$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft File: d7TYOLfSKf0cdNVYLHNekbVnteI.mft (raw, json) Hash identifier: CxNf5OzaEYsWgFlpaM6T7l7KBQU/dqK/CWzxXPOZxKw= Subject key identifier: C2:E4:FD:F6:F5:91:F5:E6:CD:A4:95:D4:AE:2E:FB:65:76:B1:87:10 Authority key identifier: 77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 Certificate issuer: /CN=A91D9EAC/serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Certificate serial: 040D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft Manifest number: 0408 Signing time: Thu 07 Aug 2025 00:58:37 +0000 Manifest this update: Thu 07 Aug 2025 00:58:37 +0000 Manifest next update: Thu 14 Aug 2025 00:58:37 +0000 Files and hashes: 1: d7TYOLfSKf0cdNVYLHNekbVnteI.crl (hash: 585zF+F+KaCoWoXzNI6oQsKn4cxF5XTPEle/JWbXaqc=) 2: 55976FBE7F4A11ECB6E05A38C4F9AE02.roa (hash: gxyFLyvg9iXUzDVt1BFdSUDwgh1JJfmLmwnyPeOCm3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1037 (0x40d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9EAC, serialNumber=77B4D838B7D229FD1C74D5582C735E91B567B5E2 Validity Not Before: Aug 7 00:58:37 2025 GMT Not After : Aug 14 00:58:37 2025 GMT Subject: CN=6893fa3d-fb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:01:2c:86:99:02:64:12:f3:60:c8:a0:78:e5: 51:42:e5:af:48:ff:2c:61:06:78:a6:6b:43:73:d9: 52:b3:8f:0f:29:54:10:dd:92:b0:d5:74:14:35:25: 7f:bb:df:14:96:c6:65:2b:d2:39:74:f8:67:0a:dd: 6d:f0:16:d1:11:0a:84:06:ba:cc:ba:f2:d2:df:1b: 89:11:84:3f:9e:9f:6d:1a:05:d5:c7:8a:92:26:e8: e6:95:a3:65:e9:86:27:03:ea:4d:c6:27:c1:a0:ef: ac:d9:60:59:8c:6e:d1:6c:7c:af:2c:bd:0c:70:73: e5:08:be:0a:f5:b3:d7:b1:66:d9:83:79:04:9e:13: 83:d1:3f:f0:ad:8d:31:e9:2e:40:b0:e4:5c:2a:9a: 6d:d9:84:b0:92:74:b3:42:ab:95:6a:a8:03:9f:5d: ed:ec:b8:2c:98:9a:48:3b:56:25:6f:91:33:a2:00: 72:65:5b:f0:79:90:67:82:d0:3e:1c:be:f7:e6:26: 20:0d:fe:bf:d5:da:92:b5:47:2b:25:fa:8e:33:38: 4e:8c:74:0a:58:09:49:12:ff:6d:47:42:9d:a9:df: b7:aa:e2:0a:02:38:63:dc:e1:a3:b3:10:b3:fa:d0: 01:ee:65:d2:4e:97:74:d9:e8:3f:cf:d0:c1:aa:f2: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:FD:F6:F5:91:F5:E6:CD:A4:95:D4:AE:2E:FB:65:76:B1:87:10 X509v3 Authority Key Identifier: keyid:77:B4:D8:38:B7:D2:29:FD:1C:74:D5:58:2C:73:5E:91:B5:67:B5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d7TYOLfSKf0cdNVYLHNekbVnteI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9EAC/5D450FAE7F4611ECAED3EA62C4F9AE02/d7TYOLfSKf0cdNVYLHNekbVnteI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:ee:d4:73:3c:c7:8b:5a:d0:46:79:c4:7a:43:f5:c4:0b:11: