$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: gFOQnztp412973aFx1dYpswNLNQPCKS1tn7BIq10TVc= Subject key identifier: 74:CD:0D:87:6A:0F:D7:C2:B2:A1:FD:28:F3:E3:A6:96:4F:B7:BF:CD Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B53 Signing time: Fri 22 Aug 2025 19:15:27 +0000 Manifest this update: Fri 22 Aug 2025 19:15:27 +0000 Manifest next update: Fri 29 Aug 2025 19:15:27 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: 7CdlFp66mVtS2TSiKyxbqOOk4j8gClglMX0yUjypbYk=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2909 (0xb5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Aug 22 19:15:27 2025 GMT Not After : Aug 29 19:15:27 2025 GMT Subject: CN=68a8c1cf-aa0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:76:bc:53:3b:12:72:e2:91:4f:dd:c6:7c: 65:8f:52:f4:e6:45:92:13:ae:62:07:b8:10:e1:9f: 4d:fe:d9:52:b5:fe:71:59:79:6f:72:d7:44:d4:0d: 89:1f:bd:45:69:2c:b3:95:f2:ec:5d:0b:47:92:e4: 1d:ca:8e:10:1f:8a:63:83:d0:d0:a3:c1:17:6c:f3: 35:75:7a:d9:8a:00:6c:4e:8c:5a:2f:2c:55:20:94: 26:10:47:5a:43:f6:14:0d:9f:db:0a:b0:b8:60:97: 41:6d:9b:3a:ed:b3:37:b5:9a:6b:ea:02:c8:36:7e: f2:08:9d:c9:d2:e2:18:60:28:c5:19:ff:91:28:16: 19:0b:ae:71:ac:79:49:5e:92:b9:2c:c2:68:1b:72: 6f:3a:7e:20:c7:33:4b:4f:05:1a:d5:f9:47:71:75: 6c:b5:15:65:7e:4c:e5:f0:4e:fa:25:42:b6:fe:0f: 26:94:26:d1:46:ec:b6:77:77:ca:f5:09:8d:1e:63: f6:8e:c7:d0:53:fa:77:65:97:ae:d4:43:03:dc:03: 71:e3:73:b3:55:24:5b:81:92:7f:b6:88:68:5e:1a: 06:32:e7:90:81:2d:54:b4:3e:26:ef:20:7f:c5:da: d2:c0:46:8e:81:df:bf:2e:a2:f4:bb:5d:5c:6c:07: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:0D:87:6A:0F:D7:C2:B2:A1:FD:28:F3:E3:A6:96:4F:B7:BF:CD X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:c9:e0:78:2c:98:04:a8:70:ec:09:59:2e:0b:c0:81:a2:ab: b0:eb:50:bb:7f:54:88:58:ac:f1:4c:9d:c2:8b:40:9d:cb:88: 82:da:28:8a:fa:7f:58:3a:60:03:5c:38:0a:15:79:cb:0d:1d: 25:4b:3a:d6:0d:17:18:ea:d5:f3:37:68:3f:b7:5a:be:99:3b: d4:20:20:94:43:14:0c:ad:37:a2:1d:b9:8c:c8:1a:97:1d:95: be:a9:d3:d7:a0:20:55:b0:90:da:f5:bb:f1:9c:ab:29:e8:b2: 49:13:5c:f5:a3:91:ec:63:18:ff:03:fe:f7:40:7b:e7:d9:fc: c5:64:4b:65:35:83:1c:4c:f6:f8:b1:87:f2:eb:e7:33:d5:c2: f0:30:16:f3:76:a4:17:b0:c8:05:d4:67:61:26:c2:1d:14:ec: 52:c9:6a:fa:c4:be:1e:d0:6f:47:23:ed:86:34:1a:c2:2a:5d: b3:62:df:eb:3b:0c:fd:af:2b:f4:11:dc:4a:76:b6:07:30:e7: 00:a8:9c:e4:11:b5:cc:bd:ba:78:e1:41:54:65:ff:65:8f:74: e1:30:b0:6b:b2:13:d3:6c:fb:82:bc:a6:b1:05:33:72:f6:1f: 26:b9:d0:30:99:a3:65:03:7f:af:84:0d:90:f6:d4:20:8d:8f: 97:ce:12:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwODIyMTkxNTI3WhcNMjUwODI5MTkxNTI3WjAYMRYwFAYD VQQDEw02OGE4YzFjZi1hYTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArf52vFM7EnLikU/dxnxlj1L05kWSE65iB7gQ4Z9N/tlStf5xWXlvctdE1A2J H71FaSyzlfLsXQtHkuQdyo4QH4pjg9DQo8EXbPM1dXrZigBsToxaLyxVIJQmEEda Q/YUDZ/bCrC4YJdBbZs67bM3tZpr6gLINn7yCJ3J0uIYYCjFGf+RKBYZC65xrHlJ XpK5LMJoG3JvOn4gxzNLTwUa1flHcXVstRVlfkzl8E76JUK2/g8mlCbRRuy2d3fK 9QmNHmP2jsfQU/p3ZZeu1EMD3ANx43OzVSRbgZJ/tohoXhoGMueQgS1UtD4m7yB/ xdrSwEaOgd+/LqL0u11cbAcQDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTNDYdq D9fCsqH9KPPjppZPt7/NMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWyeB4LJgEqHDsCVkuC8CBoquw61C7f1SIWKzxTJ3Ci0Cdy4iC2iiK +n9YOmADXDgKFXnLDR0lSzrWDRcY6tXzN2g/t1q+mTvUICCUQxQMrTeiHbmMyBqX HZW+qdPXoCBVsJDa9bvxnKsp6LJJE1z1o5HsYxj/A/73QHvn2fzFZEtlNYMcTPb4 sYfy6+cz1cLwMBbzdqQXsMgF1GdhJsIdFOxSyWr6xL4e0G9HI+2GNBrCKl2zYt/r Owz9ryv0EdxKdrYHMOcAqJzkEbXMvbp44UFUZf9lj3ThMLBrshPTbPuCvKaxBTNy 9h8mudAwmaNlA3+vhA2Q9tQgjY+XzhLN -----END CERTIFICATE-----Generated at Sun Aug 24 00:00:23 2025 by rpki-client