$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft File: 7MBefFuSR4uMxDst35ql9slCnyE.mft (raw, json) Hash identifier: ixodJgyMe2wn7c/ma5KppiyrVnMlUOB7YM8bJ703XS0= Subject key identifier: F9:06:40:FC:2A:09:6A:58:42:98:76:55:CE:40:85:11:E9:E1:B2:44 Authority key identifier: EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 Certificate issuer: /CN=A9190D0D/serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Certificate serial: 0B16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft Manifest number: 0B10 Signing time: Fri 08 Aug 2025 19:35:20 +0000 Manifest this update: Fri 08 Aug 2025 19:35:19 +0000 Manifest next update: Fri 15 Aug 2025 19:35:19 +0000 Files and hashes: 1: 7MBefFuSR4uMxDst35ql9slCnyE.crl (hash: 4NrkQP3KymSAC7Hmmq6AvhwUkIlC2OLdlnZ6U+VK6I8=) 2: 2791E5FC476811EA943F5A66C4F9AE02.roa (hash: CuzGm85wLiuHxUTSuvnqnZczG2t94ONHHbEKTXpyL78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2838 (0xb16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190D0D, serialNumber=ECC05E7C5B92478B8CC43B2DDF9AA5F6C9429F21 Validity Not Before: Aug 8 19:35:19 2025 GMT Not After : Aug 15 19:35:19 2025 GMT Subject: CN=68965178-3aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:f9:9f:77:9e:10:a5:09:9d:a1:70:3f:83: a4:36:86:9e:29:3f:e4:d0:40:5f:5a:09:04:fc:9d: 10:2f:30:cf:e2:48:4f:6d:de:11:5e:00:b0:69:30: a9:59:fe:cd:c0:d5:a1:c2:aa:67:b2:48:b2:93:f9: 0e:07:01:05:db:29:62:46:55:21:c8:a3:c2:49:fb: 78:80:02:8b:a2:d5:17:ce:92:58:0f:ff:dc:29:c2: a5:41:8c:6e:6f:f2:6d:1d:15:99:9c:12:9f:62:ac: c5:c0:53:5f:e5:0b:79:59:ad:d1:06:e8:93:a8:d3: ee:ba:fa:e1:69:01:15:15:6c:14:7a:1b:38:b6:59: 93:a9:7f:5f:be:74:ad:54:c2:f9:7a:33:2b:c7:d1: ca:30:79:7a:3e:bd:82:cf:ce:a6:e2:90:d5:9b:90: 35:b0:3b:a6:21:d8:df:3e:c0:8f:28:dc:a4:90:1e: 76:6d:f3:aa:6e:ad:6a:48:af:e9:e2:ad:27:a2:a5: 18:c2:6c:52:f8:92:84:15:4a:43:5b:85:49:8a:aa: 90:e3:6f:af:e9:83:8b:b4:39:de:92:b9:54:eb:f5: e3:ef:63:7b:5f:2e:ec:0a:ef:e4:aa:ab:dc:bf:bf: db:fb:d6:57:63:6b:97:fb:54:89:5a:88:5f:44:6d: 89:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:06:40:FC:2A:09:6A:58:42:98:76:55:CE:40:85:11:E9:E1:B2:44 X509v3 Authority Key Identifier: keyid:EC:C0:5E:7C:5B:92:47:8B:8C:C4:3B:2D:DF:9A:A5:F6:C9:42:9F:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MBefFuSR4uMxDst35ql9slCnyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D0D/F037BD08476611EAABB11A65C4F9AE02/7MBefFuSR4uMxDst35ql9slCnyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:86:53:31:08:fa:e0:d2:aa:44:1b:8d:84:18:22:b2:a5:f5: 