$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft File: T_-scXgTOS7hyHajIWceHWwqubQ.mft (raw, json) Hash identifier: 85j0vBl1x/vJfGVNOp1OcxSuKXAYjQqwyqHcCu+0UhE= Subject key identifier: D2:DA:38:B2:27:EE:74:50:F7:EF:82:D0:3A:3F:C8:01:43:1D:1B:84 Authority key identifier: 4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 Certificate issuer: /CN=A91CE39F/serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Certificate serial: 07F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft Manifest number: 07E4 Signing time: Wed 06 Aug 2025 21:24:15 +0000 Manifest this update: Wed 06 Aug 2025 21:24:14 +0000 Manifest next update: Wed 13 Aug 2025 21:24:14 +0000 Files and hashes: 1: T_-scXgTOS7hyHajIWceHWwqubQ.crl (hash: 2RZ8WVrADGzfhJG5r4uJXcOlB2QosJLiLe72BmLWv0E=) 2: CAF5CED2E1A511EC8AB72944C4F9AE02.roa (hash: zbiYtUOfzyp7ptHvHbV0SU4d4rP1mH83ebF8pRuNsx0=) 3: CC57D98CE1A511EC8AB72944C4F9AE02.roa (hash: ZYqL2fHcbNd2tSbNDmjF+dD/m7i54Wfd/1i3In6hhsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2040 (0x7f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE39F, serialNumber=4FFFAC717813392EE1C876A321671E1D6C2AB9B4 Validity Not Before: Aug 6 21:24:14 2025 GMT Not After : Aug 13 21:24:14 2025 GMT Subject: CN=6893c7fe-19ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:3f:bb:c6:03:b5:40:00:31:77:55:02:02: 5b:f4:17:10:a3:d9:2b:8c:2a:04:fe:51:a0:d3:94: 5e:86:32:7c:cf:f0:93:48:6f:5f:c7:ba:39:a3:18: 63:7b:f7:96:25:f2:71:5d:38:b4:90:cf:0f:75:aa: 15:38:6a:18:70:e9:27:4b:f5:23:2e:f2:8c:df:a1: b5:9d:e1:f3:fe:25:60:45:df:99:1c:ab:f6:98:6b: 9b:d4:41:fc:b5:ee:05:44:41:23:84:8a:35:08:8b: 0a:a9:5f:5c:a3:0e:82:92:fd:06:7d:f0:5d:69:ac: eb:ec:ac:ae:0f:3a:b9:67:22:70:fe:dd:8e:5c:85: c1:3a:23:87:9c:09:43:58:3c:0c:07:f2:fb:e1:c2: 33:d6:87:52:f0:9f:7d:23:e2:9e:19:01:1f:f9:ef: 47:ed:08:aa:c9:4d:1f:be:48:0e:d5:22:c7:e4:6f: 28:5b:50:f3:a6:6c:bd:ec:ac:d5:02:49:3f:6b:da: a7:1d:9e:40:7e:01:3c:f6:27:1a:25:34:7b:72:64: f0:ed:ae:4b:44:53:c9:50:98:e0:b0:20:67:77:a8: 6a:70:3d:3c:13:15:81:68:2b:96:bc:47:99:64:58: 50:bf:ae:ec:eb:66:70:07:ee:20:c9:2e:95:57:a0: 52:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DA:38:B2:27:EE:74:50:F7:EF:82:D0:3A:3F:C8:01:43:1D:1B:84 X509v3 Authority Key Identifier: keyid:4F:FF:AC:71:78:13:39:2E:E1:C8:76:A3:21:67:1E:1D:6C:2A:B9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_-scXgTOS7hyHajIWceHWwqubQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE39F/C15C41B4FD5711EABC3CA24DC4F9AE02/T_-scXgTOS7hyHajIWceHWwqubQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:72:6d:36:4c:67:43:9f:07:50:64:95:ae:e4:1a:ba:b2:1a: