$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: R77Ywzfp/7VBFrJ24XrzmLpoujwUaOh3xfuixZgIn9U= Subject key identifier: 95:97:39:16:41:B4:F2:08:5A:AA:6D:B2:E2:AA:B9:EE:F3:CD:13:BF Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0130 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 00:21:20 +0000 Manifest this update: Sat 23 Aug 2025 00:21:20 +0000 Manifest next update: Sat 30 Aug 2025 00:21:20 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: 2phFtCicRCvsyROO39jFxxlR8/9Y+JcQ7B+AH/Yu0V8=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: iVqZPKyDqQducLQTxL6bBlV8UAL5mtY7QS4Lu05AYB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 304 (0x130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Aug 23 00:21:20 2025 GMT Not After : Aug 30 00:21:20 2025 GMT Subject: CN=68a90980-5142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:05:bc:ab:a3:52:fd:b2:bb:82:64:64:77:fe: 90:84:ef:93:1c:48:00:59:f4:97:99:34:3b:0b:25: e6:d3:8f:ff:de:e7:0e:4b:4a:2d:30:12:1f:f9:b0: 1e:e2:c4:31:9a:7b:1b:71:80:55:b9:6f:80:26:be: ce:2f:07:e0:f9:13:5f:64:82:6f:db:2d:c1:03:62: 90:4d:17:7f:2e:3b:81:ec:70:d4:63:1a:69:b6:55: b0:77:2f:2c:bf:39:40:0a:44:f1:52:bb:7b:31:d0: 02:c7:76:8e:c8:09:69:22:91:f8:64:75:9b:77:c1: 1a:b5:10:c7:d0:9d:10:23:bf:22:d8:8b:f1:56:bf: b3:f9:59:a9:25:f7:43:14:18:6d:99:ac:4e:a1:99: 6c:37:34:01:6a:f3:f1:fb:ae:bc:59:32:aa:1e:57: 94:f3:f9:ce:04:97:6b:fb:ea:62:3d:6f:0c:37:4a: b2:25:b7:7f:1c:0b:67:82:02:d4:10:14:49:79:a9: 0d:5c:fb:59:1e:b1:de:0e:29:11:59:fd:31:11:72: 08:02:b9:52:a4:99:13:56:3d:6a:e8:f5:d6:80:e2: b6:93:30:20:36:d7:4b:d4:67:81:b2:97:ac:0b:8e: be:3e:e4:e8:dc:30:11:a1:03:94:b9:00:ba:6e:a0: 72:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:97:39:16:41:B4:F2:08:5A:AA:6D:B2:E2:AA:B9:EE:F3:CD:13:BF X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:15:89:2d:b0:d6:1d:ca:17:f5:00:8c:c7:01:04:aa:74:f3: 38:39:3f:5a:ef:f5:3b:9a:e1:11:a5:82:bb:10:82:e8:89:f3: 31:be:3c:eb:69:48:fa:76:10:67:1b:29:b7:0d:94:e7:87:30: 13:bc:cc:8d:e1:52:4b:c9:da:58:3f:e1:19:93:62:06:d3:52: 34:e6:7b:a7:e2:47:4b:a8:42:90:e3:2c:6b:35:03:c1:a1:d0: f5:01:5d:0e:0f:07:81:37:6c:c0:2d:b4:06:a4:ba:ae:26:0e: b6:9f:85:28:b4:31:5b:52:91:f3:27:82:49:f2:64:64:8c:ff: 60:b8:66:cf:1d:cc:f5:09:2e:95:be:6b:eb:dd:5a:36:2a:94: 76:07:09:03:b0:22:dc:8f:b6:51:70:23:a0:4b:f6:f2:8b:21: 70:b3:3c:be:e9:b3:63:2e:13:3d:e4:d5:8a:85:ea:7b:c6:2c: 29:2e:fe:ce:54:9b:ea:6c:73:e2:92:03:f9:a0:09:5d:eb:ca: 2d:00:4f:87:f6:bf:77:cd:58:8e:57:02:bb:c0:dc:aa:dd:fa: 8d:c6:8f:43:63:96:b7:ea:77:a6:77:73:bb:30:70:ca:27:36: 64:f6:c5:e0:67:ee:12:e5:fa:f4:02:5f:e9:fe:f3:85:a0:2c: 17:e3:36:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwODIzMDAyMTIwWhcNMjUwODMwMDAyMTIwWjAYMRYwFAYD VQQDEw02OGE5MDk4MC01MTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAW8q6NS/bK7gmRkd/6QhO+THEgAWfSXmTQ7CyXm04//3ucOS0otMBIf+bAe 4sQxmnsbcYBVuW+AJr7OLwfg+RNfZIJv2y3BA2KQTRd/LjuB7HDUYxpptlWwdy8s vzlACkTxUrt7MdACx3aOyAlpIpH4ZHWbd8EatRDH0J0QI78i2IvxVr+z+VmpJfdD FBhtmaxOoZlsNzQBavPx+668WTKqHleU8/nOBJdr++piPW8MN0qyJbd/HAtnggLU EBRJeakNXPtZHrHeDikRWf0xEXIIArlSpJkTVj1q6PXWgOK2kzAgNtdL1GeBspes C46+PuTo3DARoQOUuQC6bqByAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJWXORZB tPIIWqptsuKque7zzRO/MB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTFYktsNYdyhf1AIzHAQSqdPM4OT9a7/U7muERpYK7EILoifMxvjzr aUj6dhBnGym3DZTnhzATvMyN4VJLydpYP+EZk2IG01I05nun4kdLqEKQ4yxrNQPB odD1AV0ODweBN2zALbQGpLquJg62n4UotDFbUpHzJ4JJ8mRkjP9guGbPHcz1CS6V vmvr3Vo2KpR2BwkDsCLcj7ZRcCOgS/byiyFwszy+6bNjLhM95NWKhep7xiwpLv7O VJvqbHPikgP5oAld68otAE+H9r93zViOVwK7wNyq3fqNxo9DY5a36nemd3O7MHDK JzZk9sXgZ+4S5fr0Al/p/vOFoCwX4zai -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:05 2025 by rpki-client