$ rpki-client -vvf rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft File: 7D2Af3k8nPX84zXuFeCYREm0MJY.mft (raw, json) Hash identifier: VBjRUFxsvNdOYlCh0bgv3DI9Zpu4FIfLpEyXT0OXWWc= Subject key identifier: 43:36:2A:EA:15:FA:75:4F:C9:5A:A0:11:17:8F:A2:6D:A2:DD:4C:2B Authority key identifier: EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 Certificate issuer: /CN=A91517CF/serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Certificate serial: 8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft Manifest number: 88 Signing time: Sat 23 Aug 2025 06:51:05 +0000 Manifest this update: Sat 23 Aug 2025 06:51:05 +0000 Manifest next update: Sat 30 Aug 2025 06:51:05 +0000 Files and hashes: 1: 7D2Af3k8nPX84zXuFeCYREm0MJY.crl (hash: tqD+FHagWg/abX/zmWkmCLXbn4tCuEDgnPKeQXQyskk=) 2: 18164B6AB2C811EFA702DF80C4F9AE02.roa (hash: WLNXMP0ra3REMtSs7laKuUO//z/EEyMC3rb1Y8gR3Jk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 138 (0x8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91517CF, serialNumber=EC3D807F793C9CF5FCE335EE15E0984449B43096 Validity Not Before: Aug 23 06:51:05 2025 GMT Not After : Aug 30 06:51:05 2025 GMT Subject: CN=68a964d9-40d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:27:42:f0:f2:0b:e0:88:5b:c2:76:41:a4: 46:b7:c3:2d:e6:05:10:43:6c:40:74:7f:fc:b0:a6: ed:7d:73:f1:e6:07:21:8a:3e:f1:b4:ab:a9:28:d4: ba:46:49:f8:cd:12:f7:25:0f:bb:ca:68:99:8c:0e: cf:78:67:25:30:2e:f2:7c:fb:7c:13:55:94:16:6e: 56:5f:d9:08:72:b1:5f:4a:80:ab:0a:5a:81:b3:0d: fa:a8:e9:62:0c:53:d0:e0:4e:b7:74:78:cb:fc:e1: d2:da:4f:50:06:73:06:5c:f9:35:7c:c9:f9:d8:e3: e7:b2:1a:6c:12:b4:60:2c:9e:02:dc:56:28:34:47: ec:e7:86:af:23:0e:aa:33:82:1f:e8:ac:f9:4f:63: 77:67:8a:07:31:7a:5e:94:cd:f7:db:38:35:6a:6f: 37:1a:be:80:a2:50:67:14:72:ca:aa:f3:26:4c:8b: 3f:25:66:d9:c0:c4:61:d4:ab:7f:c2:cb:7c:3c:1f: 1e:71:9b:1f:8b:6f:ba:d4:77:23:a8:5d:0a:67:68: 63:6f:99:7f:86:8f:dc:67:b1:f4:ed:e2:b2:b0:06: c6:da:87:ce:e6:50:d2:63:e2:75:cb:df:98:e0:28: b7:df:62:53:a1:fb:3e:45:0b:af:26:67:79:7e:58: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:2A:EA:15:FA:75:4F:C9:5A:A0:11:17:8F:A2:6D:A2:DD:4C:2B X509v3 Authority Key Identifier: keyid:EC:3D:80:7F:79:3C:9C:F5:FC:E3:35:EE:15:E0:98:44:49:B4:30:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7D2Af3k8nPX84zXuFeCYREm0MJY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517CF/B4155458B2C711EF916BB67FC4F9AE02/7D2Af3k8nPX84zXuFeCYREm0MJY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:e2:b9:b9:b5:37:ff:7e:31:db:9a:d4:8e:26:c3:ca:7b:2e: 