$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft File: 7JW4qElym6bvhCxjcarUrH2PIfc.mft (raw, json) Hash identifier: CMqHinl+amUjdbv9eFqxKqmD6MmVXwm13uSDLBjXHWc= Subject key identifier: F4:42:70:3C:17:77:AF:C4:46:80:A8:FC:2B:D9:2A:DA:6F:37:78:B6 Authority key identifier: EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 Certificate issuer: /CN=A91A759F/serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Certificate serial: 332E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft Manifest number: 3C56 Signing time: Fri 22 Aug 2025 15:23:27 +0000 Manifest this update: Fri 22 Aug 2025 15:23:27 +0000 Manifest next update: Fri 29 Aug 2025 15:23:27 +0000 Files and hashes: 1: 7JW4qElym6bvhCxjcarUrH2PIfc.crl (hash: p+qn/Lb5Rm5iXLem6V9eKudYsX5U132uD2k6J0FfcnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:23:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13102 (0x332e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=EC95B8A849729BA6EF842C6371AAD4AC7D8F21F7 Validity Not Before: Aug 22 15:23:27 2025 GMT Not After : Aug 29 15:23:27 2025 GMT Subject: CN=68a88b6f-894c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:28:80:8e:46:7a:93:3f:bb:e7:31:2d:e3: ed:92:97:d6:c3:84:f7:ab:4d:78:2c:dd:1b:ab:71: 46:ba:a1:1e:3a:50:be:0d:8e:13:aa:af:4b:a3:cb: 91:3f:80:13:7a:5d:c8:93:b7:73:f8:26:90:a7:fa: e3:ed:2b:f0:e4:62:0c:cc:63:32:1d:90:da:96:4b: 0d:50:7f:f6:db:e1:e8:f8:b9:f5:6c:94:d6:4b:05: 89:1b:1c:e7:28:00:3a:8d:18:9d:77:22:06:b2:b8: 58:c6:91:ca:07:77:08:db:ba:0b:d5:8d:6a:34:19: 88:da:a3:21:ba:7f:98:0d:9a:c0:37:c1:18:48:44: 1f:2a:54:2d:5c:5f:a9:cb:fd:fd:bc:81:3f:87:23: 21:4c:29:9a:e9:85:69:f9:d9:f3:a3:de:29:24:85: bb:66:93:ef:12:92:6f:b4:29:5b:2d:92:dc:a8:49: 78:f2:95:9c:fb:25:6f:b1:0a:66:d3:12:f5:f1:9a: c0:e7:74:af:37:89:76:9e:31:34:73:dc:1a:55:9d: 16:fe:5d:bd:b3:83:f6:06:cd:5d:59:d0:d1:60:16: 74:42:9a:9c:c2:88:57:55:ef:a5:1a:2c:6e:a5:c0: bf:b1:8f:49:d2:2a:dd:16:81:40:de:9c:a4:01:e3: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:42:70:3C:17:77:AF:C4:46:80:A8:FC:2B:D9:2A:DA:6F:37:78:B6 X509v3 Authority Key Identifier: keyid:EC:95:B8:A8:49:72:9B:A6:EF:84:2C:63:71:AA:D4:AC:7D:8F:21:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7JW4qElym6bvhCxjcarUrH2PIfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/7JW4qElym6bvhCxjcarUrH2PIfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5f:81:71:e9:28:03:5b:ab:6b:f0:40:0b:c9:a6:b4:13:06: 8b:0c:a9:13:61:48:39:fb:a1:5a:d3:df:1e:61:44:2d:f8:8c: b8:35:83:45:4a:01:94:0e:18:75:30:80:a6:e3:cb:c7:ad:0b: 17:e2:c1:1e:18:3d:cd:7a:da:76:cd:e6:57:ca:9e:b4:dc:b0: e4:29:b7:ba:52:f8:6c:91:f9:ef:33:77:c8:72:3d:67:a9:48: e1:d9:c6:ab:a7:b1:fd:8f:5d:77:a2:8d:9f:c9:2a:fc:69:9e: c1:3d:e2:0e:7b:76:b1:8d:f6:6f:08:3c:31:43:e4:ee:4a:23: a4:bd:d7:7d:ca:54:dc:bb:8a:e3:3a:7e:36:a2:7a:e0:0a:21: d8:dd:70:1f:6d:ad:30:f8:ba:b0:21:d1:13:02:32:20:56:47: 8b:ea:36:ec:9a:ce:c4:4c:e7:d0:46:ed:a1:bc:be:d5:22:e0: ec:07:fa:2d:17:55:ab:6e:47:5d:90:1f:d0:0e:e7:94:7d:55: 2c:27:ee:ff:14:e7:ba:d1:fa:8e:da:8b:23:fc:24:78:1c:e8: 2b:d9:18:5c:f9:8d:5c:76:ce:85:af:2e:ba:04:3f:07:9e:a4: 84:bb:e3:29:a7:a8:cc:ab:ef:a1:5d:a0:80:6a:60:e0:79:0b: 7e:e3:dc:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKEVDOTVCOEE4NDk3MjlCQTZFRjg0MkM2MzcxQUFENEFD N0Q4RjIxRjcwHhcNMjUwODIyMTUyMzI3WhcNMjUwODI5MTUyMzI3WjAYMRYwFAYD VQQDEw02OGE4OGI2Zi04OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWkogI5GepM/u+cxLePtkpfWw4T3q014LN0bq3FGuqEeOlC+DY4Tqq9Lo8uR P4ATel3Ik7dz+CaQp/rj7Svw5GIMzGMyHZDalksNUH/22+Ho+Ln1bJTWSwWJGxzn KAA6jRiddyIGsrhYxpHKB3cI27oL1Y1qNBmI2qMhun+YDZrAN8EYSEQfKlQtXF+p y/39vIE/hyMhTCma6YVp+dnzo94pJIW7ZpPvEpJvtClbLZLcqEl48pWc+yVvsQpm 0xL18ZrA53SvN4l2njE0c9waVZ0W/l29s4P2Bs1dWdDRYBZ0QpqcwohXVe+lGixu pcC/sY9J0irdFoFA3pykAeNfgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRCcDwX d6/ERoCo/CvZKtpvN3i2MB8GA1UdIwQYMBaAFOyVuKhJcpum74QsY3Gq1Kx9jyH3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02YnZoQ3hqY2FyVXJIMlBJ ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdKVzRxRWx5bTZidmhDeGpjYXJVckgyUElmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC83Slc0cUVseW02 YnZoQ3hqY2FyVXJIMlBJZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwX4Fx6SgDW6tr8EALyaa0EwaLDKkTYUg5+6Fa098eYUQt+Iy4NYNF SgGUDhh1MICm48vHrQsX4sEeGD3Netp2zeZXyp603LDkKbe6UvhskfnvM3fIcj1n qUjh2carp7H9j113oo2fySr8aZ7BPeIOe3axjfZvCDwxQ+TuSiOkvdd9ylTcu4rj On42onrgCiHY3XAfba0w+LqwIdETAjIgVkeL6jbsms7ETOfQRu2hvL7VIuDsB/ot F1WrbkddkB/QDueUfVUsJ+7/FOe60fqO2osj/CR4HOgr2Rhc+Y1cds6Fry66BD8H nqSEu+Mpp6jMq++hXaCAamDgeQt+49zj -----END CERTIFICATE-----Generated at Sat Aug 23 22:20:02 2025 by rpki-client