$ rpki-client -vvf rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft File: 7C7B5ZkQaDo-1eepT4n2dNlny5A.mft (raw, json) Hash identifier: vYsfIp3rw/hJaQDEkzuH/l4LWpRTcB9Zzd7omk3B4Cs= Subject key identifier: 8A:3F:12:E2:78:96:CF:5D:6A:69:A1:B8:BC:AA:DA:85:DC:2F:C9:23 Authority key identifier: EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 Certificate issuer: /CN=A916F0E8/serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft Manifest number: 69 Signing time: Tue 09 Sep 2025 07:08:23 +0000 Manifest this update: Tue 09 Sep 2025 07:08:22 +0000 Manifest next update: Tue 16 Sep 2025 07:08:22 +0000 Files and hashes: 1: 7C7B5ZkQaDo-1eepT4n2dNlny5A.crl (hash: NCXqnc7+5rrPSWRLW1GJyiiBR7wlGVdyhZyg0muCcZQ=) 2: 3DE8388A53F411F0B5061085C4F9AE02.roa (hash: Ps4sZW3pvUKvzqoCE6utZYer/j53HdcntTVucVviEc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 07:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916F0E8, serialNumber=EC2EC1E59910683A3ED5E7A94F89F674D967CB90 Validity Not Before: Sep 9 07:08:22 2025 GMT Not After : Sep 16 07:08:22 2025 GMT Subject: CN=68bfd267-a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:57:88:04:93:d3:b4:19:62:6b:1a:6b:2a:e1: a2:48:78:b3:7a:d5:c8:d3:80:43:28:25:33:9e:83: 8a:4a:bd:b5:7a:cc:18:76:21:ce:f1:64:9f:52:8e: 89:09:f3:39:a4:93:f8:73:26:51:f6:05:b7:cb:9a: 89:77:10:3c:c7:5d:f4:68:d6:7b:44:d5:08:e5:53: 81:3b:a7:16:54:88:c4:a3:f5:8b:4e:17:ae:6c:b6: 87:68:28:67:85:5b:8f:26:87:8c:07:0a:c8:d6:49: 4a:11:21:3e:4c:c1:bf:35:e2:86:ae:51:40:af:b0: 1d:8d:0a:4a:8e:d8:3b:92:14:e5:2c:a2:45:ac:de: 0c:2b:f6:bc:45:2b:5a:20:f9:b2:42:59:19:ff:50: ee:70:2b:6d:6f:7d:7c:b8:2a:d0:b7:97:4c:b5:cc: c7:4a:84:cb:97:22:a7:1d:be:7e:92:02:d9:d0:f1: 4a:82:d3:38:c3:e2:a7:1e:bd:c7:15:6e:c7:43:11: 89:6c:b0:0e:72:46:35:30:7f:31:5f:67:c8:dd:aa: 6d:6b:3c:4e:da:ff:a5:9e:18:18:28:35:57:47:e2: 2c:01:be:80:8e:1d:f1:63:63:81:8b:a1:a2:bd:dc: d1:6a:e9:a3:b7:e6:43:57:9f:f7:e2:b4:94:6d:74: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3F:12:E2:78:96:CF:5D:6A:69:A1:B8:BC:AA:DA:85:DC:2F:C9:23 X509v3 Authority Key Identifier: keyid:EC:2E:C1:E5:99:10:68:3A:3E:D5:E7:A9:4F:89:F6:74:D9:67:CB:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7C7B5ZkQaDo-1eepT4n2dNlny5A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F0E8/2D306B34F44511EFA8C52646C4F9AE02/7C7B5ZkQaDo-1eepT4n2dNlny5A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:4f:e1:3e:81:1d:e0:a9:f8:ae:e1:02:4a:a2:3e:cc:1f:3b: 