$ rpki-client -vvf rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft File: 7knhDcoGuBY3lASCqMSKzvukTT8.mft (raw, json) Hash identifier: Ri4/E2pYtGYl9+PGBD1nuKa0wGEy+HfLzW8seCzTk8k= Subject key identifier: C7:58:01:54:E9:47:E3:22:55:B6:80:9C:7A:97:A4:38:B3:40:6D:A9 Authority key identifier: EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F Certificate issuer: /CN=A918E76B/serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Certificate serial: 0990 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft Manifest number: 0989 Signing time: Fri 08 Aug 2025 20:25:47 +0000 Manifest this update: Fri 08 Aug 2025 20:25:46 +0000 Manifest next update: Fri 15 Aug 2025 20:25:46 +0000 Files and hashes: 1: 7knhDcoGuBY3lASCqMSKzvukTT8.crl (hash: DWaWNjJAgYhiaJJKJE9jmCp3Kg6RObAS/xNkSg84mII=) 2: DD726152945311EAB9A9B971C4F9AE02.roa (hash: y29+eLqwD1TM2B3iSaNDq0mQUyWoEIqAhmsup5cKXZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2448 (0x990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E76B, serialNumber=EE49E10DCA06B81637940482A8C48ACEFBA44D3F Validity Not Before: Aug 8 20:25:46 2025 GMT Not After : Aug 15 20:25:46 2025 GMT Subject: CN=68965d4a-679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:2b:fa:18:0c:e8:fd:ad:b8:5f:db:29:ef: d9:03:32:49:11:2f:19:d4:49:e1:0f:4f:52:98:b9: ba:c4:90:18:2d:a3:b5:bb:d2:7b:d6:66:25:90:9f: 36:4c:0f:b2:48:83:e8:31:1b:14:f3:eb:91:0a:a3: 33:72:f8:0a:93:3d:e9:9e:2e:2a:8b:f4:65:30:7f: 97:66:5f:7d:23:26:ac:b9:62:fd:f8:d4:01:83:c1: 66:e3:1c:77:4c:46:6a:c9:6e:82:9d:7c:84:db:88: 8e:ad:70:90:3c:c9:88:f5:04:a3:29:99:f0:e1:2b: 24:82:7d:e7:97:93:84:16:05:80:63:aa:f4:0f:dc: 7c:04:b4:e2:6c:10:5b:e6:bc:66:23:67:c7:8e:eb: c9:46:52:14:d9:ba:0b:ec:a1:d9:79:1f:fd:1e:b0: fb:da:5c:de:13:56:69:78:78:e9:d6:a7:ff:07:43: 91:8b:14:0a:b8:7c:02:b4:e2:15:c6:68:b6:d1:15: 9a:57:18:1d:c8:97:06:c6:53:3b:e6:29:50:d0:e5: 9c:17:ff:f4:54:73:a5:10:29:10:13:38:d6:44:44: 87:30:04:c8:5f:b1:0f:e6:93:b8:a9:b3:af:58:ab: 58:ff:cf:c0:f9:78:45:cd:02:69:fb:b2:42:99:fb: 83:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:58:01:54:E9:47:E3:22:55:B6:80:9C:7A:97:A4:38:B3:40:6D:A9 X509v3 Authority Key Identifier: keyid:EE:49:E1:0D:CA:06:B8:16:37:94:04:82:A8:C4:8A:CE:FB:A4:4D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7knhDcoGuBY3lASCqMSKzvukTT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E76B/BF183232945211EA806E6970C4F9AE02/7knhDcoGuBY3lASCqMSKzvukTT8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:93:84:3a:9b:43:14:65:da:c1:86:d5:ba:45:16:35:f2:7b: 