$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: oFquaFlTD6POtMu9iaxTTlqYXs+l9u3g+09Pgpt35wg= Subject key identifier: 23:CE:59:76:27:F9:D6:26:C4:37:51:BA:21:6D:2A:7B:D1:3D:78:87 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B38 Signing time: Fri 22 Aug 2025 19:24:07 +0000 Manifest this update: Fri 22 Aug 2025 19:24:07 +0000 Manifest next update: Fri 29 Aug 2025 19:24:07 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: fmNx/kJddogpBA9f45eSAn8PmTAD3fNW49FP/Orwo+w=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2887 (0xb47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Aug 22 19:24:07 2025 GMT Not After : Aug 29 19:24:07 2025 GMT Subject: CN=68a8c3d7-6370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:e6:63:9e:94:d2:79:61:ba:83:9e:19:56: ef:38:0f:09:68:b3:b1:2c:dd:b5:e2:2a:cd:74:a9: 5c:10:14:d4:e2:73:0c:66:b3:56:b0:37:56:34:75: b6:36:33:12:fd:d5:7f:67:0a:5e:98:49:2c:0d:0e: 69:e2:b9:82:d2:35:b2:5d:fe:26:43:19:e0:f1:a8: 2c:49:43:c8:2a:f5:36:c9:ca:01:e0:03:62:6f:1c: 0a:c1:94:e2:06:ab:10:13:ff:b5:26:b1:00:ce:f4: 61:85:e2:78:0a:40:2b:0a:39:70:60:d0:db:44:a1: c7:72:03:de:b1:c1:32:54:4d:a4:40:63:4f:2b:b3: fb:27:1f:bc:84:36:f2:80:a9:a4:22:63:3d:ff:61: cd:97:52:17:d9:64:4e:21:13:c8:42:a4:6b:9f:2a: 34:c8:e3:8c:45:a1:f8:4e:dc:af:b0:56:d7:4d:0b: 77:e4:fc:3d:84:a9:fc:1d:6d:6f:8f:74:69:e5:34: cf:76:20:89:f6:ea:95:1d:0f:3f:51:ea:8b:e2:df: 97:df:95:46:fe:bb:b1:04:4e:3b:00:ad:e9:53:d7: 2b:99:bb:c5:69:37:55:c4:b1:5d:13:24:41:8a:38: 24:d0:82:06:45:cd:4a:6a:9d:8f:06:aa:d7:a8:92: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:59:76:27:F9:D6:26:C4:37:51:BA:21:6D:2A:7B:D1:3D:78:87 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:e3:b5:39:df:5e:50:55:6f:09:97:17:62:8b:5d:b2:b7:bd: 34:89:e5:7c:5d:1b:76:a4:2f:e0:dd:48:fc:a5:67:9f:d2:df: 9a:95:28:99:f2:bd:52:8a:fc:f5:c2:97:bb:ae:2e:9e:6c:f8: ee:21:b6:ab:dd:37:d5:fa:86:ea:20:7e:f3:d0:a7:6c:ff:50: a7:da:a3:4a:26:24:40:61:46:90:51:0b:9f:fa:17:59:82:ca: 22:bc:b1:5d:48:eb:04:c2:07:a8:d5:17:e8:5e:be:89:98:a9: 10:84:e6:40:21:3d:0f:a2:cf:1b:b7:d9:b5:2e:08:23:fc:80: 18:71:72:1b:8a:4b:52:bb:d9:ca:54:d2:71:aa:fa:88:f6:6e: 2a:ed:33:7e:9d:5d:75:99:a9:98:4d:2e:83:3f:28:c4:d1:08: 03:0f:14:e0:e6:4e:94:8b:6f:3c:d5:a8:6a:08:c6:f9:f6:7e: 91:6b:8e:d0:b1:9e:87:39:37:d0:51:f1:b5:45:5a:48:98:fd: 20:11:80:90:30:8a:32:2d:7a:1a:f1:2d:18:80:12:6e:6a:2b: 5e:d9:be:66:ae:f4:72:b6:06:ba:0c:27:d7:3e:4a:b1:bb:17: 1d:01:87:50:90:61:73:b5:65:02:b7:e8:4f:64:81:9a:6f:7b: e9:f3:42:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUwODIyMTkyNDA3WhcNMjUwODI5MTkyNDA3WjAYMRYwFAYD VQQDEw02OGE4YzNkNy02MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq7mY56U0nlhuoOeGVbvOA8JaLOxLN214irNdKlcEBTU4nMMZrNWsDdWNHW2 NjMS/dV/ZwpemEksDQ5p4rmC0jWyXf4mQxng8agsSUPIKvU2ycoB4ANibxwKwZTi BqsQE/+1JrEAzvRhheJ4CkArCjlwYNDbRKHHcgPescEyVE2kQGNPK7P7Jx+8hDby gKmkImM9/2HNl1IX2WROIRPIQqRrnyo0yOOMRaH4TtyvsFbXTQt35Pw9hKn8HW1v j3Rp5TTPdiCJ9uqVHQ8/UeqL4t+X35VG/ruxBE47AK3pU9crmbvFaTdVxLFdEyRB ijgk0IIGRc1Kap2PBqrXqJI1ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPOWXYn +dYmxDdRuiFtKnvRPXiHMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC247U5315QVW8Jlxdii12yt700ieV8XRt2pC/g3Uj8pWef0t+alSiZ 8r1Sivz1wpe7ri6ebPjuIbar3TfV+obqIH7z0Kds/1Cn2qNKJiRAYUaQUQuf+hdZ gsoivLFdSOsEwgeo1RfoXr6JmKkQhOZAIT0Pos8bt9m1Lggj/IAYcXIbiktSu9nK VNJxqvqI9m4q7TN+nV11mamYTS6DPyjE0QgDDxTg5k6Ui2881ahqCMb59n6Ra47Q sZ6HOTfQUfG1RVpImP0gEYCQMIoyLXoa8S0YgBJuaite2b5mrvRytga6DCfXPkqx uxcdAYdQkGFztWUCt+hPZIGab3vp80K0 -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:27 2025 by rpki-client