$ rpki-client -vvf rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft File: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft (raw, json) Hash identifier: +qX/6bOCgIwZe4VyTBep3Sa1aYfoOR+kk7EUyZI7xx0= Subject key identifier: 9D:67:95:12:C7:42:33:B7:6E:F3:31:5E:98:91:F1:F6:70:05:23:A9 Authority key identifier: EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 Certificate issuer: /CN=A915D64F/serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Certificate serial: 0A01 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft Manifest number: 09FA Signing time: Mon 04 Aug 2025 20:08:09 +0000 Manifest this update: Mon 04 Aug 2025 20:08:08 +0000 Manifest next update: Mon 11 Aug 2025 20:08:08 +0000 Files and hashes: 1: 7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl (hash: qlcln/H16JClWPHznm2B1r3mnxpooL16iCXEgR1HZZM=) 2: 2F7EAF12932411EB97630343C4F9AE02.roa (hash: uDDzLcWBodLbCzdLP4VyOIXnIAGgVu5+EW/H/aSjYJU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2561 (0xa01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D64F, serialNumber=EC705B2AD6FB13FD6FC4214B9772704113E668D7 Validity Not Before: Aug 4 20:08:08 2025 GMT Not After : Aug 11 20:08:08 2025 GMT Subject: CN=68911328-fd29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:24:a5:00:96:76:1a:ce:cb:cc:06:81:f3: ee:0b:2f:fe:71:c9:c9:1e:19:db:c1:a1:5c:42:8f: 19:05:01:0c:d4:4f:b6:53:ae:2f:06:18:c1:c0:9b: a6:e4:8d:61:65:ef:8c:63:7c:e3:50:89:58:43:e7: eb:38:77:e7:95:03:77:03:d4:9d:ac:d2:5d:0d:6a: 50:52:47:66:da:f1:24:4b:4b:45:8f:d6:83:02:93: 23:59:2d:2b:d0:23:1e:b1:06:7b:66:c1:91:0f:35: 0a:17:95:f2:de:b8:b9:3f:30:79:5e:91:33:2e:1d: 4f:22:75:1e:b2:f0:96:55:47:23:24:49:a9:ed:4c: 56:fe:c5:e4:35:bd:92:3e:38:bf:0c:23:f3:2a:30: 30:b6:e7:50:7e:4c:1a:22:b2:b6:bc:78:c4:e8:27: 7f:b6:fd:ce:2d:ad:ee:4b:b3:38:58:f5:a7:4f:8e: 9f:35:bf:5b:1d:8e:b6:00:9b:11:f1:22:37:2c:f7: 13:7c:65:be:4a:04:83:af:11:88:95:9f:be:be:e5: ba:53:4d:77:cb:0d:9c:a3:71:77:d9:e0:70:43:79: 64:8a:22:06:ad:df:b7:37:50:65:b3:ad:55:04:40: 82:ef:cd:f3:61:3d:79:76:b3:e0:28:35:f8:13:64: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:67:95:12:C7:42:33:B7:6E:F3:31:5E:98:91:F1:F6:70:05:23:A9 X509v3 Authority Key Identifier: keyid:EC:70:5B:2A:D6:FB:13:FD:6F:C4:21:4B:97:72:70:41:13:E6:68:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7HBbKtb7E_1vxCFLl3JwQRPmaNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D64F/F115B6727DED11EA9A5CCC4BC4F9AE02/7HBbKtb7E_1vxCFLl3JwQRPmaNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:98:53:5a:74:27:0f:4c:ec:9e:d3:e9:3f:c3:22:26:2d:25: 