$ rpki-client -vvf rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft File: g7x91dFCfoM0DS32wztiPUPX7KQ.mft (raw, json) Hash identifier: Q0rilZp7NPkAgn7kG9Q4fYJfrbUTMq9ujkpYXFHgQoM= Subject key identifier: 02:18:B3:80:3C:3D:33:3A:25:E4:A3:1E:C5:F0:7C:1F:7E:56:1F:44 Authority key identifier: 83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 Certificate issuer: /CN=A911B468/serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Certificate serial: 0ED4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft Manifest number: 0EC5 Signing time: Fri 22 Aug 2025 17:46:57 +0000 Manifest this update: Fri 22 Aug 2025 17:46:57 +0000 Manifest next update: Fri 29 Aug 2025 17:46:57 +0000 Files and hashes: 1: g7x91dFCfoM0DS32wztiPUPX7KQ.crl (hash: y+jp2CKkn+FPQWT41y8nwzGNR59ow6mlA7cLMtlJ8wY=) 2: E1769D329EF711EABE23195AC4F9AE02.roa (hash: bnxide7jSDy0H4+26/GRiKEkbVdX6Jj48LQNDvhocz8=) 3: 16C329A4713B11F0A2354E78C4F9AE02.roa (hash: 7smT06syTnNc536UG7njwXY5Lk24IKolME1BG7DDt6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3796 (0xed4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B468, serialNumber=83BC7DD5D1427E83340D2DF6C33B623D43D7ECA4 Validity Not Before: Aug 22 17:46:57 2025 GMT Not After : Aug 29 17:46:57 2025 GMT Subject: CN=68a8ad11-3e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:6e:5a:f9:55:d0:ee:41:61:e1:5d:89:41: f2:52:3f:91:82:f5:02:46:88:1a:0f:9b:b7:6c:35: ff:99:4e:1f:56:9d:f6:9c:74:1e:5f:bc:1d:7b:81: 18:74:50:06:2e:12:63:92:a0:c4:c2:9d:29:a7:c3: d7:b9:5f:1b:5f:9d:12:39:6c:18:62:8d:99:45:fe: b2:d1:a0:fe:b7:83:7b:4b:3d:8e:bf:a5:ad:26:79: 8e:d7:b8:e4:00:07:61:0b:de:de:ad:48:af:f9:5c: 11:df:5c:50:c8:2a:bc:0c:1c:a8:97:01:49:e2:9c: fb:c7:22:68:30:85:c4:44:bf:15:b6:c6:72:df:01: d1:7b:4e:d6:86:7c:6b:8b:0d:e4:54:71:6a:93:0a: 96:57:59:86:8a:95:e2:7f:63:6d:c2:9d:51:df:25: eb:70:29:10:5c:c8:78:11:36:ca:56:d5:ab:cf:4c: b7:ae:d3:92:c6:f7:ac:92:42:a8:e8:fd:e1:84:76: f4:a6:d4:23:f6:cd:d8:f3:1e:f6:b2:29:96:6b:53: ed:82:c7:3c:47:94:39:90:0e:75:36:63:e7:96:69: 8a:14:8a:85:71:1c:a9:1c:ca:dc:d5:37:0b:dc:b1: 19:c2:51:48:90:96:49:d7:0a:d7:d0:d1:4d:0a:2d: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:18:B3:80:3C:3D:33:3A:25:E4:A3:1E:C5:F0:7C:1F:7E:56:1F:44 X509v3 Authority Key Identifier: keyid:83:BC:7D:D5:D1:42:7E:83:34:0D:2D:F6:C3:3B:62:3D:43:D7:EC:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7x91dFCfoM0DS32wztiPUPX7KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B468/81226028911B11E99300FE57C4F9AE02/g7x91dFCfoM0DS32wztiPUPX7KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:bc:a4:5a:4f:55:5e:12:04:91:4a:87:0b:c7:c8:61:f6:ab: 