$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: 7O4jye6FpX77v6zeuW1Rthrm2uA7iOSbP9CQv16/v5U= Subject key identifier: AC:4B:5D:82:78:C9:B5:F6:DD:91:EF:10:3C:3A:49:65:51:0E:70:40 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B32 Signing time: Sun 10 Aug 2025 19:17:49 +0000 Manifest this update: Sun 10 Aug 2025 19:17:48 +0000 Manifest next update: Sun 17 Aug 2025 19:17:48 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: 30oPZ2YLdIO4Z4dot0Q22yk1+6+StlD+wBOLwqlZ+VE=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2881 (0xb41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Aug 10 19:17:48 2025 GMT Not After : Aug 17 19:17:48 2025 GMT Subject: CN=6898f05c-270c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:b4:94:ad:25:d2:5f:a0:29:ec:89:c1:31: 30:15:86:6f:50:7f:30:d7:33:9b:6d:22:b2:35:d7: 80:7c:17:22:43:b1:ae:d4:46:df:74:59:61:4e:5b: 80:4b:e2:7c:14:87:eb:63:ef:73:b7:1b:df:59:e8: 01:92:9f:35:ac:dc:c9:84:c3:6d:b4:ee:af:6f:4f: 9c:54:29:da:99:db:10:ba:22:68:88:a9:50:26:58: 88:53:7c:ec:ec:f7:16:cb:c2:c9:91:91:b5:c6:e9: a1:9b:e4:b5:d9:71:11:f0:17:99:36:d7:1b:8b:c5: c6:0a:88:1e:3b:77:31:63:9c:12:70:e7:5a:a4:00: db:10:dc:2b:ad:b6:2d:44:1d:12:b9:e8:0e:7a:32: 0c:78:92:33:98:c8:25:aa:32:e0:a9:ec:3e:b9:9d: d4:72:16:db:ba:a9:b7:d0:58:d6:a6:35:c7:2e:d9: c8:d3:89:b8:7d:f9:01:d1:b7:5f:95:0a:60:e0:94: 65:d2:15:26:17:2a:20:12:17:c7:bd:22:b6:3f:69: 12:c1:57:8d:3d:25:71:d3:cf:69:d6:ae:0b:a6:00: 16:fa:ad:e0:de:d2:1a:80:ce:7a:f9:e3:00:55:82: 63:48:8d:cc:9f:30:79:b5:d7:af:d7:8c:9d:2d:44: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:4B:5D:82:78:C9:B5:F6:DD:91:EF:10:3C:3A:49:65:51:0E:70:40 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:d2:f5:21:93:9c:12:f1:51:4b:0a:1e:a1:91:37:bf:61:2c: ca:2f:bd:59:59:00:5f:7c:a5:51:55:4d:2a:68:9c:c8:54:f9: 44:7d:8f:a5:a2:ad:96:27:96:f4:65:9c:59:bf:4f:30:18:45: 25:ca:0e:eb:33:c6:de:58:cc:fe:bf:42:e9:3f:5d:44:fe:e7: 43:82:59:68:12:7b:a6:22:a7:aa:4f:ab:b5:e5:fe:27:e3:88: 7b:3c:d5:d2:d1:20:17:9f:6b:2e:d3:9b:65:3a:e9:2e:e7:d8: 28:93:52:a7:77:34:87:2a:42:66:14:ac:df:44:57:d6:4c:c7: 4f:ca:d3:02:e2:52:e8:cb:c0:6d:f7:0f:a2:63:a3:cb:7f:a9: 56:6b:48:f0:98:3b:e1:6a:96:04:37:98:3c:c1:6d:7c:c9:36: 92:6c:bb:0b:ab:fd:ed:7b:88:af:71:98:4c:60:2d:c5:85:97: 7e:14:71:f6:f9:9f:23:ae:83:27:65:e4:45:84:4f:9e:c2:ba: 6f:15:fa:80:0d:ef:06:3c:d2:68:ec:be:09:0a:71:58:c2:3b: bb:6f:91:81:ae:b6:e6:6b:37:1a:ad:3e:5f:a9:07:3e:bd:cb: 24:12:11:78:23:49:e8:30:4d:3f:ba:be:0d:fa:d9:0e:48:17: b8:e7:34:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUwODEwMTkxNzQ4WhcNMjUwODE3MTkxNzQ4WjAYMRYwFAYD VQQDEw02ODk4ZjA1Yy0yNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ca0lK0l0l+gKeyJwTEwFYZvUH8w1zObbSKyNdeAfBciQ7Gu1EbfdFlhTluA S+J8FIfrY+9ztxvfWegBkp81rNzJhMNttO6vb0+cVCnamdsQuiJoiKlQJliIU3zs 7PcWy8LJkZG1xumhm+S12XER8BeZNtcbi8XGCogeO3cxY5wScOdapADbENwrrbYt RB0SuegOejIMeJIzmMglqjLgqew+uZ3Uchbbuqm30FjWpjXHLtnI04m4ffkB0bdf lQpg4JRl0hUmFyogEhfHvSK2P2kSwVeNPSVx089p1q4LpgAW+q3g3tIagM56+eMA VYJjSI3MnzB5tdev14ydLUTd8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxLXYJ4 ybX23ZHvEDw6SWVRDnBAMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn0vUhk5wS8VFLCh6hkTe/YSzKL71ZWQBffKVRVU0qaJzIVPlEfY+l oq2WJ5b0ZZxZv08wGEUlyg7rM8beWMz+v0LpP11E/udDglloEnumIqeqT6u15f4n 44h7PNXS0SAXn2su05tlOuku59gok1KndzSHKkJmFKzfRFfWTMdPytMC4lLoy8Bt 9w+iY6PLf6lWa0jwmDvhapYEN5g8wW18yTaSbLsLq/3te4ivcZhMYC3FhZd+FHH2 +Z8jroMnZeRFhE+ewrpvFfqADe8GPNJo7L4JCnFYwju7b5GBrrbmazcarT5fqQc+ vcskEhF4I0noME0/ur4N+tkOSBe45zSY -----END CERTIFICATE-----Generated at Mon Aug 11 01:48:43 2025 by rpki-client