$ rpki-client -vvf rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft File: u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft (raw, json) Hash identifier: LcEuwDakykolQxJwe0QdBMFjVa0BMTQfw+N2eQpkWRI= Subject key identifier: 59:15:A1:52:4E:3D:A9:97:DB:2D:80:14:51:AA:0D:9C:B8:A6:16:E5 Authority key identifier: BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 Certificate issuer: /CN=A91F75E9/serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Certificate serial: 07F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft Manifest number: 07EA Signing time: Fri 08 Aug 2025 21:25:23 +0000 Manifest this update: Fri 08 Aug 2025 21:25:22 +0000 Manifest next update: Fri 15 Aug 2025 21:25:22 +0000 Files and hashes: 1: u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl (hash: tQr4dFkVfFeLis/EQQ+sHEIyZoThS1mE5baRNpxsTD8=) 2: B3A2D41A071211F0B9531F0DC4F9AE02.roa (hash: 0UTI8vBXyFaaaPE8GDLKNFY+lSRTHbfC3s12YcpVQog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2039 (0x7f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F75E9, serialNumber=BB5ABB59F317AB7CE95541CA5AC52F217FE95931 Validity Not Before: Aug 8 21:25:22 2025 GMT Not After : Aug 15 21:25:22 2025 GMT Subject: CN=68966b42-c190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:7b:a5:35:26:fc:6c:03:0d:25:23:6b:14: 53:9e:45:f5:95:4e:dc:9f:f0:73:25:7d:3b:01:ee: 24:99:10:c2:11:b6:9a:1e:d9:8c:fb:b2:82:43:7a: 6e:a2:ee:41:48:d9:2c:10:f9:b3:c2:48:6e:59:3b: ea:96:5a:8c:ea:be:ab:b2:6b:62:26:ed:be:00:e9: 4a:16:04:bb:b9:87:91:c8:98:90:60:bc:82:aa:cf: 64:bd:e8:1d:97:7e:09:ed:ab:0c:59:8a:e6:ae:b8: f3:a7:1a:1d:90:11:df:58:a6:c8:5f:58:8b:54:53: 2c:04:2e:0e:0e:f9:be:6f:47:51:8b:46:56:67:1b: 2e:9f:11:4b:b2:02:df:05:5d:85:b4:f8:37:cf:ce: b1:1e:52:a8:ca:40:a9:c7:7a:1e:7f:2a:8a:98:b8: da:45:38:af:66:07:9b:8f:6a:1e:18:39:0b:d0:79: d5:2c:2f:5d:7a:5f:33:d0:96:39:dd:91:55:d0:be: 92:23:87:74:df:db:79:06:34:c7:fd:54:ea:49:3e: 34:f4:9f:2c:c2:6f:a4:91:73:58:43:22:c4:e1:6f: f0:09:05:31:1a:ac:8d:f7:04:89:86:f6:c4:42:07: 40:8c:16:f1:39:31:03:dc:36:11:63:ec:48:39:20: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:A1:52:4E:3D:A9:97:DB:2D:80:14:51:AA:0D:9C:B8:A6:16:E5 X509v3 Authority Key Identifier: keyid:BB:5A:BB:59:F3:17:AB:7C:E9:55:41:CA:5A:C5:2F:21:7F:E9:59:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1q7WfMXq3zpVUHKWsUvIX_pWTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F75E9/E694FC4AFBD711EABFEE5246C4F9AE02/u1q7WfMXq3zpVUHKWsUvIX_pWTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:29:35:e5:d4:a4:1d:63:83:90:b1:5f:ef:c7:da:69:fb:6c: 