$ rpki-client -vvf rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft File: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft (raw, json) Hash identifier: 0r3C0b2npBXRrWotPSaE0Wh5D4MxujOnOn92hB7rU5c= Subject key identifier: C8:ED:FD:B0:33:FC:74:3B:46:63:50:D2:89:1E:15:57:89:82:F1:88 Authority key identifier: EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 Certificate issuer: /CN=A912DD15/serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Certificate serial: 01D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft Manifest number: 01CB Signing time: Mon 11 Aug 2025 03:07:55 +0000 Manifest this update: Mon 11 Aug 2025 03:07:55 +0000 Manifest next update: Mon 18 Aug 2025 03:07:55 +0000 Files and hashes: 1: 7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl (hash: G72sxeXEm8KD7/rNAmFe8SzIPXz1ioR/spSH8sp4ey4=) 2: E1C173F01EFD11EE88E45C83C4F9AE02.roa (hash: Ak66lCLN9uc1ZY05PmKcoomC7BRhGFb6BczYDdZUa4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 469 (0x1d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DD15, serialNumber=EC51A9EA06C1C857F48EBD2D273A41F201EA6434 Validity Not Before: Aug 11 03:07:55 2025 GMT Not After : Aug 18 03:07:55 2025 GMT Subject: CN=68995e8b-05b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fd:4a:3c:46:31:dd:8e:92:46:9f:65:e4:95: db:ac:48:97:3f:3f:cd:a8:25:2c:96:13:9b:63:1d: 43:c8:3a:ad:71:c3:d1:96:a6:a7:69:0b:1c:c8:81: d6:15:db:05:e5:15:90:97:aa:7b:8d:fc:45:a8:36: 06:7b:01:d4:e5:2b:3d:f7:66:48:70:87:c5:4b:69: 12:bb:61:b7:c7:a1:f2:9c:37:68:df:02:2e:61:77: 48:97:06:9c:7f:aa:3a:42:62:34:d8:4e:b6:76:dd: 63:f0:e3:80:02:9e:83:d0:ae:1f:3a:eb:7b:9a:10: f5:ef:14:52:5f:a5:a4:9c:78:c7:f7:8d:cf:9a:8f: e8:f7:47:7e:3b:27:9d:57:e5:f1:7d:36:76:58:90: b3:26:86:2b:99:8c:5f:0a:07:6c:08:c6:e0:74:c5: 5b:51:19:78:51:1b:50:d1:ed:fa:a8:d9:8a:0d:4f: 38:7c:01:05:bf:0c:1a:0f:75:92:81:70:82:a0:7a: 19:c2:c1:18:52:35:43:c3:1e:1a:c7:ee:58:55:3f: 8a:28:00:c9:56:53:ff:a0:cf:d7:c5:d4:d2:c2:68: 0d:25:00:4e:05:93:35:2c:8c:a2:d1:0e:be:e3:21: d7:46:a9:56:f1:01:0b:b6:26:68:63:85:83:ce:0d: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:ED:FD:B0:33:FC:74:3B:46:63:50:D2:89:1E:15:57:89:82:F1:88 X509v3 Authority Key Identifier: keyid:EC:51:A9:EA:06:C1:C8:57:F4:8E:BD:2D:27:3A:41:F2:01:EA:64:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FGp6gbByFf0jr0tJzpB8gHqZDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DD15/C761A0AACC5211EDA8291D10C4F9AE02/7FGp6gbByFf0jr0tJzpB8gHqZDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:5c:94:3e:de:09:3b:7d:91:c1:29:f8:46:ac:fd:35:75:de: 