$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft File: C7AFcf321rzGNEbrOmSR-uqpCG8.mft (raw, json) Hash identifier: ib8S6WtUCCud0uOa2B/W6KBVLF92lGCemvUE1RFHb9Q= Subject key identifier: FA:4B:33:65:A9:38:BD:58:CC:4B:35:51:44:92:5E:F8:38:46:BD:B1 Authority key identifier: 0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F Certificate issuer: /CN=A912AC83/serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft Manifest number: 055D Signing time: Fri 08 Aug 2025 23:49:21 +0000 Manifest this update: Fri 08 Aug 2025 23:49:21 +0000 Manifest next update: Fri 15 Aug 2025 23:49:21 +0000 Files and hashes: 1: C7AFcf321rzGNEbrOmSR-uqpCG8.crl (hash: hGNG4vOP98IP/BgGTjDVJ/1suPpYvclOxM36Kulm7Os=) 2: 6B191E20F75811EB9C2B5D4DC4F9AE02.roa (hash: gIqEUytD692JqpeV91M06iKGJH68vEW3s4YtICieKE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AC83, serialNumber=0BB00571FDF6D6BCC63446EB3A6491FAEAA9086F Validity Not Before: Aug 8 23:49:21 2025 GMT Not After : Aug 15 23:49:21 2025 GMT Subject: CN=68968d01-d7cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:de:55:d0:ee:51:69:61:28:34:a1:81:1e:17: f3:bf:36:36:0b:35:b6:28:35:49:79:a3:82:7f:1e: 28:6f:ee:c5:54:d2:20:94:71:ae:88:5b:21:1e:cf: 1d:93:de:5b:d3:26:c7:a1:be:9c:46:5b:ce:fb:d6: bc:42:d5:83:0d:d4:47:ee:bb:c3:05:cd:27:27:a2: a6:8d:80:c8:8b:0c:e5:e5:c0:d6:1d:bd:24:86:a3: da:28:7f:02:37:01:82:cf:6d:2c:16:7d:74:50:2a: 38:78:fc:bf:82:01:8a:df:ed:d7:b8:6f:05:fa:d8: 4f:49:a7:dc:06:e3:3c:ed:4b:14:17:67:00:db:c6: 91:bf:60:81:92:2a:26:ec:bd:35:c2:66:07:61:58: 49:d3:c7:7c:39:6a:c5:49:61:68:f0:c4:1a:76:1f: f9:68:ec:79:52:14:04:74:49:78:c1:4b:01:06:e6: 69:72:03:b2:be:a6:ca:4a:78:92:a4:9b:a1:4f:c2: 4e:2e:0a:fd:ab:6b:06:ac:a6:59:28:2a:82:98:90: f8:2f:72:64:9b:29:a7:39:f5:a5:54:d0:92:38:a8: fb:93:b3:06:2b:ab:98:93:06:1a:cf:a2:d4:25:a4: 8f:29:89:76:04:ad:3f:71:8f:77:11:68:97:cd:d5: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:33:65:A9:38:BD:58:CC:4B:35:51:44:92:5E:F8:38:46:BD:B1 X509v3 Authority Key Identifier: keyid:0B:B0:05:71:FD:F6:D6:BC:C6:34:46:EB:3A:64:91:FA:EA:A9:08:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7AFcf321rzGNEbrOmSR-uqpCG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC83/4BAFB118F75611EB99F9104CC4F9AE02/C7AFcf321rzGNEbrOmSR-uqpCG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:04:36:d7:20:50:ca:d1:3f:cc:d0:fb:5f:ab:ae:0b:1f:91: 