$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft File: d_7bUqwSiVBJ40An4RJqb9FRHu8.mft (raw, json) Hash identifier: fnk88zyI1AA9FFG+xMQ6/ayzPTgo+HMFNEv8WLyH2EU= Subject key identifier: 70:E5:A1:34:E8:C7:92:39:AD:C8:C4:E7:D7:78:91:A4:0A:66:CA:0B Authority key identifier: 77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF Certificate issuer: /CN=A9114D23/serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Certificate serial: 34A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft Manifest number: 34A3 Signing time: Mon 04 Aug 2025 15:06:34 +0000 Manifest this update: Mon 04 Aug 2025 15:06:34 +0000 Manifest next update: Mon 11 Aug 2025 15:06:34 +0000 Files and hashes: 1: d_7bUqwSiVBJ40An4RJqb9FRHu8.crl (hash: TAxPT/kfUP6jZpye/XTiHG0XQd4okjdSt3IjI79KOaM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114D23, serialNumber=77FEDB52AC12895049E34027E1126A6FD1511EEF Validity Not Before: Aug 4 15:06:34 2025 GMT Not After : Aug 11 15:06:34 2025 GMT Subject: CN=6890cc7a-7cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:b6:93:83:57:4f:f1:9a:48:5f:80:9c:40: a9:e1:4c:05:11:ed:e1:2f:d4:f6:ad:8a:d9:80:fd: 17:cf:d1:ad:16:69:8d:c7:f9:f5:4b:1c:b6:41:48: 92:9a:5e:e8:5c:59:fd:7a:68:35:58:04:74:89:d9: 56:76:af:45:c8:66:4a:49:a5:86:1f:ab:55:e6:b8: cc:21:48:f5:0d:d3:55:8e:66:ad:fd:cb:85:9a:18: fe:a6:0b:a0:f7:3e:68:65:3c:38:82:8d:e1:b0:f7: d3:85:3d:0c:0c:d5:f3:9e:b4:db:b3:36:90:9b:9c: cf:c8:6f:ce:6e:dd:fc:3e:0a:6c:4e:0e:0d:bb:ec: 5a:fe:b0:e5:95:9a:9e:6e:fd:b9:18:f9:f1:a6:67: f1:09:57:de:7b:09:cb:24:0b:70:52:67:2d:cc:78: 11:c9:c3:82:e0:66:9d:a7:a4:63:75:db:80:63:4e: c8:84:7a:85:e9:69:bb:ad:f6:64:c5:71:ec:ef:da: 28:a1:c8:49:67:87:f3:43:6e:17:27:e4:f1:a3:4a: 31:9d:60:f3:0b:f0:ce:94:0f:ea:ed:b6:4a:8b:9f: 4d:8d:c1:a7:d7:92:fb:38:ff:d4:38:0e:98:91:37: 37:97:c0:17:fe:5f:a1:8b:16:d5:06:f9:8a:3a:a9: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E5:A1:34:E8:C7:92:39:AD:C8:C4:E7:D7:78:91:A4:0A:66:CA:0B X509v3 Authority Key Identifier: keyid:77:FE:DB:52:AC:12:89:50:49:E3:40:27:E1:12:6A:6F:D1:51:1E:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d_7bUqwSiVBJ40An4RJqb9FRHu8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D23/046909781DA111E2A56DF69208B02CD2/d_7bUqwSiVBJ40An4RJqb9FRHu8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bd:c7:17:47:41:4d:ae:50:ce:dc:5b:d0:83:e9:d3:a1:65: 