$ rpki-client -vvf rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft File: B-7MRCaowz1FkLzaEtl1DEkEhX0.mft (raw, json) Hash identifier: Pb7HYLQ49TfKagN9HJanOiigRQzEHBEmaGR0VCmxA/o= Subject key identifier: 43:B0:E8:BA:11:76:51:42:C8:48:9B:41:20:46:6B:23:61:8E:9E:DC Authority key identifier: 07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D Certificate issuer: /CN=A914C90B/serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Certificate serial: 0105 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft Manifest number: 0103 Signing time: Sat 09 Aug 2025 05:28:43 +0000 Manifest this update: Sat 09 Aug 2025 05:28:42 +0000 Manifest next update: Sat 16 Aug 2025 05:28:42 +0000 Files and hashes: 1: B-7MRCaowz1FkLzaEtl1DEkEhX0.crl (hash: ZI5reyenq/QDw15RUhRDvodavFbF12A5Z20UB5kKuL8=) 2: 52BD65B4E7D511EE8C353D2AC4F9AE02.roa (hash: v7bT+lzlhBzHYXIgxw7CXDLlyYjEfCYhNYxtpgDCkMo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 261 (0x105) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C90B, serialNumber=07EECC4426A8C33D4590BCDA12D9750C4904857D Validity Not Before: Aug 9 05:28:42 2025 GMT Not After : Aug 16 05:28:42 2025 GMT Subject: CN=6896dc8b-439e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:06:aa:73:90:d7:7d:22:71:c5:d7:2b:f2:eb: db:39:fe:37:22:f8:3f:a6:04:06:1d:8c:aa:04:fb: b3:60:b8:9a:a3:14:84:52:28:db:37:0c:a5:65:b8: 82:50:54:5f:fb:5b:f3:d6:c1:0a:14:b2:fc:3f:ab: 47:2b:dd:99:8b:06:18:bb:0b:20:29:7e:4b:22:26: 50:41:38:64:42:30:f0:70:6a:53:cb:ed:ce:fe:5d: 68:1a:e3:87:d0:75:df:25:e5:2d:ea:47:3e:19:30: c6:86:13:59:6c:bc:26:b0:4f:44:a8:87:85:95:ba: 8e:89:48:00:12:49:ff:4d:c7:c0:76:33:82:d4:97: b7:72:03:1f:45:e2:1b:d9:cd:30:65:8e:55:64:11: 72:ec:71:fe:7d:6c:33:6b:b8:bd:05:42:af:9b:05: 9c:1d:a2:a7:2e:58:34:95:2f:70:d7:40:22:e3:3d: 78:5e:2d:35:24:45:dc:32:76:cb:e3:0d:49:35:00: 41:4a:8c:0e:83:ca:38:60:9d:ef:33:ac:e8:ae:60: 08:80:70:4c:06:92:73:37:64:c1:6f:b0:75:56:b6: a3:aa:11:c4:67:96:c0:53:a5:d8:a6:fc:4c:e8:da: b6:e1:df:3d:45:4f:96:fe:e9:e1:6a:f1:8d:46:94: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B0:E8:BA:11:76:51:42:C8:48:9B:41:20:46:6B:23:61:8E:9E:DC X509v3 Authority Key Identifier: keyid:07:EE:CC:44:26:A8:C3:3D:45:90:BC:DA:12:D9:75:0C:49:04:85:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-7MRCaowz1FkLzaEtl1DEkEhX0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C90B/92842702E71011EEA9DBC252C4F9AE02/B-7MRCaowz1FkLzaEtl1DEkEhX0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:91:8e:ff:b2:52:88:90:7d:5f:b4:fc:d8:87:aa:02:b8:0b: 