$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: NdqSJYn6FvKE0PDIrofuZcPePIMYYxqJNowA8hjqt3s= Subject key identifier: 49:B5:38:5D:71:A2:1E:98:71:77:0F:0F:A1:EE:36:70:D8:A2:D6:5D Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0AEC Signing time: Tue 12 Aug 2025 19:40:47 +0000 Manifest this update: Tue 12 Aug 2025 19:40:47 +0000 Manifest next update: Tue 19 Aug 2025 19:40:47 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: Nwz6QvuUwFavNEZe1lu+2Ou9vPs+bhaTVJFY2aO3+dQ=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 19:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2824 (0xb08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Aug 12 19:40:47 2025 GMT Not After : Aug 19 19:40:47 2025 GMT Subject: CN=689b98bf-62e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:dc:04:88:f1:b5:4b:67:67:91:32:31:e1: 6b:db:a0:df:46:14:73:bb:b0:93:7c:85:7e:b9:84: 9e:34:1e:33:8b:82:93:fd:ed:3c:a2:57:1f:1b:97: f6:62:85:70:c6:db:7a:8d:ba:62:bf:87:1a:31:3f: 90:4d:b9:14:22:33:37:c0:f4:9c:5a:28:aa:8c:84: 32:2a:04:e0:f4:69:fd:9b:5c:5f:76:ba:dd:e9:14: 93:f1:3f:ed:1b:16:3d:dd:e3:92:38:a8:4b:8e:07: b1:58:51:a7:a3:6e:3e:de:53:9b:01:fd:a6:80:23: db:6e:f2:22:7f:87:3c:8e:09:d6:78:47:8a:d5:86: 19:d6:31:c4:9d:2a:b3:e4:af:fa:2a:52:da:a3:e7: 94:11:85:05:01:f6:f2:03:7d:60:c4:70:e5:51:a7: 5d:65:62:14:01:88:37:5d:81:73:4b:2b:ce:8e:60: bf:f3:30:aa:fe:25:d2:59:7f:fc:5c:5a:2a:af:37: 35:b9:bb:d0:9a:55:8b:4c:ea:ed:36:dd:bb:87:5a: ed:65:b1:f3:39:f0:d0:54:88:fb:d0:ff:1d:5a:78: dc:de:76:34:cb:e8:93:38:40:a2:8d:a6:3d:f0:82: 97:ba:f5:49:10:ed:40:53:c7:f3:45:6b:51:b0:d5: 7d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:38:5D:71:A2:1E:98:71:77:0F:0F:A1:EE:36:70:D8:A2:D6:5D X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0b:b3:be:d2:cb:69:2b:7e:df:c8:7e:09:00:8d:61:6b:de: a2:c1:96:38:6f:6e:9b:9d:af:6b:29:d6:1a:29:05:2c:30:4a: 0d:b0:d3:dd:46:02:08:35:fa:05:a7:14:d1:96:97:7c:17:20: 89:8b:c9:c9:7f:8e:8d:f8:81:41:09:55:6f:6a:fe:58:8c:d7: f8:6a:92:1d:82:78:61:d4:11:c9:1b:4e:a5:e0:57:a6:30:e9: 9d:0a:34:a3:c1:c1:3c:f0:5e:80:cf:88:3f:cc:24:99:7e:6b: 38:0a:b1:0f:6d:99:ec:47:ca:4a:1c:8b:00:3e:b8:25:ed:dd: ee:51:cc:16:a5:09:ba:09:d8:59:08:11:d8:0b:19:04:ed:59: 8c:ae:5d:9b:9d:8d:aa:7e:de:19:2f:73:c0:9f:d0:a2:e1:e0: 4f:23:87:de:e4:a0:9c:42:b5:06:bc:22:07:7a:d1:6d:5f:df: 61:e9:84:71:98:62:59:56:bd:a9:6f:02:70:63:cc:9f:b9:cb: 42:f3:d8:18:12:7d:e4:54:d6:5a:bb:4b:64:11:4a:ad:31:e1: cf:f9:27:a9:6f:a1:cb:67:4b:fb:b8:ea:0b:2d:22:57:2b:af: 8c:af:2e:26:4b:39:e1:26:c9:d1:05:89:0e:54:2f:f3:05:15: ea:76:dc:b6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwODEyMTk0MDQ3WhcNMjUwODE5MTk0MDQ3WjAYMRYwFAYD VQQDEw02ODliOThiZi02MmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzEbcBIjxtUtnZ5EyMeFr26DfRhRzu7CTfIV+uYSeNB4zi4KT/e08olcfG5f2 YoVwxtt6jbpiv4caMT+QTbkUIjM3wPScWiiqjIQyKgTg9Gn9m1xfdrrd6RST8T/t GxY93eOSOKhLjgexWFGno24+3lObAf2mgCPbbvIif4c8jgnWeEeK1YYZ1jHEnSqz 5K/6KlLao+eUEYUFAfbyA31gxHDlUaddZWIUAYg3XYFzSyvOjmC/8zCq/iXSWX/8 XFoqrzc1ubvQmlWLTOrtNt27h1rtZbHzOfDQVIj70P8dWnjc3nY0y+iTOECijaY9 8IKXuvVJEO1AU8fzRWtRsNV9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm1OF1x oh6YcXcPD6HuNnDYotZdMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKC7O+0stpK37fyH4JAI1ha96iwZY4b26bna9rKdYaKQUsMEoNsNPd RgIINfoFpxTRlpd8FyCJi8nJf46N+IFBCVVvav5YjNf4apIdgnhh1BHJG06l4Fem MOmdCjSjwcE88F6Az4g/zCSZfms4CrEPbZnsR8pKHIsAPrgl7d3uUcwWpQm6CdhZ CBHYCxkE7VmMrl2bnY2qft4ZL3PAn9Ci4eBPI4fe5KCcQrUGvCIHetFtX99h6YRx mGJZVr2pbwJwY8yfuctC89gYEn3kVNZau0tkEUqtMeHP+Sepb6HLZ0v7uOoLLSJX K6+Mry4mSznhJsnRBYkOVC/zBRXqdty2 -----END CERTIFICATE-----Generated at Wed Aug 13 04:28:00 2025 by rpki-client