$ rpki-client -vvf rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft File: m7K00aj-gR3ElT2ALRAvXQSNCB0.mft (raw, json) Hash identifier: gzoLKazJR3nJL/UzxkTrr0YBF/oG6w/RaVwu6nF4RuE= Subject key identifier: 83:89:A4:AF:16:12:00:DC:6F:5A:BC:2D:88:6C:8C:82:05:3B:E6:51 Authority key identifier: 9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D Certificate issuer: /CN=A91454A8/serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Certificate serial: 0857 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft Manifest number: 0851 Signing time: Fri 22 Aug 2025 20:49:47 +0000 Manifest this update: Fri 22 Aug 2025 20:49:47 +0000 Manifest next update: Fri 29 Aug 2025 20:49:47 +0000 Files and hashes: 1: m7K00aj-gR3ElT2ALRAvXQSNCB0.crl (hash: Jvn6qGsNPm8TY9l5KAoGaISX7aB7l6uqSS1ty4JFG3E=) 2: 021C59CCD1D011EAA2763743C4F9AE02.roa (hash: 9/6FBIuUpW3NyM8fzRBAE8GJH3DWuJevjPt7vt5pHkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2135 (0x857) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91454A8, serialNumber=9BB2B4D1A8FE811DC4953D802D102F5D048D081D Validity Not Before: Aug 22 20:49:47 2025 GMT Not After : Aug 29 20:49:47 2025 GMT Subject: CN=68a8d7eb-2bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:8a:5e:a7:4f:31:7e:03:1e:ab:1a:d2:25: 86:83:77:ff:bd:43:65:a4:12:ee:08:74:97:16:b5: 4f:1f:1b:ad:c0:40:b3:f3:ea:5e:ea:43:02:2e:28: c6:a7:f2:6a:bc:5b:c9:10:6d:ba:df:f7:55:67:87: 0f:e0:7e:6e:fd:d1:c3:d5:0b:5b:2e:12:da:d2:31: 61:0d:07:d0:73:4f:ad:47:a9:74:b2:12:69:ac:fe: 74:83:5a:3f:da:ba:3f:23:c6:b7:bf:4f:60:11:49: 44:d2:37:f4:e9:19:58:11:8d:03:ae:ef:9e:ed:25: 94:8f:67:31:78:b0:06:50:53:5e:02:d4:fd:49:30: 41:0c:d7:f3:13:fd:bb:2b:be:19:23:a1:fb:87:d8: 68:67:34:01:41:c7:f0:94:09:79:08:bf:c5:54:a7: 17:aa:e9:71:c4:4f:e5:77:a8:4c:c0:a5:c2:9b:f3: 13:4e:80:77:da:e0:84:fa:18:ff:a3:97:0c:90:f2: ff:58:a5:69:df:ab:f7:5a:de:9b:84:ce:03:3c:d4: d9:a3:b6:46:86:da:ce:e9:b5:f9:28:5b:45:11:c0: 3e:80:11:da:1c:c3:4c:13:bd:63:48:47:21:1b:27: 22:fd:9e:0b:75:5f:07:b7:0b:12:62:53:65:9c:eb: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:89:A4:AF:16:12:00:DC:6F:5A:BC:2D:88:6C:8C:82:05:3B:E6:51 X509v3 Authority Key Identifier: keyid:9B:B2:B4:D1:A8:FE:81:1D:C4:95:3D:80:2D:10:2F:5D:04:8D:08:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m7K00aj-gR3ElT2ALRAvXQSNCB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91454A8/E29520B8D1CD11EABA4A3440C4F9AE02/m7K00aj-gR3ElT2ALRAvXQSNCB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:5f:62:f7:92:99:29:33:0e:53:3c:96:5e:ce:22:54:8f:71: 