$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: X27iPiu+xvgkjSRCVdE9mwiCm0mx3j6Pa4Sc+V90kus= Subject key identifier: F6:35:EA:3E:93:FA:00:0E:31:F4:45:59:15:CA:8D:90:24:CF:F5:3A Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: F4 Signing time: Sun 03 Aug 2025 05:35:38 +0000 Manifest this update: Sun 03 Aug 2025 05:35:37 +0000 Manifest next update: Sun 10 Aug 2025 05:35:37 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: V5GllnWlIENSUvYqWd5avIcDYpLfJ35gYgp+N3x1wrw=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: k1Tx0d7v2/DVXjcDjxa6UxUVJhpfspXydcHWpQGiFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 248 (0xf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Aug 3 05:35:37 2025 GMT Not After : Aug 10 05:35:37 2025 GMT Subject: CN=688ef52a-1140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f4:5a:47:e4:f2:0c:4d:8f:8c:b0:67:67:fe: be:b8:cd:bd:8b:92:cc:06:21:6b:06:39:99:c2:0c: e2:61:1b:ba:90:4e:8e:2a:15:30:b0:32:e8:9d:b7: d7:1d:47:c1:9f:d4:6e:33:92:6b:88:34:06:39:7a: c5:55:67:33:c0:72:da:df:c6:8b:dd:dd:d3:4d:0c: e4:77:b5:05:95:03:7e:56:eb:a1:7b:19:22:19:54: 82:d5:eb:1f:d7:30:f0:be:bd:6c:59:ed:1f:84:cd: 11:52:83:16:15:e2:32:78:25:43:e9:48:54:6a:e7: 80:32:30:82:b0:94:a3:5e:05:47:c2:ab:9e:02:b3: 56:a2:a0:bc:fb:4f:d5:c7:b2:3e:8f:75:60:26:5b: 27:5c:d9:05:52:88:c6:c9:dc:43:ae:11:d5:f2:fa: 2a:4b:de:b7:fc:8f:ac:68:7d:08:a9:be:7b:3a:da: 6a:31:27:4d:73:03:1c:23:f5:3e:2c:0a:8c:b2:2d: a2:0e:24:eb:34:bf:b4:99:df:9f:b4:a8:75:5d:21: 8a:4b:30:28:68:ef:ef:e7:cf:d5:c4:36:78:ba:f7: f4:c8:18:80:f3:f0:77:7a:61:f9:c5:8b:55:11:9a: 66:6a:4c:36:86:f1:29:67:4f:20:07:a1:18:6c:1c: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:35:EA:3E:93:FA:00:0E:31:F4:45:59:15:CA:8D:90:24:CF:F5:3A X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:76:e2:1a:55:b8:f5:9e:2c:c8:cc:0d:97:a6:52:7b:22:2b: a1:d0:93:ff:42:a0:fc:16:24:0f:fb:f5:11:9f:f1:dc:7f:c1: 5f:68:46:74:f7:d4:c6:73:b7:96:1e:26:f2:45:07:69:95:b7: 57:a5:c7:dc:f2:da:6a:5f:11:96:d5:94:f9:a1:34:5b:12:85: ba:44:c6:6e:be:93:68:31:7e:57:b6:01:03:b6:ce:6b:25:a0: cf:6a:72:a8:7f:61:fa:3a:3e:88:9c:b4:a1:68:0e:93:a3:3c: 58:9b:9c:ab:0c:7f:21:e2:f0:c7:0a:3b:a6:54:6c:fa:85:ab: 78:98:cd:a9:5c:9e:df:4c:f4:30:29:b7:8d:3c:0c:b2:9d:86: 7f:a0:95:b7:91:8e:45:08:88:cb:85:58:cd:7c:c9:28:4c:9e: 59:35:26:f8:d3:25:38:f2:86:16:15:82:c4:2d:e0:aa:23:41: b6:f3:25:81:83:5f:0a:55:99:34:1a:f5:9a:70:56:5b:ed:55: 9c:3a:23:30:0e:ce:4a:ee:51:9d:ee:f8:e7:03:66:f1:dd:13: 73:c3:f9:da:7f:33:d4:4c:24:51:54:d1:77:37:ae:85:dd:6a: 06:97:1a:83:d5:54:7d:4e:b8:7b:2d:7e:9d:4f:03:06:23:cf: 98:33:a7:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwODAzMDUzNTM3WhcNMjUwODEwMDUzNTM3WjAYMRYwFAYD VQQDEw02ODhlZjUyYS0xMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1/RaR+TyDE2PjLBnZ/6+uM29i5LMBiFrBjmZwgziYRu6kE6OKhUwsDLonbfX HUfBn9RuM5JriDQGOXrFVWczwHLa38aL3d3TTQzkd7UFlQN+VuuhexkiGVSC1esf 1zDwvr1sWe0fhM0RUoMWFeIyeCVD6UhUaueAMjCCsJSjXgVHwqueArNWoqC8+0/V x7I+j3VgJlsnXNkFUojGydxDrhHV8voqS963/I+saH0Iqb57OtpqMSdNcwMcI/U+ LAqMsi2iDiTrNL+0md+ftKh1XSGKSzAoaO/v58/VxDZ4uvf0yBiA8/B3emH5xYtV EZpmakw2hvEpZ08gB6EYbBxcVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY16j6T +gAOMfRFWRXKjZAkz/U6MB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlduIaVbj1nizIzA2XplJ7Iiuh0JP/QqD8FiQP+/URn/Hcf8FfaEZ0 99TGc7eWHibyRQdplbdXpcfc8tpqXxGW1ZT5oTRbEoW6RMZuvpNoMX5XtgEDts5r JaDPanKof2H6Oj6InLShaA6TozxYm5yrDH8h4vDHCjumVGz6hat4mM2pXJ7fTPQw KbeNPAyynYZ/oJW3kY5FCIjLhVjNfMkoTJ5ZNSb40yU48oYWFYLELeCqI0G28yWB g18KVZk0GvWacFZb7VWcOiMwDs5K7lGd7vjnA2bx3RNzw/nafzPUTCRRVNF3N66F 3WoGlxqD1VR9Trh7LX6dTwMGI8+YM6ee -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:23 2025 by rpki-client