$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: XvSCuTgnV68NZyRnaUd/YmDYVVbHAU+V1C8JBn2PoyA= Subject key identifier: 98:EB:BD:A4:7C:1A:EA:40:0A:1E:45:F1:61:6C:8E:91:0B:F4:81:52 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 2170 Signing time: Wed 02 Jul 2025 16:01:44 +0000 Manifest this update: Wed 02 Jul 2025 16:01:43 +0000 Manifest next update: Wed 09 Jul 2025 16:01:43 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: tEDqINA7c4rzOhIu758eJhdeooyX/dSupIZAPXecdpE=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8569 (0x2179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Jul 2 16:01:43 2025 GMT Not After : Jul 9 16:01:43 2025 GMT Subject: CN=686557e7-fa5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cb:98:cb:a5:56:c6:85:4a:40:3a:dc:d0:81: 4b:d5:2b:70:be:4c:5d:d8:27:5e:e9:4b:03:aa:8b: aa:0e:bb:50:d5:70:5c:8d:d3:17:16:50:b2:2f:72: 4a:7b:17:9b:6c:02:2a:5d:81:ae:bf:5b:88:df:64: 26:41:12:9f:5d:25:45:e0:eb:b9:ee:13:80:50:72: 9e:e8:c9:2a:0a:95:35:b9:94:92:d6:6b:b9:cd:67: 15:7a:1b:f5:69:71:81:e7:9d:bb:20:51:0a:2a:2e: 9c:53:d0:8b:af:6c:9f:35:1a:c7:63:f8:ce:0f:1d: ef:44:04:33:f1:e0:84:fd:7a:aa:da:bf:ed:f0:8e: 17:c4:df:e8:75:c3:6d:a9:9f:62:da:9b:1c:95:27: f2:96:05:0a:37:34:a2:ad:02:ac:d8:b7:74:09:c3: 99:04:08:f4:02:9b:4a:cd:39:dd:b8:98:41:b4:da: 6c:66:38:e6:c9:12:00:9c:61:92:9b:74:d4:3c:b5: c5:ba:17:c3:2f:d4:59:78:4e:f1:ff:e8:b9:14:65: a3:5e:d5:71:a5:57:2e:3a:a0:ef:48:ff:e7:03:b6: d7:14:c2:1f:0f:1b:69:0c:63:20:85:26:7b:ea:12: 9a:a7:d5:59:fb:5c:e0:cf:29:a8:7a:a3:ae:c0:e0: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EB:BD:A4:7C:1A:EA:40:0A:1E:45:F1:61:6C:8E:91:0B:F4:81:52 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:38:82:18:3e:9e:88:35:65:cc:cb:c6:89:eb:0c:93:68:97: 45:70:9b:97:1b:03:d9:3d:12:ea:ab:5b:9d:03:4e:87:08:fb: 8b:29:22:5c:4a:97:f9:d8:47:80:9e:e8:6f:0d:d0:37:15:48: 4e:7f:58:0b:2d:0d:62:94:4d:11:92:55:bc:f0:11:e4:5f:0e: 20:d5:1e:8d:30:c7:91:94:58:70:4c:1e:2f:b7:51:97:4f:4a: f4:22:5c:b3:c2:21:f0:6d:f0:58:35:3b:bd:29:b5:81:28:ed: 10:8a:1f:df:e7:4a:b8:09:08:7b:38:77:34:8a:24:00:f4:ec: 8d:2f:fe:2a:af:e2:61:a6:74:08:1e:75:37:85:08:63:04:ec: 4d:b3:81:f8:9e:80:23:e6:5e:df:12:b3:01:ec:69:e0:ba:c0: 03:fe:92:9a:47:25:71:aa:78:f7:b9:1c:20:83:4c:90:c0:71: 95:66:fa:89:9e:76:cb:c0:61:8c:43:41:a4:08:47:00:7a:d5: ed:27:d5:6e:37:e6:85:e9:f8:76:44:24:e9:16:9a:71:aa:a3: 96:ab:08:8d:34:d1:7c:da:13:5a:a3:8b:aa:8d:b3:53:7c:84: 82:c5:6a:12:7c:73:6c:f9:ef:03:e8:90:e4:b1:6c:a2:0c:6a: 12:97:ba:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwNzAyMTYwMTQzWhcNMjUwNzA5MTYwMTQzWjAYMRYwFAYD VQQDEw02ODY1NTdlNy1mYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8uYy6VWxoVKQDrc0IFL1Stwvkxd2Cde6UsDqouqDrtQ1XBcjdMXFlCyL3JK exebbAIqXYGuv1uI32QmQRKfXSVF4Ou57hOAUHKe6MkqCpU1uZSS1mu5zWcVehv1 aXGB5527IFEKKi6cU9CLr2yfNRrHY/jODx3vRAQz8eCE/Xqq2r/t8I4XxN/odcNt qZ9i2psclSfylgUKNzSirQKs2Ld0CcOZBAj0AptKzTnduJhBtNpsZjjmyRIAnGGS m3TUPLXFuhfDL9RZeE7x/+i5FGWjXtVxpVcuOqDvSP/nA7bXFMIfDxtpDGMghSZ7 6hKap9VZ+1zgzymoeqOuwOAyaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJjrvaR8 GupACh5F8WFsjpEL9IFSMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4OIIYPp6INWXMy8aJ6wyTaJdFcJuXGwPZPRLqq1udA06HCPuLKSJc Spf52EeAnuhvDdA3FUhOf1gLLQ1ilE0RklW88BHkXw4g1R6NMMeRlFhwTB4vt1GX T0r0IlyzwiHwbfBYNTu9KbWBKO0Qih/f50q4CQh7OHc0iiQA9OyNL/4qr+JhpnQI HnU3hQhjBOxNs4H4noAj5l7fErMB7GngusAD/pKaRyVxqnj3uRwgg0yQwHGVZvqJ nnbLwGGMQ0GkCEcAetXtJ9VuN+aF6fh2RCTpFppxqqOWqwiNNNF82hNao4uqjbNT fISCxWoSfHNs+e8D6JDksWyiDGoSl7o/ -----END CERTIFICATE-----Generated at Thu Jul 3 07:08:50 2025 by rpki-client