$ rpki-client -vvf rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft File: 7ulOOvQOrIyjbcMuSeREbs-zNQU.mft (raw, json) Hash identifier: aYa4w1YE7U4THg7HeHEQkvGIdBTJkVV1hDqbTOVM/eY= Subject key identifier: 6C:42:4B:3A:3D:3A:49:B4:75:26:04:B7:16:6D:E7:55:50:95:19:14 Authority key identifier: EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 Certificate issuer: /CN=A9161FF7/serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Certificate serial: 124A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft Manifest number: 123A Signing time: Sun 10 Aug 2025 17:07:27 +0000 Manifest this update: Sun 10 Aug 2025 17:07:26 +0000 Manifest next update: Sun 17 Aug 2025 17:07:26 +0000 Files and hashes: 1: 7ulOOvQOrIyjbcMuSeREbs-zNQU.crl (hash: tVM4PtypC7zViFb3FxzuQ1kcJ1msTZJm42+iU0mW+/I=) 2: 5EF78FE650FF11F0B4CEA331C4F9AE02.roa (hash: Z62B0jnHVvY2jzsG/dfRq87dnZ8pUku0hBYOhlqYi64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4682 (0x124a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161FF7, serialNumber=EEE94E3AF40EAC8CA36DC32E49E4446ECFB33505 Validity Not Before: Aug 10 17:07:26 2025 GMT Not After : Aug 17 17:07:26 2025 GMT Subject: CN=6898d1ce-3a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:a0:b7:13:3a:f5:49:15:74:e5:2a:b0:4b: e6:4c:3d:d6:8b:30:fc:99:17:be:5c:5e:95:90:2a: 17:04:8b:59:08:da:7f:62:79:cc:78:96:ef:98:20: e4:c4:55:eb:a4:ca:95:45:f6:7b:6b:b6:f7:7a:5b: d4:1f:4b:5b:53:3a:98:c8:03:1f:0d:ff:5a:bc:97: 06:a5:1d:5a:7b:26:4a:b0:93:29:2f:39:0f:31:e0: 75:74:18:c7:c3:ad:ce:ba:c8:6f:ba:eb:da:2f:d2: 20:5b:cc:56:84:04:2a:48:63:1e:6f:25:f1:9e:84: 5c:9a:5b:7d:a2:96:0a:d8:ce:47:cb:5e:cf:db:dc: 2c:b8:3b:f4:03:2f:d7:28:69:09:eb:d7:a5:17:45: e2:6d:43:db:7b:29:16:c2:5b:ab:12:d9:8c:55:8f: d1:07:d3:64:f2:cc:7e:59:1d:67:f4:86:d8:36:59: c5:59:4a:d9:4e:a4:17:9a:1d:65:33:22:d0:ec:1f: c4:ce:b8:3a:f0:1c:eb:54:9b:ca:11:4c:ab:04:d0: f6:59:f9:bd:4b:3e:1b:b6:4c:c3:aa:9f:9d:ac:d1: 8f:d9:1c:69:ef:aa:44:46:64:5a:e1:f3:8f:6a:b2: 65:de:6d:f3:04:67:a4:84:96:67:e9:3c:8a:90:4b: ce:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:4B:3A:3D:3A:49:B4:75:26:04:B7:16:6D:E7:55:50:95:19:14 X509v3 Authority Key Identifier: keyid:EE:E9:4E:3A:F4:0E:AC:8C:A3:6D:C3:2E:49:E4:44:6E:CF:B3:35:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ulOOvQOrIyjbcMuSeREbs-zNQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161FF7/21862C64E0C011E89E9BFE15C4F9AE02/7ulOOvQOrIyjbcMuSeREbs-zNQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:57:8e:e5:09:c0:fb:04:33:ed:81:46:7e:44:a5:35:ff:f0: