$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft File: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft (raw, json) Hash identifier: eQQpa7abOlr9Af1akPPv6lKLFoETiwRos/+ci/KXQ40= Subject key identifier: 0D:E9:FB:D7:61:D7:3F:92:EA:77:B5:4E:55:43:BF:8E:61:0E:02:A6 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 03BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft Manifest number: 03B4 Signing time: Sat 09 Aug 2025 01:15:24 +0000 Manifest this update: Sat 09 Aug 2025 01:15:24 +0000 Manifest next update: Sat 16 Aug 2025 01:15:24 +0000 Files and hashes: 1: 7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl (hash: MGYjXsPZi1YAhxVjvoO12IGottMO497JPZuDiSlP5Eo=) 2: 5895821AB62611ECB410C81DC4F9AE02.roa (hash: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 955 (0x3bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Aug 9 01:15:24 2025 GMT Not After : Aug 16 01:15:24 2025 GMT Subject: CN=6896a12c-00e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:66:b1:44:a0:57:99:1a:f3:7e:80:eb:2f:d7: 02:47:ba:44:7c:78:70:90:72:69:31:92:84:60:7d: 45:4c:2b:d4:5a:57:9b:d8:90:68:07:18:5b:f7:7e: db:a8:9a:d0:86:81:4d:bf:eb:0f:36:7a:09:71:2c: 40:eb:66:5c:31:93:be:c2:49:4a:7e:83:2c:3a:10: 06:73:f4:cc:4a:31:58:8e:38:cc:09:83:8a:8e:53: a2:6b:98:8c:b3:43:10:0f:a8:14:f0:25:e2:4a:06: da:2e:8e:73:4c:32:51:72:7a:25:b0:44:55:a4:e2: 74:ac:53:33:bd:98:1a:cf:d1:0d:a6:2b:98:fe:cd: 79:16:ea:3a:fa:3b:b8:01:09:60:59:a3:d8:04:73: 95:46:2b:d7:13:20:87:1e:3f:88:2d:6d:c9:b1:91: 75:93:94:98:b2:a1:3a:92:d1:64:4a:b3:d8:be:e1: 6b:cd:47:16:32:6d:d8:87:95:cf:ec:7e:c8:6a:f4: 6b:76:11:e4:a1:c9:48:19:26:d6:0a:f4:4b:3a:1e: 68:6d:f0:2e:c1:64:a1:80:15:f5:83:aa:43:4e:b5: 68:13:ac:bb:a4:62:d3:63:af:92:16:15:53:8d:33: 0c:eb:2e:9c:71:a8:17:a1:3d:8d:ce:29:6f:12:be: 70:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:E9:FB:D7:61:D7:3F:92:EA:77:B5:4E:55:43:BF:8E:61:0E:02:A6 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:4b:c3:16:f8:8d:84:a7:d1:f8:10:ef:f4:95:b6:db:f6:06: 45:82:fc:c8:1d:06:17:8c:8f:ee:12:19:2d:fd:c5:3f:ec:69: 5f:15:83:1d:73:9d:3e:4f:57:bc:e8:68:c9:07:b2:75:55:1b: 71:44:ed:d1:3b:f6:ef:66:42:51:38:38:88:f2:8f:f4:9d:65: f3:33:40:24:d2:a5:77:58:21:6c:75:44:bd:bd:5e:5e:6a:96: a3:7d:1a:90:ba:19:8d:31:78:d8:05:06:54:9a:a6:ad:e4:e6: 9c:15:6e:5b:6a:3e:45:9a:aa:28:65:22:7d:9f:f2:22:94:f3: 34:33:89:a8:39:ed:6d:38:30:93:9a:f4:c0:c2:a7:02:1e:86: ef:94:d6:cb:76:73:a9:8b:75:90:0a:af:c0:6d:0f:8d:c3:b5: 35:44:d8:e8:6b:13:3a:e3:40:ea:a9:03:11:7c:11:c9:3a:75: 03:84:b1:1b:d6:f7:a3:d0:2c:fe:44:d0:c3:de:de:5d:d5:ff: ba:35:77:97:bc:1b:ca:c8:04:98:6c:3f:1e:3d:56:cf:ab:c8: 1c:60:2d:15:83:e0:83:13:33:44:b5:5d:4e:68:50:3e:97:0c: 33:ba:a9:46:50:34:ed:ad:97:a2:20:f6:fc:ab:1f:4f:78:77: d3:c3:1a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwODA5MDExNTI0WhcNMjUwODE2MDExNTI0WjAYMRYwFAYD VQQDEw02ODk2YTEyYy0wMGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2axRKBXmRrzfoDrL9cCR7pEfHhwkHJpMZKEYH1FTCvUWleb2JBoBxhb937b qJrQhoFNv+sPNnoJcSxA62ZcMZO+wklKfoMsOhAGc/TMSjFYjjjMCYOKjlOia5iM s0MQD6gU8CXiSgbaLo5zTDJRcnolsERVpOJ0rFMzvZgaz9ENpiuY/s15Fuo6+ju4 AQlgWaPYBHOVRivXEyCHHj+ILW3JsZF1k5SYsqE6ktFkSrPYvuFrzUcWMm3Yh5XP 7H7IavRrdhHkoclIGSbWCvRLOh5obfAuwWShgBX1g6pDTrVoE6y7pGLTY6+SFhVT jTMM6y6ccagXoT2NzilvEr5wWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3p+9dh 1z+S6ne1TlVDv45hDgKmMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUNGMS84NjgzNTUwNkEwMzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlC YjQtQjBZdXRvdl80ZkJYeVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5S8MW+I2Ep9H4EO/0lbbb9gZFgvzIHQYXjI/uEhkt/cU/7GlfFYMd c50+T1e86GjJB7J1VRtxRO3RO/bvZkJRODiI8o/0nWXzM0Ak0qV3WCFsdUS9vV5e apajfRqQuhmNMXjYBQZUmqat5OacFW5baj5FmqooZSJ9n/IilPM0M4moOe1tODCT mvTAwqcCHobvlNbLdnOpi3WQCq/AbQ+Nw7U1RNjoaxM640DqqQMRfBHJOnUDhLEb 1vej0Cz+RNDD3t5d1f+6NXeXvBvKyASYbD8ePVbPq8gcYC0Vg+CDEzNEtV1OaFA+ lwwzuqlGUDTtrZeiIPb8qx9PeHfTwxoZ -----END CERTIFICATE-----Generated at Sun Aug 10 04:20:21 2025 by rpki-client