82:d7:f3:56:ea:b1:9b:de:4f:f5:03:e1:2e:95:28:0d:fb:bd: d3:fc:8c:88:d2:69:72:c7:87:88:56:0c:ad:c9:96:91:0b:5d: fb:eb:97:7b:f8:8b:7a:aa:1f:f8:a6:60:77:88:88:8f:fc:2e: b8:a2:66:82:3f:f0:81:fa:69:21:f3:53:47:5a:3f:90:66:d8: aa:6b:dc:55:17:c8:bf:85:ec:19:c7:cc:50:66:da:6a:c4:29: 1d:3c:f8:fa:f2:13:81:52:dc:43:e5:cf:27:d4:64:ca:b1:3c: 9d:f0:26:3b:26:04:cd:19:ba:6d:11:3c:c6:e0:8e:5a:5e:10: 89:98:e3:66:66:a7:ef:72:f7:84:66:99:8b:f3:ec:f7:7f:83: 1b:59:6e:23:f1:2f:57:7b:d2:d1:74:73:9f:53:61:56:9c:b2: fa:bf:48:28:0e:8b:72:1e:ac:97:a6:6e:18:f9:26:55:66:f5: ea:9b:78:bc:cc:3f:29:20:cc:e1:3c:e1:c8:36:94:40:ea:f2: 6e:bf:08:fc:fd:2b:6c:b0:b7:f5:9d:7b:25:d8:18:97:a8:c3: c7:d2:36:04:f3:a2:92:0f:25:12:1e:1c:df:0b:1d:2f:9a:e3: 68:83:a6:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREMjMxMTAvBgNVBAUTKDc3RkVEQjUyQUMxMjg5NTA0OUUzNDAyN0UxMTI2QTZG RDE1MTFFRUYwHhcNMjUwODA0MTUwNjM0WhcNMjUwODExMTUwNjM0WjAYMRYwFAYD VQQDEw02ODkwY2M3YS03Y2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwl22k4NXT/GaSF+AnECp4UwFEe3hL9T2rYrZgP0Xz9GtFmmNx/n1Sxy2QUiS ml7oXFn9emg1WAR0idlWdq9FyGZKSaWGH6tV5rjMIUj1DdNVjmat/cuFmhj+pgug 9z5oZTw4go3hsPfThT0MDNXznrTbszaQm5zPyG/Obt38PgpsTg4Nu+xa/rDllZqe bv25GPnxpmfxCVfeewnLJAtwUmctzHgRycOC4Gadp6RjdduAY07IhHqF6Wm7rfZk xXHs79ooochJZ4fzQ24XJ+Txo0oxnWDzC/DOlA/q7bZKi59NjcGn15L7OP/UOA6Y kTc3l8AX/l+hixbVBvmKOqkCbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHDloTTo x5I5rcjE59d4kaQKZsoLMB8GA1UdIwQYMBaAFHf+21KsEolQSeNAJ+ESam/RUR7v MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNEQyMy8wNDY5MDk3ODFE QTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lWQko0MEFuNFJKcWI5RlJI dTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RfN2JVcXdTaVZCSjQwQW40UkpxYjlGUkh1OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NEQyMy8wNDY5MDk3ODFEQTExMUUyQTU2REY2OTIwOEIwMkNEMi9kXzdiVXF3U2lW Qko0MEFuNFJKcWI5RlJIdTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqvccXR0FNrlDO3FvQg+nToWWC1/NW6rGb3k/1A+EulSgN+73T/IyI 0mlyx4eIVgytyZaRC13765d7+It6qh/4pmB3iIiP/C64omaCP/CB+mkh81NHWj+Q Ztiqa9xVF8i/hewZx8xQZtpqxCkdPPj68hOBUtxD5c8n1GTKsTyd8CY7JgTNGbpt ETzG4I5aXhCJmONmZqfvcveEZpmL8+z3f4MbWW4j8S9Xe9LRdHOfU2FWnLL6v0go DotyHqyXpm4Y+SZVZvXqm3i8zD8pIMzhPOHINpRA6vJuvwj8/StssLf1nXsl2BiX qMPH0jYE86KSDyUSHhzfCx0vmuNog6ae -----END CERTIFICATE-----Generated at Wed Aug 6 09:41:44 2025 by rpki-client