$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: hCHbyRnO2lIpG8YbAYQpnTIvBKqUk7xErXIwDi9c73k= Subject key identifier: A7:10:E3:51:40:D0:83:9C:70:85:81:91:E3:28:FE:33:1A:CD:36:CD Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0680 Signing time: Tue 12 Aug 2025 22:44:34 +0000 Manifest this update: Tue 12 Aug 2025 22:44:34 +0000 Manifest next update: Tue 19 Aug 2025 22:44:34 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: sXibEXTalT2wSRytjwUqdqW5taXWceEAZ8B6nnQRylg=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 22:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: Aug 12 22:44:34 2025 GMT Not After : Aug 19 22:44:34 2025 GMT Subject: CN=689bc3d2-04b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:49:d4:b3:9c:a8:7e:69:8a:d3:e3:5c:50:0d: cc:31:ac:0c:98:b2:0c:32:e0:74:bd:a0:b3:47:b0: d5:71:38:51:53:2c:b7:be:18:52:30:f2:80:e8:0c: 40:23:31:f3:bf:da:77:03:7c:33:f9:b5:64:06:d2: 16:6e:11:95:0d:d3:38:51:bd:8c:ec:6d:aa:5d:5e: f0:dd:a6:7a:46:82:a7:44:9c:15:84:c2:f4:96:87: ce:ac:82:9b:23:0d:93:11:6f:92:76:52:2e:c5:0b: b0:e7:3f:15:49:59:32:ec:33:3c:12:74:2a:81:d2: 8a:80:39:1a:72:56:0a:57:99:e4:cd:12:21:45:bb: 79:b1:b4:5e:84:d1:ca:66:2b:09:2b:45:4c:b8:6b: 4e:20:46:ea:86:70:b1:c9:00:fd:e4:e9:34:34:95: d0:5f:cb:3c:1b:92:83:ac:17:4e:27:f7:fc:95:03: b7:db:4e:95:85:0a:ca:32:31:34:d8:9c:98:05:fd: cd:cf:fa:7a:94:d1:0d:4c:b7:13:9e:62:81:81:68: 83:3d:08:07:2c:ed:8a:1d:65:9f:7c:e3:42:5f:3d: 56:7a:99:73:89:76:65:c2:9f:df:70:91:57:f9:c7: 04:80:6f:cc:4a:7b:29:a6:c2:42:ed:8d:35:75:7e: 52:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:10:E3:51:40:D0:83:9C:70:85:81:91:E3:28:FE:33:1A:CD:36:CD X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:80:46:5e:73:e7:19:26:ca:47:28:f2:ec:d3:25:8e:1d:48: 28:ab:2d:97:f8:49:f1:b9:92:19:97:7b:7c:44:db:df:44:3f: 28:fb:eb:f3:19:33:15:11:29:e4:1f:77:a6:f0:85:71:50:19: f3:4c:3d:71:e4:9c:ca:3f:06:77:e2:29:de:a6:88:46:eb:4a: f3:fe:bb:f5:a5:a4:f7:38:33:fd:ba:ce:29:81:91:8d:b9:4b: 16:ff:4c:d6:fd:f6:48:a0:f5:48:48:9d:2a:e3:90:aa:80:65: 35:98:71:07:a0:80:2d:13:57:32:24:c4:09:29:57:80:e0:f3: 34:5f:29:8e:a4:92:41:0d:9f:a7:2a:fe:34:e5:4f:c3:4a:2f: cf:df:f3:c4:da:30:bf:64:ca:3b:76:43:a6:7b:66:49:9d:a9: f0:e2:56:4f:ac:34:47:a5:64:74:67:91:e9:4d:f3:47:a1:7f: 09:21:b5:04:31:3a:8c:ae:39:66:3e:bf:bc:f1:3d:6a:77:4b: e3:46:07:05:af:7c:ee:e8:ee:26:66:44:51:c5:c8:c4:3a:85: 3d:59:9d:1f:de:eb:9d:6b:1d:a3:68:aa:02:24:62:0e:a0:d6: 96:29:35:09:65:de:f1:2f:0b:2a:22:26:33:d4:dc:ca:f0:e1: 49:a9:8f:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwODEyMjI0NDM0WhcNMjUwODE5MjI0NDM0WjAYMRYwFAYD VQQDEw02ODliYzNkMi0wNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5knUs5yofmmK0+NcUA3MMawMmLIMMuB0vaCzR7DVcThRUyy3vhhSMPKA6AxA IzHzv9p3A3wz+bVkBtIWbhGVDdM4Ub2M7G2qXV7w3aZ6RoKnRJwVhML0lofOrIKb Iw2TEW+SdlIuxQuw5z8VSVky7DM8EnQqgdKKgDkaclYKV5nkzRIhRbt5sbRehNHK ZisJK0VMuGtOIEbqhnCxyQD95Ok0NJXQX8s8G5KDrBdOJ/f8lQO3206VhQrKMjE0 2JyYBf3Nz/p6lNENTLcTnmKBgWiDPQgHLO2KHWWffONCXz1WeplziXZlwp/fcJFX +ccEgG/MSnsppsJC7Y01dX5SCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcQ41FA 0IOccIWBkeMo/jMazTbNMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXgEZec+cZJspHKPLs0yWOHUgoqy2X+EnxuZIZl3t8RNvfRD8o++vz GTMVESnkH3em8IVxUBnzTD1x5JzKPwZ34inepohG60rz/rv1paT3ODP9us4pgZGN uUsW/0zW/fZIoPVISJ0q45CqgGU1mHEHoIAtE1cyJMQJKVeA4PM0XymOpJJBDZ+n Kv405U/DSi/P3/PE2jC/ZMo7dkOme2ZJnanw4lZPrDRHpWR0Z5HpTfNHoX8JIbUE MTqMrjlmPr+88T1qd0vjRgcFr3zu6O4mZkRRxcjEOoU9WZ0f3uudax2jaKoCJGIO oNaWKTUJZd7xLwsqIiYz1NzK8OFJqY/J -----END CERTIFICATE-----Generated at Wed Aug 13 05:56:18 2025 by rpki-client