$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft File: exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json) Hash identifier: CQrV6Y/G6Ts7Yh2ZmsEvO/UhBD5P7vq3R3XTbQh3L/o= Subject key identifier: 4C:A9:7F:C7:05:E4:32:1C:54:3E:C0:85:3D:37:4F:C0:B0:82:BF:C4 Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF Certificate issuer: /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Certificate serial: 0F96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft Manifest number: 0F8F Signing time: Wed 06 Aug 2025 17:40:28 +0000 Manifest this update: Wed 06 Aug 2025 17:40:28 +0000 Manifest next update: Wed 13 Aug 2025 17:40:28 +0000 Files and hashes: 1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: HuLSwI+XmO198C+eeYvesoD9iUzSChdMmZ+2ONF5yGg=) 2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: 090bVc+Qwt8YDuc/RlwXjl9kZ0cXU70VKlUww1lp6Co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 17:40:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF Validity Not Before: Aug 6 17:40:28 2025 GMT Not After : Aug 13 17:40:28 2025 GMT Subject: CN=6893938c-df79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:a8:e3:78:c0:4e:e0:e6:f1:f4:60:6a:fb: 52:b3:6d:0a:4e:40:2c:03:ca:d3:f3:b8:3d:1d:7c: 6d:59:66:c4:27:86:96:cc:dd:44:6e:c1:2d:fd:0a: 8d:86:ca:46:48:54:4e:cc:2c:b1:e1:6b:dc:37:e4: f3:77:34:c4:1b:d8:31:b0:52:e6:31:f7:0f:9d:a3: eb:7e:0e:49:5f:b2:ca:b2:c0:a3:db:f6:0c:19:3f: 3a:a5:6c:29:d6:bf:00:65:d8:30:d8:54:5b:e6:f5: 14:fc:74:8b:e9:bc:16:46:dc:5c:4c:1c:b4:55:40: b6:34:72:fc:2b:32:97:68:3c:cf:df:f4:2f:0c:1a: d9:d0:0a:17:29:41:22:b8:51:f6:ab:87:4e:c0:e6: 3e:eb:25:a4:1e:46:5e:7b:30:5b:ea:16:34:c9:84: d5:80:52:d4:cf:f5:09:9c:b4:2c:8e:ca:c7:06:e5: 8e:23:e0:91:82:f4:db:cd:7e:d3:a3:7b:41:79:8b: 7e:1c:45:33:e8:b2:7f:39:89:6e:f9:cb:9a:24:af: 76:6b:a0:1d:01:a4:18:b4:74:f5:04:a5:ab:aa:89: 50:23:01:7c:39:40:5d:6c:c1:e0:fd:b9:1e:86:42: a4:91:af:df:67:0c:84:5d:4c:53:7f:51:c5:16:3a: 3d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A9:7F:C7:05:E4:32:1C:54:3E:C0:85:3D:37:4F:C0:B0:82:BF:C4 X509v3 Authority Key Identifier: keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:25:35:bd:88:5a:06:78:cf:2b:05:f0:ef:5a:66:ea:3c:d9: 7b:bb:0e:29:b3:07:fd:d3:30:21:04:1a:9d:be:a7:b1:68:16: e7:23:d2:1c:c8:6d:2f:de:39:db:82:4f:81:ed:a7:f6:ea:a3: a1:73:6a:f1:16:eb:25:ff:83:31:0e:26:e3:ca:9e:d7:8f:79: c9:06:a9:d4:7f:ea:2d:46:fd:62:19:d0:e8:7b:fe:f1:b6:a5: df:33:b7:c7:f3:c7:ea:2c:52:5f:32:83:f9:9c:20:71:a5:64: 12:11:18:8d:e5:fb:f8:bb:4e:56:aa:10:6b:d0:06:53:7b:36: ac:8c:e9:e9:bb:d6:5a:79:d4:57:be:d8:7a:4c:b3:76:a2:ec: b1:18:73:03:77:3a:e9:d6:d1:cf:d1:23:f2:46:92:ba:25:35: 45:5e:84:8b:b7:b5:23:07:bc:34:74:0f:2f:98:b9:91:17:23: ea:ba:bd:f0:0d:15:a4:ae:73:8e:dd:cc:c1:94:c2:41:2e:42: 0e:eb:0a:6d:ca:de:d9:e6:81:27:e3:32:04:1d:95:de:89:32: 5e:4e:99:20:e1:de:60:16:4c:8b:50:97:04:4f:9d:a5:01:03: 84:56:e8:c8:08:71:60:f0:b6:f2:74:44:31:7c:23:a7:3c:10: 89:db:cf:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZDQjExMTAvBgNVBAUTKDdCMTEyRjlFQkVDMzQyREZDQUM3NzRFQjVDMjY4MTEy NUM2NUUwQ0YwHhcNMjUwODA2MTc0MDI4WhcNMjUwODEzMTc0MDI4WjAYMRYwFAYD VQQDEw02ODkzOTM4Yy1kZjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtqCo43jATuDm8fRgavtSs20KTkAsA8rT87g9HXxtWWbEJ4aWzN1EbsEt/QqN hspGSFROzCyx4WvcN+TzdzTEG9gxsFLmMfcPnaPrfg5JX7LKssCj2/YMGT86pWwp 1r8AZdgw2FRb5vUU/HSL6bwWRtxcTBy0VUC2NHL8KzKXaDzP3/QvDBrZ0AoXKUEi uFH2q4dOwOY+6yWkHkZeezBb6hY0yYTVgFLUz/UJnLQsjsrHBuWOI+CRgvTbzX7T o3tBeYt+HEUz6LJ/OYlu+cuaJK92a6AdAaQYtHT1BKWrqolQIwF8OUBdbMHg/bke hkKkka/fZwyEXUxTf1HFFjo9BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEypf8cF 5DIcVD7AhT03T8Cwgr/EMB8GA1UdIwQYMBaAFHsRL56+w0Lfysd061wmgRJcZeDP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkNCMS82RTg3MkQ1RTY1 NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0X0t4M1RyWENhQkVseGw0 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4RXZucjdEUXRfS3gzVHJYQ2FCRWx4bDRNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkNCMS82RTg3MkQ1RTY1NkYxMUU5QkJFOEY3MjRDNEY5QUUwMi9leEV2bnI3RFF0 X0t4M1RyWENhQkVseGw0TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNJTW9iFoGeM8rBfDvWmbqPNl7uw4pswf90zAhBBqdvqexaBbnI9Ic yG0v3jnbgk+B7af26qOhc2rxFusl/4MxDibjyp7Xj3nJBqnUf+otRv1iGdDoe/7x tqXfM7fH88fqLFJfMoP5nCBxpWQSERiN5fv4u05WqhBr0AZTezasjOnpu9ZaedRX vth6TLN2ouyxGHMDdzrp1tHP0SPyRpK6JTVFXoSLt7UjB7w0dA8vmLmRFyPqur3w DRWkrnOO3czBlMJBLkIO6wptyt7Z5oEn4zIEHZXeiTJeTpkg4d5gFkyLUJcET52l AQOEVujICHFg8LbydEQxfCOnPBCJ28+t -----END CERTIFICATE-----Generated at Thu Aug 7 05:08:12 2025 by rpki-client