$ rpki-client -vvf rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft File: C7BDH1UIA338kvd-BrSK7JVR9ls.mft (raw, json) Hash identifier: TiVxlYOzFkNlyW9E1yj5wjtpsvswUud9smz8txZz4mg= Subject key identifier: 2B:7A:10:13:C0:CA:CB:30:C0:74:00:C6:D3:09:55:D9:99:B5:A8:F2 Authority key identifier: 0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B Certificate issuer: /CN=A918C255/serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Certificate serial: 1B18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft Manifest number: 1B11 Signing time: Sun 10 Aug 2025 16:15:52 +0000 Manifest this update: Sun 10 Aug 2025 16:15:52 +0000 Manifest next update: Sun 17 Aug 2025 16:15:52 +0000 Files and hashes: 1: C7BDH1UIA338kvd-BrSK7JVR9ls.crl (hash: 8Xtl8iQS0ptG5Se3rqcXXHOyKhiDfEEiD8qMg0dTgus=) 2: 8E810FBCD46E11E9B37C0539C4F9AE02.roa (hash: /62jKiDxw2Oukb67ZNvZbycxbr1ec0Y/2pAmP4Kn+R8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6936 (0x1b18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C255, serialNumber=0BB0431F5508037DFC92F77E06B48AEC9551F65B Validity Not Before: Aug 10 16:15:52 2025 GMT Not After : Aug 17 16:15:52 2025 GMT Subject: CN=6898c5b8-fd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:35:85:d1:c8:a6:0f:50:22:46:f1:96:55:d1: dc:86:86:50:56:53:8b:6a:f5:6e:b7:88:ca:4f:9c: 30:dc:7d:22:13:84:aa:db:21:f9:7a:03:25:bd:a2: 5b:b6:64:f1:f0:fa:60:04:7b:59:c9:5f:db:32:70: 84:0c:fb:aa:c2:65:43:1c:34:ab:13:2b:b2:63:29: cf:a9:ae:a9:50:56:71:a2:4e:bb:4d:db:1f:ef:7b: fb:03:f6:20:93:a6:7a:f3:3d:c2:42:f7:5e:28:a6: d4:45:22:c7:5b:b5:60:c7:5a:d3:e9:2e:ad:9d:ac: 51:1b:46:69:cf:a4:29:9a:1e:07:37:89:55:e8:51: a5:e1:60:a2:7c:26:77:99:e9:2a:e9:9f:fa:c1:ea: aa:0b:42:03:1c:cd:c7:b4:fb:e8:e6:5e:2a:8b:49: 6c:28:7b:d6:00:c1:3a:44:b8:37:47:5c:7a:74:40: ee:d6:4e:46:cb:37:f0:17:4d:17:3f:dc:74:a3:49: 87:1a:3a:bf:4e:82:65:13:c3:26:72:10:b9:65:12: 60:b4:cb:4c:10:81:88:53:41:19:4c:5f:dc:95:80: 5b:40:5f:76:cd:2e:46:46:04:a7:e7:e9:62:fe:32: e6:86:f4:5f:75:7e:c8:d8:7d:61:49:40:6f:97:bc: 0d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7A:10:13:C0:CA:CB:30:C0:74:00:C6:D3:09:55:D9:99:B5:A8:F2 X509v3 Authority Key Identifier: keyid:0B:B0:43:1F:55:08:03:7D:FC:92:F7:7E:06:B4:8A:EC:95:51:F6:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7BDH1UIA338kvd-BrSK7JVR9ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C255/BE62DC9E232F11E7A54B4266C4F9AE02/C7BDH1UIA338kvd-BrSK7JVR9ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ed:f9:09:a7:8e:1e:a0:7c:b2:5b:3c:01:27:09:b9:87:d9: