$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft File: -7pKlgm0F05stHuVg04qnD2WhmM.mft (raw, json) Hash identifier: S/o7UsLPN028Zq2qhg78BqXdFoPLml7lFe+7BS6L16I= Subject key identifier: 2E:92:3D:4D:BD:B1:C4:C7:6C:B3:20:BB:18:62:06:3E:98:58:02:8E Authority key identifier: FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 Certificate issuer: /CN=A912F1D5/serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft Manifest number: 0C5B Signing time: Sun 10 Aug 2025 18:38:04 +0000 Manifest this update: Sun 10 Aug 2025 18:38:04 +0000 Manifest next update: Sun 17 Aug 2025 18:38:04 +0000 Files and hashes: 1: -7pKlgm0F05stHuVg04qnD2WhmM.crl (hash: n1xZNy66DIKR9/8sGqsNidbFjYOcP7tgmxDRw7Zb42A=) 2: 392036B4808B11EFAB024F45C4F9AE02.roa (hash: jLmFIeuFfW/kA9gB2qa9B520Ov6OJzEYyswQvxuxZy4=) 3: 92F7BE58815511EF94F0101AC4F9AE02.roa (hash: Jod4UyMRx/RISNG7y9zB/lgaFI3cJMU1Lc5wZ68aw+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F1D5, serialNumber=FBBA4A9609B4174E6CB47B95834E2A9C3D968663 Validity Not Before: Aug 10 18:38:04 2025 GMT Not After : Aug 17 18:38:04 2025 GMT Subject: CN=6898e70c-dc77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:9a:ae:bf:5d:13:c5:69:6b:02:65:ed:b5: 48:a5:49:a5:f0:70:57:5a:5f:9c:0a:03:5f:91:19: 3d:95:e3:e4:6e:f3:b1:7b:fc:2b:c1:a1:c1:fd:3b: 72:5d:ca:f4:0e:32:4b:40:f1:46:f1:98:d7:f4:e7: 1b:1e:31:15:ed:c7:a7:8c:e2:1e:d5:45:64:bc:c5: 64:9a:57:ab:8a:60:1e:de:ea:ab:7d:ec:7f:fa:b4: 1e:5c:16:e9:12:28:4c:89:b8:d3:21:57:f0:c4:bc: 5c:cb:f0:a9:04:76:65:77:2d:65:e8:14:b0:2a:dd: 8f:ae:b7:7b:b9:35:7d:8f:b5:ea:50:0d:62:8e:34: af:64:71:5b:e8:24:f4:a6:2b:c1:20:3a:f3:ed:23: 66:bd:74:2f:77:c3:a3:05:0a:05:fd:bd:41:72:2d: f7:07:ce:31:c1:b2:25:06:12:39:e0:07:64:4d:e4: 7c:40:68:f8:62:86:14:c5:54:75:07:76:a3:d8:cb: 4b:15:83:d6:89:df:33:47:ef:3b:d3:e9:a7:1e:80: a6:a5:11:58:05:11:a7:c2:16:a5:9b:cf:07:19:54: 88:40:7a:66:d3:6b:ca:ae:9a:6b:51:41:6a:4e:f9: fe:e8:93:a6:ab:05:ea:44:fd:36:01:90:e4:b7:95: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:92:3D:4D:BD:B1:C4:C7:6C:B3:20:BB:18:62:06:3E:98:58:02:8E X509v3 Authority Key Identifier: keyid:FB:BA:4A:96:09:B4:17:4E:6C:B4:7B:95:83:4E:2A:9C:3D:96:86:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7pKlgm0F05stHuVg04qnD2WhmM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1D5/EE0180780F6211EAA706AF3DC4F9AE02/-7pKlgm0F05stHuVg04qnD2WhmM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:18:da:b6:2e:2c:2b:01:c0:0b:0b:96:61:26:9d:bc:ef:0a: 