$ rpki-client -vvf rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft File: 7grUN1-fCpi3ptnvqKUlFY2BcJE.mft (raw, json) Hash identifier: kKf5uvrfF4M5k3gqVUBRbhFD09pOfoOXY9KxvJsIS4k= Subject key identifier: 7E:72:C5:43:14:B7:F0:C6:10:F3:69:77:9D:8E:4A:DF:0B:9D:F2:2E Authority key identifier: EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 Certificate issuer: /CN=A9193BF8/serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Certificate serial: 01B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft Manifest number: 01B0 Signing time: Sat 09 Aug 2025 03:31:24 +0000 Manifest this update: Sat 09 Aug 2025 03:31:24 +0000 Manifest next update: Sat 16 Aug 2025 03:31:24 +0000 Files and hashes: 1: 7grUN1-fCpi3ptnvqKUlFY2BcJE.crl (hash: f1MJRbN3APvNZtdyp8V2QSooWPBemNhKG4Hil0lManI=) 2: B983A684E01811ED8385DA62C4F9AE02.roa (hash: XNf/2Q6uWI444vIMmSBl+gGmGXhm3xu89mz5NFyHmH4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193BF8, serialNumber=EE0AD4375F9F0A98B7A6D9EFA8A525158D817091 Validity Not Before: Aug 9 03:31:24 2025 GMT Not After : Aug 16 03:31:24 2025 GMT Subject: CN=6896c10c-649c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:bb:a0:2d:d3:0b:76:08:61:c2:0f:68:72: e4:ca:1f:a0:22:1f:ad:ed:dd:ad:85:a9:1b:0b:49: ca:04:af:3b:9a:5a:01:59:86:b7:4d:51:ed:c1:79: 2f:48:a0:54:53:ba:f2:87:aa:3f:e1:f6:28:8d:86: 73:bf:48:e9:ff:08:10:2a:48:87:6f:51:70:f4:5d: b7:0b:1f:ce:d3:8c:33:34:8a:c5:84:4c:1d:fb:6d: 3d:e5:9d:6a:7c:be:6f:3c:de:95:4a:6c:96:c0:fb: 05:aa:6e:d8:21:f1:c5:68:18:1a:e4:a7:51:bf:c4: 67:5d:eb:2a:c4:8b:bf:31:99:44:3f:37:ae:ed:90: 3b:c2:e1:24:97:32:b1:b1:2e:90:49:47:21:9c:80: c2:6b:ce:cc:6d:3f:c0:e8:ae:82:d8:c8:3b:3c:07: ff:05:ae:f0:ba:6e:d8:1d:6b:cf:bc:2e:8a:a5:bc: a7:db:e3:ac:38:3f:f7:a3:b6:80:fb:9f:e7:b8:cc: 09:12:d8:53:03:73:dc:26:9e:3c:e2:a3:7a:6b:64: 69:91:32:b1:d5:39:8e:9e:e7:49:a1:d3:cb:a4:e8: 1f:7e:e6:00:b8:e3:10:32:b1:e7:8b:5f:65:df:5a: bf:97:fe:b6:e0:31:ad:08:98:4f:6a:2f:49:81:9a: 7b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:72:C5:43:14:B7:F0:C6:10:F3:69:77:9D:8E:4A:DF:0B:9D:F2:2E X509v3 Authority Key Identifier: keyid:EE:0A:D4:37:5F:9F:0A:98:B7:A6:D9:EF:A8:A5:25:15:8D:81:70:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7grUN1-fCpi3ptnvqKUlFY2BcJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193BF8/AC294DE8E01511EDB1666961C4F9AE02/7grUN1-fCpi3ptnvqKUlFY2BcJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:cd:3e:eb:0c:49:46:30:8e:85:3b:2b:3a:37:35:66:20:73: