$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft File: 7TaUIY3LHq89GvXGq8Axptt-bOU.mft (raw, json) Hash identifier: 07EsAg335Zhx6b7BGULm9WrM8cunFf4QqNdT0v+XM2o= Subject key identifier: 55:28:6F:1A:9F:A0:0B:AB:EC:8A:47:A6:78:83:70:31:92:A2:59:49 Authority key identifier: ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 Certificate issuer: /CN=A919EAF3/serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Certificate serial: 19D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft Manifest number: 19BF Signing time: Sat 06 Sep 2025 16:27:00 +0000 Manifest this update: Sat 06 Sep 2025 16:27:00 +0000 Manifest next update: Sat 13 Sep 2025 16:27:00 +0000 Files and hashes: 1: 7TaUIY3LHq89GvXGq8Axptt-bOU.crl (hash: fhIXcKwYGmzxWz4TWF0fDZOaXlZK5mgMwKIhJIgS0Oc=) 2: 2958A208394011EF8BFF2329C4F9AE02.roa (hash: 0hRL6yZO6PYkNxlevkrCS0rz63r1YCZDrVAR2Fyxyls=) 3: 545743246D1911E7A4448D81C4F9AE02.roa (hash: 93fAGoBbKb8s2g7H+M2m6OkfN68jU6Ckev28RigcvkM=) 4: 361BDEB6315011F0A08FB267C4F9AE02.roa (hash: l9XdWoi7pZ0Z/aLBaCXXv7SbiureJhqjsfmA2AlQcsM=) 5: DCD75050315011F0BC916269C4F9AE02.roa (hash: Bf1fxzL+4m9g8KrBwC7vnrDgD/7yz2XeDX4e5Hb6WLU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 16:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6612 (0x19d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=ED3694218DCB1EAF3D1AF5C6ABC031A6DB7E6CE5 Validity Not Before: Sep 6 16:27:00 2025 GMT Not After : Sep 13 16:27:00 2025 GMT Subject: CN=68bc60d4-bf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:90:87:77:41:d7:c1:9c:d2:77:96:53:9d:32: 8d:82:06:cb:46:f6:34:a7:39:5c:a0:55:84:10:52: b4:ac:13:37:a6:39:07:a2:68:ed:14:1b:ea:3b:ec: a2:aa:a9:a1:6d:e9:a6:87:29:51:95:26:e0:8e:1e: 97:e5:74:c7:e7:59:a6:d8:9e:88:ad:a6:8b:d0:23: 3a:21:4a:6b:27:ae:7d:23:b6:1b:3f:32:52:db:be: 58:31:f5:f1:aa:4a:88:4d:29:90:35:35:d8:4e:5a: e8:fc:81:84:0e:c8:79:45:0d:bb:6d:18:2c:2d:76: ad:63:ba:50:25:56:2b:33:64:59:88:1f:c8:bc:8f: 9d:72:45:a1:03:19:c4:1a:04:67:89:8f:d7:83:48: db:98:ad:4b:e7:b4:66:45:f0:fe:2b:92:08:86:87: a6:2b:0a:0a:c0:54:ef:11:c2:96:1a:96:9b:90:76: b7:eb:1a:dd:dc:af:ab:18:80:d5:3f:f5:ab:c4:55: 5b:b7:93:cf:e7:93:28:87:7c:10:2c:d9:0c:5e:6c: 1a:0c:34:fc:15:fc:d9:48:49:72:6d:2d:08:76:27: 14:40:e1:9b:41:4a:c0:30:86:9d:6e:95:b6:b8:56: ab:7b:ff:8d:42:a7:dd:a0:1f:53:f8:cd:f2:40:1d: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:28:6F:1A:9F:A0:0B:AB:EC:8A:47:A6:78:83:70:31:92:A2:59:49 X509v3 Authority Key Identifier: