$ rpki-client -vvf rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft File: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft (raw, json) Hash identifier: Ed1zyG53DnTz8ADQxyZHul5RGzNbS7lB+oR5ZhmhrvY= Subject key identifier: 1C:16:71:E2:38:C8:D7:1A:EF:E7:BD:BE:72:ED:37:31:4D:45:AD:F0 Authority key identifier: FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF Certificate issuer: /CN=A91168FD/serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Certificate serial: 2193 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft Manifest number: 218A Signing time: Fri 22 Aug 2025 15:57:38 +0000 Manifest this update: Fri 22 Aug 2025 15:57:38 +0000 Manifest next update: Fri 29 Aug 2025 15:57:38 +0000 Files and hashes: 1: _7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl (hash: hYD82axwt3CuxpM7L7o4xV2oKwnsOG7H/unqXRnIz0M=) 2: D07411B6661211ECBCD61A65C4F9AE02.roa (hash: /mOiRGW1T9qa7YdW+2kPvRZkQyewAraUry397iZAYjE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8595 (0x2193) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168FD, serialNumber=FFBC2D41CDD95FFCF8A77E52919E2E6D1BAF02DF Validity Not Before: Aug 22 15:57:38 2025 GMT Not After : Aug 29 15:57:38 2025 GMT Subject: CN=68a89372-3a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:d1:63:d1:a8:bd:9b:8c:2c:cd:b5:37:98: 3d:0d:c3:87:bb:51:21:a7:fa:81:35:cd:7a:13:ec: 1c:76:ed:a6:79:76:cb:e3:7c:d0:20:04:e3:7e:64: d9:8e:a1:58:92:ec:60:8f:51:12:df:e1:83:de:4f: a5:c2:d9:a3:6a:57:56:87:07:02:af:73:8b:62:a4: f7:86:00:c2:ca:a6:59:43:a4:d9:f2:33:d5:26:8b: c5:19:77:ea:bc:cb:4c:55:f0:28:9c:e3:01:3e:ff: c4:9d:e4:3e:15:ce:f7:4c:62:25:2b:2d:a5:43:b6: 88:0c:23:eb:e7:f0:c3:19:aa:a7:92:e5:2e:4c:b7: 2d:60:ce:73:ec:6c:5d:30:f8:5d:a0:e1:42:d3:b2: 40:21:3f:38:e7:42:a7:e4:8c:96:2f:11:62:ce:c7: 50:5e:b6:07:f2:45:71:9c:f2:73:87:0d:cc:6f:38: 8c:58:d9:c3:7a:14:11:21:28:8a:bf:d9:a1:35:2b: 28:08:34:40:5b:4d:ab:9c:02:84:f9:8e:71:fe:87: 12:a0:02:0d:2c:bf:b8:ea:e9:0c:5f:0e:3b:df:83: 35:64:f9:09:06:20:1d:eb:0a:70:d3:34:d2:10:31: e3:77:9a:cc:99:dc:e0:38:b8:c4:5d:37:be:4e:70: ef:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:16:71:E2:38:C8:D7:1A:EF:E7:BD:BE:72:ED:37:31:4D:45:AD:F0 X509v3 Authority Key Identifier: keyid:FF:BC:2D:41:CD:D9:5F:FC:F8:A7:7E:52:91:9E:2E:6D:1B:AF:02:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168FD/9A799644E11111E5AB017727C4F9AE02/_7wtQc3ZX_z4p35SkZ4ubRuvAt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:94:ab:b2:a3:ef:ef:00:07:83:4c:62:14:08:21:44:7b:87: 