$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft File: IsfsPNntTFDolKEbzXDQMQzV-Fk.mft (raw, json) Hash identifier: WZ0lsOpghZ7Nx+cgZdo/kSogfwbJeD+LIRYvI6M/Kk4= Subject key identifier: 7F:BA:25:9A:EA:67:CB:56:E9:CE:77:BF:36:45:8E:1F:91:00:ED:43 Authority key identifier: 22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 Certificate issuer: /CN=A91EC225/serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft Manifest number: 7A Signing time: Sun 10 Aug 2025 17:40:12 +0000 Manifest this update: Sun 10 Aug 2025 17:40:12 +0000 Manifest next update: Sun 17 Aug 2025 17:40:11 +0000 Files and hashes: 1: IsfsPNntTFDolKEbzXDQMQzV-Fk.crl (hash: S0Wr1Dhwp5E89yzw9fOIUNomzGK2ZZYuqqLMBHz0LFk=) 2: 25D2B94CDECD11EFA79E4065C4F9AE02.roa (hash: AoCtdlkJJmrM0z3AC3jCQKm47jbQAWLBDnBBfT5EtYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC225, serialNumber=22C7EC3CD9ED4C50E894A11BCD70D0310CD5F859 Validity Not Before: Aug 10 17:40:12 2025 GMT Not After : Aug 17 17:40:11 2025 GMT Subject: CN=6898d97c-3bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c4:a4:f7:1f:12:35:63:21:cb:c2:2d:a8:9e: b3:18:1e:ac:c9:89:aa:8a:66:26:60:64:d0:b2:a1: 43:c7:19:fa:75:d2:27:b1:95:66:20:7d:3e:e5:33: a6:4e:b9:49:76:74:4f:37:69:cb:97:94:dd:a2:bd: c1:4f:2d:90:95:39:ac:5c:15:03:e2:c0:51:62:1e: 50:24:b6:c6:b6:21:7c:20:c1:aa:25:71:94:ca:f5: 0b:d2:d8:3f:8f:6e:f5:7f:82:bf:72:29:25:f4:26: 06:db:4b:44:89:01:ad:2f:61:21:18:87:33:9f:0b: f2:91:db:55:60:9d:98:de:7f:30:86:e4:44:57:27: ce:c5:5d:6f:81:87:25:83:69:8a:1b:f2:00:88:5f: 74:e3:5b:a0:e0:2c:c7:fb:6c:77:12:74:b2:8a:f3: 35:c4:31:d7:8d:43:c7:89:42:d9:f9:7b:a6:0e:88: 3f:8d:08:29:2b:89:84:b5:2b:ce:0e:49:63:c6:d2: 4e:37:b8:53:b3:4d:25:7d:a6:f3:23:2c:f0:7f:92: 1d:f4:a8:30:09:7f:16:9b:56:7d:7b:e8:f0:36:09: cb:1f:cc:49:3d:0f:50:23:bb:01:4a:08:bf:9a:29: 32:7d:60:2f:b9:b7:27:1f:5e:17:69:2b:43:75:8f: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:25:9A:EA:67:CB:56:E9:CE:77:BF:36:45:8E:1F:91:00:ED:43 X509v3 Authority Key Identifier: keyid:22:C7:EC:3C:D9:ED:4C:50:E8:94:A1:1B:CD:70:D0:31:0C:D5:F8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IsfsPNntTFDolKEbzXDQMQzV-Fk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC225/C9447FF0BEF911EFBCF68944C4F9AE02/IsfsPNntTFDolKEbzXDQMQzV-Fk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:4f:8e:bc:7a:74:53:61:50:4c:ab:b6:e2:40:bc:3a:c8: 