$ rpki-client -vvf rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft File: 7ErjVswCMimNPNn9IEE1Z9u3_CU.mft (raw, json) Hash identifier: ZTLH7VkoeCJGIPyE5T7SyreLmLpJuX491DSNyvBLihk= Subject key identifier: F3:89:EA:CA:1E:9B:64:4A:95:2D:73:B1:06:F6:17:25:D6:DA:30:B0 Authority key identifier: EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 Certificate issuer: /CN=A91830A5/serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Certificate serial: 049E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft Manifest number: 0493 Signing time: Sat 23 Aug 2025 00:15:59 +0000 Manifest this update: Sat 23 Aug 2025 00:15:58 +0000 Manifest next update: Sat 30 Aug 2025 00:15:58 +0000 Files and hashes: 1: 7ErjVswCMimNPNn9IEE1Z9u3_CU.crl (hash: fAPTGQ1TuyRXaAlyVg3JtsnFMxAH0cwVLPPTXo6moYc=) 2: 10854F3E516B11EC86C3243EC4F9AE02.roa (hash: 75+qcslrpbStlF9MBXstO6Kxv6zf8gOrBw7RkBWwZKs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:15:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1182 (0x49e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91830A5, serialNumber=EC4AE356CC0232298D3CD9FD20413567DBB7FC25 Validity Not Before: Aug 23 00:15:58 2025 GMT Not After : Aug 30 00:15:58 2025 GMT Subject: CN=68a9083e-53f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1c:3d:68:52:49:bb:29:ca:76:74:f5:d7:b2: d8:d8:7d:0f:f4:11:ad:0d:9f:bc:7e:52:01:0d:19: 29:52:16:b8:bd:7f:da:56:ca:58:c8:a3:28:03:13: 52:9c:99:bd:cc:76:7d:b0:8e:86:6a:12:72:fe:bd: 90:c7:76:24:35:4a:4b:1b:67:58:ed:66:e7:06:b6: 0f:b4:2f:08:ac:3e:cc:31:3f:1a:f7:bf:78:82:9d: cb:1d:00:64:85:4a:22:eb:87:74:b0:1d:5e:21:d9: 77:2d:be:46:31:dc:28:e0:00:e1:b6:10:30:29:26: 5d:ab:8b:ab:5a:0a:ea:43:03:e3:3a:bf:0e:cc:c6: a0:52:4d:57:ba:a4:dc:2d:68:e1:25:16:36:6d:9f: b8:ce:ed:28:9c:b9:14:2c:f5:28:84:83:a8:2a:d8: 78:66:ce:70:a1:8d:b7:79:1d:35:11:e0:20:6d:3b: fa:1a:29:6c:0d:3e:e3:c2:ef:0f:fe:63:26:df:68: 34:e4:6e:d5:8b:7d:d2:f9:9c:65:13:3c:17:68:51: 22:5a:69:55:30:53:5d:86:0d:73:dd:5d:7b:e8:f0: 73:e4:61:e8:f1:f9:6d:a9:be:a4:2f:ce:ae:04:1e: 7f:55:55:a7:b0:48:45:f7:3e:bf:db:fe:06:f8:a2: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:EA:CA:1E:9B:64:4A:95:2D:73:B1:06:F6:17:25:D6:DA:30:B0 X509v3 Authority Key Identifier: keyid:EC:4A:E3:56:CC:02:32:29:8D:3C:D9:FD:20:41:35:67:DB:B7:FC:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ErjVswCMimNPNn9IEE1Z9u3_CU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91830A5/D82418FE516611ECAD565867C4F9AE02/7ErjVswCMimNPNn9IEE1Z9u3_CU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:fd:a7:1e:78:0f:6b:8c:70:0b:01:40:c8:99:93:c1:d5:c3: 