$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: CWSsJB8mj4N4b730BiuYcQpsi4nSdPnHeDzhj0Q+f/I= Subject key identifier: 61:FB:5D:03:F3:32:F3:3F:7D:6A:DA:30:90:41:A3:09:B1:97:00:F5 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F74 Signing time: Sun 10 Aug 2025 17:34:25 +0000 Manifest this update: Sun 10 Aug 2025 17:34:24 +0000 Manifest next update: Sun 17 Aug 2025 17:34:24 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: vdzmgU4cm8o/3u5OEsvTnuRiaSHmpQblHSXoOYRMF1k=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: O5M1jbKU4KBTSC5g58y6skgHkeCwY767jwNIVlihlmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3972 (0xf84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Aug 10 17:34:24 2025 GMT Not After : Aug 17 17:34:24 2025 GMT Subject: CN=6898d820-c93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:22:67:f5:ce:bf:3a:ce:62:e4:10:fa:a4:fe: 26:42:86:5e:da:db:81:bf:85:25:52:68:48:84:00: 5d:05:39:6a:56:b0:d0:84:56:1f:e6:5f:76:97:4e: f3:1f:ed:4b:08:fa:e6:75:78:66:c5:05:d7:8e:81: df:f6:d6:dd:91:c0:7d:2b:67:de:42:ef:2c:a7:da: ca:96:92:ec:cb:b0:dc:2e:99:8b:cd:24:b5:4b:a1: 2e:03:05:8a:2e:a4:bc:4b:1d:22:aa:14:f7:3a:b5: da:3b:d3:08:e9:f5:4b:7d:f9:bd:0c:0b:c2:05:ae: 58:57:83:fa:0b:06:10:56:81:ac:2b:16:dd:b1:88: 20:f1:79:59:80:91:ca:42:56:60:bf:6b:44:b5:a1: 24:93:09:c7:f5:f5:a1:bd:53:c7:fc:82:d5:75:c8: 13:f2:57:5d:d3:96:ff:fd:b3:a9:e7:7a:9c:4f:58: 7d:8e:5e:48:d5:b0:d4:59:51:f6:67:ea:79:61:b3: ca:f6:a6:2d:cc:ce:f4:86:27:09:1b:37:89:eb:9e: 09:27:76:02:16:85:0a:fc:5a:b1:fd:1d:dd:2c:08: ee:47:a3:0e:fe:d3:db:bb:34:45:39:cb:63:05:6e: fb:1b:92:bb:65:9a:04:81:63:fe:61:77:8f:3b:cc: db:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:FB:5D:03:F3:32:F3:3F:7D:6A:DA:30:90:41:A3:09:B1:97:00:F5 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:53:2b:4c:2b:ef:98:39:1d:24:ab:d0:c8:bd:26:5d:71:78: 51:2a:10:eb:d9:25:5c:c3:8f:70:78:ea:3a:0f:22:92:4f:b5: 0d:92:e9:5a:24:f0:38:60:bd:6d:3a:6f:b9:16:df:25:42:35: dc:4e:62:1d:64:d0:0e:b1:3d:58:bc:ef:02:14:cd:30:56:e6: 62:0b:ef:10:ac:76:06:23:5f:a4:9c:bd:e2:36:10:d2:00:f6: 88:10:b4:ef:54:57:0b:e2:3d:82:6d:7a:53:f0:5c:6c:69:ec: c6:34:9b:ab:47:c0:5e:88:92:69:be:0f:84:f4:e2:80:ff:ee: 29:6f:a3:db:8d:9e:c6:4a:c1:aa:16:6c:41:c9:95:fd:f5:9b: 3e:53:53:8b:8c:15:50:7c:88:89:19:27:49:6b:5e:1f:3a:28: 9d:eb:95:33:bb:77:04:d3:cb:65:66:b8:ab:3d:b1:f8:80:08: 4e:98:d6:30:21:d1:d7:a9:a5:fc:23:ec:d2:d9:4d:2c:d8:0f: ab:f1:ad:1f:a4:ba:f4:19:e3:65:c1:60:4a:62:76:41:d6:83: d8:8d:dd:d0:06:c9:e4:0b:e1:f2:c0:6f:4d:1f:ef:25:19:4d: 80:cd:61:49:ec:f8:39:e8:26:23:dc:32:34:86:7d:81:cd:11: 51:14:a8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwODEwMTczNDI0WhcNMjUwODE3MTczNDI0WjAYMRYwFAYD VQQDEw02ODk4ZDgyMC1jOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CJn9c6/Os5i5BD6pP4mQoZe2tuBv4UlUmhIhABdBTlqVrDQhFYf5l92l07z H+1LCPrmdXhmxQXXjoHf9tbdkcB9K2feQu8sp9rKlpLsy7DcLpmLzSS1S6EuAwWK LqS8Sx0iqhT3OrXaO9MI6fVLffm9DAvCBa5YV4P6CwYQVoGsKxbdsYgg8XlZgJHK QlZgv2tEtaEkkwnH9fWhvVPH/ILVdcgT8ldd05b//bOp53qcT1h9jl5I1bDUWVH2 Z+p5YbPK9qYtzM70hicJGzeJ654JJ3YCFoUK/Fqx/R3dLAjuR6MO/tPbuzRFOctj BW77G5K7ZZoEgWP+YXePO8zbwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGH7XQPz MvM/fWraMJBBowmxlwD1MB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNUytMK++YOR0kq9DIvSZdcXhRKhDr2SVcw49weOo6DyKST7UNkula JPA4YL1tOm+5Ft8lQjXcTmIdZNAOsT1YvO8CFM0wVuZiC+8QrHYGI1+knL3iNhDS APaIELTvVFcL4j2CbXpT8FxsaezGNJurR8BeiJJpvg+E9OKA/+4pb6PbjZ7GSsGq FmxByZX99Zs+U1OLjBVQfIiJGSdJa14fOiid65Uzu3cE08tlZrirPbH4gAhOmNYw IdHXqaX8I+zS2U0s2A+r8a0fpLr0GeNlwWBKYnZB1oPYjd3QBsnkC+HywG9NH+8l GU2AzWFJ7Pg56CYj3DI0hn2BzRFRFKh5 -----END CERTIFICATE-----Generated at Mon Aug 11 07:27:53 2025 by rpki-client