$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: i0Sp2smAPgtZIFFNDCJ7KwhwtYL+NR5+54r47GpyzUU= Subject key identifier: B6:0D:7E:95:7A:A8:BA:AC:5C:2F:C3:CB:3B:D9:AF:65:6A:8F:65:C3 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: CA Signing time: Sat 09 Aug 2025 06:07:44 +0000 Manifest this update: Sat 09 Aug 2025 06:07:43 +0000 Manifest next update: Sat 16 Aug 2025 06:07:43 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: e/g+ztaWdHzvyynhVn3bOP3QMloU3GoDguLnU8SuNX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Aug 9 06:07:43 2025 GMT Not After : Aug 16 06:07:43 2025 GMT Subject: CN=6896e5b0-1526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:41:44:7e:e7:dd:7a:46:61:e2:6f:ee:d5: 56:73:a1:f1:57:e5:1a:00:fb:2a:fe:4e:5f:11:d6: 73:fb:0f:c5:22:85:4e:ee:c1:77:16:ce:df:d8:98: e0:4f:67:e8:f9:49:bd:86:9c:f0:04:37:07:73:48: 01:0f:42:23:b8:8a:c8:0f:a0:f5:cf:d0:95:75:7e: 71:2c:a4:47:d5:9c:2f:82:1a:73:fb:e8:7f:47:4d: cf:34:d0:cd:2f:3b:df:2d:bd:ad:f9:6b:9c:ed:8e: 83:cb:fa:d6:ad:fc:6e:66:80:e7:be:cb:be:70:7e: e9:fb:18:d2:f4:05:37:9f:67:53:39:f4:a0:ca:40: 03:3c:a2:4b:fe:ee:33:40:3d:b4:84:22:51:b4:e1: 06:6b:90:44:fc:4d:53:17:19:13:61:27:86:b5:8a: c0:b9:6e:16:d7:cf:bc:56:2c:66:06:d1:45:25:aa: b2:71:bb:2b:f4:59:b5:57:fc:c5:88:fe:9f:0f:c4: 63:b6:03:e9:d8:ce:45:1c:c3:c3:a6:0e:26:b6:d5: d4:35:48:e2:48:16:d6:16:91:03:fe:c2:ff:4c:77: 78:06:32:3a:f3:8f:df:ce:dc:5a:e5:e6:0f:c8:e6: 22:bf:ee:21:dd:d8:1d:c5:48:82:ef:e2:0c:a5:a8: af:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0D:7E:95:7A:A8:BA:AC:5C:2F:C3:CB:3B:D9:AF:65:6A:8F:65:C3 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:86:39:67:72:c5:0a:3d:6c:40:8e:35:fc:27:ca:11:62:02: 50:8a:77:97:cc:7b:fc:83:f2:b6:cb:b4:cd:e8:bd:bf:f1:fa: 99:11:89:2b:0c:18:38:f5:00:dd:3f:61:b7:bb:41:da:bb:51: b0:11:4f:67:11:16:51:c0:32:a7:e3:8c:4b:7f:21:32:2d:e0: 10:26:67:3a:88:5e:b9:81:ea:a4:3b:a7:64:aa:93:5f:dd:0c: 16:3f:1f:8b:cc:e7:01:11:2f:08:e0:1e:7d:3b:70:b4:65:b8: 69:51:a8:c6:84:f0:9c:b2:de:42:f6:f3:97:74:86:23:55:31: ec:90:5f:66:56:73:f4:27:9b:38:f6:00:c9:22:da:17:c2:78: fa:e6:e2:4a:91:ff:63:c6:75:c5:2e:b7:78:b8:d7:84:fc:de: fe:f6:6f:1a:f5:80:3a:80:53:db:39:48:6e:54:48:00:ba:69: f7:8b:db:f2:ae:72:43:7d:b8:f4:63:35:9f:10:d1:f9:70:3b: 0c:dc:6b:af:f1:f0:49:03:79:aa:22:e6:7b:7c:47:a6:0c:6a: b0:cb:32:d7:50:b6:b3:06:ce:5a:31:33:1e:c9:11:8b:77:ae: bc:8b:96:d8:23:c8:59:14:7e:47:57:47:7b:1e:98:52:37:d8: 39:40:07:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUwODA5MDYwNzQzWhcNMjUwODE2MDYwNzQzWjAYMRYwFAYD VQQDEw02ODk2ZTViMC0xNTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4pBRH7n3XpGYeJv7tVWc6HxV+UaAPsq/k5fEdZz+w/FIoVO7sF3Fs7f2Jjg T2fo+Um9hpzwBDcHc0gBD0IjuIrID6D1z9CVdX5xLKRH1Zwvghpz++h/R03PNNDN LzvfLb2t+Wuc7Y6Dy/rWrfxuZoDnvsu+cH7p+xjS9AU3n2dTOfSgykADPKJL/u4z QD20hCJRtOEGa5BE/E1TFxkTYSeGtYrAuW4W18+8VixmBtFFJaqycbsr9Fm1V/zF iP6fD8RjtgPp2M5FHMPDpg4mttXUNUjiSBbWFpED/sL/THd4BjI684/fztxa5eYP yOYiv+4h3dgdxUiC7+IMpaivCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYNfpV6 qLqsXC/DyzvZr2Vqj2XDMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMhjlncsUKPWxAjjX8J8oRYgJQineXzHv8g/K2y7TN6L2/8fqZEYkr DBg49QDdP2G3u0Hau1GwEU9nERZRwDKn44xLfyEyLeAQJmc6iF65geqkO6dkqpNf 3QwWPx+LzOcBES8I4B59O3C0ZbhpUajGhPCcst5C9vOXdIYjVTHskF9mVnP0J5s4 9gDJItoXwnj65uJKkf9jxnXFLrd4uNeE/N7+9m8a9YA6gFPbOUhuVEgAumn3i9vy rnJDfbj0YzWfENH5cDsM3Guv8fBJA3mqIuZ7fEemDGqwyzLXULazBs5aMTMeyRGL d668i5bYI8hZFH5HV0d7HphSN9g5QAcU -----END CERTIFICATE-----Generated at Sun Aug 10 13:48:10 2025 by rpki-client