1e:03:15:47:0c:21:8d:0f:d3:66:a1:7f:2c:32:e4:e4:b6:d3: f5:a8:48:da:d1:03:0c:e4:b4:03:dc:b5:cb:89:23:14:49:78: 4a:42:33:e0:f5:cd:ca:f1:74:d6:d7:7b:25:8c:39:97:3b:74: bc:49:ee:e7:81:be:2c:d1:df:2c:91:67:44:88:d5:9c:e7:9c: ac:0d:69:d7:d6:7d:62:2f:f6:cc:18:a2:83:4d:6b:43:64:3e: b4:fa:25:6f:49:85:26:2a:2c:cd:c5:39:6c:c6:14:60:e3:46: 90:ed:7e:22:36:b9:0d:c4:a4:8a:c4:f2:5f:c4:ef:8c:87:14: 1b:62:b6:24:ac:4b:db:d3:c4:58:df:12:a7:10:bc:0f:3b:4e: b9:79:a0:7a:a9:12:c7:13:ad:32:52:ac:87:81:ff:a0:a1:0a: 88:45:b4:2d:da:c7:e3:cd:7f:96:a9:7d:80:11:ce:42:48:0c: 10:b9:5e:53:0a:34:72:35:e1:87:95:9d:99:8f:e5:b1:5f:60: 80:9a:f3:91:1a:f6:9e:e7:df:c7:4f:39:db:af:ce:96:c9:be: c3:77:fc:49:3c:32:3d:e4:13:ca:52:df:77:48:a7:94:6f:1e: dd:e3:74:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIZMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4RkQxMTAvBgNVBAUTKEZGQkMyRDQxQ0REOTVGRkNGOEE3N0U1MjkxOUUyRTZE MUJBRjAyREYwHhcNMjUwODIyMTU1NzM4WhcNMjUwODI5MTU1NzM4WjAYMRYwFAYD VQQDEw02OGE4OTM3Mi0zYTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23/RY9GovZuMLM21N5g9DcOHu1Ehp/qBNc16E+wcdu2meXbL43zQIATjfmTZ jqFYkuxgj1ES3+GD3k+lwtmjaldWhwcCr3OLYqT3hgDCyqZZQ6TZ8jPVJovFGXfq vMtMVfAonOMBPv/EneQ+Fc73TGIlKy2lQ7aIDCPr5/DDGaqnkuUuTLctYM5z7Gxd MPhdoOFC07JAIT8450Kn5IyWLxFizsdQXrYH8kVxnPJzhw3MbziMWNnDehQRISiK v9mhNSsoCDRAW02rnAKE+Y5x/ocSoAINLL+46ukMXw4734M1ZPkJBiAd6wpw0zTS EDHjd5rMmdzgOLjEXTe+TnDvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwWceI4 yNca7+e9vnLtNzFNRa3wMB8GA1UdIwQYMBaAFP+8LUHN2V/8+Kd+UpGeLm0brwLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhGRC85QTc5OTY0NEUx MTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhfejRwMzVTa1o0dWJSdXZB dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL183d3RRYzNaWF96NHAzNVNrWjR1YlJ1dkF0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhGRC85QTc5OTY0NEUxMTExMUU1QUIwMTc3MjdDNEY5QUUwMi9fN3d0UWMzWlhf ejRwMzVTa1o0dWJSdXZBdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAblKuyo+/vAAeDTGIUCCFEe4ceAxVHDCGND9NmoX8sMuTkttP1qEja 0QMM5LQD3LXLiSMUSXhKQjPg9c3K8XTW13sljDmXO3S8Se7ngb4s0d8skWdEiNWc 55ysDWnX1n1iL/bMGKKDTWtDZD60+iVvSYUmKizNxTlsxhRg40aQ7X4iNrkNxKSK xPJfxO+MhxQbYrYkrEvb08RY3xKnELwPO065eaB6qRLHE60yUqyHgf+goQqIRbQt 2sfjzX+WqX2AEc5CSAwQuV5TCjRyNeGHlZ2Zj+WxX2CAmvORGvae59/HTznbr86W yb7Dd/xJPDI95BPKUt93SKeUbx7d43RA -----END CERTIFICATE-----Generated at Sat Aug 23 17:17:58 2025 by rpki-client