$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: lQPpHtUL4Tbs5V60CeZyQK3QA9oLvtWFh8lpWB0f1aA= Subject key identifier: 13:FD:9C:28:75:85:85:78:DA:11:B3:C3:E2:20:9D:63:6F:78:23:DB Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 6F Signing time: Sat 09 Aug 2025 07:20:41 +0000 Manifest this update: Sat 09 Aug 2025 07:20:41 +0000 Manifest next update: Sat 16 Aug 2025 07:20:40 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: 3cV2q53Sw8b23dvyTyK/zpVHCqhWfXYY0fzlrJeZdlM=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Aug 9 07:20:41 2025 GMT Not After : Aug 16 07:20:40 2025 GMT Subject: CN=6896f6c9-1a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:fc:9d:af:55:27:65:30:c7:63:43:b3:4c: 41:bd:5a:d5:56:63:db:70:c8:75:1b:6d:81:e7:26: 92:b3:d8:39:b6:d5:96:11:20:e9:3a:37:6d:35:15: f1:b0:b1:ca:57:54:72:15:a1:52:cb:85:97:c2:bd: a1:ff:96:4b:88:e4:92:a4:b9:59:07:32:68:44:92: fb:2e:12:8b:a6:c3:04:a7:81:35:63:d6:99:2b:46: 8d:c9:cb:16:a5:61:ec:66:87:df:09:98:00:7f:a7: 84:aa:ce:99:df:50:d0:b0:7e:c0:11:f2:fd:fb:0f: bf:16:e6:75:db:22:c0:4b:be:16:a3:2a:9b:1e:08: 43:e0:c5:eb:dc:bc:5c:9b:09:af:b2:e4:fd:c4:38: e2:1c:34:81:c7:a1:93:45:13:97:8f:68:7f:95:4d: c9:96:23:f4:41:d7:5f:48:2d:a6:a6:87:f1:8f:8e: f0:ef:ac:61:e8:2f:1a:ab:1d:39:92:62:c8:45:ad: 7d:0d:53:e6:06:ad:d5:2f:5d:db:85:fe:88:b1:ff: 82:41:3a:34:07:7c:85:67:04:7e:8b:fc:72:cf:69: 59:d9:06:e3:2d:b7:b1:1a:1c:2e:e0:a8:7e:40:54: a9:26:c9:d2:cb:af:25:c1:8c:fa:78:93:92:f3:46: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:9C:28:75:85:85:78:DA:11:B3:C3:E2:20:9D:63:6F:78:23:DB X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:39:f6:62:fb:de:52:2d:6d:e0:4f:ff:27:8c:e8:b0:f6:fa: 62:cf:e6:e2:96:7e:7e:d0:e4:5c:b6:4c:19:05:4e:a7:39:14: 77:2a:61:00:e8:cd:1c:c4:cc:19:16:33:89:de:0f:94:3e:6b: f0:00:7d:f3:b7:8a:a0:f6:c5:ab:18:c7:aa:0b:0c:55:e5:0c: 00:28:6b:e0:4d:dd:51:7d:ca:c0:72:65:03:65:89:39:74:12: 8e:f4:c2:95:9d:51:22:6f:6a:5c:59:61:51:82:2a:83:1c:3a: 72:7b:4b:b3:15:b0:5d:f7:66:a1:a3:f8:dd:04:15:bf:9f:23: a8:c5:48:6a:04:84:41:6a:ee:0b:c3:c9:f9:34:99:b1:8d:f1: 6f:bc:77:60:d2:16:51:68:f6:cb:8c:b6:67:04:5e:ba:03:df: 61:ad:29:3d:52:c7:46:c7:0a:d4:65:90:ca:56:72:34:82:dc: f6:3a:eb:71:c2:36:b0:97:14:32:51:c0:40:56:a4:35:21:58: e6:fd:f8:4e:0b:b4:27:9b:01:50:96:5d:bf:4b:69:21:c1:18: 71:37:0d:7f:fa:56:50:40:c4:e1:67:ca:09:00:39:a6:b2:5d: f8:c7:4e:d1:62:91:13:dc:37:c5:87:ba:f6:88:17:d2:61:ad: e3:e5:0f:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoRUM2NzkxNjkxNzdCOUUxMzFEMERBQTAxMzk4RDcwMDM5 ODI3RDFGNjAeFw0yNTA4MDkwNzIwNDFaFw0yNTA4MTYwNzIwNDBaMBgxFjAUBgNV BAMTDTY4OTZmNmM5LTFhNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnt/ydr1UnZTDHY0OzTEG9WtVWY9twyHUbbYHnJpKz2Dm21ZYRIOk6N201FfGw scpXVHIVoVLLhZfCvaH/lkuI5JKkuVkHMmhEkvsuEoumwwSngTVj1pkrRo3Jyxal Yexmh98JmAB/p4SqzpnfUNCwfsAR8v37D78W5nXbIsBLvhajKpseCEPgxevcvFyb Ca+y5P3EOOIcNIHHoZNFE5ePaH+VTcmWI/RB119ILaamh/GPjvDvrGHoLxqrHTmS YshFrX0NU+YGrdUvXduF/oix/4JBOjQHfIVnBH6L/HLPaVnZBuMtt7EaHC7gqH5A VKkmydLLryXBjPp4k5LzRqlXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE/2cKHWF hXjaEbPD4iCdY294I9swHwYDVR0jBBgwFoAU7GeRaRd7nhMdDaoBOY1wA5gn0fYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0U2NEIwM0I0Q0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0dlUmFSZDduaE1kRGFvQk9ZMXdBNWduMGZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0U2NEIwM0I0Q0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhN ZERhb0JPWTF3QTVnbjBmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADM59mL73lItbeBP/yeM6LD2+mLP5uKWfn7Q5Fy2TBkFTqc5FHcqYQDo zRzEzBkWM4neD5Q+a/AAffO3iqD2xasYx6oLDFXlDAAoa+BN3VF9ysByZQNliTl0 Eo70wpWdUSJvalxZYVGCKoMcOnJ7S7MVsF33ZqGj+N0EFb+fI6jFSGoEhEFq7gvD yfk0mbGN8W+8d2DSFlFo9suMtmcEXroD32GtKT1Sx0bHCtRlkMpWcjSC3PY663HC NrCXFDJRwEBWpDUhWOb9+E4LtCebAVCWXb9LaSHBGHE3DX/6VlBAxOFnygkAOaay XfjHTtFikRPcN8WHuvaIF9JhrePlDwE= -----END CERTIFICATE-----Generated at Sun Aug 10 20:04:18 2025 by rpki-client