$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json) Hash identifier: kr7RfBmQmjXgUbMJtSY7/3IaDvWmWA1XGmfLbsRX05M= Subject key identifier: E5:4C:CB:9E:D1:E0:8E:27:C6:3F:40:58:2B:2A:9D:B3:65:E8:D3:40 Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB Certificate issuer: /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft Manifest number: 011B Signing time: Tue 05 Aug 2025 05:23:58 +0000 Manifest this update: Tue 05 Aug 2025 05:23:57 +0000 Manifest next update: Tue 12 Aug 2025 05:23:57 +0000 Files and hashes: 1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: H4HtWjsE1mlAdHpNGtRI+wSjj9WqOu6ahYSwvhimErw=) 2: F89ECDC443A511F09D656024C4F9AE02.roa (hash: WmYOIdHhJmp20fF6Ocugd6eKuqM04EWvfaYLSQzq950=) 3: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=) 4: 4257053043A611F0820E8527C4F9AE02.roa (hash: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Validity Not Before: Aug 5 05:23:57 2025 GMT Not After : Aug 12 05:23:57 2025 GMT Subject: CN=6891956e-0760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:96:48:ba:89:3a:90:83:7b:a7:ba:cd:4c:2b: 6a:28:83:99:3b:ad:91:84:f6:0f:cd:bf:6f:c2:71: ce:94:eb:38:5d:56:c3:9e:7b:f1:73:87:ef:15:e8: 59:ff:9f:fe:ba:ca:a4:be:12:03:cc:a0:43:ba:f5: 7e:47:bf:5b:24:4c:84:b6:da:8b:07:59:a4:e9:19: f3:cc:fd:66:cb:94:73:fc:c5:2c:f2:a7:1b:45:18: 9e:13:54:fe:e1:b4:92:39:f1:22:b4:02:ed:bc:e5: 85:c3:26:a3:0c:06:85:1e:be:5f:53:81:4c:1f:82: 2d:db:4a:d3:f5:92:fc:77:67:a8:2d:07:a5:c4:60: 39:05:ef:66:fc:34:3a:33:74:cf:0e:c0:b3:28:a0: 65:cd:80:c3:6d:4c:98:9b:37:34:16:3d:69:49:76: 93:ba:53:6a:37:2b:c6:e6:e6:4e:7d:eb:82:fd:f5: 79:5f:11:28:2f:80:7b:d0:f0:56:ba:cf:e4:13:d7: 90:d2:65:92:dd:49:8a:2a:8b:89:02:9b:6b:f7:7c: 5e:21:b6:35:52:6c:45:a5:99:2f:5b:6d:82:a9:40: 27:0c:cc:5a:ac:2c:54:e5:45:03:b2:34:19:81:f1: f7:63:47:8e:d4:32:ce:f1:a7:22:7f:37:e8:49:fd: 1d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:4C:CB:9E:D1:E0:8E:27:C6:3F:40:58:2B:2A:9D:B3:65:E8:D3:40 X509v3 Authority Key Identifier: keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:eb:0d:67:68:88:bc:6f:b4:51:b7:d1:9b:e4:fb:2c:20:17: fa:56:b0:a4:27:9e:dc:b0:67:cc:8c:1a:91:db:ac:0a:ab:34: f5:cc:c0:cd:e3:f1:17:53:f0:bb:96:fd:bf:f7:34:e1:e1:0c: c5:8d:54:40:49:6f:11:e6:03:63:2a:f4:c0:4a:03:06:20:c5: dc:61:dd:a7:6a:4f:be:b9:79:67:eb:05:31:54:89:92:ad:ff: e1:98:65:c3:01:19:66:88:bd:02:f2:53:dc:60:c7:2c:55:cb: d7:e5:c3:a2:24:7a:a6:90:49:95:00:77:7b:73:7c:18:2e:5f: 36:34:3b:93:92:2e:8e:12:0e:3e:e9:aa:31:7b:9d:e4:51:c6: 6e:a4:13:b3:3b:1d:0a:f7:11:9d:df:e5:c6:42:a5:5f:bd:1d: bd:12:b4:ed:4d:02:f8:e2:7c:07:a0:0b:ff:e2:3a:8a:86:aa: 2a:ba:08:3a:4b:29:73:91:bb:35:e1:62:e4:01:43:5e:3c:2b: 0f:8e:2a:c3:be:14:e8:54:cd:22:77:dd:c9:5a:bf:ce:ab:5f: 96:a2:83:a4:2e:91:5f:e7:d7:3c:a4:f6:cb:48:b1:79:6b:d2: 4e:ce:b1:42:c8:e1:be:b9:63:1d:ef:14:fc:d0:97:a1:bb:03: d0:d3:6f:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAwRUREQkJFRUUx MEI3NTQ5QUIwHhcNMjUwODA1MDUyMzU3WhcNMjUwODEyMDUyMzU3WjAYMRYwFAYD VQQDEw02ODkxOTU2ZS0wNzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsZZIuok6kIN7p7rNTCtqKIOZO62RhPYPzb9vwnHOlOs4XVbDnnvxc4fvFehZ /5/+usqkvhIDzKBDuvV+R79bJEyEttqLB1mk6RnzzP1my5Rz/MUs8qcbRRieE1T+ 4bSSOfEitALtvOWFwyajDAaFHr5fU4FMH4It20rT9ZL8d2eoLQelxGA5Be9m/DQ6 M3TPDsCzKKBlzYDDbUyYmzc0Fj1pSXaTulNqNyvG5uZOfeuC/fV5XxEoL4B70PBW us/kE9eQ0mWS3UmKKouJAptr93xeIbY1UmxFpZkvW22CqUAnDMxarCxU5UUDsjQZ gfH3Y0eO1DLO8acifzfoSf0daQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVMy57R 4I4nxj9AWCsqnbNl6NNAMB8GA1UdIwQYMBaAFO0R60w0gEGZ6ndQDt277uELdUmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZCQy82Njg3RUYyMkQx NEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFabnFkMUFPM2J2dTRRdDFT YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSSHJURFNBUVpucWQxQU8zYnZ1NFF0MVNhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZCQy82Njg3RUYyMkQxNEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFa bnFkMUFPM2J2dTRRdDFTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBP6w1naIi8b7RRt9Gb5PssIBf6VrCkJ57csGfMjBqR26wKqzT1zMDN 4/EXU/C7lv2/9zTh4QzFjVRASW8R5gNjKvTASgMGIMXcYd2nak++uXln6wUxVImS rf/hmGXDARlmiL0C8lPcYMcsVcvX5cOiJHqmkEmVAHd7c3wYLl82NDuTki6OEg4+ 6aoxe53kUcZupBOzOx0K9xGd3+XGQqVfvR29ErTtTQL44nwHoAv/4jqKhqoqugg6 Sylzkbs14WLkAUNePCsPjirDvhToVM0id93JWr/Oq1+WooOkLpFf59c8pPbLSLF5 a9JOzrFCyOG+uWMd7xT80JehuwPQ02/i -----END CERTIFICATE-----Generated at Wed Aug 6 13:23:44 2025 by rpki-client