keyid:ED:36:94:21:8D:CB:1E:AF:3D:1A:F5:C6:AB:C0:31:A6:DB:7E:6C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TaUIY3LHq89GvXGq8Axptt-bOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/9D200DBC6D1811E7A815DA80C4F9AE02/7TaUIY3LHq89GvXGq8Axptt-bOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:26:e1:b2:a1:0d:43:4e:aa:16:fe:be:ac:e9:c0:8b:e7:5f: 1a:34:84:8b:72:80:cc:d2:72:49:e0:ea:c8:cc:b6:90:b8:e6: 59:cd:98:37:94:f3:cb:89:43:8f:be:f4:55:f9:74:53:38:0a: 63:c7:f7:fb:da:0d:9e:15:51:c4:0c:42:34:b4:65:d3:02:41: 2a:b3:fe:77:8f:e6:e5:82:67:fe:ce:97:a4:f0:30:3c:6f:93: 95:58:fe:7b:26:fc:a0:2c:16:b1:5f:c5:0e:d2:9b:53:72:f2: da:c1:cc:86:a2:83:f8:35:40:59:20:fc:c4:af:da:90:28:42: 49:93:a0:93:a0:9b:67:13:07:1b:ce:c9:a6:47:10:be:ae:cd: 27:ea:55:66:20:49:23:e3:01:8f:b3:c2:a6:bc:6e:55:d0:b8: f8:40:10:a6:81:b6:95:30:7a:66:ea:2a:2a:a1:96:9e:30:99: ce:c8:8e:ac:6d:a8:3f:f5:f2:1b:42:a1:01:3e:59:1b:e3:57: 9e:5a:74:9d:f0:e7:e8:fb:26:b7:57:77:1f:ab:7d:df:77:a3: 41:bf:5b:a0:f7:a6:67:c4:62:91:56:65:6f:0f:43:7f:2a:20: 17:26:7f:24:ce:8e:0a:c3:3e:3d:c9:61:a8:98:50:b4:72:79: 71:bd:2b:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKEVEMzY5NDIxOERDQjFFQUYzRDFBRjVDNkFCQzAzMUE2 REI3RTZDRTUwHhcNMjUwOTA2MTYyNzAwWhcNMjUwOTEzMTYyNzAwWjAYMRYwFAYD VQQDEw02OGJjNjBkNC1iZjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ZCHd0HXwZzSd5ZTnTKNggbLRvY0pzlcoFWEEFK0rBM3pjkHomjtFBvqO+yi qqmhbemmhylRlSbgjh6X5XTH51mm2J6IraaL0CM6IUprJ659I7YbPzJS275YMfXx qkqITSmQNTXYTlro/IGEDsh5RQ27bRgsLXatY7pQJVYrM2RZiB/IvI+dckWhAxnE GgRniY/Xg0jbmK1L57RmRfD+K5IIhoemKwoKwFTvEcKWGpabkHa36xrd3K+rGIDV P/WrxFVbt5PP55Moh3wQLNkMXmwaDDT8FfzZSElybS0IdicUQOGbQUrAMIadbpW2 uFare/+NQqfdoB9T+M3yQB0zQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUobxqf oAur7IpHpniDcDGSollJMB8GA1UdIwQYMBaAFO02lCGNyx6vPRr1xqvAMabbfmzl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85RDIwMERCQzZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhxODlHdlhHcThBeHB0dC1i T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUYVVJWTNMSHE4OUd2WEdxOEF4cHR0LWJPVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUFGMy85RDIwMERCQzZEMTgxMUU3QTgxNURBODBDNEY5QUUwMi83VGFVSVkzTEhx ODlHdlhHcThBeHB0dC1iT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJuGyoQ1DTqoW/r6s6cCL518aNISLcoDM0nJJ4OrIzLaQuOZZzZg3 lPPLiUOPvvRV+XRTOApjx/f72g2eFVHEDEI0tGXTAkEqs/53j+blgmf+zpek8DA8 b5OVWP57JvygLBaxX8UO0ptTcvLawcyGooP4NUBZIPzEr9qQKEJJk6CToJtnEwcb zsmmRxC+rs0n6lVmIEkj4wGPs8KmvG5V0Lj4QBCmgbaVMHpm6ioqoZaeMJnOyI6s bag/9fIbQqEBPlkb41eeWnSd8Ofo+ya3V3cfq33fd6NBv1ug96ZnxGKRVmVvD0N/ KiAXJn8kzo4Kwz49yWGomFC0cnlxvStB -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:54 2025 by rpki-client