$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: Mk/R5L66nGbijr1TyBSkpJMCTzCqekZ0EC6WsN0cZog= Subject key identifier: 75:04:AD:80:D1:2C:1A:08:FB:5F:B8:1F:7F:E0:59:4D:06:8E:B2:17 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 01B0 Signing time: Tue 05 Aug 2025 03:49:28 +0000 Manifest this update: Tue 05 Aug 2025 03:49:27 +0000 Manifest next update: Tue 12 Aug 2025 03:49:27 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: xkr3AvhgJ+j5xsNoY+wGpXZ3bHspzbE7j1Mgn0MvKTI=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 2Sk6qdac85J3PHWk8OUfv3qQs5GZrJRqheFoyWeSnOE=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: T/t95RGiv+MhA6WaLbxmQnLnySE9uteSKwYbrk4jpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Aug 5 03:49:27 2025 GMT Not After : Aug 12 03:49:27 2025 GMT Subject: CN=68917f48-b523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e4:5f:60:7a:39:6e:0f:77:d1:d0:95:6d:7c: 0f:3a:64:21:f5:32:f3:9f:d5:39:fa:4b:5d:91:dc: 52:f0:63:5b:e8:a4:1d:2f:f6:87:19:8d:e4:c0:20: 25:41:87:4a:1c:3c:e7:42:cd:1b:0f:71:c1:4e:de: e4:2d:f6:c0:0c:6d:da:16:35:d7:79:d1:e4:61:76: ea:26:df:12:45:b4:e4:1e:43:72:a6:29:e4:58:40: e7:74:b6:6b:1e:f8:da:88:3f:1a:96:e9:4a:a4:2e: af:6b:11:e8:75:81:1a:b4:51:ec:f9:06:15:ce:68: 62:54:27:9c:27:29:2e:8f:c8:72:66:da:cc:6d:18: 87:9a:d5:f1:7f:4c:c3:8f:4d:4f:31:b3:68:00:05: 7f:2a:2b:1c:42:92:6d:01:e1:b4:00:19:f2:17:70: 23:d1:dd:2a:97:eb:b1:10:97:77:16:26:c7:ea:cd: 5b:25:da:69:87:7f:b2:49:86:2f:db:81:b3:b1:86: ba:c8:d4:72:14:ec:58:be:e0:b4:20:f1:aa:b4:9c: 56:82:a4:c5:d6:5e:5d:5f:d3:ec:6f:38:7f:7e:87: fb:70:b4:83:f3:5e:c1:b0:86:ee:64:b7:71:9f:77: 3c:c8:48:e5:2c:e2:b1:bd:a8:2f:79:98:80:2f:ec: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:04:AD:80:D1:2C:1A:08:FB:5F:B8:1F:7F:E0:59:4D:06:8E:B2:17 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:58:9d:59:58:52:30:55:1b:79:3d:d9:00:b2:67:db:0c:3d: 19:00:54:d0:76:31:ae:f9:f0:44:1c:9e:1e:4a:d6:23:f0:7f: 3d:40:95:39:fe:1a:1b:bc:b8:5b:a9:a6:84:40:8f:bd:13:12: a7:da:c1:b3:55:5f:d2:71:3c:3c:ae:4f:88:44:c3:54:ff:14: e1:d8:a3:fc:fb:20:76:91:c8:3e:11:71:7c:e7:f5:8b:08:48: eb:05:aa:04:00:df:4c:fb:4c:1a:f8:d2:c7:b0:75:b3:65:bd: c3:0e:92:ff:0d:c4:7c:2c:67:c8:71:91:91:d9:0f:13:f7:bc: a6:fe:24:19:0b:b1:f8:7f:1d:9f:2e:0f:b2:19:a6:0f:4a:04: db:42:fc:73:63:43:c7:e0:53:cc:6f:93:d7:1e:9f:e2:42:97: b5:8f:30:bd:34:2b:c2:b8:7c:f7:b0:6d:38:fc:5c:2c:54:d5: a3:b1:e7:f5:5b:93:5b:9f:86:d8:6d:a6:ae:ab:49:92:3b:2f: 25:ad:ae:88:f1:d5:e0:a6:53:1f:b9:92:79:9a:e5:65:10:7e: 0c:dc:85:9c:8a:f7:19:7c:32:f4:35:fb:bf:15:c1:ad:2d:55: 87:52:2e:cd:08:4b:76:d5:38:bf:43:df:78:c5:28:01:26:d4: 64:d0:90:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUwODA1MDM0OTI3WhcNMjUwODEyMDM0OTI3WjAYMRYwFAYD VQQDEw02ODkxN2Y0OC1iNTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteRfYHo5bg930dCVbXwPOmQh9TLzn9U5+ktdkdxS8GNb6KQdL/aHGY3kwCAl QYdKHDznQs0bD3HBTt7kLfbADG3aFjXXedHkYXbqJt8SRbTkHkNypinkWEDndLZr HvjaiD8alulKpC6vaxHodYEatFHs+QYVzmhiVCecJykuj8hyZtrMbRiHmtXxf0zD j01PMbNoAAV/KiscQpJtAeG0ABnyF3Aj0d0ql+uxEJd3FibH6s1bJdpph3+ySYYv 24GzsYa6yNRyFOxYvuC0IPGqtJxWgqTF1l5dX9Psbzh/fof7cLSD817BsIbuZLdx n3c8yEjlLOKxvagveZiAL+z1HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUErYDR LBoI+1+4H3/gWU0GjrIXMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaWJ1ZWFIwVRt5PdkAsmfbDD0ZAFTQdjGu+fBEHJ4eStYj8H89QJU5 /hobvLhbqaaEQI+9ExKn2sGzVV/ScTw8rk+IRMNU/xTh2KP8+yB2kcg+EXF85/WL CEjrBaoEAN9M+0wa+NLHsHWzZb3DDpL/DcR8LGfIcZGR2Q8T97ym/iQZC7H4fx2f Lg+yGaYPSgTbQvxzY0PH4FPMb5PXHp/iQpe1jzC9NCvCuHz3sG04/FwsVNWjsef1 W5Nbn4bYbaauq0mSOy8lra6I8dXgplMfuZJ5muVlEH4M3IWcivcZfDL0Nfu/FcGt LVWHUi7NCEt21Ti/Q994xSgBJtRk0JAo -----END CERTIFICATE-----Generated at Thu Aug 7 04:38:44 2025 by rpki-client