$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft File: 7ALNBrdHN4ssHMWiIebghmHagiU.mft (raw, json) Hash identifier: zshdGGYfWfxD8xlWI6ZmwF1ok0r4aCKjPEPxDth/9Ow= Subject key identifier: BA:EB:83:FE:1F:72:CE:4B:AC:1F:32:65:AC:D6:E9:AE:39:98:94:57 Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 Certificate issuer: /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft Manifest number: 78 Signing time: Fri 08 Aug 2025 14:28:21 +0000 Manifest this update: Fri 08 Aug 2025 14:28:21 +0000 Manifest next update: Fri 15 Aug 2025 14:28:21 +0000 Files and hashes: 1: 7ALNBrdHN4ssHMWiIebghmHagiU.crl (hash: lWEOAxxuvs+NUolK+yepiFci7LPsaTIEuq7BZNz6HSU=) 2: AE5D0E84EEBD11EFBA2D7586C4F9AE02.roa (hash: RGDwrnHLpwoltlbpIvS3zEQYJokw21O0scCTRV6lF5o=) 3: 4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (hash: ASozTCqLLf2W3v4/3oV7UOvO2kqTmGagQ7fGwleiFEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225 Validity Not Before: Aug 8 14:28:21 2025 GMT Not After : Aug 15 14:28:21 2025 GMT Subject: CN=68960985-a752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2e:5a:7b:3d:f9:d8:7f:91:4e:43:2e:d5:75: e2:35:10:d6:93:c4:f6:fd:95:01:9f:39:41:ad:6a: d7:01:c1:21:9c:d5:28:6b:4a:fe:68:f8:f2:05:d6: 14:7f:91:d5:e1:f8:be:e9:cf:62:5f:8b:07:b7:16: c5:2c:2d:97:60:b5:37:27:fa:51:3f:aa:a0:41:44: 63:6e:0c:44:b9:fe:07:ea:3f:fd:f8:4d:f8:fb:4b: dc:04:01:40:32:ac:de:37:91:b5:cb:6d:98:8e:b6: 67:fc:26:08:c6:1a:76:f1:ec:99:c7:c9:75:49:ca: a4:a6:26:51:e0:1b:98:d4:4c:18:fe:f9:b5:2f:22: 97:72:ea:3b:2c:a4:ca:db:f7:58:cd:3a:ff:16:57: c3:d1:50:b7:66:e8:74:db:94:92:df:61:4c:f6:83: bc:52:b1:05:74:49:3c:c4:73:03:30:c0:d5:12:db: b4:c4:9c:e9:d4:80:da:49:6e:3b:3e:86:f2:c0:7e: 1e:f1:67:57:cd:f0:88:86:f4:7e:c6:e0:15:14:95: 8c:12:15:9b:33:58:3d:62:75:67:a9:a7:1c:75:04: 71:04:f7:28:09:ff:f7:79:1b:84:d3:0c:a0:57:00: 9e:3f:f2:f6:0b:6d:16:06:ac:ac:54:f4:83:61:5e: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:EB:83:FE:1F:72:CE:4B:AC:1F:32:65:AC:D6:E9:AE:39:98:94:57 X509v3 Authority Key Identifier: keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:83:cb:ea:d8:f2:37:77:fd:f0:61:37:53:f9:95:2d:c5:c3: f0:12:44:f2:c7:3b:1b:b8:69:b3:02:b2:df:2d:d4:be:c9:48: 34:7c:14:3d:a7:df:f9:7e:9c:79:77:7a:16:8d:94:51:0f:5f: a9:11:d2:a1:3e:54:95:66:a7:24:1d:29:83:08:16:f0:d7:36: aa:c8:a5:fe:f8:39:f2:28:15:61:c9:f7:49:0e:17:c1:96:dc: 81:c6:05:ef:b6:cf:ee:92:cd:c6:8c:0f:71:c5:dc:31:80:bb: 3e:4f:69:0f:1f:93:37:75:e1:c2:e1:50:08:1e:d1:1d:21:41: 8e:f0:7a:8a:15:af:64:ca:1d:31:2e:73:0e:21:4a:c1:de:b3: c8:f9:e9:f6:b9:f0:57:b4:05:eb:70:7f:65:6e:b3:01:7d:10: 72:ac:d6:fb:2b:41:cc:73:2d:ef:fc:34:1e:83:03:d5:ad:48: 5e:2c:1c:48:8f:e0:54:60:cb:01:d1:f3:09:09:c5:6c:fc:a8: eb:d3:8e:a3:b4:4d:1b:c3:6a:09:04:5d:ff:dd:04:ae:d0:dc: b3:20:f4:0b:dc:56:5c:63:0e:56:da:9a:1f:d5:14:ac:2d:4c: b5:b8:42:b1:fd:16:ba:1f:c3:65:b0:1b:53:5d:b5:3a:cd:2d: 2e:9d:5b:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEVDMDJDRDA2Qjc0NzM3OEIyQzFDQzVBMjIxRTZFMDg2 NjFEQTgyMjUwHhcNMjUwODA4MTQyODIxWhcNMjUwODE1MTQyODIxWjAYMRYwFAYD VQQDEw02ODk2MDk4NS1hNzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i5aez352H+RTkMu1XXiNRDWk8T2/ZUBnzlBrWrXAcEhnNUoa0r+aPjyBdYU f5HV4fi+6c9iX4sHtxbFLC2XYLU3J/pRP6qgQURjbgxEuf4H6j/9+E34+0vcBAFA MqzeN5G1y22YjrZn/CYIxhp28eyZx8l1ScqkpiZR4BuY1EwY/vm1LyKXcuo7LKTK 2/dYzTr/FlfD0VC3Zuh025SS32FM9oO8UrEFdEk8xHMDMMDVEtu0xJzp1IDaSW47 PobywH4e8WdXzfCIhvR+xuAVFJWMEhWbM1g9YnVnqaccdQRxBPcoCf/3eRuE0wyg VwCeP/L2C20WBqysVPSDYV7zAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrrg/4f cs5LrB8yZazW6a45mJRXMB8GA1UdIwQYMBaAFOwCzQa3RzeLLBzFoiHm4IZh2oIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yQzJGNkU1MENF RTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40c3NITVdpSWViZ2htSGFn aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdBTE5CcmRITjRzc0hNV2lJZWJnaG1IYWdpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yQzJGNkU1MENFRTkxMUVGQkRGRDNBNjdDNEY5QUUwMi83QUxOQnJkSE40 c3NITVdpSWViZ2htSGFnaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9g8vq2PI3d/3wYTdT+ZUtxcPwEkTyxzsbuGmzArLfLdS+yUg0fBQ9 p9/5fpx5d3oWjZRRD1+pEdKhPlSVZqckHSmDCBbw1zaqyKX++DnyKBVhyfdJDhfB ltyBxgXvts/uks3GjA9xxdwxgLs+T2kPH5M3deHC4VAIHtEdIUGO8HqKFa9kyh0x LnMOIUrB3rPI+en2ufBXtAXrcH9lbrMBfRByrNb7K0HMcy3v/DQegwPVrUheLBxI j+BUYMsB0fMJCcVs/Kjr046jtE0bw2oJBF3/3QSu0NyzIPQL3FZcYw5W2pof1RSs LUy1uEKx/Ra6H8NlsBtTXbU6zS0unVvZ -----END CERTIFICATE-----Generated at Sun Aug 10 13:50:26 2025 by rpki-client