$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft File: -E-7QV2aRUM2Lt9yZfU34s_5-CA.mft (raw, json) Hash identifier: 95X4esZVi1Eruggp2dUjKN/RA/XIDDPwdNSWkFqe8xU= Subject key identifier: C5:9D:FD:FA:A6:05:F7:FC:8A:DC:8B:5F:A0:46:40:B3:85:F4:38:36 Authority key identifier: F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 Certificate issuer: /CN=A91BCDC6/serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft Manifest number: 0149 Signing time: Sat 09 Aug 2025 04:39:07 +0000 Manifest this update: Sat 09 Aug 2025 04:39:06 +0000 Manifest next update: Sat 16 Aug 2025 04:39:06 +0000 Files and hashes: 1: -E-7QV2aRUM2Lt9yZfU34s_5-CA.crl (hash: PyiLDqKeFXAkNAYWNefcPvASIamgRvVwIxFX50y+64c=) 2: 254E9F807D4A11EEABBD1328C4F9AE02.roa (hash: D3pmccxd7HAcoRpNwl+DNJm+TOWT+mbBNl5xHiUaFnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCDC6, serialNumber=F84FBB415D9A4543362EDF7265F537E2CFF9F820 Validity Not Before: Aug 9 04:39:06 2025 GMT Not After : Aug 16 04:39:06 2025 GMT Subject: CN=6896d0ea-5a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:61:da:0d:db:fa:6f:50:76:83:22:92:9a:36: eb:cf:b9:87:6d:9b:81:2f:dd:63:8b:4f:6e:88:6f: aa:89:7b:10:1f:d4:ac:53:f1:e0:8a:4b:4e:b9:a5: 0a:9e:5d:9f:31:06:7a:65:a4:e4:77:d3:22:18:5a: 6c:c8:58:a1:40:d2:d5:6e:6c:4a:54:a5:d7:e5:3c: 62:11:11:08:bd:e2:93:0a:a6:9a:38:b5:56:aa:3c: 7e:75:aa:ee:77:c6:c8:49:28:13:87:a0:33:59:39: 6d:af:b6:4d:56:d5:78:70:5e:7c:b0:04:22:91:1d: 78:bf:35:c9:52:0b:bb:48:a5:8e:c5:6b:a1:95:b2: ee:0e:a8:f6:a0:83:6c:c3:f5:6c:82:80:ca:73:d0: fe:ca:4a:52:f1:4e:b4:aa:61:45:71:29:eb:36:56: 86:cb:4f:7b:ba:1a:34:0e:38:f6:ec:d2:33:ff:bd: c3:48:77:4d:9b:19:47:6e:aa:9e:3d:ba:55:25:a2: 3d:30:f6:ed:74:01:7e:46:60:64:fa:cb:c5:9b:01: 96:70:0b:0c:35:a5:de:05:31:57:81:41:f8:f0:d2: 36:b6:5a:0e:3f:45:4b:11:f6:89:e5:ee:0c:3a:05: 64:38:4f:d6:01:12:59:88:1b:8b:09:f4:8a:7e:50: 17:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:FD:FA:A6:05:F7:FC:8A:DC:8B:5F:A0:46:40:B3:85:F4:38:36 X509v3 Authority Key Identifier: keyid:F8:4F:BB:41:5D:9A:45:43:36:2E:DF:72:65:F5:37:E2:CF:F9:F8:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-E-7QV2aRUM2Lt9yZfU34s_5-CA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCDC6/80128EC87D4911EEB9C6DC26C4F9AE02/-E-7QV2aRUM2Lt9yZfU34s_5-CA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:82:cc:37:7f:0c:db:fe:da:2b:66:00:41:00:7c:2d:cb:4c: 