75:00:89:27:4d:50:c6:df:72:af:01:ce:9c:fb:8e:76:33:d0: 57:44:f1:c8:82:1f:5c:f6:f1:c5:a9:08:e1:b0:53:f7:92:cd: 5a:fb:a6:87:83:f5:d2:55:04:84:13:f1:9d:5c:a4:52:9d:13: 04:f8:ae:ce:52:e0:3e:95:b2:4f:d4:48:5a:54:90:a8:0d:45: 06:91:fd:0b:d1:aa:56:1a:29:36:6c:03:8c:22:40:c5:5c:72: ee:50:93:ae:66:9e:34:8c:af:2e:4f:51:d5:e2:ba:76:62:62: ca:72:9c:3a:d7:8f:73:e3:c0:77:5b:d8:ef:cc:ab:28:fd:4a: 2a:ca:da:56:4b:48:74:a6:54:cd:75:5f:2d:c7:6d:f5:c7:34: d2:2b:d4:d4:24:76:2d:bf:0a:4f:98:8f:32:21:c8:ad:5a:b5: b0:f4:86:8f:63:13:a4:a5:8e:b9:4f:59:28:15:07:ca:87:ea: 25:ac:a0:5d:13:f3:4d:be:35:dc:c7:0a:cc:c0:59:7a:89:0a: 2a:42:b6:7a:70:78:e7:11:9b:c4:ce:95:19:22:f3:af:76:3e: 24:2a:28:fa:1d:f6:9a:23:09:61:bf:db:5f:a5:cb:01:88:50: 57:14:35:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE3Q0YxMTAvBgNVBAUTKEVDM0Q4MDdGNzkzQzlDRjVGQ0UzMzVFRTE1RTA5ODQ0 NDlCNDMwOTYwHhcNMjUwODIzMDY1MTA1WhcNMjUwODMwMDY1MTA1WjAYMRYwFAYD VQQDEw02OGE5NjRkOS00MGQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmRYnQvDyC+CIW8J2QaRGt8Mt5gUQQ2xAdH/8sKbtfXPx5gchij7xtKupKNS6 Rkn4zRL3JQ+7ymiZjA7PeGclMC7yfPt8E1WUFm5WX9kIcrFfSoCrClqBsw36qOli DFPQ4E63dHjL/OHS2k9QBnMGXPk1fMn52OPnshpsErRgLJ4C3FYoNEfs54avIw6q M4If6Kz5T2N3Z4oHMXpelM332zg1am83Gr6AolBnFHLKqvMmTIs/JWbZwMRh1Kt/ wst8PB8ecZsfi2+61HcjqF0KZ2hjb5l/ho/cZ7H07eKysAbG2ofO5lDSY+J1y9+Y 4Ci332JTofs+RQuvJmd5flj22QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEM2KuoV +nVPyVqgERePom2i3UwrMB8GA1UdIwQYMBaAFOw9gH95PJz1/OM17hXgmERJtDCW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTdDRi9CNDE1NTQ1OEIy QzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5QWDg0elh1RmVDWVJFbTBN SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEMkFmM2s4blBYODR6WHVGZUNZUkVtME1KWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTdDRi9CNDE1NTQ1OEIyQzcxMUVGOTE2QkI2N0ZDNEY5QUUwMi83RDJBZjNrOG5Q WDg0elh1RmVDWVJFbTBNSlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU4rm5tTf/fjHbmtSOJsPKey51AIknTVDG33KvAc6c+452M9BXRPHI gh9c9vHFqQjhsFP3ks1a+6aHg/XSVQSEE/GdXKRSnRME+K7OUuA+lbJP1EhaVJCo DUUGkf0L0apWGik2bAOMIkDFXHLuUJOuZp40jK8uT1HV4rp2YmLKcpw6149z48B3 W9jvzKso/UoqytpWS0h0plTNdV8tx231xzTSK9TUJHYtvwpPmI8yIcitWrWw9IaP YxOkpY65T1koFQfKh+olrKBdE/NNvjXcxwrMwFl6iQoqQrZ6cHjnEZvEzpUZIvOv dj4kKij6HfaaIwlhv9tfpcsBiFBXFDWq -----END CERTIFICATE-----Generated at Sat Aug 23 10:54:22 2025 by rpki-client