$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft File: -r7TJg0sVSvpFdAj4YnWEopkX0s.mft (raw, json) Hash identifier: hARyOT+FT9bWz+fTjRakiI/RAL6JTrpom0VLUoAEJnU= Subject key identifier: AE:0C:CB:41:C1:3B:C8:37:C2:F2:57:1F:4C:84:C2:B2:B9:F0:A7:F6 Authority key identifier: FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B Certificate issuer: /CN=A919FF79/serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Certificate serial: 12AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft Manifest number: 12A2 Signing time: Mon 04 Aug 2025 17:15:50 +0000 Manifest this update: Mon 04 Aug 2025 17:15:50 +0000 Manifest next update: Mon 11 Aug 2025 17:15:50 +0000 Files and hashes: 1: -r7TJg0sVSvpFdAj4YnWEopkX0s.crl (hash: 2k29xCa7FvWyz7GZo4aWmzarDaHOy1/h3ycVQ+0tdfg=) 2: A87EED5A7AF111EB86DC9F6CC4F9AE02.roa (hash: n5O4+xpqurpdXo1l2y1SKOgBDTyWDYNQaGaHjqKBMU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:15:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4780 (0x12ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919FF79, serialNumber=FABED3260D2C552BE915D023E189D6128A645F4B Validity Not Before: Aug 4 17:15:50 2025 GMT Not After : Aug 11 17:15:50 2025 GMT Subject: CN=6890eac6-8fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:1a:89:64:4c:2d:5c:79:bc:28:cb:a2:d7: de:10:af:00:2a:76:ca:89:4b:30:e7:b3:28:2e:86: fc:7c:bc:ea:3f:d2:f7:31:f5:f6:3e:11:3b:89:ec: 9f:6a:dc:45:50:54:fe:21:f5:3d:8c:f9:86:46:83: e0:e2:01:29:d0:a2:58:2c:75:cd:f7:f3:6d:f3:0a: dd:6a:00:1b:f9:43:05:19:ab:be:26:cf:3b:3e:b3: db:45:9e:2a:7d:33:03:52:ea:f8:ba:c6:d6:9d:93: 1d:64:ae:dd:78:ed:07:d9:be:16:4d:3d:d6:a7:84: ed:a8:65:66:e9:37:8b:54:0c:ad:01:a5:46:bb:bf: 56:b8:ae:57:2f:bb:7d:c9:38:3b:99:22:b0:2c:6b: 9b:f6:02:66:ae:59:42:d4:c0:13:0a:26:d1:ca:82: 51:ae:fd:4e:58:7a:2c:69:d2:a8:6c:11:9d:f3:de: 93:d7:a3:f6:cd:58:18:ae:47:9c:be:40:5d:c4:59: 12:36:07:30:6f:39:49:78:7d:42:4b:b6:1d:b0:ee: 0a:16:ff:cc:8f:65:d7:e0:78:5c:05:fc:1b:38:c4: 44:7a:09:18:cc:2c:93:db:49:a1:ac:9f:d6:c1:7d: 38:ec:27:ef:86:13:73:b9:2a:a5:d6:ad:db:b3:0a: 7c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0C:CB:41:C1:3B:C8:37:C2:F2:57:1F:4C:84:C2:B2:B9:F0:A7:F6 X509v3 Authority Key Identifier: keyid:FA:BE:D3:26:0D:2C:55:2B:E9:15:D0:23:E1:89:D6:12:8A:64:5F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r7TJg0sVSvpFdAj4YnWEopkX0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF79/A3C08A2ECA9711E8AAE8075FC4F9AE02/-r7TJg0sVSvpFdAj4YnWEopkX0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:21:aa:ce:b6:2b:7a:0c:14:bb:dd:af:73:8f:62:3e:e5: 