$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft File: se7FntVhoNs9fUDDCvKrb-0pepg.mft (raw, json) Hash identifier: S2QkIMglU9Xob4VtjmMLo/39Bezkk4kfO84hsed+dVw= Subject key identifier: 2D:39:02:86:54:7A:7B:2B:72:99:DE:96:C5:F0:DE:6E:A8:42:11:0E Authority key identifier: B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 Certificate issuer: /CN=A91FDA00/serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Certificate serial: 07A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft Manifest number: 0797 Signing time: Wed 06 Aug 2025 21:49:08 +0000 Manifest this update: Wed 06 Aug 2025 21:49:08 +0000 Manifest next update: Wed 13 Aug 2025 21:49:08 +0000 Files and hashes: 1: se7FntVhoNs9fUDDCvKrb-0pepg.crl (hash: q0pyDcLtujWOGtM0+Co1+Ub6Xms4DrKEKMMmbes0gos=) 2: 69318772F69C11EFBD339C7FC4F9AE02.roa (hash: I9RDWTqokuHw9TsN7dqHWL1mxEAi762R7COmcfJ37Kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1960 (0x7a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDA00, serialNumber=B1EEC59ED561A0DB3D7D40C30AF2AB6FED297A98 Validity Not Before: Aug 6 21:49:08 2025 GMT Not After : Aug 13 21:49:08 2025 GMT Subject: CN=6893cdd4-7aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:7d:c7:04:56:9c:8c:15:a2:72:5b:e3:13: 9c:7e:a3:c5:c0:a5:16:25:3c:9d:a4:50:05:b6:4f: da:5c:f6:3d:ce:4d:cb:43:62:25:52:2c:33:09:46: 1b:5c:fb:cb:e7:02:a5:8c:4b:04:03:18:4a:1c:07: a5:a7:15:2c:66:d9:24:6e:5e:78:ed:01:60:93:ef: d2:17:ae:fc:79:01:e0:92:6d:96:61:22:df:ef:1b: 35:55:04:15:7f:fb:bb:bd:2e:8a:96:60:b7:d0:02: 06:f2:d8:aa:b7:f0:59:bc:b9:22:a2:6c:47:69:27: 8f:cb:75:05:f1:0e:f3:d5:2d:31:e3:38:84:c9:20: 93:4f:6c:29:c1:ff:df:d4:13:32:6e:c8:c0:5d:52: e0:4e:e1:ba:1e:b6:2b:6e:f1:93:36:58:c4:de:2f: 6a:88:0d:9d:ac:ac:38:06:24:3b:62:29:9a:a8:41: ec:39:71:64:f0:4c:84:cd:2a:2e:82:d8:0a:da:29: 84:1f:38:0f:ae:79:8e:e6:38:63:f0:6d:16:c5:6a: 9c:93:a6:5b:25:f8:1c:62:f2:04:30:ea:72:57:cc: ae:1e:35:e2:f1:af:53:2e:f0:96:9a:ef:e0:40:f8: 20:e6:d0:b2:81:47:4c:ce:77:8d:18:7c:28:15:09: 9e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:39:02:86:54:7A:7B:2B:72:99:DE:96:C5:F0:DE:6E:A8:42:11:0E X509v3 Authority Key Identifier: keyid:B1:EE:C5:9E:D5:61:A0:DB:3D:7D:40:C3:0A:F2:AB:6F:ED:29:7A:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se7FntVhoNs9fUDDCvKrb-0pepg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDA00/7DD750DC1CE211EB9AAB4977C4F9AE02/se7FntVhoNs9fUDDCvKrb-0pepg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:50:c8:ef:71:65:d2:1c:fc:ac:14:0c:30:2d:33:e6:3a:cf: