$ rpki-client -vvf rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft File: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft (raw, json) Hash identifier: xNWeUB50vuLI2FeiNtM98gHCqP6E0NcsUHgBTNkDmG4= Subject key identifier: 23:3F:07:24:98:C3:9C:CF:44:31:B7:1F:FE:05:60:FF:97:18:F3:E0 Authority key identifier: FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 Certificate issuer: /CN=A91230B8/serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft Manifest number: 01ED Signing time: Sat 23 Aug 2025 02:44:35 +0000 Manifest this update: Sat 23 Aug 2025 02:44:35 +0000 Manifest next update: Sat 30 Aug 2025 02:44:35 +0000 Files and hashes: 1: -7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl (hash: 2PLtKQeItsX+7BdQC70XzRuObuKPpeoAal504Y0fRmo=) 2: B966D678C0C611EE8F5F0458C4F9AE02.roa (hash: J2faMLBlgt9GzAmsM2dSN7aVP9JzekH0nQNt2xO6dtk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91230B8, serialNumber=FBBAB690ADFE10EF434B718954F17387D6384668 Validity Not Before: Aug 23 02:44:35 2025 GMT Not After : Aug 30 02:44:35 2025 GMT Subject: CN=68a92b13-1b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:53:4c:5b:16:7c:f1:85:ee:f7:07:18:35: ef:c2:49:c7:35:76:3f:3c:eb:5f:43:6d:99:c7:f7: b9:7c:c2:8b:ed:22:ad:49:57:64:67:bb:2c:e2:0b: f9:da:c6:14:29:1d:5e:7e:a9:1e:24:c7:be:ec:a0: 39:4d:b2:58:40:e5:89:20:a0:42:3b:79:92:f4:e7: 07:40:e1:da:92:47:74:21:d5:9b:db:9d:ef:1a:be: a8:26:26:1b:47:aa:2f:ab:ac:50:a7:0a:15:5f:ba: a6:20:9c:cb:0a:62:11:b0:c0:63:5d:4b:39:90:2f: b2:d3:bc:ca:a6:7b:07:df:04:fc:b9:01:ce:d9:8f: 47:40:0a:6e:ee:59:a0:fa:b7:d9:4b:a4:31:b5:20: d8:a9:ce:c2:43:1a:5b:a2:a6:f9:8f:e2:53:62:b7: 92:09:0a:ba:73:85:20:23:64:35:3a:39:53:1d:b3: e1:97:8e:bd:9f:72:17:f4:0f:8a:0a:92:c1:66:05: 96:e6:b1:5a:07:fa:80:45:42:a9:6e:51:17:33:7b: 3e:56:07:25:21:39:4f:c4:76:75:31:4d:67:f3:e2: bf:61:76:37:84:5c:fa:87:fb:79:84:8a:19:83:ce: d4:d6:cd:40:ef:0e:a2:59:35:3b:3b:26:d2:5f:8f: d9:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:07:24:98:C3:9C:CF:44:31:B7:1F:FE:05:60:FF:97:18:F3:E0 X509v3 Authority Key Identifier: keyid:FB:BA:B6:90:AD:FE:10:EF:43:4B:71:89:54:F1:73:87:D6:38:46:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91230B8/F1F890F0965911ED8CC78A60C4F9AE02/-7q2kK3-EO9DS3GJVPFzh9Y4Rmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:45:6e:69:ca:aa:27:ab:d5:25:93:1d:92:3e:7f:f5:b9:f6: ba:16:a1:c4:3f:7b:56:df:fd:c1:0f:b4:aa:db:65:6e:35:31: af:7b:06:5d:88:82:c6:fd:2d:43:42:a0:d0:4b:03:7c:56:64: 51:05:a3:3a:f9:42:5f:8a:44:da:ea:58:fe:1c:43:0d:3e:40: 66:05:70:3e:cd:58:de:f4:fb:ce:a5:1b:9a:80:f6:d2:8b:3a: 8a:ea:0e:8f:25:38:91:fd:dc:9f:d6:ca:b0:f2:c6:bd:36:fb: 38:0b:83:f1:2b:92:53:0a:ad:d0:4f:31:76:f7:6a:4e:40:54: b7:38:1c:94:a2:ed:da:c2:1a:b4:1b:ae:5e:6b:f0:57:fb:9b: 8a:85:67:36:73:34:00:5a:b0:17:d9:96:fe:dd:e6:cf:67:f6: 4f:da:56:7a:61:69:81:75:dc:bd:4d:b6:ca:a0:8d:3b:83:ce: 50:a4:ca:b2:0f:0f:d8:67:30:57:88:34:39:84:ed:f9:dc:d9: 04:40:d9:61:c4:1d:5c:21:7a:3d:da:18:f0:88:d8:6a:ba:c7: 84:e6:1f:3a:bf:ee:4d:a9:1a:27:b5:c9:31:09:2f:1c:66:8b: 51:40:e0:73:dd:eb:a6:47:6d:ea:04:5c:c2:c4:81:f9:83:9b: d9:a3:68:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjMwQjgxMTAvBgNVBAUTKEZCQkFCNjkwQURGRTEwRUY0MzRCNzE4OTU0RjE3Mzg3 RDYzODQ2NjgwHhcNMjUwODIzMDI0NDM1WhcNMjUwODMwMDI0NDM1WjAYMRYwFAYD VQQDEw02OGE5MmIxMy0xYjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0e1TTFsWfPGF7vcHGDXvwknHNXY/POtfQ22Zx/e5fMKL7SKtSVdkZ7ss4gv5 2sYUKR1efqkeJMe+7KA5TbJYQOWJIKBCO3mS9OcHQOHakkd0IdWb253vGr6oJiYb R6ovq6xQpwoVX7qmIJzLCmIRsMBjXUs5kC+y07zKpnsH3wT8uQHO2Y9HQApu7lmg +rfZS6QxtSDYqc7CQxpboqb5j+JTYreSCQq6c4UgI2Q1OjlTHbPhl469n3IX9A+K CpLBZgWW5rFaB/qARUKpblEXM3s+VgclITlPxHZ1MU1n8+K/YXY3hFz6h/t5hIoZ g87U1s1A7w6iWTU7OybSX4/ZawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCM/BySY w5zPRDG3H/4FYP+XGPPgMB8GA1UdIwQYMBaAFPu6tpCt/hDvQ0txiVTxc4fWOEZo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzBCOC9GMUY4OTBGMDk2 NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVPOURTM0dKVlBGemg5WTRS bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03cTJrSzMtRU85RFMzR0pWUEZ6aDlZNFJtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzBCOC9GMUY4OTBGMDk2NTkxMUVEOENDNzhBNjBDNEY5QUUwMi8tN3Eya0szLUVP OURTM0dKVlBGemg5WTRSbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCERW5pyqonq9Ulkx2SPn/1ufa6FqHEP3tW3/3BD7Sq22VuNTGvewZd iILG/S1DQqDQSwN8VmRRBaM6+UJfikTa6lj+HEMNPkBmBXA+zVje9PvOpRuagPbS izqK6g6PJTiR/dyf1sqw8sa9Nvs4C4PxK5JTCq3QTzF292pOQFS3OByUou3awhq0 G65ea/BX+5uKhWc2czQAWrAX2Zb+3ebPZ/ZP2lZ6YWmBddy9TbbKoI07g85QpMqy Dw/YZzBXiDQ5hO353NkEQNlhxB1cIXo92hjwiNhquseE5h86v+5NqRontckxCS8c ZotRQOBz3eumR23qBFzCxIH5g5vZo2j5 -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:42 2025 by rpki-client