c4:ed:24:fc:f1:4d:2d:60:ad:70:73:bf:71:03:f8:04:f3:da: 98:21:10:d2:9b:86:ac:43:4e:e1:65:3e:32:dc:e1:a6:14:1e: 8b:84:f7:b0:06:7e:c7:19:db:81:32:4f:08:7b:dc:65:e1:c1: f5:30:b1:83:9b:04:a2:ac:61:a8:c2:fd:dc:a5:c2:16:79:9b: 28:43:04:0e:ae:c8:d3:c7:73:bd:94:f2:3e:a6:d8:c5:c6:d6: 05:e2:8f:d1:93:d7:28:b2:6e:31:1d:44:08:17:cc:bf:7b:51: d8:60:0c:58:30:c5:80:f7:7c:d9:e3:2a:83:31:98:5f:ca:6f: 11:8d:27:f4:75:ad:61:62:23:05:5f:3c:bb:f6:d8:c8:f0:40: 08:aa:d7:98:ca:6b:96:e1:5b:08:53:b7:83:d4:a8:18:d5:d6: d3:24:7b:5e:65:7c:66:d1:bd:b0:1e:b0:05:2f:c8:ef:a2:53: 92:ea:ea:cb:55:c1:aa:3b:b4:db:48:99:b4:b5:f2:8d:e1:80: 2b:09:90:36:a3:ca:47:88:26:10:d4:48:03:64:d8:4b:17:61: db:06:b8:0c:73:fd:56:8d:be:92:78:c9:b7:f7:e5:56:22:9c: 72:d3:7d:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlFQUMxMTAvBgNVBAUTKDc3QjREODM4QjdEMjI5RkQxQzc0RDU1ODJDNzM1RTkx QjU2N0I1RTIwHhcNMjUwODA3MDA1ODM3WhcNMjUwODE0MDA1ODM3WjAYMRYwFAYD VQQDEw02ODkzZmEzZC1mYjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+AEshpkCZBLzYMigeOVRQuWvSP8sYQZ4pmtDc9lSs48PKVQQ3ZKw1XQUNSV/ u98UlsZlK9I5dPhnCt1t8BbREQqEBrrMuvLS3xuJEYQ/np9tGgXVx4qSJujmlaNl 6YYnA+pNxifBoO+s2WBZjG7RbHyvLL0McHPlCL4K9bPXsWbZg3kEnhOD0T/wrY0x 6S5AsORcKppt2YSwknSzQquVaqgDn13t7LgsmJpIO1Ylb5EzogByZVvweZBngtA+ HL735iYgDf6/1dqStUcrJfqOMzhOjHQKWAlJEv9tR0Kdqd+3quIKAjhj3OGjsxCz +tAB7mXSTpd02eg/z9DBqvL9QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLk/fb1 kfXmzaSV1K4u+2V2sYcQMB8GA1UdIwQYMBaAFHe02Di30in9HHTVWCxzXpG1Z7Xi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUVBQy81RDQ1MEZBRTdG NDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tmMGNkTlZZTEhOZWtiVm50 ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Q3VFlPTGZTS2YwY2ROVllMSE5la2JWbnRlSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUVBQy81RDQ1MEZBRTdGNDYxMUVDQUVEM0VBNjJDNEY5QUUwMi9kN1RZT0xmU0tm MGNkTlZZTEhOZWtiVm50ZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj7tRzPMeLWtBGecR6Q/XECxHE7ST88U0tYK1wc79xA/gE89qYIRDS m4asQ07hZT4y3OGmFB6LhPewBn7HGduBMk8Ie9xl4cH1MLGDmwSirGGowv3cpcIW eZsoQwQOrsjTx3O9lPI+ptjFxtYF4o/Rk9cosm4xHUQIF8y/e1HYYAxYMMWA93zZ 4yqDMZhfym8RjSf0da1hYiMFXzy79tjI8EAIqteYymuW4VsIU7eD1KgY1dbTJHte ZXxm0b2wHrAFL8jvolOS6urLVcGqO7TbSJm0tfKN4YArCZA2o8pHiCYQ1EgDZNhL F2HbBrgMc/1Wjb6SeMm39+VWIpxy033z -----END CERTIFICATE-----Generated at Sat Aug 9 01:18:52 2025 by rpki-client