$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: 18EVuDL/59mT2zVjsyAdGgz3DELKalhLyfexSbTKTM0= Subject key identifier: E5:89:52:02:08:6F:97:81:C0:B4:7D:D8:8C:BB:D9:8F:ED:A8:2E:D4 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 011E Signing time: Wed 13 Aug 2025 00:38:58 +0000 Manifest this update: Wed 13 Aug 2025 00:38:58 +0000 Manifest next update: Wed 20 Aug 2025 00:38:58 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: p2uMduMDHPrdxlVvxCYvGiUAdh4UGGLJgsWmZ7gUMSQ=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: 6gN0nzoFmNHVaS7tp1oD/3MNM9qt5KAUk1vZ6H1zsVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Aug 13 00:38:58 2025 GMT Not After : Aug 20 00:38:58 2025 GMT Subject: CN=689bdea2-8012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:7b:40:f4:fc:a4:5a:d2:c7:9a:1e:e3:75: 43:00:84:78:30:16:b6:1d:8c:49:49:47:14:13:95: dd:68:f1:d1:a9:90:28:1e:ee:02:ca:7e:a5:3a:0c: 87:13:92:dd:de:8f:c5:74:f0:b2:59:3c:1f:cc:63: da:19:d1:a9:b9:b2:ee:a0:99:53:f6:98:6f:97:38: cb:17:ff:0f:1b:e7:8d:45:a1:ec:7d:d9:1f:38:46: 0c:e3:01:19:2a:27:a7:b5:55:22:1b:5e:53:26:a3: 22:3c:a6:c4:6d:d9:cf:ab:b9:65:70:15:58:e1:8d: 10:8f:74:55:cc:00:86:be:00:87:8b:01:c1:9b:9a: 82:08:5b:89:e6:a9:d5:1a:09:09:4c:53:a6:da:8a: 23:3a:da:92:fb:3c:85:e2:04:97:1a:17:10:68:a6: a2:4e:88:e5:ac:95:c1:78:a0:b1:88:c0:67:fe:8e: f5:d9:21:4b:bc:e8:10:bd:16:71:6b:de:61:92:89: 3f:a6:fa:76:ff:ff:6e:c2:b0:73:38:e3:a2:bd:de: e9:c6:b0:71:db:4f:81:a8:cd:67:01:da:55:8c:c5: 44:95:5f:1e:72:0f:e1:d2:09:56:9f:6d:71:ab:c3: 57:f0:a9:e8:4a:27:3b:e9:34:ac:d1:e1:66:ee:ea: 7c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:89:52:02:08:6F:97:81:C0:B4:7D:D8:8C:BB:D9:8F:ED:A8:2E:D4 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:03:c0:e7:6a:10:7a:fb:95:44:36:33:24:4d:53:22:df:8b: c0:d3:c2:94:62:87:fc:e2:bf:a2:49:b1:25:b9:7f:8d:8c:84: 36:bb:c2:68:03:bf:67:9b:38:1c:89:2b:37:c4:b8:6d:dd:72: b9:da:a2:1f:2d:03:71:c3:54:d7:ae:72:ec:1a:8e:18:db:0b: 3d:a8:3c:1a:c2:51:fb:f7:ad:8d:13:46:4a:21:f4:8f:1c:30: 87:09:e6:3a:56:99:35:07:39:c9:f9:a7:8b:32:9b:2c:b9:c8: cb:d3:b7:f5:98:d2:66:35:3a:1a:4f:84:8b:8a:70:e6:eb:b0: 91:47:dc:86:8d:f7:f5:18:79:4c:0a:81:57:c2:1e:5c:05:b9: a4:47:f3:cd:aa:19:cf:c5:62:33:1b:a8:12:7a:88:4f:0c:dd: 1c:4a:11:db:9e:c8:5e:81:2b:01:47:7a:81:5b:ee:84:37:13: 87:b3:8f:87:6b:f1:59:e7:06:cf:4f:3c:bb:8b:6b:90:1d:11: 0d:ab:d7:02:1f:cf:05:cb:e0:03:3c:a0:1f:55:4d:7a:f7:3d: 67:32:22:d2:05:d3:f3:02:ed:d1:29:54:49:65:51:6e:9c:ce: e0:14:0e:28:43:6e:dc:4e:ef:6a:87:96:e6:96:cd:27:44:8b: 8c:34:ee:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwODEzMDAzODU4WhcNMjUwODIwMDAzODU4WjAYMRYwFAYD VQQDEw02ODliZGVhMi04MDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6hN7QPT8pFrSx5oe43VDAIR4MBa2HYxJSUcUE5XdaPHRqZAoHu4Cyn6lOgyH E5Ld3o/FdPCyWTwfzGPaGdGpubLuoJlT9phvlzjLF/8PG+eNRaHsfdkfOEYM4wEZ KientVUiG15TJqMiPKbEbdnPq7llcBVY4Y0Qj3RVzACGvgCHiwHBm5qCCFuJ5qnV GgkJTFOm2oojOtqS+zyF4gSXGhcQaKaiTojlrJXBeKCxiMBn/o712SFLvOgQvRZx a95hkok/pvp2//9uwrBzOOOivd7pxrBx20+BqM1nAdpVjMVElV8ecg/h0glWn21x q8NX8KnoSic76TSs0eFm7up8DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWJUgII b5eBwLR92Iy72Y/tqC7UMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVA8DnahB6+5VENjMkTVMi34vA08KUYof84r+iSbEluX+NjIQ2u8Jo A79nmzgciSs3xLht3XK52qIfLQNxw1TXrnLsGo4Y2ws9qDwawlH7962NE0ZKIfSP HDCHCeY6Vpk1BznJ+aeLMpssucjL07f1mNJmNToaT4SLinDm67CRR9yGjff1GHlM CoFXwh5cBbmkR/PNqhnPxWIzG6gSeohPDN0cShHbnshegSsBR3qBW+6ENxOHs4+H a/FZ5wbPTzy7i2uQHRENq9cCH88Fy+ADPKAfVU169z1nMiLSBdPzAu3RKVRJZVFu nM7gFA4oQ27cTu9qh5bmls0nRIuMNO7y -----END CERTIFICATE-----Generated at Wed Aug 13 09:45:20 2025 by rpki-client