$ rpki-client -vvf rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft File: 07chXhZgoZ79Lncvm6envcbuDSg.mft (raw, json) Hash identifier: J1YWgpqBQ5xalMOJQLrAc1L3M+Fr5s3uVg2IXscyO/s= Subject key identifier: B0:24:5F:56:F3:40:E5:DA:DA:93:19:04:76:FB:18:33:A2:60:BA:84 Authority key identifier: D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 Certificate issuer: /CN=A912BBC9/serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Certificate serial: 0954 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft Manifest number: 0938 Signing time: Sat 02 Aug 2025 20:35:41 +0000 Manifest this update: Sat 02 Aug 2025 20:35:41 +0000 Manifest next update: Sat 09 Aug 2025 20:35:41 +0000 Files and hashes: 1: 07chXhZgoZ79Lncvm6envcbuDSg.crl (hash: Akn2Cxu5QxHaZuaCiZrsrEW8RhQeHfCKXUpPOgwhkLA=) 2: 42B13940C3C011EE86C2C317C4F9AE02.roa (hash: LGFMxkvmdVELBOkg0tqQjRMiBrTGNLnJnZeQEwD+enQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2388 (0x954) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BBC9, serialNumber=D3B7215E1660A19EFD2E772F9BA7A7BDC6EE0D28 Validity Not Before: Aug 2 20:35:41 2025 GMT Not After : Aug 9 20:35:41 2025 GMT Subject: CN=688e769d-f3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:7c:9b:b0:c6:83:e2:5e:35:dc:8f:11:01: 3b:84:85:6c:8f:5a:d7:3d:29:15:47:53:e4:12:f0: 03:3d:9e:b4:c3:eb:e6:fd:9f:ac:b1:7a:aa:25:10: 76:44:36:b3:e2:41:39:38:85:80:12:c8:af:48:18: 79:40:b2:cd:44:d0:8d:0c:c0:ac:db:ff:9d:e9:6e: fc:f6:76:3f:52:de:3d:74:73:d5:96:12:eb:25:36: d4:c2:1a:0d:84:9f:9d:3c:21:cb:00:02:10:df:9a: 99:82:05:ab:e4:87:d0:96:3d:57:b0:c6:f7:cf:9e: e3:26:de:9e:fd:89:fe:59:9b:ab:97:35:fd:5d:05: bf:ef:70:2f:f6:e5:6b:c4:10:21:00:fa:97:a0:3e: 08:bb:eb:3f:0c:bb:4c:e7:65:5c:b5:10:dc:00:4e: 78:c7:6f:ed:0d:ca:2f:e4:ba:28:04:db:cd:21:fd: 3d:48:d7:a5:39:da:a9:6c:61:e7:9b:1f:d5:a4:e9: 5b:6c:d4:71:f4:51:6a:4a:22:74:c9:88:5c:86:46: d8:74:95:39:e4:2e:fb:76:79:b3:71:ee:58:ac:c2: 41:47:0b:c6:b1:1a:7d:a7:e5:14:92:d8:0d:db:af: e0:b4:77:fe:aa:3a:d6:47:a7:71:72:9e:99:6a:14: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:24:5F:56:F3:40:E5:DA:DA:93:19:04:76:FB:18:33:A2:60:BA:84 X509v3 Authority Key Identifier: keyid:D3:B7:21:5E:16:60:A1:9E:FD:2E:77:2F:9B:A7:A7:BD:C6:EE:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07chXhZgoZ79Lncvm6envcbuDSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BBC9/83FF9FECAA8111EAB42A0433C4F9AE02/07chXhZgoZ79Lncvm6envcbuDSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:a7:d2:8d:d2:4e:c4:cb:df:b1:b9:63:9c:0d:8f:bc:21:5d: 