$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: JfS60jOXLVpvWQYjlMuWenpaLQ/s/8fGE6clP7neNZ4= Subject key identifier: B3:7F:2D:BF:A4:B8:B6:E0:65:BB:29:6B:E2:9F:BE:53:03:20:74:EC Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 01E6 Signing time: Sat 09 Aug 2025 03:03:44 +0000 Manifest this update: Sat 09 Aug 2025 03:03:44 +0000 Manifest next update: Sat 16 Aug 2025 03:03:44 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: 163E8ZtpaS52qy/i+UTlEPVCIV9WNNyaWF9NEJOw3rE=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Aug 9 03:03:44 2025 GMT Not After : Aug 16 03:03:44 2025 GMT Subject: CN=6896ba90-33f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:71:77:a7:00:27:24:f1:2e:6c:8d:45:fe:8d: 4a:9e:da:f7:bc:8d:07:ae:b9:ed:b4:af:66:e5:ec: d1:7c:1c:44:7b:0c:c6:03:cd:27:08:38:89:b4:b3: de:4d:fa:04:cc:ea:b4:a6:4f:54:ed:61:fd:f9:48: 66:e7:0c:c3:ad:d3:cc:3f:d6:ab:90:0c:23:6d:db: a5:08:9d:32:88:2f:70:25:29:fe:f3:71:5c:ef:30: ab:03:33:2b:70:c8:90:f7:76:78:d7:97:b9:46:bc: a2:b8:a2:0c:bc:62:8b:6e:47:17:d1:af:2e:ef:0d: 1c:e6:35:a1:0e:68:1d:e1:4d:e0:89:03:37:3a:97: f5:c2:d6:9c:d1:7d:65:0e:18:ac:9b:84:f6:d1:ff: 4e:bf:6a:e9:9b:e8:dc:ba:98:ca:a2:4e:f1:a1:2a: 42:4a:cf:aa:a5:60:df:fb:5b:18:c9:71:1b:e2:91: 0e:a4:03:a6:26:18:59:1d:2b:2f:bb:c4:62:02:f6: 59:83:c1:01:4f:0c:84:35:af:d1:ff:00:71:2f:3d: 02:93:7d:49:1a:e7:7b:9f:c0:07:6a:e8:c8:fd:60: de:2a:86:5d:41:9a:bb:ff:7e:23:81:e0:8b:80:38: d5:1f:5e:14:72:d8:b8:50:64:d3:7b:61:66:c0:12: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7F:2D:BF:A4:B8:B6:E0:65:BB:29:6B:E2:9F:BE:53:03:20:74:EC X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:53:35:29:a0:fd:05:a8:04:05:72:6f:d7:de:7c:17:7e: 7d:ed:bd:80:34:c8:c6:3d:04:f5:dd:ae:2d:b0:5f:62:90:b3: 05:f1:ed:17:4e:6b:3c:11:61:d7:f4:f6:97:ff:79:4a:b5:66: e1:d8:87:eb:7c:be:19:86:81:e2:f3:ef:9a:85:40:99:de:dd: 87:2d:04:28:51:8e:d3:fb:3a:d7:93:c3:10:32:e3:0e:e3:19: 90:22:06:0a:41:ee:8c:f9:43:ae:15:5a:8c:67:10:0b:75:59: 6d:90:65:5b:c7:c3:59:3c:58:94:f0:4e:d5:52:96:c3:59:0e: 5b:1b:b8:82:f3:2c:1b:be:19:bc:b8:4e:6a:9f:fe:51:b4:7e: 8e:6d:d2:da:f7:e4:3b:a1:0e:51:8a:0f:c2:ef:22:d6:d7:27: 1b:c4:c1:73:99:07:19:30:0b:4f:e4:7d:1d:64:6c:af:b0:9b: 4d:c7:43:0c:f1:50:6d:a8:cf:8c:04:ea:9d:1f:a2:cc:b5:2d: 40:1c:89:46:51:39:41:41:18:08:8a:81:55:ab:28:dd:25:54: 3f:00:c6:18:77:d4:24:b8:7b:95:66:63:b1:08:61:27:f7:0b: 38:f9:d4:ba:fa:c8:17:89:bc:00:9d:05:72:5e:99:91:30:ee: 38:84:84:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwODA5MDMwMzQ0WhcNMjUwODE2MDMwMzQ0WjAYMRYwFAYD VQQDEw02ODk2YmE5MC0zM2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0XF3pwAnJPEubI1F/o1Kntr3vI0HrrnttK9m5ezRfBxEewzGA80nCDiJtLPe TfoEzOq0pk9U7WH9+Uhm5wzDrdPMP9arkAwjbdulCJ0yiC9wJSn+83Fc7zCrAzMr cMiQ93Z415e5RryiuKIMvGKLbkcX0a8u7w0c5jWhDmgd4U3giQM3Opf1wtac0X1l Dhism4T20f9Ov2rpm+jcupjKok7xoSpCSs+qpWDf+1sYyXEb4pEOpAOmJhhZHSsv u8RiAvZZg8EBTwyENa/R/wBxLz0Ck31JGud7n8AHaujI/WDeKoZdQZq7/34jgeCL gDjVH14Ucti4UGTTe2FmwBLGUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLN/Lb+k uLbgZbspa+KfvlMDIHTsMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBghVM1KaD9BagEBXJv1958F3597b2ANMjGPQT13a4tsF9ikLMF8e0X Tms8EWHX9PaX/3lKtWbh2IfrfL4ZhoHi8++ahUCZ3t2HLQQoUY7T+zrXk8MQMuMO 4xmQIgYKQe6M+UOuFVqMZxALdVltkGVbx8NZPFiU8E7VUpbDWQ5bG7iC8ywbvhm8 uE5qn/5RtH6ObdLa9+Q7oQ5Rig/C7yLW1ycbxMFzmQcZMAtP5H0dZGyvsJtNx0MM 8VBtqM+MBOqdH6LMtS1AHIlGUTlBQRgIioFVqyjdJVQ/AMYYd9QkuHuVZmOxCGEn 9ws4+dS6+sgXibwAnQVyXpmRMO44hIQn -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:19 2025 by rpki-client