88:ad:98:94:30:b6:59:ee:79:cd:60:45:13:f1:2d:04:2a:91: fd:68:9e:83:75:05:b1:11:de:90:ab:51:d2:88:4c:89:f9:ce: 9f:fa:85:29:fa:e1:a2:e2:86:5c:62:86:ad:c9:d8:92:2b:7b: 29:75:35:c2:13:07:59:06:18:be:58:4c:b0:09:04:f5:51:e3: ba:0e:7e:f6:d1:df:4f:f1:6b:34:ff:2f:13:7f:49:3e:8b:13: cc:06:e5:fb:bd:d4:85:d0:4f:c2:3e:91:90:32:40:57:e0:d8: 60:6b:5b:20:61:5c:2e:84:52:f0:f2:75:51:a4:84:24:e0:22: 41:f8:34:fa:c1:fd:5c:50:08:ea:01:58:82:03:ce:84:a6:97: f0:4c:ae:51:5e:25:03:42:f0:15:06:8f:59:ec:7f:79:69:86: 5e:5b:84:f4:86:02:66:01:26:f7:8d:6d:3f:e3:0d:24:23:3d: c1:dc:6b:de:4c:79:57:7a:22:be:da:f6:12:ef:64:4f:d8:f3: 32:2d:3a:8e:4e:9c:6c:96:14:d4:ed:96:e3:d4:ee:b0:23:46: 34:d5:db:26:6d:41:4a:98:15:a5:6f:f1:0c:03:e6:e8:c7:66: 2d:6d:f6:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU3NkIxMTAvBgNVBAUTKEVFNDlFMTBEQ0EwNkI4MTYzNzk0MDQ4MkE4QzQ4QUNF RkJBNDREM0YwHhcNMjUwODA4MjAyNTQ2WhcNMjUwODE1MjAyNTQ2WjAYMRYwFAYD VQQDEw02ODk2NWQ0YS02NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwvYr+hgM6P2tuF/bKe/ZAzJJES8Z1EnhD09SmLm6xJAYLaO1u9J71mYlkJ82 TA+ySIPoMRsU8+uRCqMzcvgKkz3pni4qi/RlMH+XZl99IyasuWL9+NQBg8Fm4xx3 TEZqyW6CnXyE24iOrXCQPMmI9QSjKZnw4Sskgn3nl5OEFgWAY6r0D9x8BLTibBBb 5rxmI2fHjuvJRlIU2boL7KHZeR/9HrD72lzeE1ZpeHjp1qf/B0ORixQKuHwCtOIV xmi20RWaVxgdyJcGxlM75ilQ0OWcF//0VHOlECkQEzjWRESHMATIX7EP5pO4qbOv WKtY/8/A+XhFzQJp+7JCmfuDhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMdYAVTp R+MiVbaAnHqXpDizQG2pMB8GA1UdIwQYMBaAFO5J4Q3KBrgWN5QEgqjEis77pE0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc2Qi9CRjE4MzIzMjk0 NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VCWTNsQVNDcU1TS3p2dWtU VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdrbmhEY29HdUJZM2xBU0NxTVNLenZ1a1RUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTc2Qi9CRjE4MzIzMjk0NTIxMUVBODA2RTY5NzBDNEY5QUUwMi83a25oRGNvR3VC WTNsQVNDcU1TS3p2dWtUVDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPk4Q6m0MUZdrBhtW6RRY18nuIrZiUMLZZ7nnNYEUT8S0EKpH9aJ6D dQWxEd6Qq1HSiEyJ+c6f+oUp+uGi4oZcYoatydiSK3spdTXCEwdZBhi+WEywCQT1 UeO6Dn720d9P8Ws0/y8Tf0k+ixPMBuX7vdSF0E/CPpGQMkBX4Nhga1sgYVwuhFLw 8nVRpIQk4CJB+DT6wf1cUAjqAViCA86EppfwTK5RXiUDQvAVBo9Z7H95aYZeW4T0 hgJmASb3jW0/4w0kIz3B3GveTHlXeiK+2vYS72RP2PMyLTqOTpxslhTU7Zbj1O6w I0Y01dsmbUFKmBWlb/EMA+box2Ytbfa6 -----END CERTIFICATE-----Generated at Sun Aug 10 18:51:37 2025 by rpki-client