$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: wWV5L0uQuAKrS3X3fAhoCJn4iml1hvaCG2UAJXAk+5M= Subject key identifier: 9E:1B:6B:64:C3:BE:90:51:6B:0D:E4:90:F4:23:7C:E0:69:C7:D4:1F Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0126 Signing time: Sun 03 Aug 2025 05:04:27 +0000 Manifest this update: Sun 03 Aug 2025 05:04:27 +0000 Manifest next update: Sun 10 Aug 2025 05:04:27 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: F6YbiG1yPv54wX3w/XLmhURNad40PB8oHabBZzsy5s4=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Aug 3 05:04:27 2025 GMT Not After : Aug 10 05:04:27 2025 GMT Subject: CN=688eeddb-ad28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a9:63:7f:03:8a:c9:82:03:7b:30:5c:e7:22: 27:80:57:85:a3:5c:1b:dc:6a:d1:1a:a2:4e:95:e7: b6:94:a9:db:1e:41:a1:b9:38:32:9e:29:15:af:ea: 62:5a:5f:82:11:e0:c3:b6:2b:9b:32:59:4f:25:1d: 6b:1c:76:06:f9:29:73:ee:d1:70:08:63:87:e8:bb: b3:1e:8c:4a:c2:c0:fd:93:46:3f:72:38:4c:d8:9f: 78:29:c7:a7:30:19:b7:48:b9:d7:17:ba:d6:e8:a5: ae:90:c7:ff:14:e2:f0:fb:a1:d8:0f:dc:02:6f:29: 53:6a:96:72:e9:30:88:53:4f:74:cf:b0:3d:95:04: 90:14:1e:a7:b8:d1:4d:1b:42:c3:27:a5:78:65:7c: a8:f7:9a:7d:05:b5:d5:a8:ec:1f:06:65:98:51:72: 6b:db:20:ec:86:c0:40:67:ee:0d:c2:89:1a:0b:98: f2:22:57:01:43:ff:c9:73:b8:06:a5:a4:db:55:8a: 72:e5:3d:95:63:27:8c:8c:85:2d:34:a3:0e:de:5a: 2d:8b:c3:98:88:d8:e8:0f:24:d5:29:e5:2c:fc:ff: 2c:d5:67:71:8d:e0:7a:85:cf:e6:04:c6:63:b6:15: dc:55:eb:1d:8f:02:24:6c:76:8f:7c:a5:7c:f5:d6: 50:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:1B:6B:64:C3:BE:90:51:6B:0D:E4:90:F4:23:7C:E0:69:C7:D4:1F X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:35:c1:72:2d:77:42:3a:26:77:d1:c3:54:90:e9:2a:c8:f4: 92:fb:8c:73:e7:7f:8d:11:2f:19:3e:6e:c5:23:cf:b0:49:7d: 4d:89:21:1b:52:0b:1f:1b:e6:99:ea:85:38:ec:0c:56:c8:be: c9:9a:68:9d:78:c0:10:7e:ef:54:64:65:d3:75:62:14:ab:2a: a1:5d:2a:48:55:a5:61:6a:75:4b:f5:ee:87:09:a2:ff:c1:ae: 90:f3:52:7f:4d:36:32:d2:8f:36:36:58:19:0b:ed:bf:1e:63: f0:25:c5:c3:b6:bc:9d:d0:a6:2c:55:cd:a8:43:77:9b:ea:53: 27:90:8d:b7:aa:4f:d6:b5:da:00:94:cb:1d:89:8e:24:66:a5: 5e:01:ff:54:1e:de:68:ed:b3:42:bd:ed:fd:2d:21:7b:58:8f: 3b:f5:59:45:02:37:95:67:b9:00:fe:88:aa:9c:1e:02:05:62: 8e:97:0b:9a:4c:03:1d:03:c6:cc:75:5c:61:6d:ee:a2:7c:28: e3:8f:aa:66:46:ad:85:6e:ca:33:f4:d1:05:e6:e9:e0:4e:3c: 56:77:fc:d6:fa:dc:46:bc:2d:d2:3a:52:71:53:36:4e:13:39: 00:f9:f4:6d:b2:9b:db:20:89:32:b9:76:63:f6:17:ce:d5:e9: 3c:15:fd:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwODAzMDUwNDI3WhcNMjUwODEwMDUwNDI3WjAYMRYwFAYD VQQDEw02ODhlZWRkYi1hZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApqljfwOKyYIDezBc5yIngFeFo1wb3GrRGqJOlee2lKnbHkGhuTgynikVr+pi Wl+CEeDDtiubMllPJR1rHHYG+Slz7tFwCGOH6LuzHoxKwsD9k0Y/cjhM2J94Kcen MBm3SLnXF7rW6KWukMf/FOLw+6HYD9wCbylTapZy6TCIU090z7A9lQSQFB6nuNFN G0LDJ6V4ZXyo95p9BbXVqOwfBmWYUXJr2yDshsBAZ+4NwokaC5jyIlcBQ//Jc7gG paTbVYpy5T2VYyeMjIUtNKMO3loti8OYiNjoDyTVKeUs/P8s1WdxjeB6hc/mBMZj thXcVesdjwIkbHaPfKV89dZQ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4ba2TD vpBRaw3kkPQjfOBpx9QfMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtNcFyLXdCOiZ30cNUkOkqyPSS+4xz53+NES8ZPm7FI8+wSX1NiSEb UgsfG+aZ6oU47AxWyL7JmmideMAQfu9UZGXTdWIUqyqhXSpIVaVhanVL9e6HCaL/ wa6Q81J/TTYy0o82NlgZC+2/HmPwJcXDtryd0KYsVc2oQ3eb6lMnkI23qk/WtdoA lMsdiY4kZqVeAf9UHt5o7bNCve39LSF7WI879VlFAjeVZ7kA/oiqnB4CBWKOlwua TAMdA8bMdVxhbe6ifCjjj6pmRq2Fbsoz9NEF5ungTjxWd/zW+txGvC3SOlJxUzZO EzkA+fRtspvbIIkyuXZj9hfO1ek8Ff1w -----END CERTIFICATE-----Generated at Mon Aug 4 11:10:20 2025 by rpki-client