77:b3:54:03:f9:08:51:7b:a1:6e:11:31:5c:b8:bc:ae:52:ae: 49:b8:0f:f1:93:2a:aa:d1:dd:81:3b:d1:5e:d2:d2:d9:50:91: 1b:64:7b:02:81:36:0e:8a:8f:8a:89:92:57:f6:0c:19:4c:a8: 4c:fb:22:95:d8:67:ad:2a:3c:43:52:12:61:f5:0b:9c:79:10: f0:13:b2:20:7c:11:b1:fe:7f:6b:b4:86:f3:68:20:b7:5c:04: 92:76:98:f2:ba:b8:d1:76:37:a0:2d:17:5b:42:b3:ad:94:de: 46:06:c1:8f:ea:f2:c3:98:1d:4a:7d:0b:05:51:6e:22:b8:e5: c1:ae:f3:0f:39:82:84:24:02:c9:88:61:d0:cf:87:c0:3e:63: 1d:90:47:10:74:71:5f:ad:1b:21:7b:79:b8:fe:e3:46:dc:38: da:e5:93:5b:81:90:ae:b8:2b:12:80:5d:38:79:93:f6:ef:2c: bd:71:29:00:e8:4d:30:bd:9b:9a:67:6b:64:44:a5:aa:53:49: 21:9a:01:46:4f:82:b8:d3:4e:92:4b:28:a5:01:e0:b5:5c:d0: 23:da:8a:f4:fe:6b:67:80:d0:84:3d:04:22:74:bb:d1:e1:58: d3:ac:c9:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjc1RTkxMTAvBgNVBAUTKEJCNUFCQjU5RjMxN0FCN0NFOTU1NDFDQTVBQzUyRjIx N0ZFOTU5MzEwHhcNMjUwODA4MjEyNTIyWhcNMjUwODE1MjEyNTIyWjAYMRYwFAYD VQQDEw02ODk2NmI0Mi1jMTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yB7pTUm/GwDDSUjaxRTnkX1lU7cn/BzJX07Ae4kmRDCEbaaHtmM+7KCQ3pu ou5BSNksEPmzwkhuWTvqllqM6r6rsmtiJu2+AOlKFgS7uYeRyJiQYLyCqs9kvegd l34J7asMWYrmrrjzpxodkBHfWKbIX1iLVFMsBC4ODvm+b0dRi0ZWZxsunxFLsgLf BV2FtPg3z86xHlKoykCpx3oefyqKmLjaRTivZgebj2oeGDkL0HnVLC9del8z0JY5 3ZFV0L6SI4d039t5BjTH/VTqST409J8swm+kkXNYQyLE4W/wCQUxGqyN9wSJhvbE QgdAjBbxOTED3DYRY+xIOSBgcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkVoVJO PamX2y2AFFGqDZy4phblMB8GA1UdIwQYMBaAFLtau1nzF6t86VVBylrFLyF/6Vkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzVFOS9FNjk0RkM0QUZC RDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEzenBWVUhLV3NVdklYX3BX VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UxcTdXZk1YcTN6cFZVSEtXc1V2SVhfcFdURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzVFOS9FNjk0RkM0QUZCRDcxMUVBQkZFRTUyNDZDNEY5QUUwMi91MXE3V2ZNWHEz enBWVUhLV3NVdklYX3BXVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqKTXl1KQdY4OQsV/vx9pp+2x3s1QD+QhRe6FuETFcuLyuUq5JuA/x kyqq0d2BO9Fe0tLZUJEbZHsCgTYOio+KiZJX9gwZTKhM+yKV2GetKjxDUhJh9Quc eRDwE7IgfBGx/n9rtIbzaCC3XASSdpjyurjRdjegLRdbQrOtlN5GBsGP6vLDmB1K fQsFUW4iuOXBrvMPOYKEJALJiGHQz4fAPmMdkEcQdHFfrRshe3m4/uNG3Dja5ZNb gZCuuCsSgF04eZP27yy9cSkA6E0wvZuaZ2tkRKWqU0khmgFGT4K4006SSyilAeC1 XNAj2or0/mtngNCEPQQidLvR4VjTrMn4 -----END CERTIFICATE-----Generated at Sat Aug 9 20:44:23 2025 by rpki-client