$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft File: RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft (raw, json) Hash identifier: cpB8cyDM73uda8AoLyNdlZgc5k7+1wtW6X8MBXMh7Go= Subject key identifier: 3A:58:C2:F5:E3:51:BA:DB:79:F6:BE:7B:FD:EF:E7:2E:A8:75:1D:42 Authority key identifier: 45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E Certificate issuer: /CN=A91EE92F/serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft Manifest number: A7 Signing time: Thu 07 Aug 2025 06:44:34 +0000 Manifest this update: Thu 07 Aug 2025 06:44:33 +0000 Manifest next update: Thu 14 Aug 2025 06:44:33 +0000 Files and hashes: 1: RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl (hash: uEM54wIQwoW37i6tIMi6ojuNKuqJf43wdlbygnO1C8g=) 2: 2DFD4A1E740C11EFB881CE37C4F9AE02.roa (hash: T+wmuYYMTFF61NV8D+auleLzw90NK0dFwG6cz8qIwGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EE92F, serialNumber=457DB766E1B0D6A4DCC7F9AECD287D4DC3E70C9E Validity Not Before: Aug 7 06:44:33 2025 GMT Not After : Aug 14 06:44:33 2025 GMT Subject: CN=68944b52-cc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:9d:98:71:28:58:5c:ab:c3:2d:2d:21:0e: 68:0c:0f:3f:38:df:4d:8b:33:13:1e:4e:dd:5e:a1: 5c:26:9e:f7:9c:7a:cd:14:ff:6d:21:8a:96:92:a0: 3e:9b:7c:ee:13:14:62:d1:c1:c8:dd:ad:83:62:e8: fb:75:1e:59:cb:e3:1e:8a:25:ab:9c:35:1a:bc:ca: 13:48:12:7e:1f:e8:19:a6:c6:79:54:e9:60:99:ce: 05:46:96:2b:73:03:79:5e:3c:ac:e9:61:b6:1a:de: 47:89:ab:ac:48:02:fb:1c:82:2c:5f:b3:6d:e7:0d: 09:35:9f:ad:45:1d:67:77:93:df:1d:6c:7d:a1:99: 9a:76:06:72:8b:24:81:4a:cb:14:61:2d:e7:12:4d: 62:a1:83:53:46:b0:51:5d:fc:36:81:7b:13:5a:6c: fe:6b:e7:9f:b5:4b:d6:f0:10:d1:2a:cc:c9:eb:11: 19:5c:f8:29:62:3a:0c:8a:ae:29:c0:8f:e8:d2:9d: 53:77:65:db:c4:6a:5a:e1:76:14:47:3c:96:c2:e1: f3:1f:b9:92:37:66:f1:4f:52:50:4d:28:a0:73:1c: ad:cc:bb:2f:a5:f7:5b:b3:a8:c3:37:d9:57:74:35: d3:b5:b7:9a:6f:5c:38:4a:d8:64:ee:21:0a:09:c9: d2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:58:C2:F5:E3:51:BA:DB:79:F6:BE:7B:FD:EF:E7:2E:A8:75:1D:42 X509v3 Authority Key Identifier: keyid:45:7D:B7:66:E1:B0:D6:A4:DC:C7:F9:AE:CD:28:7D:4D:C3:E7:0C:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RX23ZuGw1qTcx_muzSh9TcPnDJ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE92F/12085D18740B11EF9E9C0336C4F9AE02/RX23ZuGw1qTcx_muzSh9TcPnDJ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:ac:81:58:7e:96:ad:b8:c8:e9:e7:82:0f:d8:38:af:64: 