4d:10:8d:19:55:e3:95:11:83:1d:00:73:ef:1d:ac:3a:64:ef: 20:06:52:02:49:c9:e6:10:6f:b4:63:18:0f:72:21:41:92:c2: 27:39:a8:26:48:28:15:00:a8:a9:16:e0:d5:8a:10:43:51:13: 78:5c:cf:e1:0d:da:36:4c:39:42:4f:a7:80:db:21:3c:94:2a: 38:34:8a:16:f0:b3:b9:94:60:84:32:dc:ee:c5:f9:96:90:3f: f6:52:87:f2:98:b1:1d:76:6a:36:f0:30:cf:bb:b7:ed:65:d3: 55:e0:a7:6b:44:e6:26:a7:05:74:43:02:e1:21:61:0c:3a:37: 6a:69:17:0a:bf:d9:7e:fd:18:d4:6f:57:ff:ff:9e:71:c5:e2: b7:66:e3:1a:56:98:f1:b7:b5:7c:8e:48:77:54:03:bc:1b:6b: 64:41:b9:5f:b0:45:a1:40:19:5d:72:eb:92:08:fd:8c:a3:e8: d5:ed:d9:47:b5:22:1d:d4:2e:35:b2:0b:1c:65:6b:44:fc:26: f9:70:a6:d1:17:14:a4:be:b6:87:c3:73:ff:71:00:ff:9f:2d: 30:21:c1:bf:42:b4:54:1e:77:92:ad:1d:b6:fc:f8:91:c6:68: 50:b9:cf:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJCQzkxMTAvBgNVBAUTKEQzQjcyMTVFMTY2MEExOUVGRDJFNzcyRjlCQTdBN0JE QzZFRTBEMjgwHhcNMjUwODAyMjAzNTQxWhcNMjUwODA5MjAzNTQxWjAYMRYwFAYD VQQDEw02ODhlNzY5ZC1mM2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3x8m7DGg+JeNdyPEQE7hIVsj1rXPSkVR1PkEvADPZ60w+vm/Z+ssXqqJRB2 RDaz4kE5OIWAEsivSBh5QLLNRNCNDMCs2/+d6W789nY/Ut49dHPVlhLrJTbUwhoN hJ+dPCHLAAIQ35qZggWr5IfQlj1XsMb3z57jJt6e/Yn+WZurlzX9XQW/73Av9uVr xBAhAPqXoD4Iu+s/DLtM52VctRDcAE54x2/tDcov5LooBNvNIf09SNelOdqpbGHn mx/VpOlbbNRx9FFqSiJ0yYhchkbYdJU55C77dnmzce5YrMJBRwvGsRp9p+UUktgN 26/gtHf+qjrWR6dxcp6ZahQuVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAkX1bz QOXa2pMZBHb7GDOiYLqEMB8GA1UdIwQYMBaAFNO3IV4WYKGe/S53L5unp73G7g0o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkJDOS84M0ZGOUZFQ0FB ODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29aNzlMbmN2bTZlbnZjYnVE U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3Y2hYaFpnb1o3OUxuY3ZtNmVudmNidURTZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkJDOS84M0ZGOUZFQ0FBODExMUVBQjQyQTA0MzNDNEY5QUUwMi8wN2NoWGhaZ29a NzlMbmN2bTZlbnZjYnVEU2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOp9KN0k7Ey9+xuWOcDY+8IV1NEI0ZVeOVEYMdAHPvHaw6ZO8gBlIC ScnmEG+0YxgPciFBksInOagmSCgVAKipFuDVihBDURN4XM/hDdo2TDlCT6eA2yE8 lCo4NIoW8LO5lGCEMtzuxfmWkD/2UofymLEddmo28DDPu7ftZdNV4KdrROYmpwV0 QwLhIWEMOjdqaRcKv9l+/RjUb1f//55xxeK3ZuMaVpjxt7V8jkh3VAO8G2tkQblf sEWhQBldcuuSCP2Mo+jV7dlHtSId1C41sgscZWtE/Cb5cKbRFxSkvraHw3P/cQD/ ny0wIcG/QrRUHneSrR22/PiRxmhQuc9u -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:41 2025 by rpki-client