41:8e:0e:4b:54:65:53:4b:f5:47:2d:1b:05:c6:88:21:cb:d6: 6c:f9:8e:b1:b6:84:6d:e1:e9:92:35:83:f1:21:7f:f9:d1:64: 75:f7:53:4c:15:c0:0d:40:02:72:45:e0:78:16:e5:86:b6:fd: c5:e3:fd:d8:a4:24:f2:57:ea:34:49:40:be:b6:a9:33:96:56: 35:d1:6c:39:b8:dc:45:6b:6d:82:f4:05:3e:52:f6:cf:97:87: b2:33:d0:91:10:4d:ab:9c:a9:b1:cd:83:81:0f:ae:3b:3c:de: bf:af:44:f3:8e:89:c0:a9:31:dd:1f:34:74:68:78:6c:b3:4f: bb:a0:ad:73:42:b4:bf:49:9f:1c:e6:5d:df:88:41:c2:cf:ae: 86:cd:19:e2:50:78:2e:58:fa:e5:d4:5b:27:98:97:91:eb:0e: eb:6c:3a:f0:01:f9:41:20:ee:cd:a9:38:d4:f6:7a:da:fe:1e: 4b:5b:15:e0:6b:bb:c0:e4:12:9b:a3:ce:75:5d:8d:16:47:92: 01:cc:c2:31:15:35:8b:18:ad:5a:c9:33:e7:35:d9:f4:3d:de: 06:98:a9:51:cb:b0:0f:91:8a:67:f5:b2:70:df:d7:e2:51:c3: 87:5b:42:47 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 RjBFODExMC8GA1UEBRMoRUMyRUMxRTU5OTEwNjgzQTNFRDVFN0E5NEY4OUY2NzRE OTY3Q0I5MDAeFw0yNTA5MDkwNzA4MjJaFw0yNTA5MTYwNzA4MjJaMBgxFjAUBgNV BAMTDTY4YmZkMjY3LWExZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvV4gEk9O0GWJrGmsq4aJIeLN61cjTgEMoJTOeg4pKvbV6zBh2Ic7xZJ9SjokJ 8zmkk/hzJlH2BbfLmol3EDzHXfRo1ntE1QjlU4E7pxZUiMSj9YtOF65stodoKGeF W48mh4wHCsjWSUoRIT5Mwb814oauUUCvsB2NCkqO2DuSFOUsokWs3gwr9rxFK1og +bJCWRn/UO5wK21vfXy4KtC3l0y1zMdKhMuXIqcdvn6SAtnQ8UqC0zjD4qcevccV bsdDEYlssA5yRjUwfzFfZ8jdqm1rPE7a/6WeGBgoNVdH4iwBvoCOHfFjY4GLoaK9 3NFq6aO35kNXn/fitJRtdC5FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUij8S4niW z11qaaG4vKrahdwvySMwHwYDVR0jBBgwFoAU7C7B5ZkQaDo+1eepT4n2dNlny5Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZGMEU4LzJEMzA2QjM0RjQ0 NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURvLTFlZXBUNG4yZE5sbnk1 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0M3QjVaa1FhRG8tMWVlcFQ0bjJkTmxueTVBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZG MEU4LzJEMzA2QjM0RjQ0NTExRUZBOEM1MjY0NkM0RjlBRTAyLzdDN0I1WmtRYURv LTFlZXBUNG4yZE5sbnk1QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhP4T6BHeCp+K7hAkqiPswfO0GODktUZVNL9UctGwXGiCHL1mz5jrG2 hG3h6ZI1g/Ehf/nRZHX3U0wVwA1AAnJF4HgW5Ya2/cXj/dikJPJX6jRJQL62qTOW VjXRbDm43EVrbYL0BT5S9s+Xh7Iz0JEQTaucqbHNg4EPrjs83r+vRPOOicCpMd0f NHRoeGyzT7ugrXNCtL9JnxzmXd+IQcLProbNGeJQeC5Y+uXUWyeYl5HrDutsOvAB +UEg7s2pONT2etr+HktbFeBru8DkEpujznVdjRZHkgHMwjEVNYsYrVrJM+c12fQ9 3gaYqVHLsA+Rimf1snDf1+JRw4dbQkc= -----END CERTIFICATE-----Generated at Tue Sep 9 17:05:31 2025 by rpki-client