5f:fe:7b:b4:ee:e9:b3:73:b3:2a:21:c8:6d:a3:7b:c2:a8:4e: b8:bc:f9:cd:6e:9d:64:f5:35:70:09:42:b5:df:d3:02:d9:a2: b1:b2:27:2d:82:7c:a9:b0:85:bd:1e:e3:b2:3d:bc:c9:22:10: 99:4e:4a:c5:88:99:23:3b:fc:ef:e0:3b:01:7e:95:4f:9f:61: 73:2e:49:27:db:5e:50:df:1d:6d:e6:ca:c3:d0:07:1a:ff:50: 9a:c4:15:85:c4:a0:7c:54:b0:21:6e:c6:85:84:e4:87:c1:c2: 7a:f8:82:10:66:b0:f0:7a:9c:69:2b:f3:3f:f0:33:14:d3:60: d9:04:49:f0:e3:a8:27:0b:6d:41:0d:d6:ad:4a:70:e4:a0:de: 33:1a:ae:13:12:25:e5:fa:80:01:dc:91:e8:64:aa:53:e6:aa: b4:a6:ff:60:17:65:67:46:ce:af:49:53:79:f2:61:38:77:9b: 9a:21:7d:5a:f1:d4:cc:38:76:8b:9c:77:8c:ac:8f:4d:65:0a: dd:da:3e:3a:ca:e6:66:cd:12:cf:46:28:1d:03:f2:a5:3b:60: 03:3c:54:f7:cf:5b:d8:fb:e4:28:34:da:20:11:d8:2d:87:d2: 3e:23:bf:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNEQzYxMTAvBgNVBAUTKEY4NEZCQjQxNUQ5QTQ1NDMzNjJFREY3MjY1RjUzN0Uy Q0ZGOUY4MjAwHhcNMjUwODA5MDQzOTA2WhcNMjUwODE2MDQzOTA2WjAYMRYwFAYD VQQDEw02ODk2ZDBlYS01YTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqWHaDdv6b1B2gyKSmjbrz7mHbZuBL91ji09uiG+qiXsQH9SsU/HgiktOuaUK nl2fMQZ6ZaTkd9MiGFpsyFihQNLVbmxKVKXX5TxiEREIveKTCqaaOLVWqjx+daru d8bISSgTh6AzWTltr7ZNVtV4cF58sAQikR14vzXJUgu7SKWOxWuhlbLuDqj2oINs w/VsgoDKc9D+ykpS8U60qmFFcSnrNlaGy097uho0Djj27NIz/73DSHdNmxlHbqqe PbpVJaI9MPbtdAF+RmBk+svFmwGWcAsMNaXeBTFXgUH48NI2tloOP0VLEfaJ5e4M OgVkOE/WARJZiBuLCfSKflAXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWd/fqm Bff8ityLX6BGQLOF9Dg2MB8GA1UdIwQYMBaAFPhPu0FdmkVDNi7fcmX1N+LP+fgg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0RDNi84MDEyOEVDODdE NDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJVTTJMdDl5WmZVMzRzXzUt Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1FLTdRVjJhUlVNMkx0OXlaZlUzNHNfNS1DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0RDNi84MDEyOEVDODdENDkxMUVFQjlDNkRDMjZDNEY5QUUwMi8tRS03UVYyYVJV TTJMdDl5WmZVMzRzXzUtQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQgsw3fwzb/torZgBBAHwty0xf/nu07umzc7MqIchto3vCqE64vPnN bp1k9TVwCUK139MC2aKxsictgnypsIW9HuOyPbzJIhCZTkrFiJkjO/zv4DsBfpVP n2FzLkkn215Q3x1t5srD0Aca/1CaxBWFxKB8VLAhbsaFhOSHwcJ6+IIQZrDwepxp K/M/8DMU02DZBEnw46gnC21BDdatSnDkoN4zGq4TEiXl+oAB3JHoZKpT5qq0pv9g F2VnRs6vSVN58mE4d5uaIX1a8dTMOHaLnHeMrI9NZQrd2j46yuZmzRLPRigdA/Kl O2ADPFT3z1vY++QoNNogEdgth9I+I7+V -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:42 2025 by rpki-client