$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: y7CRK51xa9vtIYzWkEalrbxRgElo4x8sTDlpPMKELPc= Subject key identifier: B0:3B:92:32:A6:F6:22:E7:AB:49:AC:2D:59:E6:AC:97:EA:EF:7F:2E Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: DE Signing time: Sat 09 Aug 2025 05:53:47 +0000 Manifest this update: Sat 09 Aug 2025 05:53:46 +0000 Manifest next update: Sat 16 Aug 2025 05:53:46 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: helcwm7p2IYPjdA83bWo0O0T19bwNCvDQ5yOnwvcCjU=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Aug 9 05:53:46 2025 GMT Not After : Aug 16 05:53:46 2025 GMT Subject: CN=6896e26a-e5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:f4:4d:94:b3:94:d1:60:89:7d:db:32:9c: 1a:4e:ff:cd:17:fb:3f:30:6e:db:9e:66:4d:34:cf: 78:1c:e7:34:8c:56:0b:3f:f0:8a:3a:70:cd:7e:7d: 21:64:23:a5:d8:a2:dc:94:c6:d5:e2:2e:14:11:28: b7:70:9e:44:de:29:8f:37:f9:34:25:aa:b5:0c:cc: f5:ab:12:b0:b9:c3:ff:c8:9a:b8:23:ac:05:d5:6c: 4f:cf:7e:7e:f3:cb:4d:52:35:ef:64:de:68:3a:e5: 03:03:53:c6:b6:8b:1c:24:eb:9a:a2:8c:ed:93:80: 74:7c:55:93:9c:66:dd:c0:b1:36:a7:bd:46:12:93: 8f:c6:c3:6e:fb:f3:4a:99:ce:82:4c:3c:5f:b5:bf: 33:0d:dc:56:a5:7a:9e:02:8c:3f:18:02:2b:3d:06: a0:cf:8a:2d:66:76:37:45:06:f4:3f:2d:81:2b:b4: 6d:32:40:c5:48:ce:01:97:4e:e8:2b:85:7d:54:22: 4f:3e:00:8a:36:3b:93:4c:a5:43:d2:f3:45:3e:4d: fd:e6:3e:19:c4:1f:b4:8a:39:76:54:48:df:1f:9f: 7a:bb:69:3c:cc:b9:65:6b:29:2b:99:db:de:ad:de: 80:05:c5:6e:a8:5f:f4:f3:9e:93:4a:c5:f7:15:fe: d6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3B:92:32:A6:F6:22:E7:AB:49:AC:2D:59:E6:AC:97:EA:EF:7F:2E X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d7:06:2f:c2:85:1f:8d:03:89:34:a4:bc:e7:8d:5e:f0:09: fb:5d:cb:40:8b:2d:17:d3:5d:b2:f4:c5:27:e8:f2:d0:a3:01: b8:6b:33:4c:7e:e5:36:cd:53:bb:c7:87:96:d7:e8:12:12:21: 43:18:35:28:cf:47:eb:b2:6b:d1:64:24:22:c4:90:c2:91:24: 17:0d:be:e0:1e:1e:13:5d:86:b4:9e:08:c0:4b:54:f5:3d:8b: 77:2b:1e:3c:7b:b3:fe:24:1f:a5:9a:43:03:46:59:18:95:5b: 98:77:f7:f1:57:ff:bd:cd:12:99:58:32:38:88:14:6c:96:ad: 2f:0f:e8:28:25:8f:ea:89:a3:5a:5b:03:86:32:61:d1:4a:10: 29:3d:cb:a0:c1:04:5c:bd:88:d5:35:10:7a:f7:46:23:cb:be: 27:a8:e0:47:1e:48:e7:72:80:a9:9a:ca:6f:4f:6e:0a:86:62: 31:b3:e4:fc:39:31:0f:af:22:91:d7:46:6c:79:d8:4d:dd:88: 35:76:5b:29:92:39:a8:22:61:09:be:36:69:df:d0:42:b9:71: be:8c:42:a1:c9:e8:db:e9:e4:69:fa:b5:e2:00:55:65:a1:08: d7:73:87:27:4d:67:bb:30:1f:41:92:af:58:af:8b:39:43:9a: 33:db:c0:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwODA5MDU1MzQ2WhcNMjUwODE2MDU1MzQ2WjAYMRYwFAYD VQQDEw02ODk2ZTI2YS1lNWM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wf0TZSzlNFgiX3bMpwaTv/NF/s/MG7bnmZNNM94HOc0jFYLP/CKOnDNfn0h ZCOl2KLclMbV4i4UESi3cJ5E3imPN/k0Jaq1DMz1qxKwucP/yJq4I6wF1WxPz35+ 88tNUjXvZN5oOuUDA1PGtoscJOuaooztk4B0fFWTnGbdwLE2p71GEpOPxsNu+/NK mc6CTDxftb8zDdxWpXqeAow/GAIrPQagz4otZnY3RQb0Py2BK7RtMkDFSM4Bl07o K4V9VCJPPgCKNjuTTKVD0vNFPk395j4ZxB+0ijl2VEjfH596u2k8zLllaykrmdve rd6ABcVuqF/0856TSsX3Ff7WjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLA7kjKm 9iLnq0msLVnmrJfq738uMB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB71wYvwoUfjQOJNKS8541e8An7XctAiy0X012y9MUn6PLQowG4azNM fuU2zVO7x4eW1+gSEiFDGDUoz0frsmvRZCQixJDCkSQXDb7gHh4TXYa0ngjAS1T1 PYt3Kx48e7P+JB+lmkMDRlkYlVuYd/fxV/+9zRKZWDI4iBRslq0vD+goJY/qiaNa WwOGMmHRShApPcugwQRcvYjVNRB690Yjy74nqOBHHkjncoCpmspvT24KhmIxs+T8 OTEPryKR10ZsedhN3Yg1dlspkjmoImEJvjZp39BCuXG+jEKhyejb6eRp+rXiAFVl oQjXc4cnTWe7MB9Bkq9Yr4s5Q5oz28BG -----END CERTIFICATE-----Generated at Sun Aug 10 13:57:01 2025 by rpki-client