$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: SZsuRjbHRu4APzukuoMDanGxv8FQiP2NT/ZCfC4p5t0= Subject key identifier: 1F:28:F4:5F:B2:4D:4B:FE:F1:9F:20:FF:F0:68:5C:D2:FE:C5:E4:67 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0A9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0A95 Signing time: Wed 02 Jul 2025 19:47:24 +0000 Manifest this update: Wed 02 Jul 2025 19:47:24 +0000 Manifest next update: Wed 09 Jul 2025 19:47:23 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: mGIP3SVZW43sj5c3DxBduQOdag/7tDDjChzNSBecyLQ=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:47:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2715 (0xa9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Jul 2 19:47:24 2025 GMT Not After : Jul 9 19:47:23 2025 GMT Subject: CN=68658ccc-243b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:5a:0b:f2:bc:f0:3f:01:7e:64:49:b7:67: 53:66:13:2e:e6:aa:a3:b9:ea:9a:be:be:ea:e2:bf: 2f:5a:9d:4e:5d:8b:a4:8b:1e:bf:d2:5c:0d:5c:5e: 2e:4b:dd:86:73:84:ff:e1:7e:84:bf:bd:79:fb:0e: 84:22:be:5e:33:e0:d4:87:fe:9a:12:0f:28:45:d7: 15:68:c1:a9:78:59:c4:87:6c:e2:8a:a1:0a:5d:c0: 5a:a2:20:b0:d0:e4:ab:7b:80:99:cd:73:da:70:0f: da:c5:f9:e6:e6:04:a5:c7:d8:68:de:05:82:82:a0: 9d:a1:ba:b2:90:2c:7c:f1:32:35:73:13:88:b3:1b: cf:1d:2b:2b:8a:94:46:ae:12:4f:49:5d:5c:ed:47: a3:89:5d:fe:ae:b6:f4:4f:39:8e:8a:a8:20:ed:a1: c7:43:41:c5:b1:a5:9c:26:e6:33:33:e1:3f:03:d9: dd:92:f9:3c:26:62:17:db:0e:60:b3:e1:bd:90:a1: c1:34:91:21:0d:04:f5:ff:f2:53:2e:2c:01:2f:ef: 5d:81:27:6d:36:5b:d6:ac:2b:b9:26:49:11:5b:cb: 8d:c5:78:65:ab:44:f0:2c:56:4e:4c:d7:b0:42:32: d0:39:12:6d:a6:76:cf:d8:e2:cd:b4:62:c0:1a:ad: f2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:28:F4:5F:B2:4D:4B:FE:F1:9F:20:FF:F0:68:5C:D2:FE:C5:E4:67 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4a:f1:7d:51:09:02:3f:f8:c5:a9:c8:3c:d4:87:10:a4:86: 1d:fc:b4:57:fc:3e:27:21:57:19:3c:43:a4:ef:47:5e:2f:64: 62:d9:f7:01:2e:17:74:5c:15:ff:9b:23:7b:a0:4f:a7:8b:d2: 19:4f:ea:bf:1c:41:42:ba:97:22:5d:ea:cd:f7:34:11:4f:23: 29:17:22:f1:1d:35:6b:08:30:23:31:8f:63:cb:64:73:20:42: 14:91:f0:eb:d2:c9:1e:b1:b8:06:b0:3d:60:d7:98:37:81:28: 24:bf:85:9c:b6:30:fd:96:05:da:2b:67:c9:03:cd:d0:d8:49: 35:84:86:69:b2:4c:0e:65:b3:15:27:83:3e:53:27:06:98:f0: 26:a7:17:0a:66:b0:56:1c:af:45:60:b9:d4:2f:bf:8d:fe:3c: fc:7c:67:58:cb:75:a5:81:86:e5:1c:ba:fd:29:a1:7a:7b:7f: 16:20:5d:49:e8:88:0a:4c:1d:c3:b4:87:74:f6:4c:96:aa:7f: be:fa:bf:92:e2:a4:e5:3f:14:98:05:f7:7d:38:90:e5:89:db: ff:40:72:1a:9a:69:f4:12:d3:e0:a8:c9:4a:b5:73:72:48:7e: a2:95:05:09:35:ff:79:20:0f:91:bf:f1:fa:83:3c:5c:89:dc: 29:0d:d9:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwNzAyMTk0NzI0WhcNMjUwNzA5MTk0NzIzWjAYMRYwFAYD VQQDEw02ODY1OGNjYy0yNDNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx/taC/K88D8BfmRJt2dTZhMu5qqjueqavr7q4r8vWp1OXYukix6/0lwNXF4u S92Gc4T/4X6Ev715+w6EIr5eM+DUh/6aEg8oRdcVaMGpeFnEh2ziiqEKXcBaoiCw 0OSre4CZzXPacA/axfnm5gSlx9ho3gWCgqCdobqykCx88TI1cxOIsxvPHSsripRG rhJPSV1c7UejiV3+rrb0TzmOiqgg7aHHQ0HFsaWcJuYzM+E/A9ndkvk8JmIX2w5g s+G9kKHBNJEhDQT1//JTLiwBL+9dgSdtNlvWrCu5JkkRW8uNxXhlq0TwLFZOTNew QjLQORJtpnbP2OLNtGLAGq3yowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB8o9F+y TUv+8Z8g//BoXNL+xeRnMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSvF9UQkCP/jFqcg81IcQpIYd/LRX/D4nIVcZPEOk70deL2Ri2fcB Lhd0XBX/myN7oE+ni9IZT+q/HEFCupciXerN9zQRTyMpFyLxHTVrCDAjMY9jy2Rz IEIUkfDr0skesbgGsD1g15g3gSgkv4WctjD9lgXaK2fJA83Q2Ek1hIZpskwOZbMV J4M+UycGmPAmpxcKZrBWHK9FYLnUL7+N/jz8fGdYy3WlgYblHLr9KaF6e38WIF1J 6IgKTB3DtId09kyWqn+++r+S4qTlPxSYBfd9OJDlidv/QHIammn0EtPgqMlKtXNy SH6ilQUJNf95IA+Rv/H6gzxcidwpDdmu -----END CERTIFICATE-----Generated at Thu Jul 3 11:30:02 2025 by rpki-client