67:f1:ba:21:48:51:f1:52:42:db:51:a8:0d:37:8e:ab:22:38: 0e:e4:1b:e1:29:05:84:c1:dc:8b:ba:2f:5b:20:ad:79:a7:02: 65:38:2e:a3:e9:53:5c:fd:dd:21:99:b8:dc:f5:22:a9:e3:88: b1:5b:0c:4a:48:1e:83:62:1a:4b:e8:63:5c:97:8e:f0:98:99: 14:06:a8:55:a1:56:f7:6f:6e:d6:d7:8f:e6:7b:5a:58:a4:d7: 4e:6e:96:ab:a5:00:10:10:c7:b7:0b:a3:69:43:fe:8d:dc:b0: f7:56:35:0b:78:bb:c1:b2:3e:52:56:c5:3b:d7:08:38:d9:95: 19:cd:7d:32:13:97:88:27:4e:4d:2f:75:db:b5:cb:0a:30:ca: 3f:e4:e1:9b:2a:81:92:78:8f:a9:24:a6:96:a4:22:1f:32:b5: 3d:e0:e5:dd:50:cd:bd:bb:cc:0b:76:fb:83:53:4d:9a:9f:39: af:00:09:b2:1c:d6:22:53:95:4d:9e:78:77:7f:68:3c:92:92: 08:d1:4d:b0:9b:d3:22:a8:19:fc:d9:ca:06:f1:1e:5d:8c:3b: 5d:6a:f8:33:d8:dd:ba:cf:d4:80:f6:83:c7:e2:b5:2e:a6:5e: f0:52:c3:4d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzIyNTExMC8GA1UEBRMoMjJDN0VDM0NEOUVENEM1MEU4OTRBMTFCQ0Q3MEQwMzEw Q0Q1Rjg1OTAeFw0yNTA4MTAxNzQwMTJaFw0yNTA4MTcxNzQwMTFaMBgxFjAUBgNV BAMTDTY4OThkOTdjLTNiYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlxKT3HxI1YyHLwi2onrMYHqzJiaqKZiZgZNCyoUPHGfp10iexlWYgfT7lM6ZO uUl2dE83acuXlN2ivcFPLZCVOaxcFQPiwFFiHlAktsa2IXwgwaolcZTK9QvS2D+P bvV/gr9yKSX0JgbbS0SJAa0vYSEYhzOfC/KR21VgnZjefzCG5ERXJ87FXW+BhyWD aYob8gCIX3TjW6DgLMf7bHcSdLKK8zXEMdeNQ8eJQtn5e6YOiD+NCCkriYS1K84O SWPG0k43uFOzTSV9pvMjLPB/kh30qDAJfxabVn176PA2CcsfzEk9D1AjuwFKCL+a KTJ9YC+5tycfXhdpK0N1j6VpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUf7olmupn y1bpzne/NkWOH5EA7UMwHwYDVR0jBBgwFoAUIsfsPNntTFDolKEbzXDQMQzV+Fkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDMjI1L0M5NDQ3RkYwQkVG OTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZEb2xLRWJ6WERRTVF6Vi1G ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSXNmc1BObnRURkRvbEtFYnpYRFFNUXpWLUZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD MjI1L0M5NDQ3RkYwQkVGOTExRUZCQ0Y2ODk0NEM0RjlBRTAyL0lzZnNQTm50VEZE b2xLRWJ6WERRTVF6Vi1Gay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEo2T468enRTYVBMq7biQLw6yGfxuiFIUfFSQttRqA03jqsiOA7kG+Ep BYTB3Iu6L1sgrXmnAmU4LqPpU1z93SGZuNz1IqnjiLFbDEpIHoNiGkvoY1yXjvCY mRQGqFWhVvdvbtbXj+Z7Wlik105ulqulABAQx7cLo2lD/o3csPdWNQt4u8GyPlJW xTvXCDjZlRnNfTITl4gnTk0vddu1ywowyj/k4ZsqgZJ4j6kkppakIh8ytT3g5d1Q zb27zAt2+4NTTZqfOa8ACbIc1iJTlU2eeHd/aDySkgjRTbCb0yKoGfzZygbxHl2M O11q+DPY3brP1ID2g8fitS6mXvBSw00= -----END CERTIFICATE-----Generated at Sun Aug 10 21:05:28 2025 by rpki-client