$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: xaCb6OJ32xpEw70a4KLgIpVtrVVDvll2KCesrlc7ff4= Subject key identifier: 53:28:B7:6C:2F:89:EF:04:27:AA:9B:DB:02:21:50:1F:CE:8B:5D:0A Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 14AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 148D Signing time: Fri 22 Aug 2025 17:01:31 +0000 Manifest this update: Fri 22 Aug 2025 17:01:31 +0000 Manifest next update: Fri 29 Aug 2025 17:01:31 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: fKzRnSWzRRIFuPW70wGSvrP7Wqrq4VsSffHnZ0n6I4A=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5291 (0x14ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Aug 22 17:01:31 2025 GMT Not After : Aug 29 17:01:31 2025 GMT Subject: CN=68a8a26b-ac72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6b:55:b0:78:2d:0b:96:dc:0e:67:49:9d:74: 92:be:4c:56:36:a8:06:37:2a:a8:a2:34:3e:96:60: ee:0b:20:74:a5:57:02:d6:f7:23:3d:53:c9:18:4a: 44:f0:0e:c4:b0:a4:1f:76:5d:ca:f9:9c:60:d5:9a: 19:dc:a0:28:0f:84:d6:4c:a2:96:b9:81:de:69:76: 5e:ab:bd:c1:7a:31:49:1b:d3:26:01:70:8c:4a:8a: e7:a5:16:d3:de:49:b8:8f:ac:90:43:fa:98:f2:f5: 2e:20:94:aa:61:1b:a6:0f:b1:8a:6f:e9:4d:92:28: d8:bc:b5:df:e2:ce:74:f6:c1:9d:55:a0:d0:de:69: 21:50:51:60:bc:f7:bf:54:4b:32:3c:3c:b3:33:ea: 27:28:9c:b5:e5:74:fe:9b:a2:26:cc:74:86:3b:c2: cc:37:5d:d1:0b:17:a3:00:fe:f5:2b:72:fc:57:fb: fb:2f:dd:2d:4c:9a:35:43:e5:75:15:44:74:ad:c2: 46:24:55:a1:d8:d9:c0:85:6f:6c:a4:9b:c9:a1:7a: 32:e0:4f:fa:b2:b7:64:21:3b:8b:0e:4b:fd:c2:b9: b0:30:e3:99:93:6a:85:12:28:c5:d0:d3:64:5e:71: 01:5d:bd:e4:ab:3d:90:5b:ce:f4:da:fc:dd:df:11: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:28:B7:6C:2F:89:EF:04:27:AA:9B:DB:02:21:50:1F:CE:8B:5D:0A X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:18:fc:ad:4a:6d:82:d3:b6:45:10:07:81:76:cf:01:23:17: f8:1e:69:80:a3:8a:55:d7:a1:86:99:12:e1:e6:75:09:af:a7: 93:f3:87:fe:72:01:17:07:89:10:73:e3:7f:ea:9e:bc:7c:f5: fc:1d:07:c7:48:56:4c:49:65:63:9f:3c:81:43:b6:e2:48:62: fd:2e:7b:66:84:ae:42:04:3d:18:2b:43:43:de:f0:d4:53:b5: 06:d3:ca:15:4e:61:99:37:12:59:cf:29:49:4f:24:f5:09:48: 17:65:9d:87:70:ae:cd:2b:34:73:31:30:f5:15:9e:d4:45:c6: a1:2f:bd:9f:f6:e6:7e:9c:c2:25:63:06:4d:72:68:7a:26:83: ad:be:bf:e4:04:9b:8d:45:59:f0:17:2b:10:7c:30:0c:dc:4d: bf:33:30:67:cc:2c:a3:61:a9:20:b5:f8:36:a3:ea:7b:59:03: 8b:8f:40:5b:fe:8d:dd:05:d0:4d:d8:16:43:99:7c:8e:da:dc: 94:34:da:7c:13:b4:5d:8c:7a:7d:72:f9:d2:7e:72:91:cb:c4: cd:4d:61:a9:ba:5b:0d:c0:8d:c3:ab:5a:08:57:7a:88:ca:ea: af:5c:d9:79:4d:c7:de:aa:72:3e:61:9c:92:16:6c:28:ae:41: 1b:ff:a4:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwODIyMTcwMTMxWhcNMjUwODI5MTcwMTMxWjAYMRYwFAYD VQQDEw02OGE4YTI2Yi1hYzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62tVsHgtC5bcDmdJnXSSvkxWNqgGNyqoojQ+lmDuCyB0pVcC1vcjPVPJGEpE 8A7EsKQfdl3K+Zxg1ZoZ3KAoD4TWTKKWuYHeaXZeq73BejFJG9MmAXCMSornpRbT 3km4j6yQQ/qY8vUuIJSqYRumD7GKb+lNkijYvLXf4s509sGdVaDQ3mkhUFFgvPe/ VEsyPDyzM+onKJy15XT+m6ImzHSGO8LMN13RCxejAP71K3L8V/v7L90tTJo1Q+V1 FUR0rcJGJFWh2NnAhW9spJvJoXoy4E/6srdkITuLDkv9wrmwMOOZk2qFEijF0NNk XnEBXb3kqz2QW8702vzd3xF4mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMot2wv ie8EJ6qb2wIhUB/Oi10KMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDGPytSm2C07ZFEAeBds8BIxf4HmmAo4pV16GGmRLh5nUJr6eT84f+ cgEXB4kQc+N/6p68fPX8HQfHSFZMSWVjnzyBQ7biSGL9LntmhK5CBD0YK0ND3vDU U7UG08oVTmGZNxJZzylJTyT1CUgXZZ2HcK7NKzRzMTD1FZ7URcahL72f9uZ+nMIl YwZNcmh6JoOtvr/kBJuNRVnwFysQfDAM3E2/MzBnzCyjYakgtfg2o+p7WQOLj0Bb /o3dBdBN2BZDmXyO2tyUNNp8E7RdjHp9cvnSfnKRy8TNTWGpulsNwI3Dq1oIV3qI yuqvXNl5TcfeqnI+YZySFmworkEb/6Rq -----END CERTIFICATE-----Generated at Sat Aug 23 16:32:46 2025 by rpki-client