$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: FAQR3TIhTSLjXeZgUfEGJRrzpEabz7Uz++F3iQ9LGQo= Subject key identifier: B3:15:F8:9E:8A:07:F0:19:C8:95:2A:B0:71:80:4A:3E:F0:59:EC:E1 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03E9 Signing time: Sat 09 Aug 2025 01:02:47 +0000 Manifest this update: Sat 09 Aug 2025 01:02:47 +0000 Manifest next update: Sat 16 Aug 2025 01:02:47 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: deOrsDKrbOhmlgVMIcpVN9KZd9CJxzG2ikYz9tzLXFY=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1009 (0x3f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Aug 9 01:02:47 2025 GMT Not After : Aug 16 01:02:47 2025 GMT Subject: CN=68969e37-58b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:63:f5:da:ee:69:ca:d0:e7:d0:2a:e5:df: d3:33:ab:07:69:9b:5b:0c:82:a3:c0:ec:9e:2d:7a: 15:4b:2a:23:af:12:95:73:12:5a:fa:2d:df:68:89: fa:c7:0c:7e:de:ce:fa:a7:bb:ac:11:b5:6a:46:a3: 75:41:ec:d6:57:c3:36:97:34:f4:4a:74:7f:fa:1c: 83:b9:66:60:08:14:2d:b0:4b:80:bd:ab:f5:52:24: 06:ec:d9:86:a1:15:14:e0:72:e8:4a:80:3a:1f:41: 82:91:5b:c1:4c:2f:9e:c5:f6:95:54:40:6d:3d:c9: 5d:f1:e1:10:5b:a0:e6:25:2a:7d:1d:12:7c:e3:62: 4d:ac:f0:e5:67:bd:5c:55:f4:db:c2:20:37:4c:6e: 50:ae:80:c4:52:41:eb:8d:2c:a5:82:1d:da:82:a0: eb:da:48:8b:34:34:14:fa:bb:7d:e4:d7:4e:d2:07: a7:02:33:5d:b8:e5:97:38:9f:51:40:ee:63:07:04: 43:d9:fa:5e:5d:1b:fc:36:50:b5:b9:e1:b3:2a:86: 04:9b:b0:13:ba:15:bc:fd:a1:53:2b:77:5d:31:95: 1f:6c:e8:0f:40:df:19:4d:bf:3a:d8:8a:c1:15:ae: 38:d1:cc:1e:b7:fa:ef:10:ce:de:d7:3a:4d:a2:48: 9c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:F8:9E:8A:07:F0:19:C8:95:2A:B0:71:80:4A:3E:F0:59:EC:E1 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:f4:20:e7:40:87:d4:b5:a5:9e:40:cb:dc:27:fc:8e:01:01: 64:27:ab:df:bf:a9:f6:fc:ff:5e:cd:81:90:29:19:43:e7:2c: 3d:0a:95:2d:e9:8c:b7:cf:b1:ee:7e:61:ad:b6:f2:05:9d:ca: b9:96:68:29:39:93:9e:fa:22:00:a6:c9:ec:66:34:89:d6:62: 01:3a:fd:71:32:b2:7e:65:28:5e:33:b2:9e:00:68:02:48:19: 18:ce:fd:52:7f:48:da:a5:1a:cf:c4:27:24:d7:6f:2f:b4:16: 49:34:51:cc:65:18:d6:72:29:2d:aa:77:32:87:e2:fd:ef:50: 35:7a:13:f8:ac:94:94:48:f0:bd:78:6d:b3:c2:e0:b7:25:61: 5c:4a:22:d5:27:24:e0:13:b6:f0:9a:69:9c:99:f5:ed:0c:86: 9d:e6:17:6f:ee:23:5c:9f:ec:ab:c0:ee:ac:37:6c:51:52:33: a4:5e:21:57:1d:d4:28:6d:3f:08:bc:8b:22:15:80:39:4f:26: 5b:d3:51:be:40:17:f5:4e:52:c4:11:19:6b:06:da:e8:c0:9f: 73:a6:3e:3c:a5:c1:8c:6a:23:11:be:d5:2c:17:32:eb:8a:29: 66:3b:4a:6f:07:34:f5:37:b2:67:64:12:a0:50:73:f4:d1:9c: 30:bc:45:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwODA5MDEwMjQ3WhcNMjUwODE2MDEwMjQ3WjAYMRYwFAYD VQQDEw02ODk2OWUzNy01OGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwsxj9druacrQ59Aq5d/TM6sHaZtbDIKjwOyeLXoVSyojrxKVcxJa+i3faIn6 xwx+3s76p7usEbVqRqN1QezWV8M2lzT0SnR/+hyDuWZgCBQtsEuAvav1UiQG7NmG oRUU4HLoSoA6H0GCkVvBTC+exfaVVEBtPcld8eEQW6DmJSp9HRJ842JNrPDlZ71c VfTbwiA3TG5QroDEUkHrjSylgh3agqDr2kiLNDQU+rt95NdO0genAjNduOWXOJ9R QO5jBwRD2fpeXRv8NlC1ueGzKoYEm7ATuhW8/aFTK3ddMZUfbOgPQN8ZTb862IrB Fa440cwet/rvEM7e1zpNokicxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMV+J6K B/AZyJUqsHGASj7wWezhMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV9CDnQIfUtaWeQMvcJ/yOAQFkJ6vfv6n2/P9ezYGQKRlD5yw9CpUt 6Yy3z7HufmGttvIFncq5lmgpOZOe+iIApsnsZjSJ1mIBOv1xMrJ+ZSheM7KeAGgC SBkYzv1Sf0japRrPxCck128vtBZJNFHMZRjWciktqncyh+L971A1ehP4rJSUSPC9 eG2zwuC3JWFcSiLVJyTgE7bwmmmcmfXtDIad5hdv7iNcn+yrwO6sN2xRUjOkXiFX HdQobT8IvIsiFYA5TyZb01G+QBf1TlLEERlrBtrowJ9zpj48pcGMaiMRvtUsFzLr iilmO0pvBzT1N7JnZBKgUHP00ZwwvEVo -----END CERTIFICATE-----Generated at Sun Aug 10 10:44:24 2025 by rpki-client