ee:8f:b1:eb:4e:14:75:bb:14:5e:19:7d:76:87:e3:ea:fc:64: bb:c7:15:c8:48:63:6b:23:8f:92:2d:cb:ac:66:4f:73:8f:a8: 98:24:5e:6f:80:24:eb:53:42:4f:b8:fd:f3:af:12:5d:7b:49: 8a:cb:2b:62:a4:9c:2c:de:cc:68:3d:4f:c0:78:55:cc:0e:e4: 31:65:d3:63:f9:14:fc:03:a4:a2:0e:0e:91:b0:37:79:1e:39: 61:49:c9:ba:f3:2c:cd:57:f4:4a:b6:d3:ff:94:9d:3e:d1:08: b9:44:82:78:10:91:c7:1b:eb:ef:79:47:3d:d3:ce:8f:57:fa: 60:14:f3:8e:1a:5d:eb:26:f8:6e:db:b7:a6:d8:e0:7c:f5:84: 54:bf:9a:cd:81:0f:43:64:2d:9d:12:82:82:80:81:52:14:a9: 3f:2c:70:e0:ec:6c:ec:d3:d4:cc:c6:7f:d1:79:5c:94:11:72: c3:bf:a0:46:9d:57:15:cd:dd:ed:22:00:04:e8:30:e1:93:99: 10:80:6d:5b:b8:62:6d:87:fe:48:e2:a1:25:62:a0:a1:c8:7a: 4d:47:b4:ba:fc:f9:1d:d7:9a:fa:15:51:f6:9c:b7:dc:c0:ea: 36:03:7e:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzOUYxMTAvBgNVBAUTKDRGRkZBQzcxNzgxMzM5MkVFMUM4NzZBMzIxNjcxRTFE NkMyQUI5QjQwHhcNMjUwODA2MjEyNDE0WhcNMjUwODEzMjEyNDE0WjAYMRYwFAYD VQQDEw02ODkzYzdmZS0xOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4R0/u8YDtUAAMXdVAgJb9BcQo9krjCoE/lGg05RehjJ8z/CTSG9fx7o5oxhj e/eWJfJxXTi0kM8PdaoVOGoYcOknS/UjLvKM36G1neHz/iVgRd+ZHKv2mGub1EH8 te4FREEjhIo1CIsKqV9cow6Ckv0GffBdaazr7KyuDzq5ZyJw/t2OXIXBOiOHnAlD WDwMB/L74cIz1odS8J99I+KeGQEf+e9H7QiqyU0fvkgO1SLH5G8oW1Dzpmy97KzV Akk/a9qnHZ5AfgE89icaJTR7cmTw7a5LRFPJUJjgsCBnd6hqcD08ExWBaCuWvEeZ ZFhQv67s62ZwB+4gyS6VV6BS9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLaOLIn 7nRQ9++C0Do/yAFDHRuEMB8GA1UdIwQYMBaAFE//rHF4Ezku4ch2oyFnHh1sKrm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTM5Ri9DMTVDNDFCNEZE NTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9TN2h5SGFqSVdjZUhXd3F1 YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RfLXNjWGdUT1M3aHlIYWpJV2NlSFd3cXViUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTM5Ri9DMTVDNDFCNEZENTcxMUVBQkMzQ0EyNERDNEY5QUUwMi9UXy1zY1hnVE9T N2h5SGFqSVdjZUhXd3F1YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATcm02TGdDnwdQZJWu5Bq6shruj7HrThR1uxReGX12h+Pq/GS7xxXI SGNrI4+SLcusZk9zj6iYJF5vgCTrU0JPuP3zrxJde0mKyytipJws3sxoPU/AeFXM DuQxZdNj+RT8A6SiDg6RsDd5HjlhScm68yzNV/RKttP/lJ0+0Qi5RIJ4EJHHG+vv eUc9086PV/pgFPOOGl3rJvhu27em2OB89YRUv5rNgQ9DZC2dEoKCgIFSFKk/LHDg 7Gzs09TMxn/ReVyUEXLDv6BGnVcVzd3tIgAE6DDhk5kQgG1buGJth/5I4qElYqCh yHpNR7S6/Pkd15r6FVH2nLfcwOo2A37o -----END CERTIFICATE-----Generated at Thu Aug 7 17:39:58 2025 by rpki-client