$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: bXzW4iR7a/i2o9ODI9l140AHLDAGuE4Kg3LdXm7Iwn4= Subject key identifier: 4E:B6:77:A6:24:B1:7A:DA:06:6A:D9:A3:24:C3:F6:1C:D3:2E:7B:99 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 0724 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 0718 Signing time: Sun 10 Aug 2025 21:54:49 +0000 Manifest this update: Sun 10 Aug 2025 21:54:48 +0000 Manifest next update: Sun 17 Aug 2025 21:54:48 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: sFGou7WQjouMndnanpFHPVvMWTHxohx05aDM1mLliyA=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1828 (0x724) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: Aug 10 21:54:48 2025 GMT Not After : Aug 17 21:54:48 2025 GMT Subject: CN=68991529-dfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2a:cd:d5:f3:73:ea:0a:73:a1:73:5e:9a:84: 4e:10:19:d9:f6:c3:b1:40:20:6e:a8:5f:2d:73:54: d8:68:3c:86:08:13:02:d3:11:73:2a:98:7a:2e:f2: 9e:01:f9:69:81:6d:ae:b2:51:72:18:fa:a0:96:71: bf:6e:cd:1a:16:ec:b6:88:15:1c:34:8d:0d:6b:42: 2b:7a:20:3a:f7:3b:0a:c4:3b:c6:2a:89:be:ba:d9: 63:c8:57:e3:b8:09:50:0e:d9:c1:f1:95:1e:25:77: 07:90:ce:80:a5:bf:e2:74:e8:4f:b9:12:64:29:93: 8f:da:4d:e7:0f:21:2f:ea:54:a4:03:b7:05:25:c6: 1d:46:60:05:81:13:b2:3e:cd:68:7b:df:40:f5:51: 70:14:6c:5a:cd:f9:dc:24:6e:8a:8d:97:a4:3e:8f: 80:97:b1:2b:e9:65:7d:a1:ab:e4:89:94:55:31:d4: 31:64:0d:7d:ae:92:28:cb:59:b9:22:3d:e1:22:5c: 39:55:37:11:00:5c:b5:8b:0d:1f:f2:7a:2e:44:94: d4:fe:59:56:72:e6:be:f5:d1:52:eb:de:7b:5e:f3: b7:29:6c:a6:1f:22:a1:e0:0e:71:10:48:d3:02:a8: fc:16:8f:76:c3:21:ee:cc:93:5d:2d:10:a6:0f:b5: 02:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B6:77:A6:24:B1:7A:DA:06:6A:D9:A3:24:C3:F6:1C:D3:2E:7B:99 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:c1:87:d3:c4:1b:7a:fc:d0:f5:19:e0:3a:7b:f5:94:35: f2:96:bd:f2:db:6c:d2:03:7e:a9:f5:48:89:b6:23:b5:0e:3d: 06:a4:6f:36:3c:4c:20:a9:19:6d:59:d0:94:4f:7a:9f:11:b1: 96:00:76:06:a3:c4:cc:e5:eb:22:ca:a7:80:e5:ea:da:a7:da: fd:d7:dd:bd:6b:7f:a3:b4:56:93:c6:9a:0d:33:50:d4:e0:0b: e0:f4:62:ee:cc:b6:18:e9:8a:5e:55:34:c3:3d:a8:8f:7d:81: 9f:35:10:6b:2c:7a:99:5d:d0:98:27:6b:6a:53:a4:a4:fb:d9: c3:22:6a:3a:c9:c1:0e:65:ba:51:52:28:17:57:65:ed:45:57: 82:2a:72:fc:84:d2:3b:01:4d:76:a1:c6:9b:d6:1f:0f:07:a9: 41:88:7e:0b:1e:c8:06:41:04:c2:bc:5e:0a:97:67:1f:70:48: db:32:bf:03:7e:43:0b:31:37:1e:4f:ac:93:b0:af:f0:0d:2d: 9b:59:3a:eb:ff:ec:e3:6d:3e:20:f9:c3:29:a2:67:ca:99:9b: c9:ff:b4:6f:bd:af:e6:c3:e4:29:ff:ee:41:4e:48:6b:06:23: 8c:4e:93:25:dd:c2:a1:67:65:d0:8c:20:87:6e:ce:ff:67:94: 33:ff:51:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwODEwMjE1NDQ4WhcNMjUwODE3MjE1NDQ4WjAYMRYwFAYD VQQDEw02ODk5MTUyOS1kZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSrN1fNz6gpzoXNemoROEBnZ9sOxQCBuqF8tc1TYaDyGCBMC0xFzKph6LvKe AflpgW2uslFyGPqglnG/bs0aFuy2iBUcNI0Na0IreiA69zsKxDvGKom+utljyFfj uAlQDtnB8ZUeJXcHkM6Apb/idOhPuRJkKZOP2k3nDyEv6lSkA7cFJcYdRmAFgROy Ps1oe99A9VFwFGxazfncJG6KjZekPo+Al7Er6WV9oavkiZRVMdQxZA19rpIoy1m5 Ij3hIlw5VTcRAFy1iw0f8nouRJTU/llWcua+9dFS6957XvO3KWymHyKh4A5xEEjT Aqj8Fo92wyHuzJNdLRCmD7UC8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE62d6Yk sXraBmrZoyTD9hzTLnuZMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvu8GH08QbevzQ9RngOnv1lDXylr3y22zSA36p9UiJtiO1Dj0GpG82 PEwgqRltWdCUT3qfEbGWAHYGo8TM5esiyqeA5erap9r91929a3+jtFaTxpoNM1DU 4Avg9GLuzLYY6YpeVTTDPaiPfYGfNRBrLHqZXdCYJ2tqU6Sk+9nDImo6ycEOZbpR UigXV2XtRVeCKnL8hNI7AU12ocab1h8PB6lBiH4LHsgGQQTCvF4Kl2cfcEjbMr8D fkMLMTceT6yTsK/wDS2bWTrr/+zjbT4g+cMpomfKmZvJ/7Rvva/mw+Qp/+5BTkhr BiOMTpMl3cKhZ2XQjCCHbs7/Z5Qz/1EL -----END CERTIFICATE-----Generated at Mon Aug 11 07:45:05 2025 by rpki-client