$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: 8KwN0UHxaR9S5UO8DaL5SGgOGJ+l79HyRKQU2SQDl9k= Subject key identifier: 5C:CC:61:03:E7:6A:B7:2B:66:ED:3A:D3:79:87:DE:25:D9:18:92:14 Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: F2 Signing time: Sun 03 Aug 2025 05:37:29 +0000 Manifest this update: Sun 03 Aug 2025 05:37:29 +0000 Manifest next update: Sun 10 Aug 2025 05:37:29 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: RTRV5Rgl01eHNA781pTK/yLllmRG2PwNuBK1IDGjGvY=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: clTuA98QXCvhi5mCW68DYLjtbFWaH5Tnj/x9STwbSAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Aug 3 05:37:29 2025 GMT Not After : Aug 10 05:37:29 2025 GMT Subject: CN=688ef599-29c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:a1:91:a1:d5:e7:91:8d:43:bb:be:eb:19: 5f:9f:f3:d6:26:00:87:35:68:11:05:79:a4:57:43: 78:75:18:19:f8:d4:aa:fc:83:73:bb:6b:49:b5:06: 60:5b:c1:5a:13:11:af:0e:4c:a4:ba:a3:9c:c8:a1: 2c:51:1e:64:f7:93:e7:27:18:17:65:6e:8a:c8:ea: 63:e4:cf:7f:40:f7:de:d4:e6:57:d5:f0:a4:3c:15: 03:45:6c:1d:c7:86:b7:de:15:90:09:9a:f9:9f:4a: 24:7e:3f:c8:d9:7f:04:99:13:ca:9c:ac:c3:0e:ce: 36:fe:c6:f8:7e:ab:8c:a9:5b:84:1c:cd:cb:ee:b2: 42:43:d6:6f:55:ef:f3:3c:0d:bd:36:84:3c:2c:04: c8:c9:d9:fb:bb:e3:f8:06:ec:7c:90:c6:74:aa:b1: 5c:44:cf:73:20:97:6a:e1:47:76:82:42:95:ea:ff: aa:12:90:88:3e:6c:8b:5b:34:10:27:17:1d:50:b8: 0c:c9:ea:90:dc:af:7c:89:c0:77:0b:1d:57:38:0b: ee:5a:c3:a9:c1:3d:05:b7:62:ab:dd:7b:4c:a7:12: 46:f4:44:18:61:b1:71:00:33:01:58:15:2e:2f:54: f2:8a:15:72:c0:6c:28:0c:d8:6b:51:8a:27:f5:93: fe:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:61:03:E7:6A:B7:2B:66:ED:3A:D3:79:87:DE:25:D9:18:92:14 X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:cf:22:36:3d:6a:ea:eb:e0:2e:95:66:34:c1:2d:0a:0c:40: f8:4e:a0:19:52:4b:b3:87:e5:f7:7d:d1:6f:85:16:ba:ef:9a: cf:be:c1:de:2f:31:e7:ed:67:4f:6f:74:a1:e9:11:65:4b:93: 6c:f4:6f:d3:37:ac:d0:86:47:6e:09:1a:9f:ca:1c:07:77:8e: 78:16:5d:51:f9:aa:b1:4f:71:ad:34:72:ce:34:00:90:1b:e8: 56:b1:9d:f2:89:7d:fe:c9:cb:03:fa:ba:e0:9d:87:6d:26:30: c6:11:1b:fb:01:fc:8e:57:47:27:11:93:bf:ea:ab:09:e0:5b: a1:cc:27:db:fc:47:6a:30:e4:5d:55:81:5a:16:4c:af:7e:f6: 04:7a:39:de:f7:a9:5d:1d:8e:52:28:c1:88:3c:85:88:f3:10: b9:c3:8a:ef:23:32:cd:fc:91:0a:81:63:f5:f9:7b:b6:27:7f: 4c:26:cc:f0:33:ac:0e:8d:08:dd:5b:1f:aa:4b:53:8c:02:d8: 44:ed:2c:1c:a8:57:5d:24:df:fd:4e:3d:c0:13:d2:e2:d7:4d: 44:20:c3:17:57:ef:54:69:32:0c:98:be:31:83:e2:6e:5e:b5: 8b:61:a6:41:c6:d9:70:95:c9:b7:ec:79:bd:12:3e:ed:e0:47: 22:be:1a:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjUwODAzMDUzNzI5WhcNMjUwODEwMDUzNzI5WjAYMRYwFAYD VQQDEw02ODhlZjU5OS0yOWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHWhkaHV55GNQ7u+6xlfn/PWJgCHNWgRBXmkV0N4dRgZ+NSq/INzu2tJtQZg W8FaExGvDkykuqOcyKEsUR5k95PnJxgXZW6KyOpj5M9/QPfe1OZX1fCkPBUDRWwd x4a33hWQCZr5n0okfj/I2X8EmRPKnKzDDs42/sb4fquMqVuEHM3L7rJCQ9ZvVe/z PA29NoQ8LATIydn7u+P4Bux8kMZ0qrFcRM9zIJdq4Ud2gkKV6v+qEpCIPmyLWzQQ JxcdULgMyeqQ3K98icB3Cx1XOAvuWsOpwT0Ft2Kr3XtMpxJG9EQYYbFxADMBWBUu L1TyihVywGwoDNhrUYon9ZP+CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzMYQPn arcrZu0603mH3iXZGJIUMB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhzyI2PWrq6+AulWY0wS0KDED4TqAZUkuzh+X3fdFvhRa675rPvsHe LzHn7WdPb3Sh6RFlS5Ns9G/TN6zQhkduCRqfyhwHd454Fl1R+aqxT3GtNHLONACQ G+hWsZ3yiX3+ycsD+rrgnYdtJjDGERv7AfyOV0cnEZO/6qsJ4FuhzCfb/EdqMORd VYFaFkyvfvYEejne96ldHY5SKMGIPIWI8xC5w4rvIzLN/JEKgWP1+Xu2J39MJszw M6wOjQjdWx+qS1OMAthE7SwcqFddJN/9Tj3AE9Li101EIMMXV+9UaTIMmL4xg+Ju XrWLYaZBxtlwlcm37Hm9Ej7t4Ecivho9 -----END CERTIFICATE-----Generated at Mon Aug 4 11:25:34 2025 by rpki-client