$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: gZs6dmrnPqhv04J2a/0etf8lhYGlFYYkoGv9V0MxEGQ= Subject key identifier: 5A:D5:D4:5E:4D:2E:BB:76:65:4B:91:EC:45:4A:F7:74:4F:29:3E:7B Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 0696 Signing time: Fri 22 Aug 2025 22:24:44 +0000 Manifest this update: Fri 22 Aug 2025 22:24:43 +0000 Manifest next update: Fri 29 Aug 2025 22:24:43 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: SilH2mnfqkBOh3Upn8sMLiLegSPWSdHu3wl892oWuZA=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Aug 22 22:24:43 2025 GMT Not After : Aug 29 22:24:43 2025 GMT Subject: CN=68a8ee2c-b5ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c6:af:95:aa:b9:d0:ad:e6:da:0d:85:82:74: af:2a:ca:9c:a7:1d:64:0a:0a:f9:12:d3:f7:47:88: 08:df:47:b5:93:bd:3e:54:22:03:25:92:e2:b9:a9: aa:d0:94:53:b3:d5:02:2b:a3:a5:a9:a5:4f:ae:e9: 52:dc:77:ed:c4:e8:5a:05:31:cd:f4:a6:4a:77:04: 1c:f6:03:55:3a:c6:e1:16:fa:11:a3:93:b1:b4:b5: ba:97:30:be:1e:66:f3:96:e7:44:cf:77:9a:f0:ae: f0:fa:cd:a8:83:e5:67:10:04:d9:c2:14:37:e0:80: e7:bc:d2:69:02:4d:65:9a:80:b3:dc:4c:3f:76:c2: dd:20:cd:9b:d1:e3:05:6c:14:f5:0e:58:af:77:59: 68:0f:c1:04:c9:67:aa:81:25:bf:b4:09:61:70:a5: 89:d8:51:ae:8b:f1:0d:66:7e:58:fc:04:7e:80:a5: e6:06:c8:38:ac:4e:f1:31:57:06:d9:95:05:2b:c2: 09:86:86:0e:30:15:d1:fe:60:48:3d:6b:db:d7:5b: d0:30:b8:dc:d1:30:1b:7d:0d:fe:10:ed:d9:f1:ce: 49:60:67:d6:d3:a9:24:ad:8c:9a:5a:11:ef:b0:e3: c5:16:90:97:ef:be:9f:f5:37:41:ed:78:06:fa:b4: c9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D5:D4:5E:4D:2E:BB:76:65:4B:91:EC:45:4A:F7:74:4F:29:3E:7B X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:eb:3a:d1:2e:97:97:da:0d:6d:59:05:2f:88:73:b2:bf:4f: 41:74:3a:a0:4f:36:85:d7:75:60:fe:37:aa:b0:a0:dd:2d:d7: 60:4d:71:2d:31:4d:0d:aa:4e:37:8f:28:d0:18:15:3b:89:10: 24:c9:56:df:19:42:e1:1c:55:21:29:82:ba:d9:f9:82:40:9a: 46:17:02:84:d4:5f:30:20:5f:82:80:dc:c9:dc:81:b3:5e:8d: c6:8f:c0:0a:d7:66:d0:c3:43:da:00:52:08:51:c3:9a:dd:e0: 9d:8c:31:e5:6b:8b:af:b7:5b:bc:9a:7f:13:5d:1a:f3:16:b0: 0d:d5:5f:0c:bb:3f:0a:91:98:ed:68:bd:af:cf:1e:d3:a4:5c: 4a:68:40:1b:3e:36:c8:27:8a:93:a6:ee:6f:6a:53:63:9c:9c: e8:50:ab:a0:36:ab:16:5a:d1:20:22:96:c3:e4:3c:e4:a7:3c: b6:02:a4:3c:27:95:c2:eb:90:3f:3e:02:dc:a0:1f:35:3e:c3: db:bb:a7:e3:9f:b5:a1:2e:4a:1d:7a:58:36:af:2a:7d:3b:0e: 17:18:77:d6:f8:b6:77:99:d7:4c:3b:a0:21:e4:7b:dc:d0:03: 32:5c:a7:ec:41:56:1e:c1:d6:fb:ab:7b:4b:63:8b:00:aa:f6: 22:62:c2:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUwODIyMjIyNDQzWhcNMjUwODI5MjIyNDQzWjAYMRYwFAYD VQQDEw02OGE4ZWUyYy1iNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycavlaq50K3m2g2FgnSvKsqcpx1kCgr5EtP3R4gI30e1k70+VCIDJZLiuamq 0JRTs9UCK6OlqaVPrulS3HftxOhaBTHN9KZKdwQc9gNVOsbhFvoRo5OxtLW6lzC+ HmbzludEz3ea8K7w+s2og+VnEATZwhQ34IDnvNJpAk1lmoCz3Ew/dsLdIM2b0eMF bBT1Dlivd1loD8EEyWeqgSW/tAlhcKWJ2FGui/ENZn5Y/AR+gKXmBsg4rE7xMVcG 2ZUFK8IJhoYOMBXR/mBIPWvb11vQMLjc0TAbfQ3+EO3Z8c5JYGfW06kkrYyaWhHv sOPFFpCX776f9TdB7XgG+rTJXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFrV1F5N Lrt2ZUuR7EVK93RPKT57MB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE6zrRLpeX2g1tWQUviHOyv09BdDqgTzaF13Vg/jeqsKDdLddgTXEt MU0Nqk43jyjQGBU7iRAkyVbfGULhHFUhKYK62fmCQJpGFwKE1F8wIF+CgNzJ3IGz Xo3Gj8AK12bQw0PaAFIIUcOa3eCdjDHla4uvt1u8mn8TXRrzFrAN1V8Muz8KkZjt aL2vzx7TpFxKaEAbPjbIJ4qTpu5valNjnJzoUKugNqsWWtEgIpbD5Dzkpzy2AqQ8 J5XC65A/PgLcoB81PsPbu6fjn7WhLkodelg2ryp9Ow4XGHfW+LZ3mddMO6Ah5Hvc 0AMyXKfsQVYewdb7q3tLY4sAqvYiYsLY -----END CERTIFICATE-----Generated at Sat Aug 23 16:31:17 2025 by rpki-client