$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: egpakbfgdBs/ey19/qmXfOnOml2HZH6AvBVrPmqq32U= Subject key identifier: C5:37:47:F6:03:A4:F2:BA:B2:14:54:18:C6:17:10:B1:67:0B:DC:80 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0DC9 Signing time: Fri 08 Aug 2025 18:06:12 +0000 Manifest this update: Fri 08 Aug 2025 18:06:11 +0000 Manifest next update: Fri 15 Aug 2025 18:06:11 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: VglSwt7KEVZNpecag55tbOpR/a1FFa3O76kkOgq7JTg=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Aug 8 18:06:11 2025 GMT Not After : Aug 15 18:06:11 2025 GMT Subject: CN=68963c94-ced8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:58:9f:9e:c9:76:0d:64:b3:f4:fd:a4:a7:ee: df:9d:6c:02:78:18:d5:c5:fc:b2:ac:90:a5:8e:a8: 25:78:1f:0e:31:f9:68:5a:07:a3:1b:e2:15:77:e0: f2:e6:fa:01:36:62:a7:4a:03:cf:54:0b:02:da:8c: 4c:13:97:57:2f:0f:36:c7:7d:93:fe:bc:73:88:d1: 6a:88:2e:a7:8c:4c:61:8f:f8:0d:2d:b1:12:38:45: a3:84:70:14:3b:a1:12:ed:3e:03:3b:dd:16:55:48: 2e:a7:91:bb:49:58:6d:8a:92:76:37:56:74:23:75: 6a:d4:d2:1e:0b:a3:b5:33:fb:68:ad:68:41:a3:ec: 95:21:eb:f6:a8:f2:73:49:15:f2:26:e3:b9:f3:9b: 3c:a1:eb:37:58:f6:02:29:3f:69:e6:00:e9:9a:f2: 8e:b5:55:ac:8c:e5:c7:4b:d1:0c:b6:bc:a0:56:5c: 37:f8:c3:a6:2e:e0:97:c4:0e:c7:53:54:c1:08:c5: 54:25:77:44:46:43:d6:04:3b:01:36:70:c0:53:2a: 44:18:2c:12:10:30:83:0f:77:11:9d:73:aa:3c:db: 35:7a:90:34:46:c8:cf:71:2e:47:a4:ca:36:98:c2: f5:6f:8f:69:8e:1d:36:fb:be:18:34:ab:3d:0c:fa: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:37:47:F6:03:A4:F2:BA:B2:14:54:18:C6:17:10:B1:67:0B:DC:80 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:53:6e:86:59:f4:e6:1c:56:fe:06:1e:34:19:05:a8:79:99: 8f:c5:65:c6:5f:ff:7d:97:47:50:4f:6d:14:69:b2:c5:7e:d1: 2e:51:18:ad:40:00:8f:5c:a9:dd:18:2a:e2:09:82:69:c1:fe: 1b:bd:42:49:ce:62:37:93:6a:2a:e8:f5:32:89:db:4b:a1:6c: 07:ce:bb:7b:92:f6:81:e2:99:c7:79:e4:c2:a4:7b:82:2f:02: ef:3c:f7:aa:39:ce:0e:87:9e:ca:b7:77:2e:c4:91:17:08:6e: 87:71:7a:db:ec:c3:36:07:72:9b:1a:45:09:38:07:f9:10:4d: de:3b:e3:bb:99:67:d6:14:af:f6:d0:5d:1f:98:77:7e:8b:2a: 51:6e:36:53:a3:3c:52:b8:64:43:2f:e7:27:d5:7e:19:34:8a: 5e:d5:1e:51:a2:2c:04:8e:4a:cc:bc:53:3c:04:0c:39:2d:06: 09:cb:18:c5:3e:12:2f:8e:54:0a:b4:bd:39:bf:d5:72:eb:7b: c9:0e:a1:3e:d0:2d:2c:3b:b3:f2:fa:90:44:36:26:62:1a:d9: db:fe:f4:57:d8:75:87:31:96:c5:bf:00:ed:46:15:ee:0a:e9: 1a:06:39:40:39:ab:75:54:50:f5:d3:a2:19:9b:af:f1:c7:c9: c3:a7:7a:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwODA4MTgwNjExWhcNMjUwODE1MTgwNjExWjAYMRYwFAYD VQQDEw02ODk2M2M5NC1jZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Fifnsl2DWSz9P2kp+7fnWwCeBjVxfyyrJCljqgleB8OMfloWgejG+IVd+Dy 5voBNmKnSgPPVAsC2oxME5dXLw82x32T/rxziNFqiC6njExhj/gNLbESOEWjhHAU O6ES7T4DO90WVUgup5G7SVhtipJ2N1Z0I3Vq1NIeC6O1M/torWhBo+yVIev2qPJz SRXyJuO585s8oes3WPYCKT9p5gDpmvKOtVWsjOXHS9EMtrygVlw3+MOmLuCXxA7H U1TBCMVUJXdERkPWBDsBNnDAUypEGCwSEDCDD3cRnXOqPNs1epA0RsjPcS5HpMo2 mML1b49pjh02+74YNKs9DPpYwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMU3R/YD pPK6shRUGMYXELFnC9yAMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3U26GWfTmHFb+Bh40GQWoeZmPxWXGX/99l0dQT20UabLFftEuURit QACPXKndGCriCYJpwf4bvUJJzmI3k2oq6PUyidtLoWwHzrt7kvaB4pnHeeTCpHuC LwLvPPeqOc4Oh57Kt3cuxJEXCG6HcXrb7MM2B3KbGkUJOAf5EE3eO+O7mWfWFK/2 0F0fmHd+iypRbjZTozxSuGRDL+cn1X4ZNIpe1R5RoiwEjkrMvFM8BAw5LQYJyxjF PhIvjlQKtL05v9Vy63vJDqE+0C0sO7Py+pBENiZiGtnb/vRX2HWHMZbFvwDtRhXu CukaBjlAOat1VFD106IZm6/xx8nDp3qm -----END CERTIFICATE-----Generated at Sun Aug 10 13:51:56 2025 by rpki-client