2a:c5:2c:9a:51:82:c3:c9:58:71:30:de:57:fb:71:ed:79:da: 2f:b7:e9:b1:67:d7:6f:7e:f6:a9:5c:d0:ea:7a:f8:06:fd:6e: ed:ca:3e:5d:46:31:62:39:9d:f3:3b:3d:c2:45:13:3f:61:5c: ce:6d:ac:22:e8:86:e7:4e:5e:1b:df:8e:ec:14:5e:e9:1a:2b: da:16:e3:da:c3:f7:fc:bb:1d:8e:32:98:71:36:21:95:c8:a5: 5a:64:0f:70:4b:53:57:db:22:c6:98:68:8a:a3:62:20:84:9d: 38:61:99:70:de:e4:d1:30:e6:57:58:bf:5c:e2:2a:40:0c:61: c8:41:44:90:f7:2c:e4:cc:a7:05:fd:84:e4:93:16:09:85:e8: 48:11:2d:c0:c7:bb:8b:59:99:d8:00:a9:be:2b:b0:41:5e:d0: ab:f0:3c:16:b3:68:1a:de:ad:bc:8a:26:a0:7a:01:b1:bd:c3: 34:1a:92:9c:df:29:6c:97:72:40:20:47:d7:3c:3c:8a:df:68: 03:ad:65:c5:8b:ee:a3:12:3d:9d:64:14:98:74:37:d1:b0:9b: 1a:40:f8:f7:e0:1a:00:f9:22:2d:23:8f:28:48:37:38:6d:9b: ce:2e:8b:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU0QTgxMTAvBgNVBAUTKDlCQjJCNEQxQThGRTgxMURDNDk1M0Q4MDJEMTAyRjVE MDQ4RDA4MUQwHhcNMjUwODIyMjA0OTQ3WhcNMjUwODI5MjA0OTQ3WjAYMRYwFAYD VQQDEw02OGE4ZDdlYi0yYmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2WKXqdPMX4DHqsa0iWGg3f/vUNlpBLuCHSXFrVPHxutwECz8+pe6kMCLijG p/JqvFvJEG263/dVZ4cP4H5u/dHD1QtbLhLa0jFhDQfQc0+tR6l0shJprP50g1o/ 2ro/I8a3v09gEUlE0jf06RlYEY0Dru+e7SWUj2cxeLAGUFNeAtT9STBBDNfzE/27 K74ZI6H7h9hoZzQBQcfwlAl5CL/FVKcXqulxxE/ld6hMwKXCm/MTToB32uCE+hj/ o5cMkPL/WKVp36v3Wt6bhM4DPNTZo7ZGhtrO6bX5KFtFEcA+gBHaHMNME71jSEch Gyci/Z4LdV8HtwsSYlNlnOu3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIOJpK8W EgDcb1q8LYhsjIIFO+ZRMB8GA1UdIwQYMBaAFJuytNGo/oEdxJU9gC0QL10EjQgd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTRBOC9FMjk1MjBCOEQx Q0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdSM0VsVDJBTFJBdlhRU05D QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL203SzAwYWotZ1IzRWxUMkFMUkF2WFFTTkNCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTRBOC9FMjk1MjBCOEQxQ0QxMUVBQkE0QTM0NDBDNEY5QUUwMi9tN0swMGFqLWdS M0VsVDJBTFJBdlhRU05DQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRX2L3kpkpMw5TPJZeziJUj3EqxSyaUYLDyVhxMN5X+3Htedovt+mx Z9dvfvapXNDqevgG/W7tyj5dRjFiOZ3zOz3CRRM/YVzObawi6IbnTl4b347sFF7p GivaFuPaw/f8ux2OMphxNiGVyKVaZA9wS1NX2yLGmGiKo2IghJ04YZlw3uTRMOZX WL9c4ipADGHIQUSQ9yzkzKcF/YTkkxYJhehIES3Ax7uLWZnYAKm+K7BBXtCr8DwW s2ga3q28iiagegGxvcM0GpKc3ylsl3JAIEfXPDyK32gDrWXFi+6jEj2dZBSYdDfR sJsaQPj34BoA+SItI48oSDc4bZvOLosK -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:10 2025 by rpki-client