$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: BBSlUOzBIS1qB//hQtOz6KErRtfVJxSpcG7cT+s7NlU= Subject key identifier: D8:E2:65:EF:81:83:BE:07:BF:2A:6A:42:D4:E3:D6:84:E2:54:4F:35 Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1AFF Signing time: Fri 08 Aug 2025 16:27:57 +0000 Manifest this update: Fri 08 Aug 2025 16:27:56 +0000 Manifest next update: Fri 15 Aug 2025 16:27:56 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: Ovn//SuOlxoRI2oGXwWvjnPZzrlzvwrSRKgrcZvz4C8=) 2: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: LOoxZWeDgU2+wusXufQ94pg+OOkfT8j3WfNTQznwf90=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: LUrVRFHpHNZiTqSy0L8SOTOMfbUQlb1OEo2uN/0dmZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6952 (0x1b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Aug 8 16:27:56 2025 GMT Not After : Aug 15 16:27:56 2025 GMT Subject: CN=6896258c-d131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6e:07:56:59:96:cb:df:45:b4:03:b2:45:68: 37:f0:c0:2c:7a:2a:58:d7:26:d7:28:3a:91:d1:6f: fc:fc:b0:c8:82:55:c8:2d:8a:6a:c2:d9:6e:e6:4e: fe:40:d8:b2:0e:c2:a4:23:28:f9:7b:b4:61:c4:cd: 37:f4:4f:49:1f:0f:cf:17:05:45:86:56:0d:34:88: 81:06:91:76:68:1e:0f:c4:04:aa:1d:e8:2a:6c:32: 48:82:c3:ff:31:a2:1a:29:d1:e2:d4:3e:64:d7:c3: 57:6b:4f:cf:80:30:c9:b0:70:59:e0:8f:13:61:33: 68:eb:c6:86:46:7a:15:85:ce:dc:f6:88:6d:f3:4d: 35:a0:26:af:55:88:86:27:c9:1c:6d:a8:f0:77:5c: 69:44:a6:cd:ea:5b:d7:30:32:8e:04:06:12:fb:33: 8a:fa:95:7f:6a:93:3f:14:5e:f1:88:1a:78:27:c9: b4:51:43:0b:7f:6f:73:76:40:bc:a0:cc:da:42:9b: 42:0e:d1:91:b1:66:bf:d0:18:fd:11:ae:cf:de:f6: 7a:1a:cd:dd:49:14:fe:b1:3e:7c:a4:81:7c:30:e9: 2e:19:6a:6c:60:fc:84:8b:7d:30:e0:5b:5d:9c:25: e6:b4:2c:b2:fb:83:95:85:a7:bd:ff:fa:22:97:d3: 9c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E2:65:EF:81:83:BE:07:BF:2A:6A:42:D4:E3:D6:84:E2:54:4F:35 X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:13:8b:61:ec:f1:f6:7d:a1:57:cc:65:f2:54:de:b9:e6: cf:02:f2:ce:c0:e8:ca:43:3f:69:41:3f:5a:91:e3:46:5e:9a: 0c:f5:0c:2b:06:91:7b:80:5f:c7:42:d2:63:df:62:5b:02:d8: 6b:7c:8e:8c:1a:4e:ec:04:2c:19:2b:57:63:56:c3:4d:55:4f: 59:4e:7d:00:c7:29:12:22:19:4e:30:7b:6e:de:b7:6f:bd:4c: ff:a2:ad:31:05:f1:6c:ef:96:30:a9:4b:5a:cb:48:45:2c:fe: 20:99:84:c4:cf:fc:f0:88:bc:d4:26:48:14:80:c3:09:52:56: 69:cb:d8:0a:ac:9b:3b:89:43:06:7e:b7:f7:2b:fd:9c:a4:5e: 26:0f:da:3d:0e:6b:4a:d5:4c:74:1d:e9:f6:57:6a:ed:51:b2: 07:f2:32:8f:f8:01:cf:7f:d4:36:73:90:8c:7d:48:b1:f6:1c: a1:37:57:96:a6:7e:05:d0:48:d6:60:73:09:9d:36:6b:0c:70: 0f:6e:b5:a0:71:d3:ee:b8:27:34:83:4e:f7:9c:f8:9b:d8:58: 39:61:60:27:ca:2d:d7:05:e3:58:e2:78:90:0e:11:3d:b3:ed: 9d:4e:68:73:e1:c8:f8:59:6f:a3:73:ed:bb:98:0b:13:7e:d4: 7c:e4:97:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUwODA4MTYyNzU2WhcNMjUwODE1MTYyNzU2WjAYMRYwFAYD VQQDEw02ODk2MjU4Yy1kMTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5m4HVlmWy99FtAOyRWg38MAseipY1ybXKDqR0W/8/LDIglXILYpqwtlu5k7+ QNiyDsKkIyj5e7RhxM039E9JHw/PFwVFhlYNNIiBBpF2aB4PxASqHegqbDJIgsP/ MaIaKdHi1D5k18NXa0/PgDDJsHBZ4I8TYTNo68aGRnoVhc7c9oht8001oCavVYiG J8kcbajwd1xpRKbN6lvXMDKOBAYS+zOK+pV/apM/FF7xiBp4J8m0UUMLf29zdkC8 oMzaQptCDtGRsWa/0Bj9Ea7P3vZ6Gs3dSRT+sT58pIF8MOkuGWpsYPyEi30w4Ftd nCXmtCyy+4OVhae9//oil9Oc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjiZe+B g74HvypqQtTj1oTiVE81MB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUoROLYezx9n2hV8xl8lTeuebPAvLOwOjKQz9pQT9akeNGXpoM9Qwr BpF7gF/HQtJj32JbAthrfI6MGk7sBCwZK1djVsNNVU9ZTn0AxykSIhlOMHtu3rdv vUz/oq0xBfFs75YwqUtay0hFLP4gmYTEz/zwiLzUJkgUgMMJUlZpy9gKrJs7iUMG frf3K/2cpF4mD9o9DmtK1Ux0Hen2V2rtUbIH8jKP+AHPf9Q2c5CMfUix9hyhN1eW pn4F0EjWYHMJnTZrDHAPbrWgcdPuuCc0g073nPib2Fg5YWAnyi3XBeNY4niQDhE9 s+2dTmhz4cj4WW+jc+27mAsTftR85JeJ -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:01 2025 by rpki-client