$ rpki-client -vvf rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft File: 7AxIKy2XwoyJb67NUfUOmxYldEE.mft (raw, json) Hash identifier: +aiBJs+Y3FMG0QfEGA/vRwoJ/Kt5ZvxLYb3NwmCGswY= Subject key identifier: 46:88:D4:1D:EA:D4:33:C0:C0:9F:55:3D:62:0A:22:5A:DF:57:6C:2A Authority key identifier: EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 Certificate issuer: /CN=A9140F6E/serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Certificate serial: 0E28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft Manifest number: 0E1F Signing time: Fri 08 Aug 2025 18:02:34 +0000 Manifest this update: Fri 08 Aug 2025 18:02:34 +0000 Manifest next update: Fri 15 Aug 2025 18:02:34 +0000 Files and hashes: 1: 7AxIKy2XwoyJb67NUfUOmxYldEE.crl (hash: sNXol54gm7xYjLJ9Kq3Xo1Lum1lz6vC9t/p4azqdVmc=) 2: 33534662AF4511E9B648CE6AC4F9AE02.roa (hash: kbrsBWLPmTs2n5OoEUQRcNgIkU1aEuNqMVThcieEjvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3624 (0xe28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140F6E, serialNumber=EC0C482B2D97C28C896FAECD51F50E9B16257441 Validity Not Before: Aug 8 18:02:34 2025 GMT Not After : Aug 15 18:02:34 2025 GMT Subject: CN=68963bba-80d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2f:a0:b4:43:a2:ec:3c:a7:bc:8c:71:56:0d: 7a:ad:b9:bb:9f:63:80:1f:cd:3a:04:a3:bf:1d:63: dc:a1:5e:a5:03:80:e4:83:b8:6b:44:2b:ce:97:35: 7d:fc:da:8a:ed:62:89:e4:e1:f1:39:a7:96:e4:70: 94:e9:32:9f:0f:7b:0d:d0:12:5b:2c:5c:99:d0:46: db:be:42:f3:6a:d9:eb:67:74:17:48:84:fe:d2:38: aa:32:7a:73:82:8b:49:5a:79:07:d4:c8:43:df:a6: 5b:59:fc:1f:7a:40:01:01:e6:e5:6b:4e:2f:2a:9e: be:04:69:ae:97:f2:d1:cf:c5:7b:0e:f6:c6:3c:15: c9:c6:d8:13:cc:ae:62:f8:f9:38:37:3c:11:74:27: 6f:48:ee:aa:94:a2:c4:27:8a:14:22:6e:fe:7a:e3: 80:b4:6d:16:da:f7:75:e6:48:fe:59:03:be:ab:f0: c4:0a:21:af:c6:7f:51:26:5b:05:3d:b1:c2:98:4e: 86:e1:c5:03:52:92:c8:f0:52:25:ef:c2:a2:66:92: 4b:a6:89:37:c0:96:0c:50:94:30:ae:1d:ef:bb:fa: cd:27:9c:3f:24:3d:0d:ef:ab:5b:3a:2a:1f:0c:c8: 08:d2:e7:b3:9f:1f:ef:cd:59:e7:23:4f:03:90:20: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:88:D4:1D:EA:D4:33:C0:C0:9F:55:3D:62:0A:22:5A:DF:57:6C:2A X509v3 Authority Key Identifier: keyid:EC:0C:48:2B:2D:97:C2:8C:89:6F:AE:CD:51:F5:0E:9B:16:25:74:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AxIKy2XwoyJb67NUfUOmxYldEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140F6E/D0E82DE0AF4311E9B3DFEE68C4F9AE02/7AxIKy2XwoyJb67NUfUOmxYldEE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:08:f9:d0:1c:4a:35:a5:69:50:15:bb:00:72:45:77:c7:b6: 