e1:c0:e0:07:df:7c:b6:3b:15:dd:39:27:6b:78:ee:a5:ac:46: 2d:dd:da:22:b3:b8:34:10:a7:e6:38:f3:8e:ab:fd:5d:75:50: 64:07:88:e7:e4:97:98:18:c4:e8:31:52:14:40:99:3c:4f:dd: 96:bf:90:23:59:7b:f9:42:83:16:0e:6a:9e:a9:04:67:2b:47: d9:75:7b:b5:4f:89:3a:87:ad:2b:ff:c0:0b:aa:b7:66:ab:59: dd:02:1b:32:91:c1:70:94:0a:2d:89:ca:f6:a0:2e:94:78:d0: 23:7b:9f:c6:a4:d0:60:c3:a3:61:12:a7:b5:6b:47:41:6c:e0: b4:cf:cc:cf:6a:02:37:be:96:fe:32:95:7b:89:63:5b:7c:c6: 3b:3c:ac:90:aa:7d:63:5d:1b:a5:1f:d8:fb:8a:a3:c6:66:be: fd:8e:33:c7:a1:ec:a6:87:cd:36:bf:04:d7:3c:f3:80:96:71: 61:d9:23:f1:1a:43:ee:7e:0e:8c:6d:55:ac:9f:c2:88:03:28: ea:00:c1:7f:ca:3d:ca:f9:f1:18:44:7c:aa:b5:fc:78:04:a1: b3:8c:0f:e6:fe:e2:1e:52:98:2b:d0:79:12:96:96:54:cb:74: bf:0b:1a:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjFGRjcxMTAvBgNVBAUTKEVFRTk0RTNBRjQwRUFDOENBMzZEQzMyRTQ5RTQ0NDZF Q0ZCMzM1MDUwHhcNMjUwODEwMTcwNzI2WhcNMjUwODE3MTcwNzI2WjAYMRYwFAYD VQQDEw02ODk4ZDFjZS0zYThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMKgtxM69UkVdOUqsEvmTD3WizD8mRe+XF6VkCoXBItZCNp/YnnMeJbvmCDk xFXrpMqVRfZ7a7b3elvUH0tbUzqYyAMfDf9avJcGpR1aeyZKsJMpLzkPMeB1dBjH w63OushvuuvaL9IgW8xWhAQqSGMebyXxnoRcmlt9opYK2M5Hy17P29wsuDv0Ay/X KGkJ69elF0XibUPbeykWwlurEtmMVY/RB9Nk8sx+WR1n9IbYNlnFWUrZTqQXmh1l MyLQ7B/Ezrg68BzrVJvKEUyrBND2Wfm9Sz4btkzDqp+drNGP2Rxp76pERmRa4fOP arJl3m3zBGekhJZn6TyKkEvORwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGxCSzo9 Okm0dSYEtxZt51VQlRkUMB8GA1UdIwQYMBaAFO7pTjr0DqyMo23DLknkRG7PszUF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUZGNy8yMTg2MkM2NEUw QzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJeWpiY011U2VSRWJzLXpO UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd1bE9PdlFPckl5amJjTXVTZVJFYnMtek5RVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUZGNy8yMTg2MkM2NEUwQzAxMUU4OUU5QkZFMTVDNEY5QUUwMi83dWxPT3ZRT3JJ eWpiY011U2VSRWJzLXpOUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsV47lCcD7BDPtgUZ+RKU1//DhwOAH33y2OxXdOSdreO6lrEYt3doi s7g0EKfmOPOOq/1ddVBkB4jn5JeYGMToMVIUQJk8T92Wv5AjWXv5QoMWDmqeqQRn K0fZdXu1T4k6h60r/8ALqrdmq1ndAhsykcFwlAoticr2oC6UeNAje5/GpNBgw6Nh Eqe1a0dBbOC0z8zPagI3vpb+MpV7iWNbfMY7PKyQqn1jXRulH9j7iqPGZr79jjPH oeymh802vwTXPPOAlnFh2SPxGkPufg6MbVWsn8KIAyjqAMF/yj3K+fEYRHyqtfx4 BKGzjA/m/uIeUpgr0HkSlpZUy3S/Cxrp -----END CERTIFICATE-----Generated at Mon Aug 11 04:30:41 2025 by rpki-client