62:12:05:a1:1d:e6:93:9d:ff:25:a1:af:af:6a:b9:74:fc:8f: e2:0b:58:25:2f:6b:4b:9e:96:4a:3d:00:a3:a4:61:79:4c:5f: ba:b0:c7:c4:95:08:29:56:c3:4b:16:5c:d3:aa:52:ea:76:ab: a0:a1:ce:bf:98:a2:25:61:90:59:3e:8f:36:09:ea:49:45:0e: 83:0a:1c:2e:28:71:43:3c:85:11:e9:a2:f9:66:eb:46:db:f8: 4b:5e:e5:a1:82:0a:bd:bd:03:ae:7f:e3:d8:57:85:20:3b:3d: 68:8e:a0:e4:07:ec:87:1e:5b:f5:e1:6e:8f:7d:03:50:4b:9c: 85:3b:0d:24:d8:74:9f:04:8c:36:5e:1f:b0:15:0c:66:86:c0: cc:f9:4f:f9:29:7d:90:ca:4c:72:3c:39:67:72:d0:a9:e6:0b: 61:ba:af:5a:5c:c0:8a:90:da:d8:1f:03:fb:21:27:35:32:ec: 99:92:79:e7:76:59:1e:53:a5:a6:ea:d5:42:e1:55:93:58:9d: 9a:b7:e7:7b:1b:da:bc:75:ca:cf:cb:11:89:94:48:f9:92:45: c2:e8:82:96:1d:4d:e3:3b:e8:f5:44:29:81:f4:3e:7d:2f:79: e4:4c:68:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTBEMEQxMTAvBgNVBAUTKEVDQzA1RTdDNUI5MjQ3OEI4Q0M0M0IyRERGOUFBNUY2 Qzk0MjlGMjEwHhcNMjUwODA4MTkzNTE5WhcNMjUwODE1MTkzNTE5WjAYMRYwFAYD VQQDEw02ODk2NTE3OC0zYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsMX5n3eeEKUJnaFwP4OkNoaeKT/k0EBfWgkE/J0QLzDP4khPbd4RXgCwaTCp Wf7NwNWhwqpnskiyk/kOBwEF2yliRlUhyKPCSft4gAKLotUXzpJYD//cKcKlQYxu b/JtHRWZnBKfYqzFwFNf5Qt5Wa3RBuiTqNPuuvrhaQEVFWwUehs4tlmTqX9fvnSt VML5ejMrx9HKMHl6Pr2Cz86m4pDVm5A1sDumIdjfPsCPKNykkB52bfOqbq1qSK/p 4q0noqUYwmxS+JKEFUpDW4VJiqqQ42+v6YOLtDnekrlU6/Xj72N7Xy7sCu/kqqvc v7/b+9ZXY2uX+1SJWohfRG2JOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkGQPwq CWpYQph2Vc5AhRHp4bJEMB8GA1UdIwQYMBaAFOzAXnxbkkeLjMQ7Ld+apfbJQp8h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEQwRC9GMDM3QkQwODQ3 NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0dU14RHN0MzVxbDlzbENu eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNQmVmRnVTUjR1TXhEc3QzNXFsOXNsQ255RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MEQwRC9GMDM3QkQwODQ3NjYxMUVBQUJCMTFBNjVDNEY5QUUwMi83TUJlZkZ1U1I0 dU14RHN0MzVxbDlzbENueUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArhlMxCPrg0qpEG42EGCKypfViEgWhHeaTnf8loa+varl0/I/iC1gl L2tLnpZKPQCjpGF5TF+6sMfElQgpVsNLFlzTqlLqdqugoc6/mKIlYZBZPo82CepJ RQ6DChwuKHFDPIUR6aL5ZutG2/hLXuWhggq9vQOuf+PYV4UgOz1ojqDkB+yHHlv1 4W6PfQNQS5yFOw0k2HSfBIw2Xh+wFQxmhsDM+U/5KX2QykxyPDlnctCp5gthuq9a XMCKkNrYHwP7ISc1MuyZknnndlkeU6Wm6tVC4VWTWJ2at+d7G9q8dcrPyxGJlEj5 kkXC6IKWHU3jO+j1RCmB9D59L3nkTGji -----END CERTIFICATE-----Generated at Sun Aug 10 10:37:16 2025 by rpki-client