$ rpki-client -vvf rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft File: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft (raw, json) Hash identifier: gweNDzSawWFsi8B2NnnbNyHk/V9rlGmHAkGd+KDLP+0= Subject key identifier: 64:23:11:23:C0:FE:76:20:E8:19:61:2F:D5:30:93:DC:D7:5A:54:30 Authority key identifier: EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F Certificate issuer: /CN=A915E2CC/serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Certificate serial: 032B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft Manifest number: 031A Signing time: Sat 09 Aug 2025 01:46:15 +0000 Manifest this update: Sat 09 Aug 2025 01:46:14 +0000 Manifest next update: Sat 16 Aug 2025 01:46:14 +0000 Files and hashes: 1: 7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl (hash: 5ekdfguJKhLqOmqk7VWWm3240gUjmo11sVMQ+9bc2Qk=) 2: 4D6093C2EAD711ECBF99921CC4F9AE02.roa (hash: LMp5kVNCStiwGpSsrDjiKfBvLER7LLTCwt6mJ3nCrNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 811 (0x32b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E2CC, serialNumber=EC4619A3478AD3BD16AB5668DDD3311E4D2DB22F Validity Not Before: Aug 9 01:46:14 2025 GMT Not After : Aug 16 01:46:14 2025 GMT Subject: CN=6896a867-f177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ee:6c:47:62:17:69:24:96:c8:f4:a9:fe:e2: 0d:5a:b3:da:84:b5:89:3f:b8:31:1d:d2:03:41:c8: 6a:26:b1:b8:19:bd:e8:ad:94:53:52:dc:b5:69:56: c1:f3:60:5b:b6:ab:d5:52:7f:b0:31:e4:02:94:01: ef:a3:f0:46:e8:67:30:4d:02:56:84:41:77:c6:ac: e8:88:47:48:37:52:93:82:f5:63:22:51:71:d6:78: d2:aa:eb:39:b7:3b:a5:73:47:16:df:8b:3c:50:55: 0c:73:38:5a:7d:d9:85:66:4d:1c:44:42:32:5e:a9: 53:54:1d:8d:2e:64:5b:20:ec:24:04:a6:0c:9c:86: 8c:de:fd:d8:b4:5e:6b:2e:87:5b:45:86:4a:5d:16: b6:3e:0f:30:55:10:1e:10:30:e6:e1:99:58:01:40: aa:30:bd:c9:39:d5:df:1d:40:3f:a0:06:e7:c8:2e: e3:c1:d0:2f:a5:d2:87:50:f7:49:8a:5b:bb:5d:5f: 93:2b:22:fd:af:69:e5:f8:24:03:9a:c9:6d:21:84: 4a:61:12:03:4f:cf:a8:0b:63:2a:b7:01:5d:05:5b: 17:51:c5:7e:ea:18:a5:bf:f2:e8:d5:45:1a:e5:3e: 0f:a3:61:73:e9:59:17:ae:0a:46:73:c0:6b:c0:42: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:23:11:23:C0:FE:76:20:E8:19:61:2F:D5:30:93:DC:D7:5A:54:30 X509v3 Authority Key Identifier: keyid:EC:46:19:A3:47:8A:D3:BD:16:AB:56:68:DD:D3:31:1E:4D:2D:B2:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EYZo0eK070Wq1Zo3dMxHk0tsi8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E2CC/AF6765FCE58011EC9B9D2B62C4F9AE02/7EYZo0eK070Wq1Zo3dMxHk0tsi8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:46:3f:6b:e1:42:b1:9e:37:91:84:9d:b6:51:05:89:00: