$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: MoYvC75XsdmDIpsStH//uCIhKerXT2ukQGE1Wv0P84o= Subject key identifier: 7E:6F:5D:5B:06:C1:C9:AB:5B:5D:AB:34:CE:4B:73:D5:6B:C6:32:3F Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: E5 Signing time: Sat 23 Aug 2025 05:37:00 +0000 Manifest this update: Sat 23 Aug 2025 05:37:00 +0000 Manifest next update: Sat 30 Aug 2025 05:37:00 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: D1bemWCZAEbVr+ty3gQWYJYKQvz4+Jv3Ej135HctF9c=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 236 (0xec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Aug 23 05:37:00 2025 GMT Not After : Aug 30 05:37:00 2025 GMT Subject: CN=68a9537c-a2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:5b:98:f3:2a:a8:21:48:40:38:8c:3d:49: 7c:ba:e7:9d:93:46:b8:61:95:0a:96:ef:7c:74:e5: 5c:f9:13:f1:b2:75:64:5b:fd:f8:3e:e6:e8:eb:b3: 3d:a8:72:1d:31:95:88:f2:72:9f:79:77:6a:74:a7: 4b:b3:cc:cf:5b:26:55:c3:15:ac:4a:2a:38:dd:d1: b8:93:a8:13:58:c0:45:0a:52:30:6b:42:a1:50:87: 13:c1:c0:f5:d2:92:66:89:b8:27:3e:7e:98:26:1d: 89:32:41:a5:f1:c2:68:0e:3d:ac:74:2d:51:c9:54: 79:a0:18:2a:32:43:24:5f:7d:38:4f:a4:c0:9c:0d: 44:12:95:54:c3:ba:7a:9a:3b:e5:f4:a5:72:23:55: 1d:19:65:da:1f:57:c0:82:ac:95:d8:43:9d:e9:62: 8c:29:be:96:aa:4a:0e:70:40:57:2d:14:1e:0b:7c: 7e:6d:64:d8:8b:d2:f1:03:83:1c:dc:46:79:b5:9b: c2:0c:0c:94:1c:93:90:31:8c:28:00:be:26:84:10: 3b:5f:f1:07:57:1a:33:57:9f:b9:23:b4:31:4a:ce: d9:06:4e:c9:0c:3c:f7:5e:25:ec:0a:fc:ea:e0:4f: 8b:1e:9a:18:a0:65:7d:6c:d9:ec:0b:aa:71:89:94: 45:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6F:5D:5B:06:C1:C9:AB:5B:5D:AB:34:CE:4B:73:D5:6B:C6:32:3F X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c5:b6:dc:a7:ab:63:01:0d:ac:97:c2:87:73:8d:a4:4a:6b: da:48:e0:70:f9:e8:9b:22:4e:ea:23:5a:70:2a:6c:93:cf:9c: c4:0e:91:3c:03:f0:f8:7e:e1:a7:6f:20:ac:c5:52:7d:e6:2d: b8:e0:a6:b8:91:a0:ab:36:4d:b7:b5:e7:ea:c5:e7:b2:2e:2e: 86:c5:68:4f:08:30:ca:b5:69:59:10:46:c0:6a:04:9d:18:04: 5a:e1:32:cd:91:08:b6:63:a0:5d:67:8b:d6:01:0c:b1:a2:09: 3a:10:66:6e:cf:52:6f:69:e9:62:0f:75:23:13:b6:5f:a5:55: 9d:64:45:bc:ad:c0:3e:32:3d:15:13:f1:09:7a:7a:a4:7f:02: 91:8e:ee:54:fa:1b:43:3a:a7:2f:ef:3b:98:5b:94:88:b1:3a: 7f:8d:3f:43:c9:e3:6f:a2:bf:54:66:7f:2f:01:d1:87:b8:83: c3:ae:c7:95:d2:59:7c:54:56:3f:b1:cb:9c:41:77:5e:da:02: 40:3a:9d:c5:4b:91:12:27:7b:46:90:12:95:46:44:45:98:55: bb:68:11:ff:e4:84:9d:8b:05:76:6a:0a:cd:23:6c:5f:a9:2a: 48:6f:64:33:93:d1:b3:00:95:1e:2b:89:2c:e3:4e:d8:cd:4a: 08:cf:75:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwODIzMDUzNzAwWhcNMjUwODMwMDUzNzAwWjAYMRYwFAYD VQQDEw02OGE5NTM3Yy1hMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PJbmPMqqCFIQDiMPUl8uuedk0a4YZUKlu98dOVc+RPxsnVkW/34Pubo67M9 qHIdMZWI8nKfeXdqdKdLs8zPWyZVwxWsSio43dG4k6gTWMBFClIwa0KhUIcTwcD1 0pJmibgnPn6YJh2JMkGl8cJoDj2sdC1RyVR5oBgqMkMkX304T6TAnA1EEpVUw7p6 mjvl9KVyI1UdGWXaH1fAgqyV2EOd6WKMKb6WqkoOcEBXLRQeC3x+bWTYi9LxA4Mc 3EZ5tZvCDAyUHJOQMYwoAL4mhBA7X/EHVxozV5+5I7QxSs7ZBk7JDDz3XiXsCvzq 4E+LHpoYoGV9bNnsC6pxiZRFcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5vXVsG wcmrW12rNM5Lc9VrxjI/MB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFxbbcp6tjAQ2sl8KHc42kSmvaSOBw+eibIk7qI1pwKmyTz5zEDpE8 A/D4fuGnbyCsxVJ95i244Ka4kaCrNk23tefqxeeyLi6GxWhPCDDKtWlZEEbAagSd GARa4TLNkQi2Y6BdZ4vWAQyxogk6EGZuz1JvaeliD3UjE7ZfpVWdZEW8rcA+Mj0V E/EJenqkfwKRju5U+htDOqcv7zuYW5SIsTp/jT9DyeNvor9UZn8vAdGHuIPDrseV 0ll8VFY/scucQXde2gJAOp3FS5ESJ3tGkBKVRkRFmFW7aBH/5ISdiwV2agrNI2xf qSpIb2Qzk9GzAJUeK4ks407YzUoIz3W1 -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:46 2025 by rpki-client