$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft File: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft (raw, json) Hash identifier: uy0yPbp7BUWXDFGql5tN1+QkyNjhxSejc/jjm0bW3uw= Subject key identifier: FE:21:D0:D9:3C:07:0C:DA:47:C3:CB:45:11:5A:AE:17:B9:19:00:22 Authority key identifier: ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C Certificate issuer: /CN=A91BAA24/serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:48:21 +0000 Manifest this update: Sat 23 Aug 2025 07:48:20 +0000 Manifest next update: Sat 30 Aug 2025 07:48:20 +0000 Files and hashes: 1: 7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl (hash: 1UwfuBSyPp7KDEGua2AJAey2gEFCNdZpx6Bjdt1ZQpM=) 2: 28C2D6002BCB11F0A99C1E60C4F9AE02.roa (hash: 3eRh0WSm3ML8fWWz0uqzCk5In0Q1rchUgCmcr9wy07U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAA24, serialNumber=ED72C716BC0AF59D4306323FBAA474BD4B4DE71C Validity Not Before: Aug 23 07:48:20 2025 GMT Not After : Aug 30 07:48:20 2025 GMT Subject: CN=68a97245-a3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:34:f1:0e:b0:f3:44:4f:47:4f:e3:9b:12:78: 8a:2b:d3:8d:f7:8f:1d:53:b5:94:50:f5:9d:e8:ac: 6b:73:91:e1:13:1d:c7:d5:0f:36:35:b5:34:32:42: 59:30:cd:a4:3a:21:56:6c:c1:dd:c2:84:d1:8f:a2: 10:fd:f3:5d:d2:82:d7:27:63:10:be:f6:70:d1:af: 60:37:c1:49:0c:2d:c3:e7:42:6e:0b:e7:31:5c:52: 89:f2:24:30:ac:75:e8:f7:5f:19:8b:41:b4:07:c9: 80:3d:1c:af:7c:9f:aa:de:d2:99:88:d0:3e:a0:04: 2b:ea:3f:d0:68:4d:5c:44:28:10:73:da:02:ca:a1: 95:fc:ac:76:18:0a:ca:bd:50:6d:9b:f9:97:d0:87: 3d:2c:be:9d:8f:a6:51:65:d3:6f:8f:93:1e:06:67: 7c:0e:ca:1f:18:7f:48:a9:94:dc:aa:87:fd:5f:57: e3:91:13:51:d2:98:ea:74:d8:d1:7c:16:36:a7:62: 9e:f3:ae:18:18:68:2d:2b:da:12:dc:dd:ee:77:5b: 90:7a:74:f6:87:0f:56:00:1f:68:1d:f8:9a:55:11: c5:77:28:30:a5:e0:8a:f7:4c:68:2f:b9:9b:26:c2: 6b:dd:e3:04:8a:a4:b5:d6:2e:3e:41:7b:bb:70:31: c9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:21:D0:D9:3C:07:0C:DA:47:C3:CB:45:11:5A:AE:17:B9:19:00:22 X509v3 Authority Key Identifier: keyid:ED:72:C7:16:BC:0A:F5:9D:43:06:32:3F:BA:A4:74:BD:4B:4D:E7:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAA24/1739C35A2BC911F0B8BE3F3BC4F9AE02/7XLHFrwK9Z1DBjI_uqR0vUtN5xw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:5a:55:b2:da:0f:b2:37:78:a6:7a:42:70:fa:fb:61:a9:02: 68:55:97:32:bc:e3:1d:cc:c6:1d:91:6e:ae:ee:18:4f:7a:34: f7:ff:44:0c:d4:34:74:2d:4a:d3:4f:77:be:73:86:20:d5:03: 93:52:09:d8:3d:25:06:a7:bf:8d:d7:c9:18:98:65:f8:00:43: 43:4b:c0:4a:19:fd:d5:d0:ac:da:e2:ca:de:8a:8a:e5:1c:ad: 59:b5:9e:d5:a8:48:fb:00:2e:04:7b:8f:fe:4d:99:95:ac:f3: 04:39:0e:e8:77:3b:77:89:50:2e:d8:70:c7:19:55:c3:50:16: 03:62:f6:a5:de:63:0b:42:0b:7b:96:49:0c:ca:b7:f1:43:e8: 0f:34:f2:e7:db:7c:73:2d:46:30:08:8a:36:0a:65:cf:e5:f2: bc:fa:c2:56:24:48:2a:ac:a4:f9:ac:bf:52:77:9a:75:9d:6e: 4e:7f:a1:08:b2:5e:e4:70:d6:a5:c4:e4:f6:85:28:77:47:9e: f4:b7:2f:15:ba:c2:e5:f4:cf:a3:f6:31:a9:9c:53:65:df:59: 70:18:b8:cb:be:c9:ed:30:99:ca:73:ca:d5:e5:ac:92:7d:12: 0b:ee:17:a3:68:a9:12:58:11:69:72:80:c1:01:44:17:6b:89: 07:a6:3e:17 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QUEyNDExMC8GA1UEBRMoRUQ3MkM3MTZCQzBBRjU5RDQzMDYzMjNGQkFBNDc0QkQ0 QjRERTcxQzAeFw0yNTA4MjMwNzQ4MjBaFw0yNTA4MzAwNzQ4MjBaMBgxFjAUBgNV BAMTDTY4YTk3MjQ1LWEzYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGNPEOsPNET0dP45sSeIor0433jx1TtZRQ9Z3orGtzkeETHcfVDzY1tTQyQlkw zaQ6IVZswd3ChNGPohD9813SgtcnYxC+9nDRr2A3wUkMLcPnQm4L5zFcUonyJDCs dej3XxmLQbQHyYA9HK98n6re0pmI0D6gBCvqP9BoTVxEKBBz2gLKoZX8rHYYCsq9 UG2b+ZfQhz0svp2PplFl02+Pkx4GZ3wOyh8Yf0iplNyqh/1fV+ORE1HSmOp02NF8 FjanYp7zrhgYaC0r2hLc3e53W5B6dPaHD1YAH2gd+JpVEcV3KDCl4Ir3TGgvuZsm wmvd4wSKpLXWLj5Be7twMclxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/iHQ2TwH DNpHw8tFEVquF7kZACIwHwYDVR0jBBgwFoAU7XLHFrwK9Z1DBjI/uqR0vUtN5xww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBQTI0LzE3MzlDMzVBMkJD OTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVoxREJqSV91cVIwdlV0TjV4 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN1hMSEZyd0s5WjFEQmpJX3VxUjB2VXRONXh3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB QTI0LzE3MzlDMzVBMkJDOTExRjBCOEJFM0YzQkM0RjlBRTAyLzdYTEhGcndLOVox REJqSV91cVIwdlV0TjV4dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALtaVbLaD7I3eKZ6QnD6+2GpAmhVlzK84x3Mxh2Rbq7uGE96NPf/RAzU NHQtStNPd75zhiDVA5NSCdg9JQanv43XyRiYZfgAQ0NLwEoZ/dXQrNriyt6KiuUc rVm1ntWoSPsALgR7j/5NmZWs8wQ5Duh3O3eJUC7YcMcZVcNQFgNi9qXeYwtCC3uW SQzKt/FD6A808ufbfHMtRjAIijYKZc/l8rz6wlYkSCqspPmsv1J3mnWdbk5/oQiy XuRw1qXE5PaFKHdHnvS3LxW6wuX0z6P2MamcU2XfWXAYuMu+ye0wmcpzytXlrJJ9 EgvuF6NoqRJYEWlygMEBRBdriQemPhc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:14 2025 by rpki-client