16:b9:00:f2:dd:05:9b:4a:6b:e7:91:2a:18:52:78:97:7f:e5: 75:27:c4:bf:b7:34:35:7f:5f:a2:01:c0:e7:d0:f1:b0:7a:88: 42:16:f6:36:1e:eb:94:7c:04:25:0c:6d:25:30:ad:af:81:01: 4a:b6:7b:5e:62:1b:1e:1a:0e:50:78:fa:7b:f4:34:d0:88:1f: 71:ac:90:9e:81:ef:b8:f0:ba:95:88:70:7f:ef:13:b8:02:3a: 68:f5:7d:06:f1:2d:92:3f:de:ed:49:5f:7b:4a:d0:48:3d:c4: aa:dc:97:89:bc:e1:ef:e6:3f:90:04:87:28:e3:89:d6:bf:de: 9e:ab:fd:4a:a4:f5:fa:c8:fa:51:1c:8d:10:eb:c4:4c:23:41: fe:78:cf:57:59:c7:d7:14:ae:5b:a2:ab:bf:1c:fd:d8:79:a3: 83:62:54:39:b1:17:3f:12:97:ac:2e:1a:b8:ce:fc:9c:b3:0e: 85:72:72:79:e3:47:a7:ca:c0:16:63:2f:32:0f:ea:4e:93:e0: c8:c2:0b:f8:b7:11:9f:44:17:2a:bc:65:84:da:fe:82:27:c5: 6e:e9:ae:76:71:73:d8:32:cc:52:91:07:e8:04:2e:07:89:f8: b6:56:ee:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM5MEIxMTAvBgNVBAUTKDA3RUVDQzQ0MjZBOEMzM0Q0NTkwQkNEQTEyRDk3NTBD NDkwNDg1N0QwHhcNMjUwODA5MDUyODQyWhcNMjUwODE2MDUyODQyWjAYMRYwFAYD VQQDEw02ODk2ZGM4Yi00MzllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygaqc5DXfSJxxdcr8uvbOf43Ivg/pgQGHYyqBPuzYLiaoxSEUijbNwylZbiC UFRf+1vz1sEKFLL8P6tHK92ZiwYYuwsgKX5LIiZQQThkQjDwcGpTy+3O/l1oGuOH 0HXfJeUt6kc+GTDGhhNZbLwmsE9EqIeFlbqOiUgAEkn/TcfAdjOC1Je3cgMfReIb 2c0wZY5VZBFy7HH+fWwza7i9BUKvmwWcHaKnLlg0lS9w10Ai4z14Xi01JEXcMnbL 4w1JNQBBSowOg8o4YJ3vM6zormAIgHBMBpJzN2TBb7B1VrajqhHEZ5bAU6XYpvxM 6Nq24d89RU+W/unhavGNRpS4/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOw6LoR dlFCyEibQSBGayNhjp7cMB8GA1UdIwQYMBaAFAfuzEQmqMM9RZC82hLZdQxJBIV9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzkwQi85Mjg0MjcwMkU3 MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6MUZrTHphRXRsMURFa0Vo WDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ItN01SQ2Fvd3oxRmtMemFFdGwxREVrRWhYMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzkwQi85Mjg0MjcwMkU3MTAxMUVFQTlEQkMyNTJDNEY5QUUwMi9CLTdNUkNhb3d6 MUZrTHphRXRsMURFa0VoWDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBikY7/slKIkH1ftPzYh6oCuAsWuQDy3QWbSmvnkSoYUniXf+V1J8S/ tzQ1f1+iAcDn0PGweohCFvY2HuuUfAQlDG0lMK2vgQFKtnteYhseGg5QePp79DTQ iB9xrJCege+48LqViHB/7xO4Ajpo9X0G8S2SP97tSV97StBIPcSq3JeJvOHv5j+Q BIco44nWv96eq/1KpPX6yPpRHI0Q68RMI0H+eM9XWcfXFK5boqu/HP3YeaODYlQ5 sRc/EpesLhq4zvycsw6FcnJ540enysAWYy8yD+pOk+DIwgv4txGfRBcqvGWE2v6C J8Vu6a52cXPYMsxSkQfoBC4Hifi2Vu6e -----END CERTIFICATE-----Generated at Mon Aug 11 02:05:02 2025 by rpki-client