$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft File: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft (raw, json) Hash identifier: 8VCxQHSUIgcnKChDpFP7ZhY0ZGru6+9z10yXA7SlCok= Subject key identifier: AC:C5:2A:99:FB:23:6F:4E:11:C7:BD:97:0E:01:9B:45:46:6E:D2:D9 Authority key identifier: 43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 Certificate issuer: /CN=A9192A47/serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft Manifest number: 7D Signing time: Mon 11 Aug 2025 07:00:10 +0000 Manifest this update: Mon 11 Aug 2025 07:00:09 +0000 Manifest next update: Mon 18 Aug 2025 07:00:09 +0000 Files and hashes: 1: Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl (hash: Fh/BnTbv+1uKN8c6T/hXl/X+3YsqVgjidFN7c08GZPA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9192A47, serialNumber=43B222FE3BE491AD7058BED3804214425D6941B7 Validity Not Before: Aug 11 07:00:09 2025 GMT Not After : Aug 18 07:00:09 2025 GMT Subject: CN=689994fa-72a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:84:cc:6a:11:5a:c7:b8:98:7e:e8:f0:70:ee: 6b:65:fb:cf:0c:a4:ac:3f:f1:bb:2e:24:a2:48:13: 17:92:c5:6e:01:7d:89:10:3d:b3:d2:8b:82:db:a5: d2:d7:1a:5f:4d:63:e1:8e:fd:4a:9e:9f:96:6c:86: 91:df:0e:41:b0:03:c2:79:f5:c9:c1:21:07:86:fd: 01:fc:1e:3e:98:6b:6f:59:2c:70:d9:f4:34:f6:d0: e8:a6:bd:a4:8d:00:ee:91:3d:db:a5:32:72:02:10: b8:1b:37:cc:00:57:b7:57:10:78:1d:7c:8a:59:c8: a3:6d:ef:3d:46:f6:f9:9f:98:31:6a:be:7b:16:05: 68:fb:cd:57:9b:96:88:5b:1c:5b:f7:e6:1f:d0:b7: e2:2a:6b:c0:c9:f0:eb:f2:97:41:be:27:2d:4e:70: d3:c8:2b:de:ee:3a:53:22:86:63:6d:05:22:51:df: 6c:8b:4c:0b:0b:20:7d:40:0c:a5:9f:55:d5:e3:9f: 37:2d:1b:ae:50:7a:ce:9a:2d:e6:85:b5:78:8a:ce: 4e:36:5f:c8:1b:0f:46:10:c5:0f:9f:c2:62:2d:1d: 85:ae:e1:80:9e:2c:08:bf:7c:85:a1:24:92:5d:fb: f0:c4:29:90:17:e6:f7:29:a1:bd:91:5a:db:8c:92: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C5:2A:99:FB:23:6F:4E:11:C7:BD:97:0E:01:9B:45:46:6E:D2:D9 X509v3 Authority Key Identifier: keyid:43:B2:22:FE:3B:E4:91:AD:70:58:BE:D3:80:42:14:42:5D:69:41:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/E5BFEA46B82011EFAAE6F567C4F9AE02/Q7Ii_jvkka1wWL7TgEIUQl1pQbc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:af:dd:88:d5:c6:91:47:cd:5e:dd:95:d5:79:a1:e2:09:0d: fc:f6:84:0d:2a:3f:5f:be:9c:b5:b0:22:b8:7d:5a:a0:0a:3a: 7e:c2:18:c2:ce:b8:84:64:80:69:82:7d:82:f6:d4:72:ce:31: 24:f4:e7:3f:ec:10:4d:2d:ff:40:b4:ef:a4:88:4e:5a:a3:18: 11:85:c4:08:3a:8e:da:7d:e4:1f:4f:4f:16:f8:c0:88:94:41: 9f:a6:41:5a:b9:27:6d:19:95:01:ef:99:25:6f:aa:d3:ba:38: 1c:5d:5c:54:81:5d:88:8f:80:e7:d1:a0:6b:e0:c9:05:ae:dd: 7b:ac:61:41:ee:ea:ca:b9:7e:26:ad:10:ba:d2:4f:1a:2b:8c: 79:95:50:cc:fb:bd:43:5a:40:bb:8f:94:07:da:38:ab:68:ab: 61:ac:17:60:42:87:96:4f:ad:e4:f9:b8:9b:da:f5:60:f5:e0: fe:49:c9:ee:83:dd:d5:f5:63:f3:61:8d:ce:a4:4c:9d:2a:f0: 9c:a4:5a:6e:23:7b:4b:e8:eb:b3:22:b8:b0:1c:c1:4a:62:2a: c6:ea:79:5f:8c:4c:7f:7a:28:10:2b:d2:05:fb:16:ae:a3:ba: e4:37:40:2e:b7:9f:78:45:26:75:51:9d:60:ea:00:bc:22:35: 5b:c8:e8:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MkE0NzExMC8GA1UEBRMoNDNCMjIyRkUzQkU0OTFBRDcwNThCRUQzODA0MjE0NDI1 RDY5NDFCNzAeFw0yNTA4MTEwNzAwMDlaFw0yNTA4MTgwNzAwMDlaMBgxFjAUBgNV BAMTDTY4OTk5NGZhLTcyYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBhMxqEVrHuJh+6PBw7mtl+88MpKw/8bsuJKJIExeSxW4BfYkQPbPSi4LbpdLX Gl9NY+GO/Uqen5ZshpHfDkGwA8J59cnBIQeG/QH8Hj6Ya29ZLHDZ9DT20OimvaSN AO6RPdulMnICELgbN8wAV7dXEHgdfIpZyKNt7z1G9vmfmDFqvnsWBWj7zVeblohb HFv35h/Qt+Iqa8DJ8Ovyl0G+Jy1OcNPIK97uOlMihmNtBSJR32yLTAsLIH1ADKWf VdXjnzctG65Qes6aLeaFtXiKzk42X8gbD0YQxQ+fwmItHYWu4YCeLAi/fIWhJJJd +/DEKZAX5vcpob2RWtuMkjv9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrMUqmfsj b04Rx72XDgGbRUZu0tkwHwYDVR0jBBgwFoAUQ7Ii/jvkka1wWL7TgEIUQl1pQbcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyQTQ3L0U1QkZFQTQ2Qjgy MDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Exd1dMN1RnRUlVUWwxcFFi Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUTdJaV9qdmtrYTF3V0w3VGdFSVVRbDFwUWJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky QTQ3L0U1QkZFQTQ2QjgyMDExRUZBQUU2RjU2N0M0RjlBRTAyL1E3SWlfanZra2Ex d1dMN1RnRUlVUWwxcFFiYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALiv3YjVxpFHzV7dldV5oeIJDfz2hA0qP1++nLWwIrh9WqAKOn7CGMLO uIRkgGmCfYL21HLOMST05z/sEE0t/0C076SITlqjGBGFxAg6jtp95B9PTxb4wIiU QZ+mQVq5J20ZlQHvmSVvqtO6OBxdXFSBXYiPgOfRoGvgyQWu3XusYUHu6sq5fiat ELrSTxorjHmVUMz7vUNaQLuPlAfaOKtoq2GsF2BCh5ZPreT5uJva9WD14P5Jye6D 3dX1Y/Nhjc6kTJ0q8JykWm4je0vo67MiuLAcwUpiKsbqeV+MTH96KBAr0gX7Fq6j uuQ3QC63n3hFJnVRnWDqALwiNVvI6MI= -----END CERTIFICATE-----Generated at Wed Aug 13 04:27:53 2025 by rpki-client