da:56:61:75:eb:cf:ac:d3:d3:b2:4f:56:5a:9e:69:b9:ad:a3: 05:93:9f:74:f2:42:8d:10:7b:e2:5f:c6:8b:03:8b:76:c7:7c: 3a:89:bb:5d:3a:31:01:7f:af:00:dd:81:0f:96:82:01:5b:cb: 38:13:63:8c:e9:67:1f:b9:c8:b2:10:15:69:12:ff:66:da:e1: 8e:e6:42:43:6a:a6:9b:23:ce:a2:e6:24:6f:42:5b:ee:06:78: 5a:55:85:d9:d6:a9:06:4e:9f:9c:84:87:7d:a3:2b:ac:e4:f1: 00:8a:df:65:74:ce:83:40:bb:da:21:d6:ea:53:f5:15:29:1e: 18:be:e5:97:98:61:bb:38:43:08:ab:39:59:f7:15:d9:9b:67: 50:2c:e2:4f:b3:79:5e:5f:6e:a0:b3:c5:09:6d:22:a3:cb:06: 15:23:c8:5a:03:e2:f0:42:2a:2a:26:52:52:f3:84:a0:77:b5: 81:de:da:15:be:22:d6:cf:b8:35:e9:a2:5e:d4:de:5f:9e:b1: 6c:a9:87:9d:e1:96:b4:b9:61:c2:e7:c0:e8:06:e9:55:ba:b0: 24:75:44:4e:02:18:90:39:42:1f:cc:b0:f8:82:4f:55:ed:26: cf:e6:1d:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNCRjgxMTAvBgNVBAUTKEVFMEFENDM3NUY5RjBBOThCN0E2RDlFRkE4QTUyNTE1 OEQ4MTcwOTEwHhcNMjUwODA5MDMzMTI0WhcNMjUwODE2MDMzMTI0WjAYMRYwFAYD VQQDEw02ODk2YzEwYy02NDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6e7oC3TC3YIYcIPaHLkyh+gIh+t7d2thakbC0nKBK87mloBWYa3TVHtwXkv SKBUU7ryh6o/4fYojYZzv0jp/wgQKkiHb1Fw9F23Cx/O04wzNIrFhEwd+2095Z1q fL5vPN6VSmyWwPsFqm7YIfHFaBga5KdRv8RnXesqxIu/MZlEPzeu7ZA7wuEklzKx sS6QSUchnIDCa87MbT/A6K6C2Mg7PAf/Ba7wum7YHWvPvC6Kpbyn2+OsOD/3o7aA +5/nuMwJEthTA3PcJp484qN6a2RpkTKx1TmOnudJodPLpOgffuYAuOMQMrHni19l 31q/l/624DGtCJhPai9JgZp7SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5yxUMU t/DGEPNpd52OSt8LnfIuMB8GA1UdIwQYMBaAFO4K1DdfnwqYt6bZ76ilJRWNgXCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0JGOC9BQzI5NERFOEUw MTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNwaTNwdG52cUtVbEZZMkJj SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdnclVOMS1mQ3BpM3B0bnZxS1VsRlkyQmNKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0JGOC9BQzI5NERFOEUwMTUxMUVEQjE2NjY5NjFDNEY5QUUwMi83Z3JVTjEtZkNw aTNwdG52cUtVbEZZMkJjSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUzT7rDElGMI6FOys6NzVmIHPaVmF168+s09OyT1Zanmm5raMFk590 8kKNEHviX8aLA4t2x3w6ibtdOjEBf68A3YEPloIBW8s4E2OM6WcfuciyEBVpEv9m 2uGO5kJDaqabI86i5iRvQlvuBnhaVYXZ1qkGTp+chId9oyus5PEAit9ldM6DQLva IdbqU/UVKR4YvuWXmGG7OEMIqzlZ9xXZm2dQLOJPs3leX26gs8UJbSKjywYVI8ha A+LwQioqJlJS84Sgd7WB3toVviLWz7g16aJe1N5fnrFsqYed4Za0uWHC58DoBulV urAkdUROAhiQOUIfzLD4gk9V7SbP5h3j -----END CERTIFICATE-----Generated at Sun Aug 10 19:00:55 2025 by rpki-client