$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft File: 7f0U22_TsCp5NdqtR_wCnzpwTEA.mft (raw, json) Hash identifier: b26JyNAMDEKjsJPTk0C/cBlOiGMNHsu6wgwiF11X+Qw= Subject key identifier: AD:2D:AD:43:87:E5:78:8F:FF:CC:9D:FE:8B:70:B3:E5:B5:E1:3A:21 Authority key identifier: ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 Certificate issuer: /CN=A91A93B6/serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Certificate serial: 0202 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft Manifest number: 01FC Signing time: Sat 23 Aug 2025 02:34:15 +0000 Manifest this update: Sat 23 Aug 2025 02:34:14 +0000 Manifest next update: Sat 30 Aug 2025 02:34:14 +0000 Files and hashes: 1: 7f0U22_TsCp5NdqtR_wCnzpwTEA.crl (hash: UAJ1yvu3fazotaSLTnaMmgzhEHPdx8o1eU0oNBqI9Wo=) 2: 780A3032CB3211EE953DEF37C4F9AE02.roa (hash: bI9ehsJkdKReP7tO6LRGZVdy5KgC9pIKmuFrjzQkdWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 514 (0x202) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93B6, serialNumber=EDFD14DB6FD3B02A7935DAAD47FC029F3A704C40 Validity Not Before: Aug 23 02:34:14 2025 GMT Not After : Aug 30 02:34:14 2025 GMT Subject: CN=68a928a7-bf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:62:cf:88:e9:09:72:c2:0f:25:49:5b:3d: 8a:c8:fe:2a:d4:a5:17:e9:29:e6:b7:4e:48:e6:ca: e5:42:f0:c4:28:b7:8b:88:4a:b6:6c:2e:bf:0a:b8: 3e:1a:14:36:df:55:2e:63:0c:e1:e7:30:87:0a:69: 7c:b6:11:44:50:6a:13:9a:38:7c:02:79:55:e0:49: aa:4c:9c:42:db:cc:49:f6:95:5a:98:3a:8b:b3:bc: 9a:9b:87:3b:93:12:ed:ca:df:35:6a:ad:6d:3f:a7: af:27:95:e6:2e:a4:93:01:b9:93:5f:a5:5e:17:02: a0:d6:82:39:1e:97:91:9a:87:85:ac:7c:bb:ea:d9: ca:a4:bd:b3:13:3f:c7:90:d0:94:5f:34:d4:a7:84: c4:12:29:2f:2f:68:58:42:a3:59:fa:a6:11:38:54: 5a:02:b7:86:7f:75:d6:70:1d:a2:66:c2:09:85:71: ec:b6:9e:3c:02:32:4c:99:0c:2d:2c:d4:d0:89:df: 91:6e:1d:a7:ea:7a:38:c5:2c:7e:37:f4:f9:27:89: 84:49:98:6a:0a:c2:a2:41:ff:df:58:3c:53:30:80: 62:a3:22:fd:4d:05:e7:93:c7:9d:ad:e1:9f:33:e2: 5b:bf:f7:be:a4:20:d4:dd:80:65:31:07:b2:8d:dc: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2D:AD:43:87:E5:78:8F:FF:CC:9D:FE:8B:70:B3:E5:B5:E1:3A:21 X509v3 Authority Key Identifier: keyid:ED:FD:14:DB:6F:D3:B0:2A:79:35:DA:AD:47:FC:02:9F:3A:70:4C:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7f0U22_TsCp5NdqtR_wCnzpwTEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93B6/70BCFCE07C5711EDA8107866C4F9AE02/7f0U22_TsCp5NdqtR_wCnzpwTEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:74:fc:ca:05:46:c9:90:9a:73:c8:44:0e:91:a8:10:22:e5: 