$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft File: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json) Hash identifier: rHrlcAUXxeUIxbNu5Fupa8qw9tpmkbS0m9irVl6xDjo= Subject key identifier: 57:02:23:E6:74:93:42:FE:78:11:DA:DC:1F:B6:E7:E5:DA:99:18:FD Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 Certificate issuer: /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft Manifest number: 76 Signing time: Sat 23 Aug 2025 07:00:56 +0000 Manifest this update: Sat 23 Aug 2025 07:00:55 +0000 Manifest next update: Sat 30 Aug 2025 07:00:55 +0000 Files and hashes: 1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: pjsvphdcqtEl3CHlJn5HSqc9TRs8A/PjTnJaLER74p4=) 2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: WVqv1JuSt8hSNNolUiV5z8//m1vJSnq0q+Q8Ooe/S0g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6 Validity Not Before: Aug 23 07:00:55 2025 GMT Not After : Aug 30 07:00:55 2025 GMT Subject: CN=68a96728-9e0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:6c:e9:70:3c:f1:fe:4d:d6:8a:3d:a2:59: ea:86:ff:4e:83:79:22:9f:c6:30:78:28:d1:58:b4: 50:43:26:f2:ac:95:43:4f:61:f3:4a:07:da:79:27: 82:a0:83:bd:74:1b:f9:1b:f6:a6:6d:fc:8c:aa:0a: 3b:98:d0:fd:36:a9:e9:2f:7a:49:97:10:e6:db:b2: 75:4e:24:51:b2:66:a5:68:eb:17:87:61:97:6d:d5: 77:f3:cc:e9:c1:fd:d8:5d:da:3a:b9:89:4e:29:26: d3:96:e4:c4:1e:51:ec:fb:56:53:bf:1b:fd:70:0b: 37:44:2e:e5:cb:23:5a:b2:21:2f:7a:27:3e:cd:13: 0b:9e:23:8b:33:0b:eb:cd:84:6b:b4:72:a1:63:03: 36:f1:74:82:35:e9:a8:ba:b5:7e:0d:46:74:8a:eb: ac:a0:3a:00:57:61:73:8c:4f:4f:d1:53:b8:b9:e8: a4:e5:44:90:e4:8d:23:d9:58:83:65:9d:3a:c1:e9: 41:ae:55:33:2a:6a:3d:9d:3d:d3:e8:56:7f:14:10: fe:60:64:ec:a6:57:d9:64:49:a8:b1:9a:fa:c2:3b: 33:24:31:88:9d:63:6d:b0:15:dc:4d:f5:f0:81:01: 84:d2:39:6e:66:73:92:9f:8b:1a:94:53:39:77:b0: bf:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:02:23:E6:74:93:42:FE:78:11:DA:DC:1F:B6:E7:E5:DA:99:18:FD X509v3 Authority Key Identifier: keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:59:aa:72:c6:67:db:6d:ef:96:84:62:3e:89:a2:e9:e3:39: a2:09:a6:05:f7:5d:46:1e:2e:6f:cd:fa:b9:bd:fd:27:7a:a2: 82:21:35:76:1e:02:ef:c4:0f:e9:00:80:28:fa:8c:3f:4d:92: cb:ea:55:be:58:cf:bf:04:a2:b9:78:ac:4f:16:86:e6:6c:f5: 8c:5f:66:dd:5d:11:71:a0:ce:76:3e:a6:09:21:aa:6d:37:51: 5d:45:c1:48:11:d5:06:97:d0:28:3b:03:83:d7:66:a9:ce:c8: 43:25:fd:d3:5f:fe:f5:14:ef:97:0f:72:86:33:59:d3:70:3e: 9d:0a:af:d6:e1:e9:9e:0d:b9:47:0b:29:f4:f1:6c:23:07:e2: 72:3d:e4:3f:ae:e6:72:d0:f2:7b:52:92:8e:16:56:e8:db:68: 0b:b9:3c:18:24:06:9c:0e:28:ff:b0:9c:39:5f:c0:4f:68:4a: 19:86:f1:f7:4d:de:b8:80:38:33:b1:13:99:c4:2c:10:bf:d1: 0b:26:bc:c3:6c:36:70:a0:33:28:0b:c2:8c:97:6b:5f:da:e7: c7:95:a5:52:37:97:74:8a:81:76:da:a8:fc:bc:60:1e:0b:15: e2:13:ab:85:ea:a4:be:bf:30:aa:0a:f6:d5:47:3a:1f:c3:ff: 73:ad:f5:25 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 ODJCNjExMC8GA1UEBRMoRUM2NzkxNjkxNzdCOUUxMzFEMERBQTAxMzk4RDcwMDM5 ODI3RDFGNjAeFw0yNTA4MjMwNzAwNTVaFw0yNTA4MzAwNzAwNTVaMBgxFjAUBgNV BAMTDTY4YTk2NzI4LTllMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4N2zpcDzx/k3Wij2iWeqG/06DeSKfxjB4KNFYtFBDJvKslUNPYfNKB9p5J4Kg g710G/kb9qZt/IyqCjuY0P02qekvekmXEObbsnVOJFGyZqVo6xeHYZdt1XfzzOnB /dhd2jq5iU4pJtOW5MQeUez7VlO/G/1wCzdELuXLI1qyIS96Jz7NEwueI4szC+vN hGu0cqFjAzbxdII16ai6tX4NRnSK66ygOgBXYXOMT0/RU7i56KTlRJDkjSPZWINl nTrB6UGuVTMqaj2dPdPoVn8UEP5gZOymV9lkSaixmvrCOzMkMYidY22wFdxN9fCB AYTSOW5mc5KfixqUUzl3sL+jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVwIj5nST Qv54EdrcH7bn5dqZGP0wHwYDVR0jBBgwFoAU7GeRaRd7nhMdDaoBOY1wA5gn0fYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4MkI2L0U2NEIwM0I0Q0I1 OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhNZERhb0JPWTF3QTVnbjBm WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN0dlUmFSZDduaE1kRGFvQk9ZMXdBNWduMGZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4 MkI2L0U2NEIwM0I0Q0I1OTExRUY4NjkxNUI2MUM0RjlBRTAyLzdHZVJhUmQ3bmhN ZERhb0JPWTF3QTVnbjBmWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACpZqnLGZ9tt75aEYj6JounjOaIJpgX3XUYeLm/N+rm9/Sd6ooIhNXYe Au/ED+kAgCj6jD9NksvqVb5Yz78Eorl4rE8WhuZs9YxfZt1dEXGgznY+pgkhqm03 UV1FwUgR1QaX0Cg7A4PXZqnOyEMl/dNf/vUU75cPcoYzWdNwPp0Kr9bh6Z4NuUcL KfTxbCMH4nI95D+u5nLQ8ntSko4WVujbaAu5PBgkBpwOKP+wnDlfwE9oShmG8fdN 3riAODOxE5nELBC/0QsmvMNsNnCgMygLwoyXa1/a58eVpVI3l3SKgXbaqPy8YB4L FeITq4XqpL6/MKoK9tVHOh/D/3Ot9SU= -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:12 2025 by rpki-client