6f:0d:84:37:b0:9d:42:c0:8a:ce:5f:a3:f7:64:93:bf:28:c9: 45:19:e0:82:1b:9a:e5:25:a8:da:c4:64:24:6c:99:66:88:30: e8:40:5a:54:e4:1b:ca:4a:56:44:9c:8a:5d:af:d0:07:88:4b: c4:78:33:67:0c:b2:2a:43:4d:40:46:75:51:f4:b3:b7:57:63: 1f:a0:53:55:a5:93:dd:bc:c9:8f:7e:7d:2a:be:5a:38:eb:68: b0:77:1f:74:cd:34:ae:6f:77:6a:39:19:33:be:53:09:f8:46: fa:96:ba:d9:74:4d:bc:6e:e1:79:7d:24:5e:99:de:01:25:82: 24:11:eb:3c:c5:6b:fd:19:64:70:b6:21:bb:3e:56:9b:b2:4f: 37:45:e3:c3:d7:3e:dc:0f:55:40:20:53:dc:72:ff:3d:d6:99: b3:66:86:16:f8:f6:d8:1d:2d:4a:51:ed:1f:90:a0:d4:83:04: 00:fe:c5:b2:ed:5d:cc:4b:79:ee:94:21:de:75:23:3a:21:ad: 60:45:52:92:b2:d4:7f:7e:d0:1c:f3:5e:0f:bd:c5:7f:aa:8f: 7c:e8:e4:5b:d4:ee:af:b8:62:9e:28:06:ab:27:f9:f1:c2:45: 8b:ef:aa:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBGNkUxMTAvBgNVBAUTKEVDMEM0ODJCMkQ5N0MyOEM4OTZGQUVDRDUxRjUwRTlC MTYyNTc0NDEwHhcNMjUwODA4MTgwMjM0WhcNMjUwODE1MTgwMjM0WjAYMRYwFAYD VQQDEw02ODk2M2JiYS04MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi+gtEOi7DynvIxxVg16rbm7n2OAH806BKO/HWPcoV6lA4Dkg7hrRCvOlzV9 /NqK7WKJ5OHxOaeW5HCU6TKfD3sN0BJbLFyZ0EbbvkLzatnrZ3QXSIT+0jiqMnpz gotJWnkH1MhD36ZbWfwfekABAebla04vKp6+BGmul/LRz8V7DvbGPBXJxtgTzK5i +Pk4NzwRdCdvSO6qlKLEJ4oUIm7+euOAtG0W2vd15kj+WQO+q/DECiGvxn9RJlsF PbHCmE6G4cUDUpLI8FIl78KiZpJLpok3wJYMUJQwrh3vu/rNJ5w/JD0N76tbOiof DMgI0ueznx/vzVnnI08DkCBx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaI1B3q 1DPAwJ9VPWIKIlrfV2wqMB8GA1UdIwQYMBaAFOwMSCstl8KMiW+uzVH1DpsWJXRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEY2RS9EMEU4MkRFMEFG NDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdveUpiNjdOVWZVT214WWxk RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeElLeTJYd295SmI2N05VZlVPbXhZbGRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEY2RS9EMEU4MkRFMEFGNDMxMUU5QjNERkVFNjhDNEY5QUUwMi83QXhJS3kyWHdv eUpiNjdOVWZVT214WWxkRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcCPnQHEo1pWlQFbsAckV3x7ZvDYQ3sJ1CwIrOX6P3ZJO/KMlFGeCC G5rlJajaxGQkbJlmiDDoQFpU5BvKSlZEnIpdr9AHiEvEeDNnDLIqQ01ARnVR9LO3 V2MfoFNVpZPdvMmPfn0qvlo462iwdx90zTSub3dqORkzvlMJ+Eb6lrrZdE28buF5 fSRemd4BJYIkEes8xWv9GWRwtiG7Plabsk83RePD1z7cD1VAIFPccv891pmzZoYW +PbYHS1KUe0fkKDUgwQA/sWy7V3MS3nulCHedSM6Ia1gRVKSstR/ftAc814PvcV/ qo986ORb1O6vuGKeKAarJ/nxwkWL76o8 -----END CERTIFICATE-----Generated at Sat Aug 9 14:32:21 2025 by rpki-client