$ rpki-client -vvf rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft File: w7gqL3RR5pVsP6OTQNxzItDnjKY.mft (raw, json) Hash identifier: I2dm48UGSquKXCHLarM3HzMKR1kLNkoVYoiUguhcNVQ= Subject key identifier: 9B:E2:FE:D5:58:CD:BE:17:AB:84:09:93:8B:3D:96:37:FD:3A:17:7A Authority key identifier: C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 Certificate issuer: /CN=A912082A/serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Certificate serial: 02A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft Manifest number: 02A1 Signing time: Mon 11 Aug 2025 01:49:35 +0000 Manifest this update: Mon 11 Aug 2025 01:49:34 +0000 Manifest next update: Mon 18 Aug 2025 01:49:34 +0000 Files and hashes: 1: w7gqL3RR5pVsP6OTQNxzItDnjKY.crl (hash: vMhpNoCzu0x/ycr8R5hFhEpxA4VYdHIQWio4oCYKmL8=) 2: AA9183060FDC11ED9718606AC4F9AE02.roa (hash: Pomp25euWUzW6bLzCINDqzM6FpJj6K+BUv6uncbVybw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 680 (0x2a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912082A, serialNumber=C3B82A2F7451E6956C3FA39340DC7322D0E78CA6 Validity Not Before: Aug 11 01:49:34 2025 GMT Not After : Aug 18 01:49:34 2025 GMT Subject: CN=68994c2e-7f0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:40:dc:99:ec:18:2a:69:66:21:6b:ff:54: 37:22:ec:28:d7:63:f5:fc:5c:df:8e:6f:d1:50:8b: ef:45:a9:58:d6:a8:8b:42:d4:d1:da:8a:c2:be:79: f0:97:4c:35:0a:0d:fc:57:4b:71:01:9e:8e:77:9a: 7b:0a:5c:d4:63:d3:e1:0d:5f:59:28:9f:b9:a6:d6: d9:9a:56:80:2c:42:b3:0a:a8:03:1b:a4:28:f3:e8: 0f:c9:3d:4f:8c:13:91:97:dd:b8:05:d6:3f:fd:f7: 9b:0e:23:25:fe:2b:f9:2c:9f:b2:66:2a:5b:ff:39: 58:33:42:e8:e9:15:22:47:da:f4:a7:94:2d:4a:13: 07:1d:f5:56:61:c8:bf:cb:35:43:fb:f6:1c:2f:93: 50:aa:87:5a:e2:0f:07:9a:27:04:df:e4:8c:5b:9a: 20:01:5e:0f:a8:91:3b:f6:ae:26:fa:f9:59:dd:c2: be:40:2c:16:30:93:be:65:95:18:f9:70:aa:5f:5b: 2c:ba:b0:df:8e:26:2a:cb:e2:89:e8:92:08:e5:7d: fe:72:4c:a1:d0:0e:09:bb:73:7a:9e:9b:2d:88:6e: 0e:30:ec:dd:36:f7:c0:81:ac:c4:fa:31:45:d1:00: cb:86:4c:7a:80:c8:57:62:a3:70:0b:f9:19:da:a9: de:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:FE:D5:58:CD:BE:17:AB:84:09:93:8B:3D:96:37:FD:3A:17:7A X509v3 Authority Key Identifier: keyid:C3:B8:2A:2F:74:51:E6:95:6C:3F:A3:93:40:DC:73:22:D0:E7:8C:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w7gqL3RR5pVsP6OTQNxzItDnjKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912082A/26DE64C80E6C11ED96C5B02FC4F9AE02/w7gqL3RR5pVsP6OTQNxzItDnjKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a4:ac:32:c0:df:14:f9:5c:b8:74:52:a3:a6:c3:89:51:67: 