$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: aUv/gxNOy0fs6UmfQTEtCLuAKkXJDJPC6jMTi5TXY94= Subject key identifier: AE:1F:E6:78:09:2C:54:17:14:82:08:67:DA:C9:D4:DD:24:16:96:B3 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: DF Signing time: Mon 11 Aug 2025 05:43:16 +0000 Manifest this update: Mon 11 Aug 2025 05:43:15 +0000 Manifest next update: Mon 18 Aug 2025 05:43:15 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: WFoaPwL1mw3ndtDcA5lSVv/Jmx5IvSjrcXK9R0AABSE=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Aug 11 05:43:15 2025 GMT Not After : Aug 18 05:43:15 2025 GMT Subject: CN=689982f3-7ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:b4:94:de:f7:87:5b:05:7c:81:aa:a9:3c: 97:1b:f1:ee:83:48:95:8c:ad:19:01:d1:72:3a:0c: 79:2f:5f:85:83:78:8d:ea:ba:ae:56:2e:b0:bc:86: d1:1d:9c:9f:e4:d1:76:fc:8b:f1:10:20:ea:1a:85: 2e:58:8a:97:47:46:37:4c:8f:7d:c5:28:de:aa:47: a5:c2:72:d2:ef:34:48:2b:ad:04:88:01:bc:d1:9f: ac:53:13:33:b3:d8:24:f5:e9:2e:50:3a:45:cf:e7: bc:85:b4:ef:4c:04:96:5d:99:a3:66:5c:0e:6d:8d: f7:95:d2:c4:fa:ce:92:2c:c7:bc:17:c4:20:96:60: 4b:32:c2:46:55:5d:4f:63:f7:70:dd:21:d4:2b:b8: 54:25:5b:eb:f8:45:0d:86:f1:99:66:90:27:fe:c6: 3a:28:a5:1a:f1:78:97:c4:4b:6b:6c:0f:2b:65:90: 26:60:c0:b5:9e:e1:ac:7d:d5:19:61:60:95:58:44: 34:12:f7:ec:01:9b:a4:d2:27:c6:af:c0:dd:a3:fb: 19:89:74:09:96:a3:21:d0:00:1a:39:54:8a:71:3c: 7e:0f:23:8d:f8:c1:7e:7e:c1:aa:b9:9f:5f:59:e4: 5a:62:9d:3e:28:29:7f:3d:6f:1e:a1:91:5d:6f:97: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1F:E6:78:09:2C:54:17:14:82:08:67:DA:C9:D4:DD:24:16:96:B3 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:76:ae:ee:ae:2d:82:37:78:47:e8:a6:fa:6c:03:05:57:7a: b8:48:b2:36:6d:b2:19:8f:19:34:25:f4:5d:e8:00:64:8e:b3: 26:12:53:07:fd:93:c5:11:c5:bb:03:89:7b:e2:91:65:d1:1a: d9:b8:89:ff:7a:73:18:4f:dc:09:e8:1f:ae:02:f1:0f:80:e8: 23:32:0f:d9:1b:dd:fa:6c:5d:89:1d:c5:f1:b6:e2:62:55:1a: a5:90:be:4c:c7:8b:4e:57:25:bb:ca:24:70:58:4f:c1:66:d2: 61:5f:e6:83:19:32:91:ab:cf:b6:35:49:c7:43:be:06:5d:e6: 21:13:df:f3:16:9a:4f:7a:cd:d1:c8:76:62:d8:48:23:f2:f1: cd:88:3e:1e:77:8b:8e:96:f5:e3:ba:21:6a:09:e7:99:78:17: 77:0d:90:0e:bd:5b:ae:cb:20:00:ed:0a:23:8d:5f:00:e9:61: 2b:3e:2d:87:bb:df:e1:5b:53:40:88:63:5e:1d:ca:d5:8d:b8: 70:3b:c2:ea:34:28:f3:c3:a3:a7:55:25:21:32:f8:bb:63:93: 2a:ed:6f:8f:73:d5:c5:54:72:12:b0:e2:cf:45:53:60:74:50: 74:17:11:2f:94:b3:27:13:2a:0b:10:f2:56:70:69:2a:50:a5: 76:90:36:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwODExMDU0MzE1WhcNMjUwODE4MDU0MzE1WjAYMRYwFAYD VQQDEw02ODk5ODJmMy03Y2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtES0lN73h1sFfIGqqTyXG/Hug0iVjK0ZAdFyOgx5L1+Fg3iN6rquVi6wvIbR HZyf5NF2/IvxECDqGoUuWIqXR0Y3TI99xSjeqkelwnLS7zRIK60EiAG80Z+sUxMz s9gk9ekuUDpFz+e8hbTvTASWXZmjZlwObY33ldLE+s6SLMe8F8QglmBLMsJGVV1P Y/dw3SHUK7hUJVvr+EUNhvGZZpAn/sY6KKUa8XiXxEtrbA8rZZAmYMC1nuGsfdUZ YWCVWEQ0EvfsAZuk0ifGr8Ddo/sZiXQJlqMh0AAaOVSKcTx+DyON+MF+fsGquZ9f WeRaYp0+KCl/PW8eoZFdb5fPtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4f5ngJ LFQXFIIIZ9rJ1N0kFpazMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjdq7uri2CN3hH6Kb6bAMFV3q4SLI2bbIZjxk0JfRd6ABkjrMmElMH /ZPFEcW7A4l74pFl0RrZuIn/enMYT9wJ6B+uAvEPgOgjMg/ZG936bF2JHcXxtuJi VRqlkL5Mx4tOVyW7yiRwWE/BZtJhX+aDGTKRq8+2NUnHQ74GXeYhE9/zFppPes3R yHZi2Egj8vHNiD4ed4uOlvXjuiFqCeeZeBd3DZAOvVuuyyAA7QojjV8A6WErPi2H u9/hW1NAiGNeHcrVjbhwO8LqNCjzw6OnVSUhMvi7Y5Mq7W+Pc9XFVHISsOLPRVNg dFB0FxEvlLMnEyoLEPJWcGkqUKV2kDZN -----END CERTIFICATE-----Generated at Mon Aug 11 13:11:19 2025 by rpki-client