$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: FfuN460S2ncmFDjtwnsDydM+A+Bd73Z8CSenI9ZPvRM= Subject key identifier: AE:EE:1B:B7:8D:7B:B5:D8:26:FD:B5:5E:BB:9F:82:B8:F6:89:42:55 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0998 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0991 Signing time: Sun 24 Aug 2025 20:06:12 +0000 Manifest this update: Sun 24 Aug 2025 20:06:11 +0000 Manifest next update: Sun 31 Aug 2025 20:06:11 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: nT0iZBciP2G6JWmpd5/0kzRBOlQZOPdaCGmO2qC5RSE=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2456 (0x998) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Aug 24 20:06:11 2025 GMT Not After : Aug 31 20:06:11 2025 GMT Subject: CN=68ab70b3-e102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:75:13:14:0c:50:d2:1d:fd:ad:cb:89:fd: 99:ca:29:40:c1:31:23:00:73:c5:e8:83:dd:cb:a0: 22:54:9d:6b:8a:cf:e0:cf:35:8a:76:6c:a0:1e:ca: 29:fb:fc:7d:1a:fa:5a:02:12:8e:76:09:d8:97:8f: 20:7e:c9:45:f4:8b:a7:fb:7b:0f:38:87:a9:9f:7a: 8f:0b:7a:53:fd:4f:61:fd:0d:ba:0b:76:4f:86:63: 99:ed:76:d1:ad:19:5b:51:0f:27:d8:35:84:81:3c: c9:4c:4a:5d:32:e8:2b:17:57:6c:ad:0b:87:d6:6f: df:7e:4e:05:45:6e:bf:78:7d:2e:f4:76:df:1e:e6: bd:f9:41:6d:57:0a:97:0f:d3:52:e6:57:2e:2c:4d: b4:ae:a5:07:ce:d7:01:88:85:c9:b3:05:a2:06:a9: 58:d7:94:0c:80:b1:56:53:dd:50:57:d1:76:f2:ed: 9e:72:98:05:78:fe:9c:48:a0:e8:e9:67:a3:57:37: 5d:19:8e:32:d9:6f:6f:a7:4c:3f:d9:d8:38:a2:80: 0f:5b:17:c4:fc:46:2c:f4:b1:1c:c4:56:fc:72:62: c1:55:56:82:1e:ca:31:16:94:fa:3d:23:ae:8d:9b: 78:3d:ef:e8:4e:f3:03:8e:df:63:bc:5d:6f:cc:f4: 72:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EE:1B:B7:8D:7B:B5:D8:26:FD:B5:5E:BB:9F:82:B8:F6:89:42:55 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:94:67:f1:d9:39:fd:42:3f:ef:b5:e2:23:34:60:cd:88:f6: 67:8b:e7:f8:b3:d1:38:78:f5:b4:c3:71:09:7c:c6:7b:5a:f9: 67:22:b5:d5:7d:0d:f0:28:e6:63:eb:e1:c8:74:e0:2a:d7:e4: 73:89:68:e0:dd:6a:31:20:86:2b:2e:59:c9:a1:b0:f4:85:a2: 27:70:4d:1f:62:2f:e7:22:a4:fe:e3:0e:cd:e5:4c:82:7e:96: 20:ca:23:e7:c7:cc:3f:61:99:a5:5b:8c:bf:e6:7a:af:67:d4: 9b:26:77:6c:2c:33:22:17:3b:32:68:d9:fd:eb:f6:68:c1:9b: 6a:33:5e:22:a2:a0:d0:da:8b:53:a2:77:dd:ed:09:98:f8:bf: ed:25:7d:96:3f:a8:dd:b2:28:d2:15:39:00:cc:d4:24:ef:dc: 5b:70:d8:2b:19:5e:a0:4f:9c:fc:bc:20:39:b0:80:68:6a:15: ea:c9:43:3e:b7:f2:6f:eb:b2:12:4f:64:20:c2:53:91:4a:b3: 41:9f:98:3b:f1:46:e3:f4:77:9d:b4:50:68:96:6b:9e:b6:e7: 2a:68:c8:41:2c:38:80:f1:4b:29:83:23:f1:a4:66:11:91:af: c7:e2:d3:f4:cf:65:bf:f7:c5:6e:39:f5:6f:0d:07:78:e2:7d: a8:6b:67:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwODI0MjAwNjExWhcNMjUwODMxMjAwNjExWjAYMRYwFAYD VQQDEw02OGFiNzBiMy1lMTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn0Z1ExQMUNId/a3Lif2ZyilAwTEjAHPF6IPdy6AiVJ1ris/gzzWKdmygHsop +/x9GvpaAhKOdgnYl48gfslF9Iun+3sPOIepn3qPC3pT/U9h/Q26C3ZPhmOZ7XbR rRlbUQ8n2DWEgTzJTEpdMugrF1dsrQuH1m/ffk4FRW6/eH0u9HbfHua9+UFtVwqX D9NS5lcuLE20rqUHztcBiIXJswWiBqlY15QMgLFWU91QV9F28u2ecpgFeP6cSKDo 6WejVzddGY4y2W9vp0w/2dg4ooAPWxfE/EYs9LEcxFb8cmLBVVaCHsoxFpT6PSOu jZt4Pe/oTvMDjt9jvF1vzPRy5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7uG7eN e7XYJv21Xrufgrj2iUJVMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGlGfx2Tn9Qj/vteIjNGDNiPZni+f4s9E4ePW0w3EJfMZ7WvlnIrXV fQ3wKOZj6+HIdOAq1+RziWjg3WoxIIYrLlnJobD0haIncE0fYi/nIqT+4w7N5UyC fpYgyiPnx8w/YZmlW4y/5nqvZ9SbJndsLDMiFzsyaNn96/ZowZtqM14ioqDQ2otT onfd7QmY+L/tJX2WP6jdsijSFTkAzNQk79xbcNgrGV6gT5z8vCA5sIBoahXqyUM+ t/Jv67IST2QgwlORSrNBn5g78Ubj9HedtFBolmuetucqaMhBLDiA8UspgyPxpGYR ka/H4tP0z2W/98VuOfVvDQd44n2oa2c9 -----END CERTIFICATE-----Generated at Sun Aug 24 22:20:59 2025 by rpki-client