$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft File: P7GNifrzGI3OWQ98SJB3lh-CqVc.mft (raw, json) Hash identifier: WY/+/hCYdphvto79pSjS7s9cw7roh+9K0Plaw82Xo3I= Subject key identifier: 65:D3:1D:A7:2B:43:B7:04:F7:B9:F0:EB:F3:6E:B0:8C:0F:95:AE:8E Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2B08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft Manifest number: 2AD9 Signing time: Wed 06 Aug 2025 15:38:53 +0000 Manifest this update: Wed 06 Aug 2025 15:38:52 +0000 Manifest next update: Wed 13 Aug 2025 15:38:52 +0000 Files and hashes: 1: P7GNifrzGI3OWQ98SJB3lh-CqVc.crl (hash: pLb/qeTL/PgSjf6pUPFEBufENf6+0ciWsQ9USAmUojs=) 2: B0D1C39A182511EABDE3E142C4F9AE02.roa (hash: +HLe66PXx2PeHfF3w62lv44BzlqBqje8fJ2L8YnpkrU=) 3: 6FEF4E442DE011EA853E2328C4F9AE02.roa (hash: W6zfrwj6/OqirsYiKLU78RB1FM66HD+HpTrmcoXxfW0=) 4: 5DE5F5603D2311F0BC3F7332C4F9AE02.roa (hash: Gj/dQfmDGUWDK4XHV01NkbElb3DXkLPBPWk0YD6hwjM=) 5: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (hash: JIxsUWoaA8dqs4H846TBR0QXM7ZNHktOJjX2Kny5hR4=) 6: 7523EB28671811F0B26A8C1AC4F9AE02.roa (hash: ppGKOWraeOF8KBxlm/qgPAfA6uqwS+C7Tk6GCScwyjk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11016 (0x2b08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Aug 6 15:38:52 2025 GMT Not After : Aug 13 15:38:52 2025 GMT Subject: CN=6893770c-7ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:dd:bd:ed:a1:8c:20:e2:f6:1c:c4:d4:9a: bd:e4:3b:06:cc:6c:38:7d:df:7d:e7:af:4b:2a:36: 24:09:12:c8:1c:21:bc:87:62:b4:f9:f2:42:7a:9a: 72:a7:d7:ad:8d:6e:2c:5c:b2:6d:ef:d2:57:c3:b9: 7b:11:59:46:0c:59:f3:02:10:bd:bd:03:35:f5:d6: 59:0a:21:f9:46:e6:19:ec:83:fd:16:0e:6f:2a:62: 57:6a:88:67:fb:a0:c7:cf:6c:35:ed:66:1c:eb:1f: 9a:da:8a:76:51:57:a3:cd:34:00:f2:a1:e6:36:f9: 1d:a3:94:8a:05:82:9a:82:03:85:7b:92:e0:8b:8c: 11:33:8d:69:4f:b2:1e:10:4e:d1:4e:1e:3d:85:5f: 15:f5:9c:ac:c5:0c:2c:21:ce:e0:b2:6b:d2:3e:6a: 89:46:24:b1:cb:13:eb:11:3f:ab:ba:d0:14:d8:4b: f6:9a:55:d0:2e:fa:14:b3:57:47:39:72:5f:92:c3: 3f:a9:15:0f:cd:d9:54:be:88:05:35:3d:f6:83:e3: b7:b3:07:08:cf:b1:28:2a:c6:d7:2d:8f:37:eb:be: fe:80:65:9e:d7:a8:5f:73:94:51:9f:ca:35:ad:b1: b3:d3:9e:ef:6e:a1:dc:2c:48:71:b3:c1:c1:31:a4: 4e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D3:1D:A7:2B:43:B7:04:F7:B9:F0:EB:F3:6E:B0:8C:0F:95:AE:8E X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e5:de:67:a2:4a:a4:92:02:bb:dc:bc:90:c8:a2:20:ac:44: e1:16:07:8d:8f:a5:71:aa:ff:cb:6d:a0:3e:ab:55:b0:2a:2b: 0a:eb:8f:d4:b6:59:f8:bf:59:92:de:6e:be:21:2c:37:3b:5f: 40:a2:50:00:29:31:1d:05:4e:3e:cf:93:4a:a4:35:2a:ce:df: bc:f2:8b:9a:36:98:bc:31:c4:e3:cd:0f:c8:8e:cd:1a:55:5c: ab:46:ab:44:4e:9f:3e:36:db:5e:f7:49:82:d3:d4:a4:eb:46: ca:35:de:11:9d:6e:f4:b4:b9:3c:bb:6b:ab:fc:32:dd:cb:81: a6:52:c2:f5:fc:e5:43:1b:a4:e3:2e:d3:18:8f:e9:96:9f:8d: 1b:6c:f5:59:36:22:52:f3:82:c8:dd:63:68:28:cc:2d:32:47: 16:3a:c0:08:eb:db:e4:89:1f:86:5d:15:4d:23:c1:a1:99:c8: a1:37:5b:ce:f0:e5:8a:c9:6a:28:04:6e:67:12:20:6c:9f:2c: 60:c1:1b:35:ff:9c:d3:53:35:5c:d9:7a:c4:52:e4:d7:f5:b8: 9c:e6:4e:fe:00:fa:e0:34:df:c1:0c:3a:22:0b:15:1f:1a:ec: 9d:ca:a5:7b:1e:c0:61:53:ae:42:38:55:be:fa:8c:c2:e4:bd: 85:66:d4:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjUwODA2MTUzODUyWhcNMjUwODEzMTUzODUyWjAYMRYwFAYD VQQDEw02ODkzNzcwYy03Y2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMrdve2hjCDi9hzE1Jq95DsGzGw4fd99569LKjYkCRLIHCG8h2K0+fJCeppy p9etjW4sXLJt79JXw7l7EVlGDFnzAhC9vQM19dZZCiH5RuYZ7IP9Fg5vKmJXaohn +6DHz2w17WYc6x+a2op2UVejzTQA8qHmNvkdo5SKBYKaggOFe5Lgi4wRM41pT7Ie EE7RTh49hV8V9ZysxQwsIc7gsmvSPmqJRiSxyxPrET+rutAU2Ev2mlXQLvoUs1dH OXJfksM/qRUPzdlUvogFNT32g+O3swcIz7EoKsbXLY83677+gGWe16hfc5RRn8o1 rbGz057vbqHcLEhxs8HBMaRO5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXTHacr Q7cE97nw6/NusIwPla6OMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjIxNC9CN0Y4MTk1ODMzMUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJ M09XUTk4U0pCM2xoLUNxVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+5d5nokqkkgK73LyQyKIgrEThFgeNj6Vxqv/LbaA+q1WwKisK64/U tln4v1mS3m6+ISw3O19AolAAKTEdBU4+z5NKpDUqzt+88ouaNpi8McTjzQ/Ijs0a VVyrRqtETp8+Ntte90mC09Sk60bKNd4RnW70tLk8u2ur/DLdy4GmUsL1/OVDG6Tj LtMYj+mWn40bbPVZNiJS84LI3WNoKMwtMkcWOsAI69vkiR+GXRVNI8GhmcihN1vO 8OWKyWooBG5nEiBsnyxgwRs1/5zTUzVc2XrEUuTX9bic5k7+APrgNN/BDDoiCxUf GuydyqV7HsBhU65COFW++ozC5L2FZtT5 -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:35 2025 by rpki-client