a6:54:5b:49:75:f2:19:c9:27:a4:7f:76:39:30:a6:5e:9c:e3: 01:0a:12:f5:cc:52:83:4a:29:44:39:97:ca:f1:1f:c1:c4:85: a9:48:b6:44:1a:0d:b1:9e:a3:95:e4:14:fd:a9:ad:b7:c0:97: 35:8a:d4:99:2d:dd:44:cd:b9:f2:7a:d9:9f:6a:bf:7d:4c:65: bd:1b:82:26:15:8d:09:bc:92:91:5f:c0:8c:50:f5:78:cd:2b: aa:73:33:79:8a:f0:d0:5c:d8:27:1b:bd:cf:a6:dc:b8:fe:13: 5e:03:84:3c:83:19:f9:45:f2:e9:bf:63:1d:78:de:fd:35:fc: 24:c6:21:5c:e3:f7:08:44:8b:21:2d:03:20:97:57:30:6e:11: e4:6a:89:26:ec:09:3a:a7:99:bb:91:bc:09:a4:d4:15:dd:c9: 1e:0a:15:5d:41:bc:04:51:dd:ef:0d:60:2d:00:5d:c5:8d:3e: 16:f3:8a:c3:78:66:e1:a9:a5:5c:36:ff:39:9e:96:90:80:60: 2a:10:6f:4e:df:62:b6:ea:80:c6:2a:80:17:8f:b5:94:94:99: c1:8a:5b:32:7e:2a:09:c1:44:fb:e7:42:99:f6:3b:e6:e3:a7: a6:7e:71:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRBMDAxMTAvBgNVBAUTKEIxRUVDNTlFRDU2MUEwREIzRDdENDBDMzBBRjJBQjZG RUQyOTdBOTgwHhcNMjUwODA2MjE0OTA4WhcNMjUwODEzMjE0OTA4WjAYMRYwFAYD VQQDEw02ODkzY2RkNC03YWVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6XJ9xwRWnIwVonJb4xOcfqPFwKUWJTydpFAFtk/aXPY9zk3LQ2IlUiwzCUYb XPvL5wKljEsEAxhKHAelpxUsZtkkbl547QFgk+/SF678eQHgkm2WYSLf7xs1VQQV f/u7vS6KlmC30AIG8tiqt/BZvLkiomxHaSePy3UF8Q7z1S0x4ziEySCTT2wpwf/f 1BMybsjAXVLgTuG6HrYrbvGTNljE3i9qiA2drKw4BiQ7YimaqEHsOXFk8EyEzSou gtgK2imEHzgPrnmO5jhj8G0WxWqck6ZbJfgcYvIEMOpyV8yuHjXi8a9TLvCWmu/g QPgg5tCygUdMzneNGHwoFQmeywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC05AoZU ensrcpnelsXw3m6oQhEOMB8GA1UdIwQYMBaAFLHuxZ7VYaDbPX1Awwryq2/tKXqY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREEwMC83REQ3NTBEQzFD RTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9OczlmVUREQ3ZLcmItMHBl cGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NlN0ZudFZob05zOWZVRERDdktyYi0wcGVwZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REEwMC83REQ3NTBEQzFDRTIxMUVCOUFBQjQ5NzdDNEY5QUUwMi9zZTdGbnRWaG9O czlmVUREQ3ZLcmItMHBlcGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQUMjvcWXSHPysFAwwLTPmOs+mVFtJdfIZySekf3Y5MKZenOMBChL1 zFKDSilEOZfK8R/BxIWpSLZEGg2xnqOV5BT9qa23wJc1itSZLd1Ezbnyetmfar99 TGW9G4ImFY0JvJKRX8CMUPV4zSuqczN5ivDQXNgnG73Ppty4/hNeA4Q8gxn5RfLp v2MdeN79NfwkxiFc4/cIRIshLQMgl1cwbhHkaokm7Ak6p5m7kbwJpNQV3ckeChVd QbwEUd3vDWAtAF3FjT4W84rDeGbhqaVcNv85npaQgGAqEG9O32K26oDGKoAXj7WU lJnBilsyfioJwUT750KZ9jvm46emfnF7 -----END CERTIFICATE-----Generated at Thu Aug 7 01:59:54 2025 by rpki-client