66:7c:8a:4e:a4:6b:8c:69:36:64:b8:d5:10:b1:b6:41:46:2f: 15:ed:63:67:2c:ea:40:2f:22:31:7e:f2:bb:a2:3a:d1:96:e7: 1e:2f:89:90:ab:b5:ec:74:a9:e8:ad:2c:35:e1:12:20:d1:4c: 84:a1:a4:7b:13:48:50:29:54:52:7d:26:d1:04:db:90:ad:ad: 00:45:b0:4a:f9:f3:08:fd:cb:6c:45:44:b0:49:17:7f:50:63: 4e:b8:21:0b:e8:02:52:48:02:bd:4f:51:51:91:e7:e8:88:5f: e2:8f:05:b3:58:84:3a:bf:76:91:94:08:ed:57:46:a8:b7:d0: c0:82:6c:54:70:fd:2b:40:00:ee:f2:77:22:43:35:f0:66:a8: 35:64:e8:b0:8f:b4:59:02:f1:d0:09:15:b6:4c:ae:2b:bc:c1: 72:0e:44:93:40:31:d5:14:77:b8:a9:4d:c8:d4:9d:c3:b6:58: 0e:dc:26:8f:53:ab:1f:48:4f:a2:d9:f7:18:7f:38:a3:a8:bd: 0f:40:22:cc:fb:21:02:eb:13:b9:2b:7a:d1:34:16:57:fa:52: 72:20:ec:e7:6b:7a:85:53:a4:05:fb:ec:14:6e:2a:ea:0b:bc: 53:7c:d8:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkREMTUxMTAvBgNVBAUTKEVDNTFBOUVBMDZDMUM4NTdGNDhFQkQyRDI3M0E0MUYy MDFFQTY0MzQwHhcNMjUwODExMDMwNzU1WhcNMjUwODE4MDMwNzU1WjAYMRYwFAYD VQQDEw02ODk5NWU4Yi0wNWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApf1KPEYx3Y6SRp9l5JXbrEiXPz/NqCUslhObYx1DyDqtccPRlqanaQscyIHW FdsF5RWQl6p7jfxFqDYGewHU5Ss992ZIcIfFS2kSu2G3x6HynDdo3wIuYXdIlwac f6o6QmI02E62dt1j8OOAAp6D0K4fOut7mhD17xRSX6WknHjH943Pmo/o90d+Oyed V+XxfTZ2WJCzJoYrmYxfCgdsCMbgdMVbURl4URtQ0e36qNmKDU84fAEFvwwaD3WS gXCCoHoZwsEYUjVDwx4ax+5YVT+KKADJVlP/oM/XxdTSwmgNJQBOBZM1LIyi0Q6+ 4yHXRqlW8QELtiZoY4WDzg1h9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjt/bAz /HQ7RmNQ0okeFVeJgvGIMB8GA1UdIwQYMBaAFOxRqeoGwchX9I69LSc6QfIB6mQ0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREQxNS9DNzYxQTBBQUND NTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlGZjBqcjB0SnpwQjhnSHFa RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGR3A2Z2JCeUZmMGpyMHRKenBCOGdIcVpEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REQxNS9DNzYxQTBBQUNDNTIxMUVEQTgyOTFEMTBDNEY5QUUwMi83RkdwNmdiQnlG ZjBqcjB0SnpwQjhnSHFaRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1XJQ+3gk7fZHBKfhGrP01dd5mfIpOpGuMaTZkuNUQsbZBRi8V7WNn LOpALyIxfvK7ojrRluceL4mQq7XsdKnorSw14RIg0UyEoaR7E0hQKVRSfSbRBNuQ ra0ARbBK+fMI/ctsRUSwSRd/UGNOuCEL6AJSSAK9T1FRkefoiF/ijwWzWIQ6v3aR lAjtV0aot9DAgmxUcP0rQADu8nciQzXwZqg1ZOiwj7RZAvHQCRW2TK4rvMFyDkST QDHVFHe4qU3I1J3DtlgO3CaPU6sfSE+i2fcYfzijqL0PQCLM+yEC6xO5K3rRNBZX +lJyIOzna3qFU6QF++wUbirqC7xTfNiD -----END CERTIFICATE-----Generated at Mon Aug 11 06:03:01 2025 by rpki-client