$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft File: x7Jkc1A4Cmo0404yzv41GZN-l8g.mft (raw, json) Hash identifier: N710ndwkbwXSKphAZb4QjYTHAgswbj7WMkvZ+2AHRbc= Subject key identifier: EB:6C:71:FB:B4:05:9B:38:56:08:60:73:F9:2B:B5:7D:8A:F9:7B:42 Authority key identifier: C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 Certificate issuer: /CN=A9144F59/serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Certificate serial: 1707 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft Manifest number: 16DF Signing time: Sun 10 Aug 2025 16:39:09 +0000 Manifest this update: Sun 10 Aug 2025 16:39:08 +0000 Manifest next update: Sun 17 Aug 2025 16:39:08 +0000 Files and hashes: 1: x7Jkc1A4Cmo0404yzv41GZN-l8g.crl (hash: CI63ZiREVHvxATLsvAQwr3mZD9cb/74HXIPzUZN3eiA=) 2: CCE4818E514D11EEADBDDC4DC4F9AE02.roa (hash: mHHD4iG0u+Xkwk4pjbL/x0UUJaJ5cYa7RlAiU7ksSOM=) 3: 0897E314434811EF8E76757AC4F9AE02.roa (hash: VmGRRamI92gsFHH67DOcSNfpbQCDWa56npBMPnLQFzI=) 4: 453489B8BE6311EE90BF9241C4F9AE02.roa (hash: bqFmiv55QKtXboSAyhppicmxMvI2sf59cazaYPcU9EY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 16:39:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5895 (0x1707) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=C7B2647350380A6A34E34E32CEFE3519937E97C8 Validity Not Before: Aug 10 16:39:08 2025 GMT Not After : Aug 17 16:39:08 2025 GMT Subject: CN=6898cb2d-3625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:80:17:d0:32:90:16:7f:a9:cf:a6:de:de:63: ae:ec:ea:da:24:1d:fc:86:ac:64:66:63:b6:a8:15: 97:ce:94:c5:a4:82:09:28:f9:9f:e1:46:2e:be:69: 0c:92:e9:d0:14:3f:c0:0d:c8:32:ec:23:c0:15:ef: 42:25:90:d0:69:a3:cb:4f:76:3b:0b:b4:fb:06:45: 48:08:0d:93:50:a5:ac:23:53:75:76:64:da:9d:c2: 3d:1a:c9:78:43:8c:1b:bb:8a:7a:4c:35:76:1c:41: 2b:76:3d:ac:fe:8a:f7:a8:1c:66:38:e6:25:0b:03: 2f:bd:46:19:0f:b7:83:86:9c:5a:59:31:60:b9:62: 2f:24:92:8c:1d:a3:bf:e8:35:da:75:8d:64:d7:0f: 24:5b:b4:de:94:46:52:b2:61:71:dc:c7:1b:e9:31: 2a:ee:ce:48:5f:d1:a9:d9:b7:7e:0f:3b:c8:bb:f4: 38:0e:b8:d1:13:8a:24:9f:e4:9e:cc:00:33:06:d1: cd:aa:c2:bc:1f:66:52:79:61:fb:32:62:d0:19:ed: d6:91:a9:f2:ce:78:2d:fb:14:6f:4f:b5:a6:f6:df: ab:df:52:1e:0b:25:42:32:0c:db:6c:c0:ee:25:ad: 68:f4:cf:32:c4:35:0a:5e:01:a0:38:7e:3c:b6:be: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6C:71:FB:B4:05:9B:38:56:08:60:73:F9:2B:B5:7D:8A:F9:7B:42 X509v3 Authority Key Identifier: