$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: 5hWeRDasCMSn8Abu+oE65WnXHNP4ULpCKTB5KRwRVtA= Subject key identifier: 09:8C:71:03:B5:6E:1D:E0:46:B4:E0:23:F6:86:DD:EE:A0:FD:37:82 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 0109 Signing time: Thu 03 Jul 2025 00:33:07 +0000 Manifest this update: Thu 03 Jul 2025 00:33:07 +0000 Manifest next update: Thu 10 Jul 2025 00:33:07 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: 69xasR6/1OQpMVkv56Z+jLMQvoziZE0cigOAFlf2ITs=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: 6gN0nzoFmNHVaS7tp1oD/3MNM9qt5KAUk1vZ6H1zsVE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jul 3 00:33:07 2025 GMT Not After : Jul 10 00:33:07 2025 GMT Subject: CN=6865cfc3-d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4f:8e:e7:12:b5:43:c5:0d:ef:df:48:72:2a: a1:58:22:84:09:3a:ac:c5:1b:83:0a:e1:49:e9:71: ea:f4:c8:54:1d:cd:d8:b7:fb:5b:b7:9b:6e:8b:a8: c8:2a:9a:16:a9:10:b4:82:63:f4:95:9b:90:59:06: 15:35:77:5e:8b:1a:d0:42:35:54:63:25:94:1d:cd: 90:85:ad:6a:e1:9e:76:0e:8b:7a:69:59:90:0a:7b: 34:c5:5e:b6:8c:01:10:30:33:cf:76:68:da:41:e8: 2c:42:f3:ef:bf:88:1e:fe:ac:ca:d7:94:ed:05:ef: d5:b3:bf:42:e4:3a:c2:55:70:9a:a1:c6:94:f6:f4: f9:bb:17:8c:71:1f:b9:5f:30:00:e6:61:5c:8c:b1: 7f:73:89:7f:d9:0a:a6:c6:42:13:6d:a1:2f:17:07: b0:ef:ab:a4:2b:3b:38:cb:3d:48:c0:83:45:5e:16: 62:d5:a8:40:a3:c3:fb:39:98:45:d7:00:0d:16:24: ad:53:5d:19:1c:76:0b:cf:94:ba:ea:d3:5c:14:35: f9:d1:e5:e3:91:88:ee:ed:ab:a0:de:71:da:4c:e4: 96:84:ec:d3:ac:e8:53:e3:18:db:ff:90:60:b7:3c: ea:50:37:c9:77:31:54:a2:ef:67:e4:90:36:40:4c: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:71:03:B5:6E:1D:E0:46:B4:E0:23:F6:86:DD:EE:A0:FD:37:82 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:21:93:32:ed:c4:62:45:91:8c:fb:b7:44:34:9a:ea:b0:9a: 09:dc:c7:ff:b6:43:25:73:dc:2d:65:eb:09:e5:9d:92:38:12: a3:40:49:c7:ed:20:fc:2b:f1:df:a5:57:4b:7c:fc:39:2f:c1: d9:78:40:22:a3:37:d9:f4:79:10:00:97:ef:e7:cb:56:ad:2c: a8:0f:7c:49:57:3a:41:0b:7f:ca:55:66:07:2a:a2:74:c8:1e: f2:5d:34:1f:d6:13:e3:bb:c4:5b:a6:82:e8:56:13:7a:e5:aa: 0a:9f:8d:88:9b:44:ab:eb:48:80:7c:97:8d:de:ce:f1:9c:fb: 6c:67:3e:d2:8c:8f:5c:d1:62:dc:55:a0:d9:b4:ff:13:c2:cd: be:a3:0a:f7:90:73:9d:92:de:c1:aa:3a:5b:df:a8:07:80:ca: 8e:16:79:49:bd:00:e6:20:6a:f6:e2:fd:fe:a2:fb:64:74:ac: 7c:ab:c2:e4:da:79:9d:9c:a6:21:b8:8f:28:ed:cd:2e:00:63: a1:9a:c6:64:01:8b:85:20:dd:58:9c:14:86:4e:8b:de:d4:7f: 16:eb:1d:de:43:bb:aa:42:5e:f2:45:7f:85:b2:c3:76:b6:46: c5:b9:d9:45:2f:74:44:fb:58:8d:92:7e:c8:16:96:99:f2:52: ef:ad:8b:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwNzAzMDAzMzA3WhcNMjUwNzEwMDAzMzA3WjAYMRYwFAYD VQQDEw02ODY1Y2ZjMy1kMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5E+O5xK1Q8UN799IciqhWCKECTqsxRuDCuFJ6XHq9MhUHc3Yt/tbt5tui6jI KpoWqRC0gmP0lZuQWQYVNXdeixrQQjVUYyWUHc2Qha1q4Z52Dot6aVmQCns0xV62 jAEQMDPPdmjaQegsQvPvv4ge/qzK15TtBe/Vs79C5DrCVXCaocaU9vT5uxeMcR+5 XzAA5mFcjLF/c4l/2QqmxkITbaEvFwew76ukKzs4yz1IwINFXhZi1ahAo8P7OZhF 1wANFiStU10ZHHYLz5S66tNcFDX50eXjkYju7aug3nHaTOSWhOzTrOhT4xjb/5Bg tzzqUDfJdzFUou9n5JA2QExvAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmMcQO1 bh3gRrTgI/aG3e6g/TeCMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhIZMy7cRiRZGM+7dENJrqsJoJ3Mf/tkMlc9wtZesJ5Z2SOBKjQEnH 7SD8K/HfpVdLfPw5L8HZeEAiozfZ9HkQAJfv58tWrSyoD3xJVzpBC3/KVWYHKqJ0 yB7yXTQf1hPju8RbpoLoVhN65aoKn42Im0Sr60iAfJeN3s7xnPtsZz7SjI9c0WLc VaDZtP8Tws2+owr3kHOdkt7Bqjpb36gHgMqOFnlJvQDmIGr24v3+ovtkdKx8q8Lk 2nmdnKYhuI8o7c0uAGOhmsZkAYuFIN1YnBSGTove1H8W6x3eQ7uqQl7yRX+FssN2 tkbFudlFL3RE+1iNkn7IFpaZ8lLvrYuS -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:53 2025 by rpki-client