6c:dd:a1:3f:5d:be:a6:96:39:bc:dc:53:d7:c7:c3:d5:91:c8: ab:30:b7:26:98:93:1e:5b:9b:23:ee:07:76:19:aa:9d:b1:8a: bf:14:e4:bd:d0:7b:76:e5:59:a5:82:f3:83:52:30:c8:7d:2a: 14:24:1b:e8:92:47:c3:68:3b:4d:ec:9d:77:0a:b0:90:16:04: 95:1c:d3:78:bd:39:ef:69:ad:d0:ef:18:7c:9e:5e:71:f8:f0: 72:db:47:88:4b:75:f1:8a:33:e7:9d:d7:c4:b8:5e:3b:69:18: 6f:04:aa:5f:e7:7f:a2:ea:34:92:62:38:a6:17:59:42:db:d7: 18:ab:39:d8:37:75:15:ac:7e:8b:7d:54:bb:ec:c2:b2:54:14: a1:55:ab:f1:1a:6f:eb:7f:0c:33:74:b2:2f:69:77:c0:ad:5d: 75:06:45:bf:e9:94:1e:fe:8a:05:30:e2:60:ff:d1:ea:50:e6: 5b:d6:ac:02:cc:db:4c:18:fa:58:13:c6:92:dd:08:63:d4:07: a3:09:71:02:d1:81:db:c1:5d:5b:29:40:01:f0:41:69:93:05: 11:d8:ba:93:52:15:ba:7b:a1:63:5c:46:a6:9e:59:9b:b0:a3: 91:2a:e9:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUU5MkYxMTAvBgNVBAUTKDQ1N0RCNzY2RTFCMEQ2QTREQ0M3RjlBRUNEMjg3RDRE QzNFNzBDOUUwHhcNMjUwODA3MDY0NDMzWhcNMjUwODE0MDY0NDMzWjAYMRYwFAYD VQQDEw02ODk0NGI1Mi1jYzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2OdmHEoWFyrwy0tIQ5oDA8/ON9NizMTHk7dXqFcJp73nHrNFP9tIYqWkqA+ m3zuExRi0cHI3a2DYuj7dR5Zy+MeiiWrnDUavMoTSBJ+H+gZpsZ5VOlgmc4FRpYr cwN5Xjys6WG2Gt5HiausSAL7HIIsX7Nt5w0JNZ+tRR1nd5PfHWx9oZmadgZyiySB SssUYS3nEk1ioYNTRrBRXfw2gXsTWmz+a+eftUvW8BDRKszJ6xEZXPgpYjoMiq4p wI/o0p1Td2XbxGpa4XYURzyWwuHzH7mSN2bxT1JQTSigcxytzLsvpfdbs6jDN9lX dDXTtbeab1w4Sthk7iEKCcnSWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpYwvXj Ubrbefa+e/3v5y6odR1CMB8GA1UdIwQYMBaAFEV9t2bhsNak3Mf5rs0ofU3D5wye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTkyRi8xMjA4NUQxODc0 MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFxVGN4X211elNoOVRjUG5E SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JYMjNadUd3MXFUY3hfbXV6U2g5VGNQbkRKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RTkyRi8xMjA4NUQxODc0MEIxMUVGOUU5QzAzMzZDNEY5QUUwMi9SWDIzWnVHdzFx VGN4X211elNoOVRjUG5ESjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAefqyBWH6WrbjI6eeCD9g4r2Rs3aE/Xb6mljm83FPXx8PVkcirMLcm mJMeW5sj7gd2GaqdsYq/FOS90Ht25VmlgvODUjDIfSoUJBvokkfDaDtN7J13CrCQ FgSVHNN4vTnvaa3Q7xh8nl5x+PBy20eIS3XxijPnndfEuF47aRhvBKpf53+i6jSS YjimF1lC29cYqznYN3UVrH6LfVS77MKyVBShVavxGm/rfwwzdLIvaXfArV11BkW/ 6ZQe/ooFMOJg/9HqUOZb1qwCzNtMGPpYE8aS3Qhj1AejCXEC0YHbwV1bKUAB8EFp kwUR2LqTUhW6e6FjXEamnlmbsKORKunf -----END CERTIFICATE-----Generated at Sat Aug 9 03:03:17 2025 by rpki-client