14:4d:28:a7:4a:30:0b:c1:97:bd:a6:37:d5:49:14:a2:45:e6: ba:5b:fd:c6:3c:a4:a9:9d:04:28:6e:fa:f0:0b:c5:0c:2e:48: ed:80:b2:50:ef:6e:6f:c6:f5:10:a8:88:14:f6:72:a7:a9:79: 75:6b:82:d6:b1:1a:9e:71:78:ed:06:fb:5d:b0:f4:b4:24:52: 94:56:a2:e0:1f:c7:32:45:18:55:76:11:d4:7f:74:9d:d6:7a: 0b:f9:e9:99:06:4f:76:61:3b:a2:86:f5:5e:24:bc:a6:1b:21: c3:3e:13:ef:d7:60:e8:f9:e1:33:5d:63:68:06:1d:df:f5:cd: 4a:7f:e8:72:9b:7d:2b:09:2e:1c:11:82:7e:09:38:c0:0a:a1: 8b:4f:91:03:c4:3b:b7:5a:00:1d:fb:ec:33:06:7a:de:84:93: bb:92:98:20:51:6d:f2:76:eb:7a:a0:e4:e8:fa:d6:16:6a:0b: 38:42:e7:4d:ef:c3:50:be:b6:6d:e0:f1:c7:4e:f8:03:c3:ed: 2e:71:64:5c:65:9d:d4:47:43:69:de:34:d2:6c:ff:8d:75:17: e3:01:77:63:54:2a:3e:61:8c:67:90:66:ad:48:a4:1b:9b:25: 72:b9:24:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA4MkExMTAvBgNVBAUTKEMzQjgyQTJGNzQ1MUU2OTU2QzNGQTM5MzQwREM3MzIy RDBFNzhDQTYwHhcNMjUwODExMDE0OTM0WhcNMjUwODE4MDE0OTM0WjAYMRYwFAYD VQQDEw02ODk5NGMyZS03ZjBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc1A3JnsGCppZiFr/1Q3Iuwo12P1/Fzfjm/RUIvvRalY1qiLQtTR2orCvnnw l0w1Cg38V0txAZ6Od5p7ClzUY9PhDV9ZKJ+5ptbZmlaALEKzCqgDG6Qo8+gPyT1P jBORl924BdY//febDiMl/iv5LJ+yZipb/zlYM0Lo6RUiR9r0p5QtShMHHfVWYci/ yzVD+/YcL5NQqoda4g8HmicE3+SMW5ogAV4PqJE79q4m+vlZ3cK+QCwWMJO+ZZUY +XCqX1ssurDfjiYqy+KJ6JII5X3+ckyh0A4Ju3N6npstiG4OMOzdNvfAgazE+jFF 0QDLhkx6gMhXYqNwC/kZ2qneLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvi/tVY zb4Xq4QJk4s9ljf9Ohd6MB8GA1UdIwQYMBaAFMO4Ki90UeaVbD+jk0DccyLQ54ym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDgyQS8yNkRFNjRDODBF NkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVwVnNQNk9UUU54ekl0RG5q S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c3Z3FMM1JSNXBWc1A2T1RRTnh6SXREbmpLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDgyQS8yNkRFNjRDODBFNkMxMUVEOTZDNUIwMkZDNEY5QUUwMi93N2dxTDNSUjVw VnNQNk9UUU54ekl0RG5qS1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCapKwywN8U+Vy4dFKjpsOJUWcUTSinSjALwZe9pjfVSRSiRea6W/3G PKSpnQQobvrwC8UMLkjtgLJQ725vxvUQqIgU9nKnqXl1a4LWsRqecXjtBvtdsPS0 JFKUVqLgH8cyRRhVdhHUf3Sd1noL+emZBk92YTuihvVeJLymGyHDPhPv12Do+eEz XWNoBh3f9c1Kf+hym30rCS4cEYJ+CTjACqGLT5EDxDu3WgAd++wzBnrehJO7kpgg UW3ydut6oOTo+tYWags4QudN78NQvrZt4PHHTvgDw+0ucWRcZZ3UR0Np3jTSbP+N dRfjAXdjVCo+YYxnkGatSKQbmyVyuST+ -----END CERTIFICATE-----Generated at Tue Aug 12 18:19:51 2025 by rpki-client