$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: f8aU+5gHhlJewvbA6EketnyAn/2jy9xZVPyUV/CEfjo= Subject key identifier: F8:58:CD:5A:45:78:1F:A4:B6:53:8E:02:06:C6:F3:F1:58:DF:75:DE Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0B1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0B18 Signing time: Sun 24 Aug 2025 19:18:29 +0000 Manifest this update: Sun 24 Aug 2025 19:18:28 +0000 Manifest next update: Sun 31 Aug 2025 19:18:28 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: REkTrAmuN+E30oDB0RVd/fZ1zu577bNhWEial/aMuWo=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: CuzGm85wLiuHxUTSuvnqnZczG2t94ONHHbEKTXpyL78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2846 (0xb1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Aug 24 19:18:28 2025 GMT Not After : Aug 31 19:18:28 2025 GMT Subject: CN=68ab6585-e51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:90:fc:1d:cc:1b:d6:e6:10:ad:b0:c3:f3: 75:54:0a:2e:18:50:65:17:83:57:a5:f8:6d:24:69: d6:ac:65:84:0f:4c:0f:f5:c2:c3:a5:94:39:b8:bc: b4:ea:c7:95:00:85:74:ba:d4:a7:ae:8c:48:a7:85: 3a:46:2e:72:7b:25:01:a5:75:27:aa:eb:2e:c9:2e: cb:98:d2:1b:c5:da:2f:59:a5:b7:1d:e3:2f:b9:a6: 9e:9b:e1:99:6f:be:f3:8e:a5:8d:1d:30:7e:c7:df: d4:b5:9f:fc:2b:bb:eb:9d:dd:17:c1:f0:5b:01:53: f8:a2:92:34:7c:e8:e8:62:c3:d3:95:46:d2:19:38: 3e:0c:72:6a:25:61:6a:6b:48:af:60:e6:f4:17:88: d0:9d:c5:c4:5d:a5:71:cd:58:d4:b5:3a:24:3b:69: d5:d7:a9:8a:e2:2f:d8:fa:d0:9c:f1:ee:25:05:c1: d0:d8:8b:fe:d7:b1:32:3e:9d:14:ca:fb:fa:b6:c2: 10:93:ca:ad:af:e9:86:e0:78:9e:ca:b4:1a:9f:c3: 7b:4d:2c:aa:76:8e:36:b7:58:af:73:6a:7f:ed:74: 3c:0c:1f:0c:88:c6:86:db:df:67:a5:59:06:a6:73: 78:38:3d:27:c7:6a:8c:f8:11:e9:81:13:99:9f:9f: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:58:CD:5A:45:78:1F:A4:B6:53:8E:02:06:C6:F3:F1:58:DF:75:DE X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:05:5c:ef:d5:99:0d:52:0c:01:da:2d:cc:57:2f:03:52: 0c:65:c9:8a:16:a7:4d:4f:c5:d7:1b:3c:92:00:2c:b3:c8:36: 23:9b:d7:c5:e5:e8:95:f4:68:04:06:8b:e4:c4:c7:2d:da:5b: 44:9a:dd:ca:f2:50:85:37:6f:f7:ec:4c:c1:24:aa:d4:be:3b: 33:6a:72:b1:c7:00:12:cb:0a:a4:d9:3f:22:cf:e7:d5:cb:1d: 3e:67:b5:5c:63:5d:c2:c8:db:b3:0a:55:7b:92:db:af:98:e5: 89:a0:38:5d:b0:88:b3:18:97:76:cc:73:7d:36:b9:c6:30:54: 77:8e:51:27:27:32:53:20:0c:eb:82:8f:e1:5f:43:94:57:0c: 3d:78:e9:87:e2:8a:99:f7:3e:99:d2:27:cb:13:c1:13:33:ba: a2:7b:82:1f:04:4f:b0:62:e7:d8:4b:3f:6e:3c:8b:b9:96:96: 05:25:32:a6:28:b1:a4:05:ac:4a:dd:ef:7e:82:18:cc:b9:1d: 2c:24:b0:c3:72:c4:de:b8:98:49:08:bd:40:3b:8f:dd:ab:3e: 6f:4a:47:3e:b4:e5:ab:9f:61:35:e6:56:d5:2b:d8:27:f4:d2: 25:59:e5:39:56:85:60:6b:72:ff:a3:57:d3:83:a0:21:70:69: 08:23:48:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUwODI0MTkxODI4WhcNMjUwODMxMTkxODI4WjAYMRYwFAYD VQQDEw02OGFiNjU4NS1lNTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmAWQ/B3MG9bmEK2ww/N1VAouGFBlF4NXpfhtJGnWrGWED0wP9cLDpZQ5uLy0 6seVAIV0utSnroxIp4U6Ri5yeyUBpXUnqusuyS7LmNIbxdovWaW3HeMvuaaem+GZ b77zjqWNHTB+x9/UtZ/8K7vrnd0XwfBbAVP4opI0fOjoYsPTlUbSGTg+DHJqJWFq a0ivYOb0F4jQncXEXaVxzVjUtTokO2nV16mK4i/Y+tCc8e4lBcHQ2Iv+17EyPp0U yvv6tsIQk8qtr+mG4HieyrQan8N7TSyqdo42t1ivc2p/7XQ8DB8MiMaG299npVkG pnN4OD0nx2qM+BHpgROZn58QwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhYzVpF eB+ktlOOAgbG8/FY33XeMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEVQVc79WZDVIMAdotzFcvA1IMZcmKFqdNT8XXGzySACyzyDYjm9fF 5eiV9GgEBovkxMct2ltEmt3K8lCFN2/37EzBJKrUvjszanKxxwASywqk2T8iz+fV yx0+Z7VcY13CyNuzClV7ktuvmOWJoDhdsIizGJd2zHN9NrnGMFR3jlEnJzJTIAzr go/hX0OUVww9eOmH4oqZ9z6Z0ifLE8ETM7qie4IfBE+wYufYSz9uPIu5lpYFJTKm KLGkBaxK3e9+ghjMuR0sJLDDcsTeuJhJCL1AO4/dqz5vSkc+tOWrn2E15lbVK9gn 9NIlWeU5VoVga3L/o1fTg6AhcGkII0je -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:09 2025 by rpki-client