$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: 10JXzyGox0xoCY8odys5jppYPYi6vMHjzCnSsAK+lno= Subject key identifier: BE:43:6E:EF:93:D5:E1:22:F4:13:18:58:58:10:F2:AD:4E:3C:CE:F5 Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 12BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 12B5 Signing time: Wed 10 Sep 2025 17:11:22 +0000 Manifest this update: Wed 10 Sep 2025 17:11:21 +0000 Manifest next update: Wed 17 Sep 2025 17:11:21 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: hxI73OFqUTTcUVwWanSUvXzTmz3dhrWfE6RQi345geU=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4799 (0x12bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Sep 10 17:11:21 2025 GMT Not After : Sep 17 17:11:21 2025 GMT Subject: CN=68c1b139-26c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:67:ea:c5:df:8d:99:0a:07:d2:f5:d9:b8: b5:41:7f:07:a1:58:bc:e0:14:04:4c:21:26:e7:5c: 0a:08:73:4b:93:b3:6e:ac:00:83:9f:3f:03:bb:f4: 22:40:87:91:98:46:15:57:d8:c6:e0:6b:d9:51:77: 6a:32:b8:fa:b4:0d:a8:28:42:90:9e:4d:8a:a3:63: 69:0b:6d:c7:7b:0d:a7:6b:c5:c0:90:9a:d8:a3:bf: 57:3a:bc:33:ae:93:82:23:6b:fa:f3:b3:0f:87:cf: 76:8a:dd:bf:e8:7a:11:99:ad:36:cd:c9:2a:32:d0: 9f:8f:e6:ee:36:62:8d:2f:40:83:e5:91:65:6c:4e: 3c:87:fe:7d:b1:11:33:33:20:b1:6e:ac:5d:98:f3: 9f:e2:3d:dc:93:d6:69:9a:0c:d1:de:2e:93:08:98: 66:3c:54:6f:a4:61:d7:27:a7:be:05:bc:dc:35:1e: 89:2f:8f:6f:ca:87:72:fc:ff:7e:fa:33:bc:c5:aa: 43:77:87:1e:c4:86:60:50:96:fd:4b:dc:81:e0:98: 6f:09:ca:21:19:87:2e:55:cf:04:ea:02:1e:db:4b: 2a:e4:10:0f:2c:cd:10:49:15:5c:ca:db:f2:6c:01: eb:d0:92:2d:1e:94:31:a8:6d:af:c4:12:66:8b:79: fc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:43:6E:EF:93:D5:E1:22:F4:13:18:58:58:10:F2:AD:4E:3C:CE:F5 X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:e8:eb:a6:06:b6:38:0a:0f:71:b3:06:9a:fd:d6:a0:99:d2: 2a:ed:11:e5:28:f1:da:09:63:bc:0f:d9:50:93:c0:fc:0c:4f: ab:55:9a:5a:e7:0c:e2:97:96:df:f1:18:65:83:77:af:b5:8a: ac:20:f6:57:eb:7b:db:b1:66:84:0c:04:19:3d:ce:45:82:c6: 9b:0d:36:0c:16:e9:25:5a:84:a1:b8:22:84:ba:4c:5a:09:30: 0c:43:ab:45:ae:d7:4d:8b:5b:d7:1f:a1:43:e4:48:24:80:5d: e2:87:d3:f6:d9:ca:85:96:cf:0b:d0:4d:23:f7:df:13:f8:65: 48:e6:87:07:cc:3c:7e:80:21:3e:91:85:36:e7:8c:96:df:d5: d7:ef:e2:9a:47:6f:a0:b8:8e:bc:62:b6:0a:01:c5:52:0f:bd: 27:88:6f:01:0b:4c:76:44:0d:97:9b:21:b9:09:e0:b4:80:ea: 0d:1f:fa:f5:3a:50:ad:d7:20:6e:ea:ea:1c:9b:6b:84:87:21: b2:56:93:5a:2b:61:be:4f:60:64:1c:b0:63:88:25:6f:92:e4: 50:8a:aa:06:63:af:02:fd:43:78:5f:3c:55:d2:fb:97:94:cb: ba:e7:dd:55:23:9d:65:f7:e8:f7:11:b4:78:64:f8:06:b7:4d: ad:8e:c5:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEr8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwOTEwMTcxMTIxWhcNMjUwOTE3MTcxMTIxWjAYMRYwFAYD VQQDEw02OGMxYjEzOS0yNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGdn6sXfjZkKB9L12bi1QX8HoVi84BQETCEm51wKCHNLk7NurACDnz8Du/Qi QIeRmEYVV9jG4GvZUXdqMrj6tA2oKEKQnk2Ko2NpC23Hew2na8XAkJrYo79XOrwz rpOCI2v687MPh892it2/6HoRma02zckqMtCfj+buNmKNL0CD5ZFlbE48h/59sREz MyCxbqxdmPOf4j3ck9ZpmgzR3i6TCJhmPFRvpGHXJ6e+BbzcNR6JL49vyody/P9+ +jO8xapDd4cexIZgUJb9S9yB4JhvCcohGYcuVc8E6gIe20sq5BAPLM0QSRVcytvy bAHr0JItHpQxqG2vxBJmi3n8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5Dbu+T 1eEi9BMYWFgQ8q1OPM71MB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJ6OumBrY4Cg9xswaa/dagmdIq7RHlKPHaCWO8D9lQk8D8DE+rVZpa 5wzil5bf8Rhlg3evtYqsIPZX63vbsWaEDAQZPc5FgsabDTYMFuklWoShuCKEukxa CTAMQ6tFrtdNi1vXH6FD5EgkgF3ih9P22cqFls8L0E0j998T+GVI5ocHzDx+gCE+ kYU254yW39XX7+KaR2+guI68YrYKAcVSD70niG8BC0x2RA2XmyG5CeC0gOoNH/r1 OlCt1yBu6uocm2uEhyGyVpNaK2G+T2BkHLBjiCVvkuRQiqoGY68C/UN4XzxV0vuX lMu6591VI51l9+j3EbR4ZPgGt02tjsXq -----END CERTIFICATE-----Generated at Wed Sep 10 22:18:58 2025 by rpki-client