keyid:C7:B2:64:73:50:38:0A:6A:34:E3:4E:32:CE:FE:35:19:93:7E:97:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x7Jkc1A4Cmo0404yzv41GZN-l8g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/4B958BCE00CB11E8BEB1EF10C4F9AE02/x7Jkc1A4Cmo0404yzv41GZN-l8g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:bb:af:c2:d0:ad:a9:57:a5:de:d9:9d:fc:b1:18:39:90:46: 58:20:80:39:c0:0a:da:b7:63:02:aa:39:75:9e:c1:28:fc:92: 15:67:60:0b:0e:b6:15:6c:3f:61:8c:21:a9:0c:5a:25:62:29: 8d:f0:1e:26:cd:ce:86:a6:2e:35:1c:9c:8a:5d:11:55:e9:f4: 89:58:88:d5:ab:d1:d5:f2:64:f8:41:34:67:b7:e2:ba:ed:80: ee:7a:59:1e:e0:92:7c:98:a0:98:23:dc:ef:17:46:59:c4:16: e9:de:96:46:60:8b:ab:88:1a:06:4c:4d:ae:a3:78:e8:4b:b8: 98:cb:f0:af:04:d8:78:77:14:f0:39:f2:68:37:23:24:be:75: 91:16:8b:43:12:3b:03:8d:67:27:d5:44:75:13:b5:36:0f:a0: 6e:7b:23:7a:f6:b0:fd:12:e2:fb:02:a2:f2:4e:0e:07:7c:32: ca:c3:c8:a9:7d:0c:56:60:f1:19:19:bd:b1:a1:a3:b1:86:1a: 9e:6c:34:a6:db:09:b2:b6:50:f3:cb:4f:bb:07:6a:66:f9:a9: e6:41:43:ea:77:7c:6f:e6:40:71:5c:7d:b3:80:75:a6:47:6f: 84:90:7b:bd:79:5d:64:b0:24:e5:49:51:53:cc:dc:2c:13:e8: e5:8d:31:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFwcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKEM3QjI2NDczNTAzODBBNkEzNEUzNEUzMkNFRkUzNTE5 OTM3RTk3QzgwHhcNMjUwODEwMTYzOTA4WhcNMjUwODE3MTYzOTA4WjAYMRYwFAYD VQQDEw02ODk4Y2IyZC0zNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoAX0DKQFn+pz6be3mOu7OraJB38hqxkZmO2qBWXzpTFpIIJKPmf4UYuvmkM kunQFD/ADcgy7CPAFe9CJZDQaaPLT3Y7C7T7BkVICA2TUKWsI1N1dmTancI9Gsl4 Q4wbu4p6TDV2HEErdj2s/or3qBxmOOYlCwMvvUYZD7eDhpxaWTFguWIvJJKMHaO/ 6DXadY1k1w8kW7TelEZSsmFx3Mcb6TEq7s5IX9Gp2bd+DzvIu/Q4DrjRE4okn+Se zAAzBtHNqsK8H2ZSeWH7MmLQGe3Wkanyzngt+xRvT7Wm9t+r31IeCyVCMgzbbMDu Ja1o9M8yxDUKXgGgOH48tr4b5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOtscfu0 BZs4Vghgc/krtX2K+XtCMB8GA1UdIwQYMBaAFMeyZHNQOApqNONOMs7+NRmTfpfI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80Qjk1OEJDRTAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENtbzA0MDR5enY0MUdaTi1s OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g3SmtjMUE0Q21vMDQwNHl6djQxR1pOLWw4Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEY1OS80Qjk1OEJDRTAwQ0IxMUU4QkVCMUVGMTBDNEY5QUUwMi94N0prYzFBNENt bzA0MDR5enY0MUdaTi1sOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8u6/C0K2pV6Xe2Z38sRg5kEZYIIA5wArat2MCqjl1nsEo/JIVZ2AL DrYVbD9hjCGpDFolYimN8B4mzc6Gpi41HJyKXRFV6fSJWIjVq9HV8mT4QTRnt+K6 7YDuelke4JJ8mKCYI9zvF0ZZxBbp3pZGYIuriBoGTE2uo3joS7iYy/CvBNh4dxTw OfJoNyMkvnWRFotDEjsDjWcn1UR1E7U2D6BueyN69rD9EuL7AqLyTg4HfDLKw8ip fQxWYPEZGb2xoaOxhhqebDSm2wmytlDzy0+7B2pm+anmQUPqd3xv5kBxXH2zgHWm R2+EkHu9eV1ksCTlSVFTzNwsE+jljTEI -----END CERTIFICATE-----Generated at Tue Aug 12 14:04:15 2025 by rpki-client