$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft File: F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json) Hash identifier: afDkj1fWcXDD8vyGXvk2jit1NBEWYyxByr7PbdWWjNw= Subject key identifier: DE:6F:41:3B:64:C5:E3:83:FE:4B:BF:1A:F1:F9:7D:51:39:2B:AB:CE Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 Certificate issuer: /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Certificate serial: 34AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft Manifest number: 34AB Signing time: Fri 08 Aug 2025 14:16:29 +0000 Manifest this update: Fri 08 Aug 2025 14:16:29 +0000 Manifest next update: Fri 15 Aug 2025 14:16:29 +0000 Files and hashes: 1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: sfJjQ3a+tAjRVNuaKT9REu8QKPRJmv6SONoZsoxlk74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13483 (0x34ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1 Validity Not Before: Aug 8 14:16:29 2025 GMT Not After : Aug 15 14:16:29 2025 GMT Subject: CN=689606bd-936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ea:11:3a:4d:e5:26:85:53:b6:f8:7c:96:a1: 82:38:24:48:6f:12:e5:96:ec:40:02:59:04:ef:5b: 14:06:aa:4e:5d:e0:7c:1b:3c:a7:2d:64:72:cf:a7: a7:62:fd:d1:b1:67:6d:2b:2e:35:7c:ee:6a:39:fb: 4c:3a:4a:ba:85:a7:f4:f1:6e:b1:69:47:59:e8:43: ea:fb:e7:30:e8:6d:29:f1:9f:e3:a1:d8:b7:8a:15: b1:b1:f5:07:1c:41:55:85:51:6b:07:7f:b9:4d:fc: d4:5d:66:1e:78:37:60:f8:fa:71:4e:73:97:bc:d2: 92:e0:b7:62:81:71:d2:58:5f:b2:28:9c:e5:25:4f: 03:c2:8c:42:66:b9:f5:a8:b4:78:fa:ed:be:3c:01: b2:c4:40:1e:3f:0f:9a:21:33:03:5f:db:9b:52:71: c9:bd:7b:26:21:75:57:3c:b0:f0:57:31:6c:7c:83: c3:f0:12:d2:53:31:24:d1:e5:5f:dd:10:50:d2:fa: 91:13:e8:31:b2:0a:45:bb:6f:bc:ad:40:48:0c:cc: cf:c1:2a:c4:04:8f:fc:b5:58:29:8e:72:1c:70:ab: 4e:4b:83:e4:82:9f:f8:95:0c:66:f3:a6:86:c4:a3: 74:4b:b2:f9:d6:54:f4:8d:94:87:74:27:2f:46:d5: 33:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6F:41:3B:64:C5:E3:83:FE:4B:BF:1A:F1:F9:7D:51:39:2B:AB:CE X509v3 Authority Key Identifier: keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:c3:f6:0d:66:a2:07:df:d6:e7:26:ee:43:d1:16:ea:47:cb: 2b:8c:03:f2:a4:ff:85:bd:2e:74:3d:f8:6a:8a:73:57:98:d4: c7:4f:8a:ff:1f:76:1d:09:b2:29:b9:4b:3d:9e:ec:b5:ef:86: e6:1b:d5:79:24:1d:4b:d3:93:da:f4:61:1a:97:43:8f:7a:73: 7a:d8:2e:19:ab:5b:25:fa:fa:d7:48:43:28:82:0b:64:c1:21: db:1a:fb:68:82:6a:38:78:5a:8c:b4:d1:d7:ea:87:9c:21:f3: b0:70:93:73:39:72:e1:3b:7d:2d:2b:e4:c8:d6:76:29:f2:d0: 09:48:8d:34:b9:c1:c7:43:20:a2:35:ef:d5:bc:29:cb:14:e2: e4:2c:c4:6f:57:2c:db:ab:47:0b:33:4e:c9:75:31:b8:88:8d: 69:86:26:3b:38:29:0a:69:27:84:a7:8c:12:4f:ec:b2:6d:94: 01:f0:4c:b0:9c:c5:91:2c:1e:c4:91:5d:d1:5f:cb:75:8c:0e: 22:f2:94:9b:82:94:ab:8f:a9:75:47:78:ad:f8:4d:10:ab:9f: d4:17:77:18:fd:ff:41:7c:7d:00:d5:a7:17:53:f1:db:ba:c2: 28:75:fb:3b:45:66:e7:27:6c:c5:0d:1f:35:1f:d9:49:ce:c7: c2:aa:8a:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJGQzUxMTAvBgNVBAUTKDE3QkI3NEJGQzE0QjM5NEEzRkVEQTIxQkQ4Qzg1QzQx RTNDNUJCRjEwHhcNMjUwODA4MTQxNjI5WhcNMjUwODE1MTQxNjI5WjAYMRYwFAYD VQQDEw02ODk2MDZiZC05MzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm+oROk3lJoVTtvh8lqGCOCRIbxLlluxAAlkE71sUBqpOXeB8GzynLWRyz6en Yv3RsWdtKy41fO5qOftMOkq6haf08W6xaUdZ6EPq++cw6G0p8Z/jodi3ihWxsfUH HEFVhVFrB3+5TfzUXWYeeDdg+PpxTnOXvNKS4LdigXHSWF+yKJzlJU8DwoxCZrn1 qLR4+u2+PAGyxEAePw+aITMDX9ubUnHJvXsmIXVXPLDwVzFsfIPD8BLSUzEk0eVf 3RBQ0vqRE+gxsgpFu2+8rUBIDMzPwSrEBI/8tVgpjnIccKtOS4Pkgp/4lQxm86aG xKN0S7L51lT0jZSHdCcvRtUzSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5vQTtk xeOD/ku/GvH5fVE5K6vOMB8GA1UdIwQYMBaAFBe7dL/BSzlKP+2iG9jIXEHjxbvx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkZDNS8wRDVDNzk0ODFE NkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9Vb183YUliMk1oY1FlUEZ1 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Y3dDB2OEZMT1VvXzdhSWIyTWhjUWVQRnVfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkZDNS8wRDVDNzk0ODFENkExMUUyQkIyMUIyQTcwOEIwMkNEMi9GN3QwdjhGTE9V b183YUliMk1oY1FlUEZ1X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvw/YNZqIH39bnJu5D0RbqR8srjAPypP+FvS50PfhqinNXmNTHT4r/ H3YdCbIpuUs9nuy174bmG9V5JB1L05Pa9GEal0OPenN62C4Zq1sl+vrXSEMoggtk wSHbGvtogmo4eFqMtNHX6oecIfOwcJNzOXLhO30tK+TI1nYp8tAJSI00ucHHQyCi Ne/VvCnLFOLkLMRvVyzbq0cLM07JdTG4iI1phiY7OCkKaSeEp4wST+yybZQB8Eyw nMWRLB7EkV3RX8t1jA4i8pSbgpSrj6l1R3it+E0Qq5/UF3cY/f9BfH0A1acXU/Hb usIodfs7RWbnJ2zFDR81H9lJzsfCqoqp -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:21 2025 by rpki-client