$ rpki-client -vvf rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft File: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft (raw, json) Hash identifier: BzQPJ+v5auURcRWS/nKT2JYbSwR4WCtfqFlpmL/azQ0= Subject key identifier: 29:AB:A3:7D:01:FE:EA:AB:36:AF:69:D5:46:B3:98:92:FD:36:4C:EF Authority key identifier: F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 Certificate issuer: /CN=A915E402/serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft Manifest number: 07 Signing time: Sat 09 Aug 2025 08:42:34 +0000 Manifest this update: Sat 09 Aug 2025 08:42:34 +0000 Manifest next update: Sat 16 Aug 2025 08:42:34 +0000 Files and hashes: 1: 8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl (hash: AbVwtct+VKk7e67QN8fr/sep107PzS+fmoMFl4siJZ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E402, serialNumber=F0A00C31D091E2457137D2A8EF3267747EDD7C22 Validity Not Before: Aug 9 08:42:34 2025 GMT Not After : Aug 16 08:42:34 2025 GMT Subject: CN=689709fa-1821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:0b:57:b6:2a:71:fa:90:d9:57:6c:de:a8: 49:22:38:87:a4:f3:3e:7f:18:7e:c6:02:3d:db:73: 3e:c5:83:c1:03:5e:bf:08:4f:2f:e5:d9:c5:60:96: ee:4f:99:06:7f:02:81:fe:40:46:ec:7f:c1:a6:33: 53:92:f5:12:76:e6:d9:ed:8d:a5:17:26:41:81:5d: 7b:ce:1a:b5:c0:4a:a5:e8:6f:d7:7e:fa:9b:c6:10: 0a:48:69:b7:2e:99:d4:ac:07:ae:11:57:ab:80:dc: 4c:22:97:f2:ee:0a:35:40:2a:4d:5a:35:76:14:89: 43:70:35:8c:fc:76:f0:21:5e:21:d6:b6:0d:b5:06: cb:83:24:34:31:e9:e9:bd:f5:93:ba:01:dd:98:79: b7:db:3a:87:7b:34:98:74:4d:2a:1c:13:74:10:7e: 4f:35:fc:49:73:b3:f9:4a:45:59:84:d1:04:ab:66: 74:6b:0f:60:70:e3:76:31:e8:9e:86:75:14:3c:5a: a7:e2:02:1a:be:aa:16:db:ea:70:6e:eb:db:62:77: be:49:29:99:99:f3:d1:5c:f9:df:0b:6b:27:7a:cd: b8:92:11:e5:99:08:14:70:88:7f:52:b5:03:1f:82: eb:ad:ac:a3:88:ac:d0:1d:61:60:b0:8f:f1:52:42: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AB:A3:7D:01:FE:EA:AB:36:AF:69:D5:46:B3:98:92:FD:36:4C:EF X509v3 Authority Key Identifier: keyid:F0:A0:0C:31:D0:91:E2:45:71:37:D2:A8:EF:32:67:74:7E:DD:7C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8KAMMdCR4kVxN9Ko7zJndH7dfCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E402/47CB5BC46DF911F0B358F173C4F9AE02/8KAMMdCR4kVxN9Ko7zJndH7dfCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:a4:d4:6c:c3:31:75:78:16:c3:c5:f6:ef:8b:34:c5:46:01: 09:81:ef:92:c0:c9:73:01:c6:06:b1:80:32:14:20:a5:9d:94: 23:82:2a:5d:5e:6f:7f:fa:14:f8:8c:15:46:38:90:3e:2b:bd: 52:20:40:94:53:3a:24:28:53:e1:2c:09:1f:81:d5:95:f8:56: 0d:e8:21:a7:c1:9f:ea:34:d2:3c:ff:06:bf:71:9a:1c:bf:8d: 2f:d6:70:cf:1a:91:a0:ba:7d:2f:ec:53:02:78:a7:e6:6d:2b: e9:33:aa:fd:0a:b1:03:b2:c0:4e:77:41:a3:57:d9:24:2c:5a: 5d:5f:74:94:d4:fe:47:a7:9f:cb:8c:9d:52:74:fd:28:1f:40: 96:09:15:29:c8:60:d9:16:c6:9c:1a:53:9a:12:52:83:a4:2f: b9:b0:a4:43:ed:05:67:00:a1:b8:4f:56:ea:d1:04:72:48:cf: fd:eb:15:97:92:ed:61:15:17:a1:37:ba:4f:b6:8e:03:74:51: 4c:b6:d5:9f:6d:57:83:53:af:85:98:2c:63:43:a1:b4:74:0b: 07:6f:9f:bb:d2:96:f1:b7:9c:b3:e4:17:93:5c:d5:68:b0:20: 32:16:36:84:91:de:2b:07:99:ca:c1:e5:ef:0c:fa:d5:f9:3c: 03:ad:a6:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTQwMjExMC8GA1UEBRMoRjBBMDBDMzFEMDkxRTI0NTcxMzdEMkE4RUYzMjY3NzQ3 RUREN0MyMjAeFw0yNTA4MDkwODQyMzRaFw0yNTA4MTYwODQyMzRaMBgxFjAUBgNV BAMTDTY4OTcwOWZhLTE4MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQChlQtXtipx+pDZV2zeqEkiOIek8z5/GH7GAj3bcz7Fg8EDXr8ITy/l2cVglu5P mQZ/AoH+QEbsf8GmM1OS9RJ25tntjaUXJkGBXXvOGrXASqXob9d++pvGEApIabcu mdSsB64RV6uA3Ewil/LuCjVAKk1aNXYUiUNwNYz8dvAhXiHWtg21BsuDJDQx6em9 9ZO6Ad2YebfbOod7NJh0TSocE3QQfk81/Elzs/lKRVmE0QSrZnRrD2Bw43Yx6J6G dRQ8WqfiAhq+qhbb6nBu69tid75JKZmZ89Fc+d8Layd6zbiSEeWZCBRwiH9StQMf guutrKOIrNAdYWCwj/FSQge9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKaujfQH+ 6qs2r2nVRrOYkv02TO8wHwYDVR0jBBgwFoAU8KAMMdCR4kVxN9Ko7zJndH7dfCIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFNDAyLzQ3Q0I1QkM0NkRG OTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtWeE45S283ekpuZEg3ZGZD SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEtBTU1kQ1I0a1Z4TjlLbzd6Sm5kSDdkZkNJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF NDAyLzQ3Q0I1QkM0NkRGOTExRjBCMzU4RjE3M0M0RjlBRTAyLzhLQU1NZENSNGtW eE45S283ekpuZEg3ZGZDSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCk1GzDMXV4FsPF9u+LNMVGAQmB75LAyXMBxgaxgDIUIKWdlCOCKl1e b3/6FPiMFUY4kD4rvVIgQJRTOiQoU+EsCR+B1ZX4Vg3oIafBn+o00jz/Br9xmhy/ jS/WcM8akaC6fS/sUwJ4p+ZtK+kzqv0KsQOywE53QaNX2SQsWl1fdJTU/kenn8uM nVJ0/SgfQJYJFSnIYNkWxpwaU5oSUoOkL7mwpEPtBWcAobhPVurRBHJIz/3rFZeS 7WEVF6E3uk+2jgN0UUy21Z9tV4NTr4WYLGNDobR0Cwdvn7vSlvG3nLPkF5Nc1Wiw IDIWNoSR3isHmcrB5e8M+tX5PAOtpqk= -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:23 2025 by rpki-client