$ rpki-client -vvf rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft File: sGG8SKFEEACr64xEignxlfkTnho.mft (raw, json) Hash identifier: 7bziijS27fF4hpec1LoQn8PfTserZbHMqvRbT5yAUGk= Subject key identifier: 35:A8:80:2B:6B:86:2E:40:FF:8D:5E:55:B6:6C:22:68:A5:E4:81:82 Authority key identifier: B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A Certificate issuer: /CN=A9149987/serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft Manifest number: F7 Signing time: Sat 09 Aug 2025 05:38:01 +0000 Manifest this update: Sat 09 Aug 2025 05:38:00 +0000 Manifest next update: Sat 16 Aug 2025 05:38:00 +0000 Files and hashes: 1: sGG8SKFEEACr64xEignxlfkTnho.crl (hash: X8x0NG/FE3BOMi4hR8xV1Z3d7pofKiD25OY6vLRjJ3M=) 2: 3576AA9EFC2311EE8CA4916BC4F9AE02.roa (hash: WQlYoqC8qKshcL6PJ06tlHSItXOoVAyYYKQZo33lSFI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149987, serialNumber=B061BC48A1441000ABEB8C448A09F195F9139E1A Validity Not Before: Aug 9 05:38:00 2025 GMT Not After : Aug 16 05:38:00 2025 GMT Subject: CN=6896deb8-4b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:2d:38:62:e0:d9:af:1d:bc:64:4a:4e:b9: c2:49:e8:c9:2e:02:98:a2:17:e7:c5:c6:5e:68:3a: 5d:6e:3d:3a:40:64:cc:76:0e:7f:9b:52:91:c3:6a: 55:92:e6:47:48:41:32:e3:8d:95:89:c5:dd:a3:95: 26:74:6c:ec:62:a8:ec:1a:e1:b3:8f:a4:cd:df:ab: ea:36:c0:05:eb:ee:e0:ee:62:18:6f:85:33:0c:8e: 0d:2d:57:18:5a:41:fc:37:9c:4f:9a:7c:71:9b:2f: 1d:0c:7f:e6:97:96:61:99:72:a0:68:86:b9:28:99: 3f:f6:43:54:31:14:25:39:af:e9:d8:f5:f0:c1:bb: 3f:56:fa:9f:1f:7a:ff:4f:21:0a:c5:78:bd:09:a4: da:1d:f0:e8:32:57:e6:91:3a:0f:6d:80:98:84:2b: 35:73:1a:5b:38:63:fa:3d:76:da:7c:bd:ec:08:eb: d9:f4:4f:1d:6a:f5:8a:9b:52:0e:a5:76:20:35:18: 5d:e2:a2:f8:a9:4d:fc:8a:d8:43:5d:b2:39:88:91: ea:86:8d:9a:bb:f1:19:0d:2e:57:b6:3b:8f:e2:0f: 2f:13:ed:b3:66:ae:36:d7:2c:a2:76:f4:c5:30:a5: 13:fb:c1:a6:2c:27:fb:ce:de:cf:c0:6d:b4:79:17: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A8:80:2B:6B:86:2E:40:FF:8D:5E:55:B6:6C:22:68:A5:E4:81:82 X509v3 Authority Key Identifier: keyid:B0:61:BC:48:A1:44:10:00:AB:EB:8C:44:8A:09:F1:95:F9:13:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGG8SKFEEACr64xEignxlfkTnho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149987/F0FA4FA6FC2211EE8BBFEC6AC4F9AE02/sGG8SKFEEACr64xEignxlfkTnho.