$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: um3XnKvZ8snvh3sUQo4WwFEt8B7dELN+6N1h7sqlilw= Subject key identifier: E5:72:44:F4:E3:4C:B8:93:C2:E8:9F:4B:80:DA:AF:EE:B9:71:5F:00 Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: E7 Signing time: Thu 07 Aug 2025 05:54:37 +0000 Manifest this update: Thu 07 Aug 2025 05:54:37 +0000 Manifest next update: Thu 14 Aug 2025 05:54:37 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: LczqhRj/TZ18Qypt0FT0OYhmqIFPwkETq+RxKpuHpgM=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: 6KnYqtU5eDGuSaPKMnhRfcXUWukIQCJpgFhNSz5ECjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Aug 7 05:54:37 2025 GMT Not After : Aug 14 05:54:37 2025 GMT Subject: CN=68943f9d-0b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:45:8b:76:bd:a1:f5:52:a6:e2:32:56:5c:3b: f0:e5:a7:0d:25:14:24:a2:05:18:67:07:dd:ad:70: d6:63:1b:97:31:a6:02:36:2e:6c:fa:02:e7:63:88: 35:fb:d7:2d:15:6b:b8:34:81:13:aa:d5:db:47:a2: 85:ea:f4:f1:70:94:49:1b:11:e6:17:79:38:e5:c5: b3:48:ef:ac:c2:cc:25:5c:8f:df:23:e3:71:95:d7: 4d:1f:31:2b:3c:43:87:c7:d8:39:4c:a2:db:cc:ed: c3:93:66:83:88:3e:b2:a4:6c:6a:df:7b:a1:05:06: 0c:c6:85:4d:cc:37:74:33:e3:94:a4:32:04:10:5b: ef:7b:8d:c2:89:a0:b0:67:67:1c:a9:a3:1a:6a:46: fd:e2:ad:2b:d9:ec:0c:fe:a8:1d:8c:f8:42:57:21: 24:48:d6:7d:b6:2a:fb:73:2c:31:a0:06:3d:15:0a: 39:de:b1:7c:40:29:43:01:e0:a9:56:ba:f3:fd:44: 1b:0e:a2:01:bf:f3:58:4a:4e:d8:df:14:0c:4e:38: 8d:fb:91:6c:2c:44:72:e2:3b:0e:c1:b7:64:d0:13: ec:82:2d:85:7e:91:2d:0d:ad:b2:2d:f2:8c:f2:4f: 3a:d5:64:5e:06:69:fc:e5:a6:cc:30:6f:72:cb:81: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:72:44:F4:E3:4C:B8:93:C2:E8:9F:4B:80:DA:AF:EE:B9:71:5F:00 X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:0c:8b:da:d5:56:75:83:8c:7f:37:d1:2a:9b:a7:d1:e2:f7: 98:55:f4:54:ce:c6:3d:a0:e1:c3:a5:a8:bc:2c:2e:b9:32:84: f8:4e:a8:01:03:de:ad:5c:48:41:cf:35:c1:cb:80:e9:b5:0f: 5e:d8:90:31:ae:e1:b6:cc:2b:8b:fc:89:28:c1:02:55:ff:99: af:c2:c3:f6:75:c0:8c:b6:94:92:0c:dd:52:b3:57:e7:52:01: 3c:64:ad:c5:91:cb:9c:d9:2e:d3:fe:b1:08:1f:b4:20:48:95: 79:b0:e4:e9:98:29:d6:53:cd:57:b1:cc:19:e9:ba:da:0d:1c: de:2c:a3:5b:39:d4:15:54:1b:8f:d8:61:23:9e:27:d6:11:41: c8:8b:c3:bf:7c:d2:74:c1:b1:cf:83:0c:15:ba:d6:ea:3b:0d: cc:79:47:e6:bd:da:9d:03:aa:e2:20:c6:a8:c1:e9:4d:4a:e6: 75:94:60:c6:dd:a5:62:f3:54:dd:a0:60:b8:d8:7b:fe:fe:8b: 76:14:05:2b:61:62:ee:59:d1:4d:12:26:a0:8e:7d:b2:e5:21: f8:c3:73:81:03:af:2e:0d:8f:99:31:16:3d:fa:17:e5:61:06: 12:c5:e8:7b:0b:f8:30:6b:3a:f0:9a:cb:c2:b9:a1:0f:8b:7b: 19:9d:02:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUwODA3MDU1NDM3WhcNMjUwODE0MDU1NDM3WjAYMRYwFAYD VQQDEw02ODk0M2Y5ZC0wYjQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUWLdr2h9VKm4jJWXDvw5acNJRQkogUYZwfdrXDWYxuXMaYCNi5s+gLnY4g1 +9ctFWu4NIETqtXbR6KF6vTxcJRJGxHmF3k45cWzSO+swswlXI/fI+NxlddNHzEr PEOHx9g5TKLbzO3Dk2aDiD6ypGxq33uhBQYMxoVNzDd0M+OUpDIEEFvve43CiaCw Z2ccqaMaakb94q0r2ewM/qgdjPhCVyEkSNZ9tir7cywxoAY9FQo53rF8QClDAeCp Vrrz/UQbDqIBv/NYSk7Y3xQMTjiN+5FsLERy4jsOwbdk0BPsgi2FfpEtDa2yLfKM 8k861WReBmn85abMMG9yy4ER6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVyRPTj TLiTwuifS4Dar+65cV8AMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2DIva1VZ1g4x/N9Eqm6fR4veYVfRUzsY9oOHDpai8LC65MoT4TqgB A96tXEhBzzXBy4DptQ9e2JAxruG2zCuL/IkowQJV/5mvwsP2dcCMtpSSDN1Ss1fn UgE8ZK3Fkcuc2S7T/rEIH7QgSJV5sOTpmCnWU81XscwZ6braDRzeLKNbOdQVVBuP 2GEjnifWEUHIi8O/fNJ0wbHPgwwVutbqOw3MeUfmvdqdA6riIMaowelNSuZ1lGDG 3aVi81TdoGC42Hv+/ot2FAUrYWLuWdFNEiagjn2y5SH4w3OBA68uDY+ZMRY9+hfl YQYSxeh7C/gwazrwmsvCuaEPi3sZnQJz -----END CERTIFICATE-----Generated at Fri Aug 8 19:22:09 2025 by rpki-client