a4:21:da:e1:59:d2:60:fc:b8:1d:1b:81:04:c4:d9:4b:cd:8d: 28:0c:83:a1:96:95:30:ec:f4:80:23:a8:4d:60:cc:46:f0:04: b1:23:d2:6f:e8:c4:6d:c2:92:27:79:74:22:67:e3:27:e8:a8: a8:f8:25:52:31:7d:06:a6:50:cd:99:23:40:4a:7b:2f:c2:27: c5:27:03:c1:51:71:fa:b8:eb:98:08:7c:e9:f1:bd:fd:64:85: b9:77:20:dc:bd:d5:9c:9b:0e:01:de:84:4b:ee:e2:9f:6c:47: b1:6b:45:0a:f5:a2:c1:57:17:eb:36:cd:7e:2d:ea:f4:2e:32: ca:97:97:f2:3f:47:58:d0:b0:08:cf:3c:f5:9d:83:5e:4c:de: 0b:41:bd:48:b7:03:9a:8f:91:56:8f:38:6a:6e:10:08:11:d1: 63:b5:ea:6d:b3:f6:3a:11:a3:99:df:5c:2a:41:30:32:d8:05: 5b:91:5d:00:c0:d4:cf:98:87:45:d9:bd:09:56:12:50:4e:77: eb:84:7c:a3:be:30:6e:b0:50:e5:cf:0f:50:d2:aa:5a:d2:79: e2:a6:ac:49:a4:54:ca:b0:d7:5e:cc:61:17:bd:28:d5:36:c3: b4:e7:7e:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEMyNTUxMTAvBgNVBAUTKDBCQjA0MzFGNTUwODAzN0RGQzkyRjc3RTA2QjQ4QUVD OTU1MUY2NUIwHhcNMjUwODEwMTYxNTUyWhcNMjUwODE3MTYxNTUyWjAYMRYwFAYD VQQDEw02ODk4YzViOC1mZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zWF0cimD1AiRvGWVdHchoZQVlOLavVut4jKT5ww3H0iE4Sq2yH5egMlvaJb tmTx8PpgBHtZyV/bMnCEDPuqwmVDHDSrEyuyYynPqa6pUFZxok67Tdsf73v7A/Yg k6Z68z3CQvdeKKbURSLHW7Vgx1rT6S6tnaxRG0Zpz6Qpmh4HN4lV6FGl4WCifCZ3 mekq6Z/6weqqC0IDHM3HtPvo5l4qi0lsKHvWAME6RLg3R1x6dEDu1k5GyzfwF00X P9x0o0mHGjq/ToJlE8MmchC5ZRJgtMtMEIGIU0EZTF/clYBbQF92zS5GRgSn5+li /jLmhvRfdX7I2H1hSUBvl7wNBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt6EBPA ysswwHQAxtMJVdmZtajyMB8GA1UdIwQYMBaAFAuwQx9VCAN9/JL3fga0iuyVUfZb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzI1NS9CRTYyREM5RTIz MkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEzMzhrdmQtQnJTSzdKVlI5 bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M3QkRIMVVJQTMzOGt2ZC1CclNLN0pWUjlscy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzI1NS9CRTYyREM5RTIzMkYxMUU3QTU0QjQyNjZDNEY5QUUwMi9DN0JESDFVSUEz MzhrdmQtQnJTSzdKVlI5bHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA07fkJp44eoHyyWzwBJwm5h9mkIdrhWdJg/LgdG4EExNlLzY0oDIOh lpUw7PSAI6hNYMxG8ASxI9Jv6MRtwpIneXQiZ+Mn6Kio+CVSMX0GplDNmSNASnsv wifFJwPBUXH6uOuYCHzp8b39ZIW5dyDcvdWcmw4B3oRL7uKfbEexa0UK9aLBVxfr Ns1+Ler0LjLKl5fyP0dY0LAIzzz1nYNeTN4LQb1ItwOaj5FWjzhqbhAIEdFjtept s/Y6EaOZ31wqQTAy2AVbkV0AwNTPmIdF2b0JVhJQTnfrhHyjvjBusFDlzw9Q0qpa 0nnipqxJpFTKsNdezGEXvSjVNsO0537i -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:39 2025 by rpki-client