$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: /7oF/dKlwNiP1N11EUFjOx0J1SSOy4tk0u8DpL1X8Qc= Subject key identifier: F7:D3:24:0B:25:9F:62:41:2F:EE:23:BD:9F:3D:2C:2D:39:18:A8:68 Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: 010A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: 0106 Signing time: Sat 09 Aug 2025 05:29:12 +0000 Manifest this update: Sat 09 Aug 2025 05:29:11 +0000 Manifest next update: Sat 16 Aug 2025 05:29:11 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: 7szZIR8Rs8/UqqGyr05LbVoTTi6099Ehds1UKsk5/l0=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: qnpodXGcflZPtD15FKTFuLS1TSDTJxyYFld/5PeHVPQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 266 (0x10a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Aug 9 05:29:11 2025 GMT Not After : Aug 16 05:29:11 2025 GMT Subject: CN=6896dca8-8fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e6:c9:c6:2e:75:8d:f9:ae:da:7b:af:e4:f5: 4f:17:dd:9a:cb:86:6e:c0:a0:99:fb:f1:0a:8a:e5: 02:02:65:61:a5:d1:8e:ba:c2:05:0e:af:9c:65:8d: 96:3d:8b:00:92:33:bc:ec:95:d9:38:fb:71:31:0e: 64:36:16:60:dd:9f:e4:c0:91:8b:26:2a:c1:83:0a: 34:5f:39:76:77:bc:bb:48:0b:14:13:f3:0c:d2:61: da:be:0d:2c:f9:e5:1f:5c:a5:91:35:4c:65:17:04: 8b:9a:df:38:84:b4:a3:1f:f3:b5:5a:92:bc:b8:38: 7c:54:b8:ab:3e:82:b0:55:ec:18:b5:d0:7c:b7:dc: 8a:c3:25:da:13:74:49:f3:89:3a:1e:cf:2e:72:f2: da:4f:44:89:64:fa:45:7f:d1:fd:04:86:e8:5f:72: b7:3b:fa:17:19:81:ec:e2:1b:2a:47:46:39:25:d6: 94:aa:6a:5d:71:26:02:d5:45:c7:b2:2c:15:71:da: 43:46:b8:e2:e7:58:2f:06:01:c1:02:8f:1f:f9:1b: f9:9e:cd:c7:b7:c5:df:78:cf:ea:a3:20:f2:47:15: 38:ea:91:2a:95:0a:9e:10:8f:91:8b:98:b1:51:c3: b9:68:6a:cd:dc:6b:01:e3:c0:f9:72:0b:00:f9:56: da:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D3:24:0B:25:9F:62:41:2F:EE:23:BD:9F:3D:2C:2D:39:18:A8:68 X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b6:13:07:84:20:d7:dc:28:04:c3:01:61:e4:ee:43:b2:83: a8:fd:4d:14:26:d8:61:71:8a:2e:d1:33:f2:65:e6:a7:1d:48: 88:0d:1d:02:43:30:59:68:4c:64:46:d5:50:28:6a:87:6d:a4: c0:22:ca:4e:2d:c4:28:20:34:52:8e:2b:28:24:3a:55:1b:65: 4d:7a:ef:6d:ee:d1:05:64:44:6b:8e:61:61:c4:d5:6e:c4:71: df:be:7d:09:6a:68:61:f5:75:27:95:42:17:60:14:68:41:03: c9:10:23:f3:0e:c1:b5:e8:fd:96:a0:b3:00:8e:70:bf:81:7c: cd:cb:0e:90:f6:1d:6e:8c:44:fe:95:87:8c:85:e8:6a:2e:e6: 2a:49:c8:c8:86:08:5e:fe:83:55:7b:0a:29:ab:d6:e5:ea:c8: 6f:20:e0:f8:74:15:40:69:9f:58:f7:22:5d:e1:94:6c:2a:fe: 51:73:91:4a:db:dc:89:40:41:b7:61:45:2b:7a:79:e2:2f:b6: 6f:58:7e:df:41:2c:78:19:a4:64:25:c2:40:dc:f7:dd:d2:2c: 5e:57:63:db:97:fb:ff:91:c7:e3:dc:67:f2:81:d2:03:9a:ee: 4d:68:2c:14:6b:f7:3b:25:67:47:c1:c3:c4:98:a2:7c:09:bf: f6:ad:00:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwODA5MDUyOTExWhcNMjUwODE2MDUyOTExWjAYMRYwFAYD VQQDEw02ODk2ZGNhOC04ZmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApObJxi51jfmu2nuv5PVPF92ay4ZuwKCZ+/EKiuUCAmVhpdGOusIFDq+cZY2W PYsAkjO87JXZOPtxMQ5kNhZg3Z/kwJGLJirBgwo0Xzl2d7y7SAsUE/MM0mHavg0s +eUfXKWRNUxlFwSLmt84hLSjH/O1WpK8uDh8VLirPoKwVewYtdB8t9yKwyXaE3RJ 84k6Hs8ucvLaT0SJZPpFf9H9BIboX3K3O/oXGYHs4hsqR0Y5JdaUqmpdcSYC1UXH siwVcdpDRrji51gvBgHBAo8f+Rv5ns3Ht8XfeM/qoyDyRxU46pEqlQqeEI+Ri5ix UcO5aGrN3GsB48D5cgsA+VbaiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfTJAsl n2JBL+4jvZ89LC05GKhoMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCathMHhCDX3CgEwwFh5O5DsoOo/U0UJthhcYou0TPyZeanHUiIDR0C QzBZaExkRtVQKGqHbaTAIspOLcQoIDRSjisoJDpVG2VNeu9t7tEFZERrjmFhxNVu xHHfvn0Jamhh9XUnlUIXYBRoQQPJECPzDsG16P2WoLMAjnC/gXzNyw6Q9h1ujET+ lYeMhehqLuYqScjIhghe/oNVewopq9bl6shvIOD4dBVAaZ9Y9yJd4ZRsKv5Rc5FK 29yJQEG3YUUrenniL7ZvWH7fQSx4GaRkJcJA3Pfd0ixeV2Pbl/v/kcfj3GfygdID mu5NaCwUa/c7JWdHwcPEmKJ8Cb/2rQAo -----END CERTIFICATE-----Generated at Sat Aug 9 14:23:48 2025 by rpki-client