$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: ujoTkTLjHKII/xqBYr6HBZx8PTarVpZTchtOzbTxYEM= Subject key identifier: A6:EC:D9:72:BC:07:88:30:C1:C4:E1:78:F1:D9:33:AD:12:F0:FC:4B Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 02C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 02B7 Signing time: Sat 09 Aug 2025 02:03:35 +0000 Manifest this update: Sat 09 Aug 2025 02:03:35 +0000 Manifest next update: Sat 16 Aug 2025 02:03:35 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: ZrGHWo28mqQjCRAMmL2LqmluK7zETEaIfIIJW/8C+bM=) 2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=) 3: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: Nuqi/DwAfsIbvqEslH1o2Nq9pgL64KpNEMZ+W/5PR6U=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 712 (0x2c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Aug 9 02:03:35 2025 GMT Not After : Aug 16 02:03:35 2025 GMT Subject: CN=6896ac77-9b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:54:42:93:f1:23:c8:ab:bf:27:9d:76:08:08: 5d:8a:99:ce:41:ed:ed:f6:59:e7:b6:24:42:52:dd: f3:2d:1f:8b:aa:ae:da:ed:86:b7:db:18:2a:6a:f5: 68:57:7e:4e:42:66:5f:82:23:d2:14:e6:89:e0:11: 8f:c5:89:2f:b4:31:5b:78:ef:4a:03:bb:9e:91:b5: 71:b9:9b:80:cc:d0:6f:6a:03:08:1d:cd:f5:c8:06: 2d:37:65:fe:b7:cf:d2:b9:89:80:41:46:5b:23:62: 51:68:4f:4f:21:53:53:2a:83:89:d0:11:46:4c:85: 15:99:55:d8:c0:47:09:44:05:70:22:39:d9:9a:25: 73:9c:38:6d:2e:56:d3:fd:57:67:32:33:54:fa:ce: 45:b6:b9:73:93:e7:84:69:0a:8d:6f:15:ce:64:78: 71:4e:27:91:12:64:a2:ea:ba:49:33:7e:50:33:2a: d7:89:ed:69:52:33:cc:df:ba:8e:e5:21:65:35:65: 8e:87:29:8e:d5:1b:74:a2:7d:63:a5:7e:c0:93:cc: b8:04:9c:28:89:ed:ac:53:8d:22:44:c3:c9:ad:54: 55:06:e6:7a:5e:02:b0:dc:ff:71:05:4d:06:a4:f8: 3e:67:75:8b:f7:ce:da:d4:27:a7:54:86:dc:be:50: 83:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EC:D9:72:BC:07:88:30:C1:C4:E1:78:F1:D9:33:AD:12:F0:FC:4B X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:33:3b:03:ad:fc:47:96:e1:a3:83:19:8b:4b:b8:7d:65:22: 1d:47:63:a5:e4:16:b5:50:ec:15:67:21:f1:0a:81:68:13:f8: 02:74:9d:47:8c:70:b7:c9:9e:73:55:50:44:27:cc:eb:38:66: 72:59:7f:03:99:76:1b:79:c4:d2:c8:d1:82:1c:10:42:95:f7: 71:8b:03:82:0f:84:f6:c8:34:57:38:e7:a4:8a:96:1e:c8:c2: 20:71:76:fc:38:c4:dc:7b:4d:7c:34:82:b4:66:2d:04:e7:df: ad:a1:5f:da:f9:49:ec:ff:bc:0a:80:4f:ce:12:d3:19:7b:98: ad:72:e4:de:01:83:74:64:a5:4f:fd:44:b0:5a:b8:9b:c8:ad: 92:9f:14:27:d8:3a:db:f9:73:65:d6:01:e2:8c:64:ca:2a:c7: 28:7d:14:dd:e6:71:55:5f:e0:e8:93:1d:ba:3a:8f:4f:12:e3: 9a:55:ae:99:34:d3:19:a7:3c:eb:b8:c2:99:eb:77:af:be:14: 28:80:9f:5b:85:3b:03:bb:8c:7b:b3:a0:b8:6a:b1:19:6e:93: 4c:b1:3c:2e:7d:1f:84:18:04:13:d8:1e:34:bd:e7:7b:ca:90: 96:50:51:88:f9:ca:75:ef:d0:80:84:29:66:11:5f:df:77:18: 73:f0:90:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwODA5MDIwMzM1WhcNMjUwODE2MDIwMzM1WjAYMRYwFAYD VQQDEw02ODk2YWM3Ny05YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FRCk/EjyKu/J512CAhdipnOQe3t9lnntiRCUt3zLR+Lqq7a7Ya32xgqavVo V35OQmZfgiPSFOaJ4BGPxYkvtDFbeO9KA7uekbVxuZuAzNBvagMIHc31yAYtN2X+ t8/SuYmAQUZbI2JRaE9PIVNTKoOJ0BFGTIUVmVXYwEcJRAVwIjnZmiVznDhtLlbT /VdnMjNU+s5Ftrlzk+eEaQqNbxXOZHhxTieREmSi6rpJM35QMyrXie1pUjPM37qO 5SFlNWWOhymO1Rt0on1jpX7Ak8y4BJwoie2sU40iRMPJrVRVBuZ6XgKw3P9xBU0G pPg+Z3WL987a1CenVIbcvlCDkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKbs2XK8 B4gwwcThePHZM60S8PxLMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeMzsDrfxHluGjgxmLS7h9ZSIdR2Ol5Ba1UOwVZyHxCoFoE/gCdJ1H jHC3yZ5zVVBEJ8zrOGZyWX8DmXYbecTSyNGCHBBClfdxiwOCD4T2yDRXOOekipYe yMIgcXb8OMTce018NIK0Zi0E59+toV/a+Uns/7wKgE/OEtMZe5itcuTeAYN0ZKVP /USwWribyK2SnxQn2Drb+XNl1gHijGTKKscofRTd5nFVX+Dokx26Oo9PEuOaVa6Z NNMZpzzruMKZ63evvhQogJ9bhTsDu4x7s6C4arEZbpNMsTwufR+EGAQT2B40ved7 ypCWUFGI+cp179CAhClmEV/fdxhz8JBh -----END CERTIFICATE-----Generated at Sat Aug 9 10:47:02 2025 by rpki-client