69:a0:f9:59:18:96:3e:7d:2a:01:d5:07:36:83:c7:ff:6c:e2: 77:79:15:e0:57:fa:08:9b:6f:e7:a9:a0:07:1b:82:c4:dd:24: f0:cd:3e:ed:20:f4:fd:2e:36:40:74:30:75:66:fd:10:d0:51: 60:31:dd:19:7f:77:9f:bb:1d:a2:7c:59:6e:66:3f:21:54:41: 36:c3:f7:3e:ee:79:9f:2c:1e:b7:d2:76:76:83:e3:f2:ca:0c: 66:09:2b:38:1a:dc:38:03:59:74:db:f2:33:9c:da:7e:d7:80: 58:57:0e:61:2e:aa:86:ca:86:a3:7e:4a:3b:32:24:99:13:fa: 2c:bc:65:d0:3a:76:8a:99:f0:47:e5:c8:f0:37:b1:a3:1c:8e: 6a:c7:28:c4:7c:bc:8d:33:c6:0c:7a:a3:cf:fc:8e:74:5d:c8: 0f:56:ac:f2:ed:a4:d0:c0:21:9e:52:e7:a8:96:73:c8:fc:0d: 47:82:e1:a4:5a:a7:c8:f1:5b:8c:6c:0e:59:26:8d:9c:2c:c9: 86:b9:bc:a7:73:45:52:16:2e:e5:4d:b4:0d:14:2c:12:3d:4d: 3c:68:a3:70:7f:12:d7:89:3c:c1:f0:d9:09:4e:52:3a:95:04: db:9c:7d:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQjYxMTAvBgNVBAUTKEVERkQxNERCNkZEM0IwMkE3OTM1REFBRDQ3RkMwMjlG M0E3MDRDNDAwHhcNMjUwODIzMDIzNDE0WhcNMjUwODMwMDIzNDE0WjAYMRYwFAYD VQQDEw02OGE5MjhhNy1iZjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvx1iz4jpCXLCDyVJWz2KyP4q1KUX6Snmt05I5srlQvDEKLeLiEq2bC6/Crg+ GhQ231UuYwzh5zCHCml8thFEUGoTmjh8AnlV4EmqTJxC28xJ9pVamDqLs7yam4c7 kxLtyt81aq1tP6evJ5XmLqSTAbmTX6VeFwKg1oI5HpeRmoeFrHy76tnKpL2zEz/H kNCUXzTUp4TEEikvL2hYQqNZ+qYROFRaAreGf3XWcB2iZsIJhXHstp48AjJMmQwt LNTQid+Rbh2n6no4xSx+N/T5J4mESZhqCsKiQf/fWDxTMIBioyL9TQXnk8edreGf M+Jbv/e+pCDU3YBlMQeyjdxFKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0trUOH 5XiP/8yd/otws+W14TohMB8GA1UdIwQYMBaAFO39FNtv07AqeTXarUf8Ap86cExA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCNi83MEJDRkNFMDdD NTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHNDcDVOZHF0Ul93Q256cHdU RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdmMFUyMl9Uc0NwNU5kcXRSX3dDbnpwd1RFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCNi83MEJDRkNFMDdDNTcxMUVEQTgxMDc4NjZDNEY5QUUwMi83ZjBVMjJfVHND cDVOZHF0Ul93Q256cHdURUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAddPzKBUbJkJpzyEQOkagQIuVpoPlZGJY+fSoB1Qc2g8f/bOJ3eRXg V/oIm2/nqaAHG4LE3STwzT7tIPT9LjZAdDB1Zv0Q0FFgMd0Zf3efux2ifFluZj8h VEE2w/c+7nmfLB630nZ2g+PyygxmCSs4Gtw4A1l02/IznNp+14BYVw5hLqqGyoaj fko7MiSZE/osvGXQOnaKmfBH5cjwN7GjHI5qxyjEfLyNM8YMeqPP/I50XcgPVqzy 7aTQwCGeUueolnPI/A1HguGkWqfI8VuMbA5ZJo2cLMmGubync0VSFi7lTbQNFCwS PU08aKNwfxLXiTzB8NkJTlI6lQTbnH3E -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:39 2025 by rpki-client