2e:e8:66:47:ae:c7:8b:ce:7c:26:d1:60:95:ba:4e:d0:5e:bd: 39:a1:45:71:3f:52:9d:d3:1a:f9:67:af:04:76:72:4b:4c:cf: 29:50:db:84:58:33:65:d6:46:ba:d1:14:e9:43:c0:60:fa:28: 5e:12:a9:bf:c9:61:91:f2:51:fc:d6:2f:d8:fc:6c:9f:c0:46: 75:12:07:bd:0a:aa:88:0c:bb:2a:c2:1a:49:4a:ae:2c:77:a6: 48:92:5e:6b:69:ed:f8:85:17:c8:55:0e:9b:cf:06:0e:71:ee: 30:01:6d:d6:64:2b:cb:5f:45:1f:5c:30:c7:e7:ef:4d:90:48: a7:08:d6:79:9a:5e:e8:35:1c:bc:fb:62:b9:78:77:30:cc:f5: 03:d2:dc:57:9e:1d:18:7d:7d:92:7d:a7:ae:78:09:26:26:5a: f9:4b:6f:be:f3:14:50:bf:5b:c0:15:c0:3b:a1:e4:5c:70:63: dc:9b:aa:5a:9b:e0:dc:c4:d2:1d:72:1e:0f:f1:0c:a2:33:df: c3:d6:bf:d1:45:76:5b:1f:b7:fe:15:01:a7:37:9c:44:f6:5d: 4e:99:cb:71:b2:e0:b0:40:54:91:ba:5f:03:ee:f6:98:0b:72: 52:7f:da:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODMwQTUxMTAvBgNVBAUTKEVDNEFFMzU2Q0MwMjMyMjk4RDNDRDlGRDIwNDEzNTY3 REJCN0ZDMjUwHhcNMjUwODIzMDAxNTU4WhcNMjUwODMwMDAxNTU4WjAYMRYwFAYD VQQDEw02OGE5MDgzZS01M2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqRw9aFJJuynKdnT117LY2H0P9BGtDZ+8flIBDRkpUha4vX/aVspYyKMoAxNS nJm9zHZ9sI6GahJy/r2Qx3YkNUpLG2dY7WbnBrYPtC8IrD7MMT8a9794gp3LHQBk hUoi64d0sB1eIdl3Lb5GMdwo4ADhthAwKSZdq4urWgrqQwPjOr8OzMagUk1XuqTc LWjhJRY2bZ+4zu0onLkULPUohIOoKth4Zs5woY23eR01EeAgbTv6GilsDT7jwu8P /mMm32g05G7Vi33S+ZxlEzwXaFEiWmlVMFNdhg1z3V176PBz5GHo8fltqb6kL86u BB5/VVWnsEhF9z6/2/4G+KJSgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOJ6soe m2RKlS1zsQb2FyXW2jCwMB8GA1UdIwQYMBaAFOxK41bMAjIpjTzZ/SBBNWfbt/wl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzBBNS9EODI0MThGRTUx NjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01pbU5QTm45SUVFMVo5dTNf Q1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFcmpWc3dDTWltTlBObjlJRUUxWjl1M19DVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzBBNS9EODI0MThGRTUxNjYxMUVDQUQ1NjU4NjdDNEY5QUUwMi83RXJqVnN3Q01p bU5QTm45SUVFMVo5dTNfQ1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0/aceeA9rjHALAUDImZPB1cMu6GZHrseLznwm0WCVuk7QXr05oUVx P1Kd0xr5Z68EdnJLTM8pUNuEWDNl1ka60RTpQ8Bg+iheEqm/yWGR8lH81i/Y/Gyf wEZ1Ege9CqqIDLsqwhpJSq4sd6ZIkl5rae34hRfIVQ6bzwYOce4wAW3WZCvLX0Uf XDDH5+9NkEinCNZ5ml7oNRy8+2K5eHcwzPUD0txXnh0YfX2SfaeueAkmJlr5S2++ 8xRQv1vAFcA7oeRccGPcm6pam+DcxNIdch4P8QyiM9/D1r/RRXZbH7f+FQGnN5xE 9l1OmctxsuCwQFSRul8D7vaYC3JSf9qD -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:38 2025 by rpki-client