10:af:eb:89:93:e3:9c:0d:1a:83:6b:f6:a9:d7:f1:ef:79:ed: 29:02:06:14:8c:b7:0a:e5:46:d7:4b:01:33:1e:a1:32:b2:06: 9c:04:b9:c6:cc:c8:29:c9:1d:5f:be:6b:d5:1a:a7:fa:00:b3: 3a:77:3c:42:11:36:b0:41:e2:e7:9c:78:28:fa:71:88:40:99: ee:9d:ac:66:f4:42:4c:43:d3:a3:d9:c8:6e:aa:a4:7d:48:57: 19:3e:d4:fd:4b:b5:ab:b0:b4:75:1d:aa:8d:7c:1b:14:d6:4f: f7:31:f5:33:f8:0a:77:a7:cd:a8:ba:70:ad:fb:9f:d1:21:c4: c1:d2:d4:b9:50:13:a8:1b:8c:af:26:f8:d5:94:69:e3:62:5c: c3:ea:a9:30:57:ac:e1:1d:c2:8e:38:ed:ea:83:2d:3e:e2:40: cc:71:10:73:1e:2c:b6:68:1b:e9:c1:1f:e3:fc:61:dc:4c:26: a2:6f:e7:38:4f:4a:26:67:f6:ca:54:51:ae:02:5b:07:9d:cf: e5:fd:2d:0b:f0:76:cb:28:2b:d0:63:1d:17:bf:5a:27:ff:32: 8b:77:48:74:5a:72:21:70:95:c0:ba:da:02:73:e6:51:0c:50: 6d:9e:77:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUZGNzkxMTAvBgNVBAUTKEZBQkVEMzI2MEQyQzU1MkJFOTE1RDAyM0UxODlENjEy OEE2NDVGNEIwHhcNMjUwODA0MTcxNTUwWhcNMjUwODExMTcxNTUwWjAYMRYwFAYD VQQDEw02ODkwZWFjNi04ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dAaiWRMLVx5vCjLotfeEK8AKnbKiUsw57MoLob8fLzqP9L3MfX2PhE7ieyf atxFUFT+IfU9jPmGRoPg4gEp0KJYLHXN9/Nt8wrdagAb+UMFGau+Js87PrPbRZ4q fTMDUur4usbWnZMdZK7deO0H2b4WTT3Wp4TtqGVm6TeLVAytAaVGu79WuK5XL7t9 yTg7mSKwLGub9gJmrllC1MATCibRyoJRrv1OWHosadKobBGd896T16P2zVgYrkec vkBdxFkSNgcwbzlJeH1CS7YdsO4KFv/Mj2XX4HhcBfwbOMREegkYzCyT20mhrJ/W wX047CfvhhNzuSql1q3bswp8oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4My0HB O8g3wvJXH0yEwrK58Kf2MB8GA1UdIwQYMBaAFPq+0yYNLFUr6RXQI+GJ1hKKZF9L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkY3OS9BM0MwOEEyRUNB OTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZTdnBGZEFqNFluV0VvcGtY MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1yN1RKZzBzVlN2cEZkQWo0WW5XRW9wa1gwcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RkY3OS9BM0MwOEEyRUNBOTcxMUU4QUFFODA3NUZDNEY5QUUwMi8tcjdUSmcwc1ZT dnBGZEFqNFluV0VvcGtYMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIAyGqzrYregwUu92vc49iPuUQr+uJk+OcDRqDa/ap1/Hvee0pAgYU jLcK5UbXSwEzHqEysgacBLnGzMgpyR1fvmvVGqf6ALM6dzxCETawQeLnnHgo+nGI QJnunaxm9EJMQ9Oj2chuqqR9SFcZPtT9S7WrsLR1HaqNfBsU1k/3MfUz+Ap3p82o unCt+5/RIcTB0tS5UBOoG4yvJvjVlGnjYlzD6qkwV6zhHcKOOO3qgy0+4kDMcRBz Hiy2aBvpwR/j/GHcTCaib+c4T0omZ/bKVFGuAlsHnc/l/S0L8HbLKCvQYx0Xv1on /zKLd0h0WnIhcJXAutoCc+ZRDFBtnneR -----END CERTIFICATE-----Generated at Wed Aug 6 07:56:26 2025 by rpki-client