3f:7f:7a:91:be:e7:41:e4:ff:a4:85:9e:88:77:b9:6a:0a:87: 49:1e:0b:f7:ab:3c:15:9d:93:aa:a9:dd:f3:d9:0d:2f:2a:fb: a5:ef:15:6a:ae:aa:65:12:d6:2c:a1:23:ea:7c:9b:9d:67:c6: c5:a0:14:4d:83:60:e7:3a:de:6d:66:7d:5b:81:ac:08:fa:3b: f1:ae:62:9b:bc:ae:af:96:89:bb:47:6c:3d:61:a6:f0:78:11: 5c:a3:f7:17:a9:af:8a:14:ee:c5:e5:9d:43:71:82:57:b7:2e: 11:09:53:13:c2:94:81:75:37:64:c8:e3:94:b6:1d:ef:9f:1c: c8:c4:a5:b5:4f:53:0c:8e:e9:a7:b9:3b:51:1b:2b:91:a7:64: 1f:14:c4:c2:d9:4f:56:07:11:4b:34:49:9e:eb:5b:e6:20:28: 5d:33:e3:72:f3:8c:2b:15:06:31:88:aa:87:15:9a:76:75:a3: 83:43:fd:55:3b:7e:08:18:83:43:74:a1:59:54:0b:5b:35:dc: 06:18:bd:fe:0b:a0:cc:d0:ee:41:79:b1:6e:e1:de:eb:d7:be: 45:e8:1c:e4:d2:82:82:39:db:d0:ff:cb:78:b3:68:4f:37:2c: 5e:bd:5d:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxRDUxMTAvBgNVBAUTKEZCQkE0QTk2MDlCNDE3NEU2Q0I0N0I5NTgzNEUyQTlD M0Q5Njg2NjMwHhcNMjUwODEwMTgzODA0WhcNMjUwODE3MTgzODA0WjAYMRYwFAYD VQQDEw02ODk4ZTcwYy1kYzc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2pearr9dE8VpawJl7bVIpUml8HBXWl+cCgNfkRk9lePkbvOxe/wrwaHB/Tty Xcr0DjJLQPFG8ZjX9OcbHjEV7cenjOIe1UVkvMVkmlerimAe3uqrfex/+rQeXBbp EihMibjTIVfwxLxcy/CpBHZldy1l6BSwKt2Prrd7uTV9j7XqUA1ijjSvZHFb6CT0 pivBIDrz7SNmvXQvd8OjBQoF/b1Bci33B84xwbIlBhI54AdkTeR8QGj4YoYUxVR1 B3aj2MtLFYPWid8zR+870+mnHoCmpRFYBRGnwhalm88HGVSIQHpm02vKrpprUUFq Tvn+6JOmqwXqRP02AZDkt5V8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC6SPU29 scTHbLMguxhiBj6YWAKOMB8GA1UdIwQYMBaAFPu6SpYJtBdObLR7lYNOKpw9loZj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjFENS9FRTAxODA3ODBG NjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYwNXN0SHVWZzA0cW5EMldo bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cEtsZ20wRjA1c3RIdVZnMDRxbkQyV2htTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjFENS9FRTAxODA3ODBGNjIxMUVBQTcwNkFGM0RDNEY5QUUwMi8tN3BLbGdtMEYw NXN0SHVWZzA0cW5EMldobU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaGNq2LiwrAcALC5ZhJp287wo/f3qRvudB5P+khZ6Id7lqCodJHgv3 qzwVnZOqqd3z2Q0vKvul7xVqrqplEtYsoSPqfJudZ8bFoBRNg2DnOt5tZn1bgawI +jvxrmKbvK6vlom7R2w9YabweBFco/cXqa+KFO7F5Z1DcYJXty4RCVMTwpSBdTdk yOOUth3vnxzIxKW1T1MMjumnuTtRGyuRp2QfFMTC2U9WBxFLNEme61vmIChdM+Ny 84wrFQYxiKqHFZp2daODQ/1VO34IGINDdKFZVAtbNdwGGL3+C6DM0O5BebFu4d7r 175F6Bzk0oKCOdvQ/8t4s2hPNyxevV1U -----END CERTIFICATE-----Generated at Mon Aug 11 12:01:59 2025 by rpki-client