52:ac:01:c3:88:c7:73:ce:d3:8e:02:84:5d:7c:43:ca:ed:32: 72:d4:34:2f:83:fd:f7:fe:c7:db:93:65:37:36:f7:b8:8c:68: 48:c0:ec:15:f6:1f:93:3f:ac:6a:77:28:1c:d3:e2:ce:f1:14: 95:8c:e7:8e:f2:12:0c:5c:3c:c0:47:07:c9:3d:fc:80:ba:ce: 47:69:df:40:ff:d9:a5:60:b4:ca:79:ff:f7:35:c3:d8:c8:a3: 82:81:06:60:a3:aa:e1:fe:35:94:d6:e4:3c:b2:53:f7:4b:44: 96:7a:1c:05:31:fa:08:58:7f:04:a6:17:05:bd:34:04:0d:5d: 96:71:aa:f3:89:69:8c:ea:56:b7:51:e8:70:a1:cf:23:39:22: 1b:ff:59:55:ea:ab:1f:f5:df:1f:0f:57:d8:b3:ee:88:5d:89: d6:2f:e5:c3:81:13:84:31:35:06:53:28:08:82:e8:29:37:a8: 38:7b:b7:19:7c:9d:9c:62:5a:57:1e:29:2e:5d:da:74:d9:f0: c6:71:50:30:8c:d3:fe:0a:b4:c6:67:7a:54:93:7c:a5:82:cd: 95:b9:36:2b:0f:7e:4a:1e:68:eb:6f:13:18:ac:57:98:7c:ea: 2c:66:a4:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFDODMxMTAvBgNVBAUTKDBCQjAwNTcxRkRGNkQ2QkNDNjM0NDZFQjNBNjQ5MUZB RUFBOTA4NkYwHhcNMjUwODA4MjM0OTIxWhcNMjUwODE1MjM0OTIxWjAYMRYwFAYD VQQDEw02ODk2OGQwMS1kN2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv95V0O5RaWEoNKGBHhfzvzY2CzW2KDVJeaOCfx4ob+7FVNIglHGuiFshHs8d k95b0ybHob6cRlvO+9a8QtWDDdRH7rvDBc0nJ6KmjYDIiwzl5cDWHb0khqPaKH8C NwGCz20sFn10UCo4ePy/ggGK3+3XuG8F+thPSafcBuM87UsUF2cA28aRv2CBkiom 7L01wmYHYVhJ08d8OWrFSWFo8MQadh/5aOx5UhQEdEl4wUsBBuZpcgOyvqbKSniS pJuhT8JOLgr9q2sGrKZZKCqCmJD4L3JkmymnOfWlVNCSOKj7k7MGK6uYkwYaz6LU JaSPKYl2BK0/cY93EWiXzdVikwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPpLM2Wp OL1YzEs1UUSSXvg4Rr2xMB8GA1UdIwQYMBaAFAuwBXH99ta8xjRG6zpkkfrqqQhv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUM4My80QkFGQjExOEY3 NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFyekdORWJyT21TUi11cXBD RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QUZjZjMyMXJ6R05FYnJPbVNSLXVxcENHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUM4My80QkFGQjExOEY3NTYxMUVCOTlGOTEwNENDNEY5QUUwMi9DN0FGY2YzMjFy ekdORWJyT21TUi11cXBDRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEBDbXIFDK0T/M0Ptfq64LH5FSrAHDiMdzztOOAoRdfEPK7TJy1DQv g/33/sfbk2U3Nve4jGhIwOwV9h+TP6xqdygc0+LO8RSVjOeO8hIMXDzARwfJPfyA us5Had9A/9mlYLTKef/3NcPYyKOCgQZgo6rh/jWU1uQ8slP3S0SWehwFMfoIWH8E phcFvTQEDV2WcarziWmM6la3Uehwoc8jOSIb/1lV6qsf9d8fD1fYs+6IXYnWL+XD gROEMTUGUygIgugpN6g4e7cZfJ2cYlpXHikuXdp02fDGcVAwjNP+CrTGZ3pUk3yl gs2VuTYrD35KHmjrbxMYrFeYfOosZqR0 -----END CERTIFICATE-----Generated at Sat Aug 9 14:25:40 2025 by rpki-client