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f3:eb:e0:fe:25:cc:6b:ff:8d:67:9d:b7:0a:b5:da:78:ab: dd:2c:d8:05:ec:eb:9e:b4:86:59:c9:a1:10:9f:34:6a:51:b8: ce:ff:f6:4a:3d:41:ff:88:80:be:f4:51:9b:d0:4a:71:03:13: 1b:76:7b:6c:e9:c8:ed:61:6e:58:ab:67:ce:c0:17:28:e7:4a: 5c:ea:08:25:f6:2a:9d:79:b0:02:54:4c:e8:c7:1d:40:8b:d4: 65:09:25:55:58:fe:f9:55:9a:f2:8a:9e:a4:22:ad:bd:f0:18: ea:6a:73:31:c3:ae:5a:36:a4:04:c5:de:cf:50:d9:25:c2:f0: fa:ba:60:42:a6:6e:03:7a:9b:49:1b:a8:61:3a:f9:6a:95:51: 9a:4b:af:a3:44:1b:60:ef:1e:d5:95:9f:63:1e:8f:e2:fe:a2: b7:87:50:e6:1e:f0:4d:33:fb:3b:d7:1a:28:1d:78:e9:3e:f0: 8e:ac:ec:72:51:84:ad:34:21:e8:96:21:93:bd:41:8a:7a:82: 57:4f:b1:27:9c:77:60:bf:cf:11:1f:e3:5e:96:62:cd:a1:f5: a1:08:e2:66:ab:13:c8:60:e4:79:ea:86:20:1e:e6:55:99:9b: 8e:66:1e:43:fe:fc:5f:0e:66:0e:52:e7:7d:6e:2d:2b:a5:62: 89:16:ab:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5ODcxMTAvBgNVBAUTKEIwNjFCQzQ4QTE0NDEwMDBBQkVCOEM0NDhBMDlGMTk1 RjkxMzlFMUEwHhcNMjUwODA5MDUzODAwWhcNMjUwODE2MDUzODAwWjAYMRYwFAYD VQQDEw02ODk2ZGViOC00YjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArmwtOGLg2a8dvGRKTrnCSejJLgKYohfnxcZeaDpdbj06QGTMdg5/m1KRw2pV kuZHSEEy442VicXdo5UmdGzsYqjsGuGzj6TN36vqNsAF6+7g7mIYb4UzDI4NLVcY WkH8N5xPmnxxmy8dDH/ml5ZhmXKgaIa5KJk/9kNUMRQlOa/p2PXwwbs/VvqfH3r/ TyEKxXi9CaTaHfDoMlfmkToPbYCYhCs1cxpbOGP6PXbafL3sCOvZ9E8davWKm1IO pXYgNRhd4qL4qU38ithDXbI5iJHqho2au/EZDS5XtjuP4g8vE+2zZq421yyidvTF MKUT+8GmLCf7zt7PwG20eRfBBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWogCtr hi5A/41eVbZsImil5IGCMB8GA1UdIwQYMBaAFLBhvEihRBAAq+uMRIoJ8ZX5E54a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTk4Ny9GMEZBNEZBNkZD MjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVBQ3I2NHhFaWdueGxma1Ru aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHRzhTS0ZFRUFDcjY0eEVpZ254bGZrVG5oby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTk4Ny9GMEZBNEZBNkZDMjIxMUVFOEJCRkVDNkFDNEY5QUUwMi9zR0c4U0tGRUVB Q3I2NHhFaWdueGxma1RuaG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO8+vg/iXMa/+NZ523CrXaeKvdLNgF7OuetIZZyaEQnzRqUbjO//ZK PUH/iIC+9FGb0EpxAxMbdnts6cjtYW5Yq2fOwBco50pc6ggl9iqdebACVEzoxx1A i9RlCSVVWP75VZryip6kIq298BjqanMxw65aNqQExd7PUNklwvD6umBCpm4DeptJ G6hhOvlqlVGaS6+jRBtg7x7VlZ9jHo/i/qK3h1DmHvBNM/s71xooHXjpPvCOrOxy UYStNCHoliGTvUGKeoJXT7EnnHdgv88RH+NelmLNofWhCOJmqxPIYOR56oYgHuZV mZuOZh5D/vxfDmYOUud9bi0rpWKJFqsi -----END CERTIFICATE-----Generated at Sat Aug 9 23:16:46 2025 by rpki-client