99:d4:f7:9c:f9:f7:41:d4:69:6d:47:37:9b:a1:c0:d9:d1:dc: 06:33:39:f2:65:2b:a5:7a:66:41:12:a5:fb:18:35:0c:75:62: 91:d4:a9:dc:7a:f5:60:7d:a2:f8:3e:ed:2f:2b:4c:e5:22:f4: 52:9b:fd:33:35:8b:2d:95:8e:62:9e:c3:86:52:11:22:31:fe: 51:02:af:98:56:10:41:0e:8f:1f:a0:fb:34:0e:3b:08:3c:6b: 53:2e:a8:ce:97:3c:9a:d0:9b:1f:32:df:e8:e9:e6:7e:6b:87: c1:a2:36:ea:23:4f:ed:b9:68:8a:43:b6:fc:fe:a7:81:be:a3: 6c:f5:05:6a:ab:b9:79:9a:b3:8a:b7:e1:bd:f6:5b:74:b7:d1: b8:37:a8:7b:25:9a:a6:4f:12:37:05:50:b7:0f:31:6a:ae:73: 1e:83:47:4b:f6:d0:2c:44:6c:39:e5:ca:fa:6b:ac:92:ba:dc: d9:8d:1f:5b:f4:f3:e6:32:9b:eb:dd:8a:ea:81:c0:9a:b6:16: 07:2a:4f:06:47:0c:4b:46:a2:91:9b:c2:26:f9:4a:18:5b:ff: 78:86:0d:08:a0:3d:5e:e6:3c:55:84:53:f2:9e:6a:c7:1d:49: be:3b:7c:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0NjgxMTAvBgNVBAUTKDgzQkM3REQ1RDE0MjdFODMzNDBEMkRGNkMzM0I2MjNE NDNEN0VDQTQwHhcNMjUwODIyMTc0NjU3WhcNMjUwODI5MTc0NjU3WjAYMRYwFAYD VQQDEw02OGE4YWQxMS0zZTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu1uWvlV0O5BYeFdiUHyUj+RgvUCRogaD5u3bDX/mU4fVp32nHQeX7wde4EY dFAGLhJjkqDEwp0pp8PXuV8bX50SOWwYYo2ZRf6y0aD+t4N7Sz2Ov6WtJnmO17jk AAdhC97erUiv+VwR31xQyCq8DByolwFJ4pz7xyJoMIXERL8VtsZy3wHRe07Whnxr iw3kVHFqkwqWV1mGipXif2Ntwp1R3yXrcCkQXMh4ETbKVtWrz0y3rtOSxveskkKo 6P3hhHb0ptQj9s3Y8x72simWa1Ptgsc8R5Q5kA51NmPnlmmKFIqFcRypHMrc1TcL 3LEZwlFIkJZJ1wrX0NFNCi1xNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAIYs4A8 PTM6JeSjHsXwfB9+Vh9EMB8GA1UdIwQYMBaAFIO8fdXRQn6DNA0t9sM7Yj1D1+yk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQ2OC84MTIyNjAyODkx MUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2ZvTTBEUzMyd3p0aVBVUFg3 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3eDkxZEZDZm9NMERTMzJ3enRpUFVQWDdLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQ2OC84MTIyNjAyODkxMUIxMUU5OTMwMEZFNTdDNEY5QUUwMi9nN3g5MWRGQ2Zv TTBEUzMyd3p0aVBVUFg3S1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTvKRaT1VeEgSRSocLx8hh9quZ1Pec+fdB1GltRzebocDZ0dwGMzny ZSulemZBEqX7GDUMdWKR1KncevVgfaL4Pu0vK0zlIvRSm/0zNYstlY5insOGUhEi Mf5RAq+YVhBBDo8foPs0DjsIPGtTLqjOlzya0JsfMt/o6eZ+a4fBojbqI0/tuWiK Q7b8/qeBvqNs9QVqq7l5mrOKt+G99lt0t9G4N6h7JZqmTxI3BVC3DzFqrnMeg0dL 9tAsRGw55cr6a6ySutzZjR9b9PPmMpvr3YrqgcCathYHKk8GRwxLRqKRm8Im+UoY W/94hg0IoD1e5jxVhFPynmrHHUm+O3zO -----END CERTIFICATE-----Generated at Sat Aug 23 17:19:00 2025 by rpki-client