UzPuelIZpIMssmWx7nl9y+hIhOB1z/kw3V8kRFugPxaJJfxbLhkeo/b5HZ6+iYZH wy4eA7MQPxjKvtsOiFgo+G1auIJdEb8+FJoBGI5A1xsAUaYo4cE8E2SxTRqta5Qm IXANazIzBz1WyEZqmvZGURN27eVp6HHk -----END CERTIFICATE-----Generated at Sat Sep 6 21:01:48 2025 by rpki-client