$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: XzcfX3aBtsB0dpdAxJH8M4f4hYNlPhXt2QlOKl2tFIY= Subject key identifier: CA:FA:73:FD:FE:AD:97:02:38:F7:0F:88:A6:77:D3:8C:2D:5C:FD:AD Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F7A Signing time: Fri 22 Aug 2025 17:40:51 +0000 Manifest this update: Fri 22 Aug 2025 17:40:51 +0000 Manifest next update: Fri 29 Aug 2025 17:40:51 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: p1j2HrtBDRHyhZGE964gbtKlrwgOZcxlpYrZUg9TYiI=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: O5M1jbKU4KBTSC5g58y6skgHkeCwY767jwNIVlihlmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3978 (0xf8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Aug 22 17:40:51 2025 GMT Not After : Aug 29 17:40:51 2025 GMT Subject: CN=68a8aba3-4d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:bb:78:2e:2c:b1:47:26:f3:28:e2:e0:d4:1b: 10:77:77:cd:7e:85:76:92:47:a6:58:3d:2c:51:c1: 0b:47:e4:b5:16:2c:46:80:74:30:d4:65:72:2f:f5: e6:d0:7a:da:87:c4:be:46:28:d4:22:a5:3a:f5:63: 74:41:7a:e4:29:eb:ef:8f:70:f5:e7:1c:16:e5:4f: 9a:6d:23:30:59:80:64:4d:ad:94:71:f5:45:9e:c0: 4b:74:8a:ef:e3:f6:99:3f:d0:b3:94:1d:3a:60:36: 34:9e:27:a1:dc:fc:3d:04:25:4b:ce:6f:75:6b:4c: 38:6b:ee:84:7f:7b:d7:20:8a:3f:c1:09:94:3e:1c: 52:97:a7:6b:49:f5:b7:b8:12:4e:46:6d:93:a3:9d: df:fb:41:2d:6b:c4:a0:bc:3b:7d:66:20:55:27:2d: 65:d6:69:b7:a2:71:0a:57:a2:a0:81:95:51:25:4d: 6e:ed:1f:4c:d6:84:17:57:21:59:9c:1d:71:0a:f8: 0c:e8:f1:4c:f9:9b:7f:bb:cb:09:4d:dc:59:43:a3: bd:75:00:3c:58:5f:a4:c3:e4:83:a3:ec:44:a8:0d: 20:90:e6:38:5b:bf:be:4b:ab:86:ae:6d:d5:a7:fe: fc:d4:d3:77:28:b2:57:c5:3f:80:e6:67:01:93:f9: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:FA:73:FD:FE:AD:97:02:38:F7:0F:88:A6:77:D3:8C:2D:5C:FD:AD X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:87:d9:52:1d:8a:3f:2f:db:ca:49:0d:92:6a:a5:26:29:37: e9:a6:57:2d:ae:fa:eb:de:35:79:97:c7:87:47:b7:99:03:96: 30:8b:7c:fa:fe:c3:c5:9a:51:8a:59:e1:f6:aa:a8:bb:d9:bc: 10:d2:f5:2c:e5:ca:47:71:15:b3:be:49:c2:bb:33:65:38:2f: 0b:eb:cf:8e:a9:56:09:a4:67:0f:90:20:7f:4f:7c:67:e2:5a: 51:29:a3:ca:57:c5:c3:ab:ea:af:ba:d5:ad:dc:c1:72:9c:95: 24:22:8d:48:14:5a:74:24:58:71:4e:c8:51:c9:cd:fa:2f:ad: f7:68:e3:77:53:bd:0b:f6:a3:7e:5a:1b:19:49:5d:94:b3:eb: 1a:a3:39:d7:f7:a6:1b:6a:2c:9f:ba:d3:ef:bd:c4:e8:b9:80: d2:34:d9:87:fd:3a:06:07:f4:b8:90:1b:a9:3f:e5:54:7f:38: 6c:54:e6:04:fa:c0:c7:c5:81:46:13:d1:eb:95:c8:8e:04:56: 0d:dc:20:dc:49:39:d4:d9:4c:c0:05:70:1c:5d:96:6e:e6:08: af:98:c6:8d:3f:4d:c6:27:a5:71:56:3a:2b:01:ab:f4:6b:51: 9b:31:63:27:f7:78:d3:b9:62:86:4c:35:b8:a0:48:0f:d3:46: 6d:12:5f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwODIyMTc0MDUxWhcNMjUwODI5MTc0MDUxWjAYMRYwFAYD VQQDEw02OGE4YWJhMy00ZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+rt4LiyxRybzKOLg1BsQd3fNfoV2kkemWD0sUcELR+S1FixGgHQw1GVyL/Xm 0Hrah8S+RijUIqU69WN0QXrkKevvj3D15xwW5U+abSMwWYBkTa2UcfVFnsBLdIrv 4/aZP9CzlB06YDY0nieh3Pw9BCVLzm91a0w4a+6Ef3vXIIo/wQmUPhxSl6drSfW3 uBJORm2To53f+0Eta8SgvDt9ZiBVJy1l1mm3onEKV6KggZVRJU1u7R9M1oQXVyFZ nB1xCvgM6PFM+Zt/u8sJTdxZQ6O9dQA8WF+kw+SDo+xEqA0gkOY4W7++S6uGrm3V p/781NN3KLJXxT+A5mcBk/l4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMr6c/3+ rZcCOPcPiKZ304wtXP2tMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPh9lSHYo/L9vKSQ2SaqUmKTfpplctrvrr3jV5l8eHR7eZA5Ywi3z6 /sPFmlGKWeH2qqi72bwQ0vUs5cpHcRWzvknCuzNlOC8L68+OqVYJpGcPkCB/T3xn 4lpRKaPKV8XDq+qvutWt3MFynJUkIo1IFFp0JFhxTshRyc36L633aON3U70L9qN+ WhsZSV2Us+saoznX96YbaiyfutPvvcTouYDSNNmH/ToGB/S4kBupP+VUfzhsVOYE +sDHxYFGE9HrlciOBFYN3CDcSTnU2UzABXAcXZZu5givmMaNP03GJ6VxVjorAav0 a1GbMWMn93jTuWKGTDW4oEgP00ZtEl8O -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:39 2025 by rpki-client