$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: pbwKo9HFnGa5i/kuxYjblAHbA63JI+huMVHvGm6aMjQ= Subject key identifier: 67:7E:8C:BB:95:8A:7C:CC:1C:AA:5E:54:EF:75:6B:9D:00:01:16:E1 Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1C08 Signing time: Fri 08 Aug 2025 16:23:21 +0000 Manifest this update: Fri 08 Aug 2025 16:23:20 +0000 Manifest next update: Fri 15 Aug 2025 16:23:20 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: gMGpwdcvJdKFbAqqHDUW6eCpSk53SxxXh0A6mzIxflA=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7202 (0x1c22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Aug 8 16:23:20 2025 GMT Not After : Aug 15 16:23:20 2025 GMT Subject: CN=68962478-c74b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:98:4a:8f:3e:fa:11:44:c7:9a:2d:0f:03: 4a:ea:03:de:6c:2d:28:5b:50:07:b0:5a:2b:be:53: 4d:54:22:f1:89:94:23:98:16:06:7a:95:12:a2:b3: 99:66:d4:8b:f7:b4:d3:98:4a:50:61:5b:f9:8b:d4: f3:f3:95:fc:19:0c:99:7c:bf:46:6c:5d:80:1e:d7: 26:16:62:a0:bf:3a:01:a1:8f:84:db:cb:a3:bf:b1: be:f9:b4:59:46:c5:38:2a:df:2e:c1:e2:24:a3:92: c1:40:6a:fb:37:f8:bd:11:af:18:89:be:87:c1:23: 10:dc:5a:a3:bb:bd:50:7e:09:df:46:f9:2a:00:0d: f9:50:23:24:ee:a5:54:63:6e:34:bd:bb:c0:89:a9: 35:0b:85:fe:85:e9:de:ba:36:2f:a8:cb:52:4b:96: e8:13:ac:b0:9d:cd:32:38:7f:b9:be:9e:a8:a2:65: 5a:a2:f5:2f:d9:53:a1:f4:56:d3:08:41:80:4c:87: 78:d8:73:98:a3:e5:25:9d:00:e9:36:18:eb:16:94: 50:48:19:ce:27:44:81:09:10:e4:7f:5d:9c:1f:1d: 66:30:55:31:d7:14:cc:c2:a3:ec:61:1f:99:5f:2c: 59:a0:f8:c4:e7:25:4a:fc:ae:74:51:42:0a:46:21: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7E:8C:BB:95:8A:7C:CC:1C:AA:5E:54:EF:75:6B:9D:00:01:16:E1 X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:37:fa:ba:df:fa:bd:1f:0e:cd:d8:e5:8a:6d:7b:f5:8d:58: bf:49:34:e1:ee:b5:7c:43:cf:7b:46:db:cc:f8:64:96:7f:a7: 8a:76:32:b2:0a:dd:9c:b6:42:a5:20:7f:14:ce:3b:be:d3:75: 93:20:af:e0:cc:1c:c0:e8:12:75:51:de:e7:3d:ff:18:60:92: 38:c3:45:55:94:34:30:66:64:ae:bf:3b:2a:02:94:44:79:fe: c3:20:6a:54:17:c6:55:b0:07:ae:b9:83:3d:c3:53:62:04:d9: 7f:89:1d:50:16:94:82:82:99:5c:5c:e2:5c:c6:09:3f:15:3f: d0:78:61:8c:30:d6:80:9d:64:9c:37:72:b3:94:4b:1e:c7:2f: 62:eb:65:f0:78:16:99:91:71:28:9f:29:70:62:34:4c:be:0e: ef:e8:a4:2f:42:7b:c0:8e:32:a4:c0:d5:58:28:0d:5e:6f:01: 08:f2:f5:a3:07:d1:73:42:55:9e:88:ab:0c:c1:2a:40:d3:3c: dc:fd:e4:2d:c2:47:e5:a7:62:04:06:b5:80:0d:75:c0:b8:7f: 27:a2:a5:79:97:73:b3:82:64:39:0c:d5:63:3c:62:d2:b2:7c: 12:4b:0a:68:be:a7:ac:ae:3e:8d:2e:0a:14:ce:e2:b9:da:15: 56:c2:99:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwODA4MTYyMzIwWhcNMjUwODE1MTYyMzIwWjAYMRYwFAYD VQQDEw02ODk2MjQ3OC1jNzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjmYSo8++hFEx5otDwNK6gPebC0oW1AHsForvlNNVCLxiZQjmBYGepUSorOZ ZtSL97TTmEpQYVv5i9Tz85X8GQyZfL9GbF2AHtcmFmKgvzoBoY+E28ujv7G++bRZ RsU4Kt8uweIko5LBQGr7N/i9Ea8Yib6HwSMQ3Fqju71QfgnfRvkqAA35UCMk7qVU Y240vbvAiak1C4X+heneujYvqMtSS5boE6ywnc0yOH+5vp6oomVaovUv2VOh9FbT CEGATId42HOYo+UlnQDpNhjrFpRQSBnOJ0SBCRDkf12cHx1mMFUx1xTMwqPsYR+Z XyxZoPjE5yVK/K50UUIKRiF92wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGd+jLuV inzMHKpeVO91a50AARbhMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIN/q63/q9Hw7N2OWKbXv1jVi/STTh7rV8Q897RtvM+GSWf6eKdjKy Ct2ctkKlIH8Uzju+03WTIK/gzBzA6BJ1Ud7nPf8YYJI4w0VVlDQwZmSuvzsqApRE ef7DIGpUF8ZVsAeuuYM9w1NiBNl/iR1QFpSCgplcXOJcxgk/FT/QeGGMMNaAnWSc N3KzlEsexy9i62XweBaZkXEonylwYjRMvg7v6KQvQnvAjjKkwNVYKA1ebwEI8vWj B9FzQlWeiKsMwSpA0zzc/eQtwkflp2IEBrWADXXAuH8noqV5l3OzgmQ5DNVjPGLS snwSSwpovqesrj6NLgoUzuK52hVWwpkQ -----END CERTIFICATE-----Generated at Sat Aug 9 10:45:10 2025 by rpki-client