a3:47:b7:7f:b7:50:ea:be:62:e8:6d:9c:bf:fa:a9:c2:20:1d: 40:c6:a8:87:74:15:ef:83:2c:9d:b3:48:5b:ab:d6:89:70:06: b3:66:e7:d5:e4:9a:25:ad:15:ab:c2:ab:b9:16:4a:da:a1:73: 7b:f1:35:eb:2d:1e:56:11:67:d6:53:da:90:3d:0d:b8:7b:d6: 13:33:8a:f2:e6:7c:7f:cf:4b:2c:ed:1b:00:04:5e:2f:89:9c: 0b:27:06:f8:9d:67:f3:8a:15:34:dc:8a:39:4c:de:13:f9:ef: b1:10:92:92:16:1e:ab:59:55:9e:ff:11:71:86:5b:7b:28:6e: d2:dd:36:41:63:e2:f3:16:39:20:27:1c:a7:21:02:f6:fc:b4: 58:14:5b:30:1c:df:8e:45:b4:27:22:62:19:06:59:36:8f:ea: e2:9e:ae:1d:9e:3e:1b:66:79:a5:ae:b4:ef:21:46:17:36:36: 1b:2c:77:05:28:29:25:c4:6b:db:e5:b2:bc:6f:a4:fb:00:89: fb:1c:57:06:cd:3b:c6:f0:a8:bf:2f:c1:e6:f3:da:ac:85:c9: 15:ea:bd:4c:3f:7b:58:20:68:ed:59:f0:54:57:eb:a2:66:89: da:30:e3:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUUyQ0MxMTAvBgNVBAUTKEVDNDYxOUEzNDc4QUQzQkQxNkFCNTY2OERERDMzMTFF NEQyREIyMkYwHhcNMjUwODA5MDE0NjE0WhcNMjUwODE2MDE0NjE0WjAYMRYwFAYD VQQDEw02ODk2YTg2Ny1mMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAou5sR2IXaSSWyPSp/uINWrPahLWJP7gxHdIDQchqJrG4Gb3orZRTUty1aVbB 82BbtqvVUn+wMeQClAHvo/BG6GcwTQJWhEF3xqzoiEdIN1KTgvVjIlFx1njSqus5 tzulc0cW34s8UFUMczhafdmFZk0cREIyXqlTVB2NLmRbIOwkBKYMnIaM3v3YtF5r LodbRYZKXRa2Pg8wVRAeEDDm4ZlYAUCqML3JOdXfHUA/oAbnyC7jwdAvpdKHUPdJ ilu7XV+TKyL9r2nl+CQDmsltIYRKYRIDT8+oC2MqtwFdBVsXUcV+6hilv/Lo1UUa 5T4Po2Fz6VkXrgpGc8BrwELDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGQjESPA /nYg6BlhL9Uwk9zXWlQwMB8GA1UdIwQYMBaAFOxGGaNHitO9FqtWaN3TMR5NLbIv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTJDQy9BRjY3NjVGQ0U1 ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3MFdxMVpvM2RNeEhrMHRz aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFWVpvMGVLMDcwV3ExWm8zZE14SGswdHNpOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTJDQy9BRjY3NjVGQ0U1ODAxMUVDOUI5RDJCNjJDNEY5QUUwMi83RVlabzBlSzA3 MFdxMVpvM2RNeEhrMHRzaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0C0Y/a+FCsZ43kYSdtlEFiQCjR7d/t1DqvmLobZy/+qnCIB1AxqiH dBXvgyyds0hbq9aJcAazZufV5JolrRWrwqu5FkraoXN78TXrLR5WEWfWU9qQPQ24 e9YTM4ry5nx/z0ss7RsABF4viZwLJwb4nWfzihU03Io5TN4T+e+xEJKSFh6rWVWe /xFxhlt7KG7S3TZBY+LzFjkgJxynIQL2/LRYFFswHN+ORbQnImIZBlk2j+rinq4d nj4bZnmlrrTvIUYXNjYbLHcFKCklxGvb5bK8b6T7AIn7HFcGzTvG8Ki/L8Hm89qs hckV6r1MP3tYIGjtWfBUV+uiZonaMOPJ -----END CERTIFICATE-----Generated at Sat Aug 9 14:27:29 2025 by rpki-client