$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: sgdei4Y4520iAhotztcNz10UAXfV+JjPDnmpwLbE864= Subject key identifier: F0:BB:4D:C7:E8:EE:7D:F4:EA:A1:7C:BE:E8:91:FF:A4:37:34:D4:79 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F5F Signing time: Fri 04 Jul 2025 17:52:42 +0000 Manifest this update: Fri 04 Jul 2025 17:52:42 +0000 Manifest next update: Fri 11 Jul 2025 17:52:42 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: vITVLD+V3aCzDC5UwFE8F/HPN6SeJzICT+yecOrSj54=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: KvPwwQitCLdp1wselY09GkbM7S1n62UBniOlJEvvNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3950 (0xf6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Jul 4 17:52:42 2025 GMT Not After : Jul 11 17:52:42 2025 GMT Subject: CN=686814ea-8ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:da:9b:f0:0c:38:f5:0b:2b:8d:00:59:8e: ce:1a:33:e7:80:31:ec:ab:4c:2e:7a:94:ab:81:be: 85:9d:b6:02:9a:af:08:5f:1e:ef:ed:8e:43:3d:31: 8c:f9:ed:85:66:ed:91:65:20:1b:03:97:b3:cc:3b: 91:6b:78:c8:ab:c6:ee:f9:10:2c:3b:14:16:dc:2c: 37:b9:9b:51:22:17:db:cc:be:c0:2c:f5:63:0a:f0: a4:02:d9:59:b4:a4:c8:80:cb:73:28:ad:82:02:c2: a7:95:a2:4e:b3:6c:90:0c:27:80:d8:41:6b:21:c5: a4:01:b0:1d:01:a5:0d:9a:08:56:f0:1e:24:7a:b2: f9:ff:31:87:6d:b4:c6:f3:18:2d:b9:85:ed:ff:59: 87:c2:03:46:86:27:05:e7:07:4c:08:09:e4:75:37: e8:ef:97:5b:93:1d:88:ec:7b:35:8e:5f:dc:2c:44: 20:24:16:cf:a2:16:53:54:4e:ca:1c:c1:4e:dc:ed: 92:e3:37:7c:39:ae:cd:3b:bc:88:97:7d:18:b9:17: 23:07:c2:a9:bd:fa:63:7e:55:f7:5c:2e:f1:a3:30: 53:e0:8c:67:44:04:8e:9e:10:f1:b3:ca:fd:d7:7c: 45:bc:a0:9b:b0:ba:62:d4:e6:0a:b7:20:e8:b2:b8: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BB:4D:C7:E8:EE:7D:F4:EA:A1:7C:BE:E8:91:FF:A4:37:34:D4:79 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:6f:85:cf:b2:90:5e:04:47:ed:9d:06:19:a7:22:5b:9b:dd: a0:09:67:3d:dc:3f:39:49:48:9b:ed:1b:cd:f2:9c:4d:00:c7: 95:7b:13:a7:33:98:9e:7b:dc:fa:77:76:a1:a9:52:da:8f:14: f6:ac:3e:1d:2e:87:c4:a7:8b:17:19:4a:8d:5e:65:d8:d3:e8: 5b:fd:01:5a:fa:99:91:e9:53:32:28:d1:a0:d6:c6:23:cc:24: 5a:1d:3c:65:5b:46:58:a8:94:89:60:c6:c6:53:03:70:24:49: c5:4c:d9:35:41:d1:9e:a8:fa:94:3f:e9:6d:0c:25:99:1e:47: 7c:91:04:8d:b6:7a:5b:c1:bc:1b:3b:73:83:4d:4f:33:b9:7d: f6:db:76:eb:3a:7c:c1:3a:ff:ec:8c:1f:8a:8b:2a:73:3b:0f: 51:50:1c:9a:52:81:19:8f:0c:94:38:a7:49:f6:75:4a:61:8c: af:44:49:a2:b0:20:b9:db:a1:2f:a4:4c:a3:bc:b3:16:86:4a: bc:1a:5c:0f:03:93:08:71:f6:46:bb:f7:f6:5d:ef:d4:5b:f4: bc:c0:90:bf:c4:a6:5e:c5:68:b4:6a:e8:f0:cd:a6:36:73:e7: ad:1b:64:41:c8:73:e4:0c:0c:dc:06:43:d0:89:69:3d:2b:e9: e6:5c:34:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwNzA0MTc1MjQyWhcNMjUwNzExMTc1MjQyWjAYMRYwFAYD VQQDEw02ODY4MTRlYS04ZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2k7am/AMOPULK40AWY7OGjPngDHsq0wuepSrgb6FnbYCmq8IXx7v7Y5DPTGM +e2FZu2RZSAbA5ezzDuRa3jIq8bu+RAsOxQW3Cw3uZtRIhfbzL7ALPVjCvCkAtlZ tKTIgMtzKK2CAsKnlaJOs2yQDCeA2EFrIcWkAbAdAaUNmghW8B4kerL5/zGHbbTG 8xgtuYXt/1mHwgNGhicF5wdMCAnkdTfo75dbkx2I7Hs1jl/cLEQgJBbPohZTVE7K HMFO3O2S4zd8Oa7NO7yIl30YuRcjB8KpvfpjflX3XC7xozBT4IxnRASOnhDxs8r9 13xFvKCbsLpi1OYKtyDosriTAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPC7Tcfo 7n306qF8vuiR/6Q3NNR5MB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCab4XPspBeBEftnQYZpyJbm92gCWc93D85SUib7RvN8pxNAMeVexOn M5iee9z6d3ahqVLajxT2rD4dLofEp4sXGUqNXmXY0+hb/QFa+pmR6VMyKNGg1sYj zCRaHTxlW0ZYqJSJYMbGUwNwJEnFTNk1QdGeqPqUP+ltDCWZHkd8kQSNtnpbwbwb O3ODTU8zuX3223brOnzBOv/sjB+KiypzOw9RUByaUoEZjwyUOKdJ9nVKYYyvREmi sCC526EvpEyjvLMWhkq8GlwPA5MIcfZGu/f2Xe/UW/S8wJC/xKZexWi0aujwzaY2 c+etG2RByHPkDAzcBkPQiWk9K+nmXDSj -----END CERTIFICATE-----Generated at Sat Jul 5 02:34:35 2025 by rpki-client