$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: FFvN9y9FhE3Y5nC+cg79KnnZitBgWNDvGRxCEgmV5QA= Subject key identifier: 78:61:45:12:FB:11:1C:6A:B5:9D:09:06:D5:3F:4C:35:E1:58:5F:4A Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: CB Signing time: Thu 03 Jul 2025 05:56:54 +0000 Manifest this update: Thu 03 Jul 2025 05:56:53 +0000 Manifest next update: Thu 10 Jul 2025 05:56:53 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: lWE7ldX+agfLG233J6lGCvYCgacrHLSJzzuuQo9T4SE=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 210 (0xd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Jul 3 05:56:53 2025 GMT Not After : Jul 10 05:56:53 2025 GMT Subject: CN=68661ba5-916c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:26:5b:a9:65:33:8d:c9:ab:67:ac:2b:ec: 84:c3:40:60:01:69:25:7f:4e:60:73:54:c2:ab:ff: d2:f8:09:2e:66:cf:40:9c:96:fa:91:c0:3c:36:7b: 99:12:6f:e0:fc:a0:a0:ec:84:3a:63:db:c4:9c:d2: c7:83:c0:1a:0d:e0:42:cc:5d:ac:41:2c:0a:e8:76: 53:b2:aa:94:4d:da:7d:75:b1:bf:a7:51:4d:3e:65: 34:a9:0b:0f:93:90:57:d8:db:e5:39:c8:bd:2b:15: 3f:69:85:22:df:8a:25:f1:4d:ad:e2:50:00:f4:43: 9d:d0:d2:6a:aa:9f:cc:9e:cb:c5:5a:e5:8f:13:54: 72:0e:06:e2:15:18:87:ff:31:4e:4f:a4:1f:83:1a: 7b:40:b7:af:bd:3b:27:cf:9d:51:84:c5:87:37:d2: f9:8d:b9:0c:d3:b8:87:5b:a9:63:fd:f7:29:e0:5c: b3:08:70:d7:69:62:14:40:1b:fd:aa:49:4c:65:3f: be:b1:77:be:d1:83:47:f9:24:2a:83:be:a0:3e:36: 00:09:2b:f6:11:ee:29:34:17:b7:da:50:c1:7a:a7: 99:82:c2:31:bc:ce:3d:73:21:8f:c6:23:6c:4c:f2: 97:b3:0e:d9:09:7c:92:75:fe:01:a9:94:a3:29:02: 3b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:61:45:12:FB:11:1C:6A:B5:9D:09:06:D5:3F:4C:35:E1:58:5F:4A X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0f:a5:86:dc:65:5b:9d:ff:f2:87:42:fc:b1:d9:54:42:44: dc:c1:f5:39:fa:37:e0:fc:62:0a:1b:78:da:75:64:7e:85:bb: c3:9f:6f:9b:8c:68:7d:d6:32:ce:f8:53:b2:a2:06:a7:c8:f4: cc:8c:74:a6:f0:5b:93:c5:74:04:8b:f3:b2:26:31:8f:a3:5a: a0:f8:2d:d5:fb:2c:14:15:22:21:62:cc:c3:9a:bd:be:7e:6b: 0e:06:c1:e7:ce:4c:6f:61:ea:0d:1e:3a:88:a3:da:84:0b:20: b9:9a:12:09:0f:9b:a3:10:24:f4:55:be:fa:dd:b8:cd:47:ca: a1:fc:18:43:1f:26:a2:35:47:ff:b2:f7:0c:9f:da:8d:29:a1: 11:bf:be:f9:9b:d7:04:65:5a:4c:71:cf:cb:92:8e:ed:de:64: 25:2d:50:34:52:48:bc:3d:30:66:13:f0:82:d9:f6:19:51:8d: ab:61:60:f8:84:0f:4b:cc:a0:ba:2d:d6:9e:51:e4:f0:5f:7f: e5:e6:75:bb:44:a6:11:75:a1:99:47:4c:4a:c8:07:44:79:c1: 13:41:c0:c2:7a:80:4f:da:f2:6a:41:fb:32:59:11:e1:a0:f0: fa:d9:ac:e1:d0:94:b5:62:d0:e6:48:32:9c:c6:f4:28:78:c7: 38:a4:40:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwNzAzMDU1NjUzWhcNMjUwNzEwMDU1NjUzWjAYMRYwFAYD VQQDEw02ODY2MWJhNS05MTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArYYmW6llM43Jq2esK+yEw0BgAWklf05gc1TCq//S+AkuZs9AnJb6kcA8NnuZ Em/g/KCg7IQ6Y9vEnNLHg8AaDeBCzF2sQSwK6HZTsqqUTdp9dbG/p1FNPmU0qQsP k5BX2NvlOci9KxU/aYUi34ol8U2t4lAA9EOd0NJqqp/MnsvFWuWPE1RyDgbiFRiH /zFOT6Qfgxp7QLevvTsnz51RhMWHN9L5jbkM07iHW6lj/fcp4FyzCHDXaWIUQBv9 qklMZT++sXe+0YNH+SQqg76gPjYACSv2Ee4pNBe32lDBeqeZgsIxvM49cyGPxiNs TPKXsw7ZCXySdf4BqZSjKQI76QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHhhRRL7 ERxqtZ0JBtU/TDXhWF9KMB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvD6WG3GVbnf/yh0L8sdlUQkTcwfU5+jfg/GIKG3jadWR+hbvDn2+b jGh91jLO+FOyoganyPTMjHSm8FuTxXQEi/OyJjGPo1qg+C3V+ywUFSIhYszDmr2+ fmsOBsHnzkxvYeoNHjqIo9qECyC5mhIJD5ujECT0Vb763bjNR8qh/BhDHyaiNUf/ svcMn9qNKaERv775m9cEZVpMcc/Lko7t3mQlLVA0Uki8PTBmE/CC2fYZUY2rYWD4 hA9LzKC6LdaeUeTwX3/l5nW7RKYRdaGZR0xKyAdEecETQcDCeoBP2vJqQfsyWRHh oPD62azh0JS1YtDmSDKcxvQoeMc4pECf -----END CERTIFICATE-----Generated at Fri Jul 4 11:09:19 2025 by rpki-client