$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft File: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft (raw, json) Hash identifier: xsNFmEwlI5u0Hwh9D8S4PI7x8SHdukyYZlR1k8SgdIY= Subject key identifier: A9:91:E2:45:29:AE:A1:26:3B:2E:EE:A2:0C:17:2F:EF:82:14:D6:77 Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 Certificate issuer: /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Certificate serial: F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft Manifest number: EE Signing time: Sat 09 Aug 2025 05:46:56 +0000 Manifest this update: Sat 09 Aug 2025 05:46:55 +0000 Manifest next update: Sat 16 Aug 2025 05:46:55 +0000 Files and hashes: 1: 7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl (hash: lsq5vYShZA2r/yNWlZSCNnGZLL3AO9nHGjrRdkMN0+4=) 2: 0913CC14A59911EFBA373D1BC4F9AE02.roa (hash: CwXxvQd82DMK841MpqVGbyP5fEoZfjolyFEgUa5vlRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164B0A, serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33 Validity Not Before: Aug 9 05:46:55 2025 GMT Not After : Aug 16 05:46:55 2025 GMT Subject: CN=6896e0cf-a263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:2e:95:36:8e:47:f3:7a:a8:c4:89:c0:24: 34:a3:bf:29:63:fd:b9:a6:e4:a9:94:f1:17:44:a4: ff:59:84:2f:87:8a:16:4a:0b:12:8d:b5:d4:49:50: bc:bf:5c:37:cb:43:65:d2:d0:b1:f9:0d:96:ff:ef: 6e:87:9b:4a:e2:55:c1:43:15:ae:bf:40:6b:07:8b: ec:e2:86:df:90:ed:9d:be:d9:85:14:cb:b6:1c:40: da:49:09:8f:1c:4b:18:da:4d:51:81:ea:56:94:89: 41:b7:85:ca:10:26:99:04:fd:05:0d:cc:ca:ac:f6: 86:47:a8:9f:77:59:16:51:e2:ce:02:13:21:a4:fc: 6b:af:ec:66:45:99:17:f9:e2:5c:51:a8:09:aa:d8: 7a:13:cc:58:2b:9f:50:16:ec:54:6b:28:19:a0:7d: 4b:b8:90:51:df:b7:86:2c:e3:26:67:c2:37:06:d7: 33:69:be:c5:5f:21:f9:a7:07:29:a1:9f:82:75:40: 05:1d:a6:c9:03:73:8c:9c:0b:2a:50:a8:fa:cd:b9: 9a:e0:c1:d5:81:97:ea:44:95:d4:41:aa:a2:7a:7b: 58:4a:0e:e5:7e:96:7b:7c:84:97:6d:19:31:0a:4b: 18:b0:37:0b:21:4d:34:37:77:11:3e:bb:f7:7a:d7: 4e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:91:E2:45:29:AE:A1:26:3B:2E:EE:A2:0C:17:2F:EF:82:14:D6:77 X509v3 Authority Key Identifier: keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:8e:57:54:40:2e:ee:12:2e:4f:fd:6c:8d:84:c0:f6:e3:40: 1b:d2:7a:a2:96:92:70:35:26:95:2c:39:4a:ac:c6:06:d6:7b: 0f:d7:dd:da:65:c7:fa:a4:89:98:7a:6e:fa:eb:e7:18:b9:b4: fb:83:00:be:c5:dd:f9:76:d0:70:d8:78:47:83:de:31:34:1a: 2d:e5:85:8b:51:44:3f:85:d6:a5:f9:ac:0e:93:27:83:73:dd: 21:41:8e:00:3a:dd:47:3d:a4:86:2b:d5:2d:93:05:4b:ff:7d: f1:5a:15:82:28:46:69:2b:6d:94:dd:fd:74:c1:45:71:b5:dc: 59:fc:c1:4b:6a:69:72:a0:ec:76:8e:a2:8c:93:db:52:ea:19: 02:1f:42:67:c2:f4:20:7c:35:67:12:ac:37:ca:e1:be:90:0b: dc:1c:27:ed:2b:53:c5:90:18:b3:dd:41:22:a8:5d:37:c7:49: 49:c6:7f:9c:a3:ed:c0:da:14:6e:3e:a2:96:0c:dd:94:af:34: 67:13:c2:9b:d5:78:11:12:75:b9:ae:9b:ff:fa:b6:fb:a5:10: 48:4d:e9:f3:10:6d:ff:12:f7:e2:11:c5:a0:eb:15:b7:f7:22: bb:18:8d:29:15:d3:c2:40:e1:57:4c:3e:c0:27:d4:11:d3:19: 2c:4e:1a:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjRCMEExMTAvBgNVBAUTKEVFNEIwNTYxODQzN0YxOTQ4RDkyOTlGOEE0RjkyOUMx ODdEOTdGMzMwHhcNMjUwODA5MDU0NjU1WhcNMjUwODE2MDU0NjU1WjAYMRYwFAYD VQQDEw02ODk2ZTBjZi1hMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJUulTaOR/N6qMSJwCQ0o78pY/25puSplPEXRKT/WYQvh4oWSgsSjbXUSVC8 v1w3y0Nl0tCx+Q2W/+9uh5tK4lXBQxWuv0BrB4vs4obfkO2dvtmFFMu2HEDaSQmP HEsY2k1RgepWlIlBt4XKECaZBP0FDczKrPaGR6ifd1kWUeLOAhMhpPxrr+xmRZkX +eJcUagJqth6E8xYK59QFuxUaygZoH1LuJBR37eGLOMmZ8I3Btczab7FXyH5pwcp oZ+CdUAFHabJA3OMnAsqUKj6zbma4MHVgZfqRJXUQaqientYSg7lfpZ7fISXbRkx CksYsDcLIU00N3cRPrv3etdOXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmR4kUp rqEmOy7uogwXL++CFNZ3MB8GA1UdIwQYMBaAFO5LBWGEN/GUjZKZ+KT5KcGH2X8z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEIwQS80Q0YwRjcwODEy OTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzhaU05rcG40cFBrcHdZZlpm ek0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrc0ZZWVEzOFpTTmtwbjRwUGtwd1lmWmZ6TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NEIwQS80Q0YwRjcwODEyOTIxMUVGQUIxMDY1NjRDNEY5QUUwMi83a3NGWVlRMzha U05rcG40cFBrcHdZZlpmek0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGjldUQC7uEi5P/WyNhMD240Ab0nqilpJwNSaVLDlKrMYG1nsP193a Zcf6pImYem766+cYubT7gwC+xd35dtBw2HhHg94xNBot5YWLUUQ/hdal+awOkyeD c90hQY4AOt1HPaSGK9UtkwVL/33xWhWCKEZpK22U3f10wUVxtdxZ/MFLamlyoOx2 jqKMk9tS6hkCH0JnwvQgfDVnEqw3yuG+kAvcHCftK1PFkBiz3UEiqF03x0lJxn+c o+3A2hRuPqKWDN2UrzRnE8Kb1XgREnW5rpv/+rb7pRBITenzEG3/EvfiEcWg6xW3 9yK7GI0pFdPCQOFXTD7AJ9QR0xksThqA -----END CERTIFICATE-----Generated at Sun Aug 10 18:50:29 2025 by rpki-client