$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: tdrEW3n2eo8Elptam4gn1aGO3dWPZYsZbSKNYdsyi48= Subject key identifier: E5:AF:B8:DB:3D:9E:23:5D:EA:3A:5D:74:AC:1C:AD:93:E6:9B:30:73 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 02D3 Signing time: Mon 11 Aug 2025 01:39:56 +0000 Manifest this update: Mon 11 Aug 2025 01:39:55 +0000 Manifest next update: Mon 18 Aug 2025 01:39:55 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: 1a/sqWUZcTS7D/PWpm7nQwztZk6TIS7Y6c4a8ngRlow=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=) 3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=) 4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Aug 11 01:39:55 2025 GMT Not After : Aug 18 01:39:55 2025 GMT Subject: CN=689949ec-d239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:02:7e:b9:c1:f6:ab:9a:a3:94:99:a4:a7:41: 74:6b:19:d6:79:a1:cb:3d:5d:b7:49:2b:9f:b0:55: 08:3d:cd:dc:ad:2f:1b:8b:0c:99:e5:8a:88:78:26: 32:37:fe:31:5b:ca:ed:7b:4a:7b:52:fa:d7:80:5d: 74:82:98:2c:27:dd:65:b8:38:14:6b:ce:0d:58:fa: b9:4c:00:90:18:7b:48:1a:5a:ea:29:8a:e2:8f:62: ba:4a:2b:22:dd:21:70:f2:46:e1:68:e1:6c:07:63: 80:ac:ba:66:0c:67:77:d4:5f:70:5a:4e:60:99:e8: c0:75:ed:bf:b5:10:68:5b:c4:13:58:f6:a4:6b:43: 69:eb:a6:c3:65:c4:34:6e:6e:d0:7e:79:e0:d1:08: 89:01:c9:21:67:ae:c2:03:aa:7d:7e:2a:fb:43:d6: ec:40:95:78:38:fb:42:e2:f2:bf:8c:03:50:4f:3d: a3:55:49:b1:c7:26:e4:d9:1d:c9:b1:fd:2f:ba:01: 4a:bd:1e:f5:69:98:59:61:dd:5b:6b:53:15:3a:00: 5d:50:a8:7d:a7:40:63:5c:c2:dd:73:14:b9:1b:fb: 27:bb:af:91:a0:1d:d4:e6:86:6f:82:8c:6c:47:5d: 44:d1:eb:79:0e:7c:e9:42:0d:53:51:c4:1b:2d:d4: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AF:B8:DB:3D:9E:23:5D:EA:3A:5D:74:AC:1C:AD:93:E6:9B:30:73 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:26:d8:d1:34:10:e1:72:2e:55:e1:c3:1e:02:38:b4:0b:15: 3d:e1:9d:62:24:92:18:45:60:a1:9d:ae:d3:96:9e:a5:f3:e7: fe:33:bd:f6:f7:62:58:b1:4e:d8:03:c1:24:14:40:27:87:90: 58:ea:5c:07:ed:48:7b:ae:51:4e:8d:dc:16:21:e4:ef:c4:08: bd:ed:26:f4:03:be:75:f8:13:26:1f:93:ea:53:5d:bb:23:b0: 5a:8a:37:27:62:6b:e9:53:8c:14:08:83:4c:3a:e3:00:e2:ba: e1:38:37:f0:78:6a:d1:e4:19:b6:13:00:a9:e6:30:0b:a6:e2: a1:28:89:7b:ec:39:5c:51:28:4d:4b:da:e0:d8:58:58:9f:26: c3:d2:2d:4b:9e:8e:1f:e8:de:f4:94:26:41:f2:2d:03:71:d3: 55:e6:2e:8b:ea:44:74:29:08:92:6e:bf:b7:6b:e6:19:2a:b1: 07:7e:e3:1d:f4:6b:8d:21:bc:01:d2:12:68:a0:ba:a2:09:26: 68:5c:48:26:cd:fb:6a:3e:ef:2e:30:32:b1:67:21:ab:71:3b: b0:d3:9f:2d:98:99:63:b3:80:3b:9b:1e:4d:88:24:22:71:a2: 1c:30:ed:d1:c5:0b:ec:04:76:24:e2:21:ea:21:b2:55:3d:df: ce:61:69:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwODExMDEzOTU1WhcNMjUwODE4MDEzOTU1WjAYMRYwFAYD VQQDEw02ODk5NDllYy1kMjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AJ+ucH2q5qjlJmkp0F0axnWeaHLPV23SSufsFUIPc3crS8biwyZ5YqIeCYy N/4xW8rte0p7UvrXgF10gpgsJ91luDgUa84NWPq5TACQGHtIGlrqKYrij2K6Sisi 3SFw8kbhaOFsB2OArLpmDGd31F9wWk5gmejAde2/tRBoW8QTWPaka0Np66bDZcQ0 bm7Qfnng0QiJAckhZ67CA6p9fir7Q9bsQJV4OPtC4vK/jANQTz2jVUmxxybk2R3J sf0vugFKvR71aZhZYd1ba1MVOgBdUKh9p0BjXMLdcxS5G/snu6+RoB3U5oZvgoxs R11E0et5DnzpQg1TUcQbLdS2WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWvuNs9 niNd6jpddKwcrZPmmzBzMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8JtjRNBDhci5V4cMeAji0CxU94Z1iJJIYRWChna7Tlp6l8+f+M732 92JYsU7YA8EkFEAnh5BY6lwH7Uh7rlFOjdwWIeTvxAi97Sb0A751+BMmH5PqU127 I7BaijcnYmvpU4wUCINMOuMA4rrhODfweGrR5Bm2EwCp5jALpuKhKIl77DlcUShN S9rg2FhYnybD0i1Lno4f6N70lCZB8i0DcdNV5i6L6kR0KQiSbr+3a+YZKrEHfuMd 9GuNIbwB0hJooLqiCSZoXEgmzftqPu8uMDKxZyGrcTuw058tmJljs4A7mx5NiCQi caIcMO3RxQvsBHYk4iHqIbJVPd/OYWnK -----END CERTIFICATE-----Generated at Mon Aug 11 06:03:04 2025 by rpki-client