6b:ff:e5:25:82:1c:0d:19:6c:4a:75:b7:49:71:5c:3a:c1:c9: f5:19:78:49:69:10:d1:1c:a1:9d:8c:27:fd:88:9b:cb:55:58: 46:e6:88:ce:54:c2:f0:50:fc:31:56:b4:0c:1a:e0:c1:df:3a: 71:d6:90:92:0b:d2:c1:5b:61:16:8b:3d:22:62:33:89:8f:0e: db:ad:2c:84:1f:b5:64:6b:2b:06:1b:ba:9e:1e:ef:b1:91:ba: 48:22:6d:6f:58:2a:1f:0d:97:a6:d0:1c:5a:dc:25:a2:07:c3: a8:56:02:c6:ec:63:89:0f:6d:03:ca:c7:5a:fe:60:eb:31:fd: b9:79:d9:8c:40:1c:1d:e7:97:01:51:41:9a:96:a4:a7:c2:e9: 4c:88:91:49:cd:0c:f5:27:55:42:96:b7:69:a8:1e:36:97:1f: 47:43:ef:9e:9c:78:32:dc:d5:b8:cf:a9:af:5e:54:ed:78:6f: 25:e4:fc:82:ca:ca:53:47:0a:1a:5c:c5:ee:6c:6a:46:00:a3: 8e:6c:e2:28:42:46:f6:2d:84:0f:ca:ca:a4:6a:64:8e:f4:e4: 5c:8d:2b:c3:e5:00:54:04:27:ef:30:95:6d:fb:53:e7:bf:8c: 5e:4e:0d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ2NEYxMTAvBgNVBAUTKEVDNzA1QjJBRDZGQjEzRkQ2RkM0MjE0Qjk3NzI3MDQx MTNFNjY4RDcwHhcNMjUwODA0MjAwODA4WhcNMjUwODExMjAwODA4WjAYMRYwFAYD VQQDEw02ODkxMTMyOC1mZDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGckpQCWdhrOy8wGgfPuCy/+ccnJHhnbwaFcQo8ZBQEM1E+2U64vBhjBwJum 5I1hZe+MY3zjUIlYQ+frOHfnlQN3A9SdrNJdDWpQUkdm2vEkS0tFj9aDApMjWS0r 0CMesQZ7ZsGRDzUKF5Xy3ri5PzB5XpEzLh1PInUesvCWVUcjJEmp7UxW/sXkNb2S Pji/DCPzKjAwtudQfkwaIrK2vHjE6Cd/tv3OLa3uS7M4WPWnT46fNb9bHY62AJsR 8SI3LPcTfGW+SgSDrxGIlZ++vuW6U013yw2co3F32eBwQ3lkiiIGrd+3N1Bls61V BECC783zYT15drPgKDX4E2Q/oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ1nlRLH QjO3bvMxXpiR8fZwBSOpMB8GA1UdIwQYMBaAFOxwWyrW+xP9b8QhS5dycEET5mjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDY0Ri9GMTE1QjY3MjdE RUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0VfMXZ4Q0ZMbDNKd1FSUG1h TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdIQmJLdGI3RV8xdnhDRkxsM0p3UVJQbWFOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDY0Ri9GMTE1QjY3MjdERUQxMUVBOUE1Q0NDNEJDNEY5QUUwMi83SEJiS3RiN0Vf MXZ4Q0ZMbDNKd1FSUG1hTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBemFNadCcPTOye0+k/wyImLSVr/+UlghwNGWxKdbdJcVw6wcn1GXhJ aRDRHKGdjCf9iJvLVVhG5ojOVMLwUPwxVrQMGuDB3zpx1pCSC9LBW2EWiz0iYjOJ jw7brSyEH7VkaysGG7qeHu+xkbpIIm1vWCofDZem0Bxa3CWiB8OoVgLG7GOJD20D ysda/mDrMf25edmMQBwd55cBUUGalqSnwulMiJFJzQz1J1VClrdpqB42lx9HQ++e nHgy3NW4z6mvXlTteG8l5PyCyspTRwoaXMXubGpGAKOObOIoQkb2LYQPysqkamSO 9ORcjSvD5QBUBCfvMJVt+1Pnv4xeTg38 -----END CERTIFICATE-----Generated at Wed Aug 6 05:28:24 2025 by rpki-client