$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: LZigkh2AJgas9C8vaKaH4ExTQQBFgSogDdzus3a9fQU= Subject key identifier: 45:84:3B:A8:9E:89:62:E4:E5:B7:49:30:7F:73:E0:06:91:02:57:B2 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 26 Signing time: Sat 23 Aug 2025 08:12:35 +0000 Manifest this update: Sat 23 Aug 2025 08:12:34 +0000 Manifest next update: Sat 30 Aug 2025 08:12:34 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: PiijYqQ/g9ZCRITWh41j0t5Ij2lWtrlzLjY+koJs2QU=) 2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=) 3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=) 4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Aug 23 08:12:34 2025 GMT Not After : Aug 30 08:12:34 2025 GMT Subject: CN=68a977f3-1553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:02:47:44:9e:51:21:b1:2e:58:97:88:39: e5:7f:12:1e:dc:ac:f4:d2:28:63:a8:20:a0:32:6e: 3e:51:cb:e4:69:3f:77:fc:3b:c1:0e:97:bf:8d:fa: 3a:6b:e5:8b:20:2b:7b:9f:df:1b:2d:bb:5e:06:c6: fd:e6:bc:20:9a:0a:40:b6:e0:aa:c6:eb:4e:f0:b7: 79:c7:41:29:98:89:13:cf:df:38:0d:88:cd:d9:85: 05:f4:b9:f5:d9:f4:be:5a:d9:0e:2d:c2:bf:a4:54: d7:fd:90:fb:5b:7c:60:5c:62:e1:69:33:87:33:b5: 01:76:98:6b:4f:f8:a5:8c:b4:d8:15:e0:78:db:77: 72:e5:e7:ee:34:db:92:39:33:cb:f3:05:79:65:64: 67:96:50:38:a4:c2:a5:c4:cd:0f:2e:5d:44:e3:63: be:ee:15:05:68:c2:03:6b:61:0e:eb:2e:23:99:5f: d9:ee:cb:4a:11:51:2f:ae:88:bb:1a:19:92:bb:a8: ac:92:5b:a0:ec:a8:cd:74:48:a4:31:3d:80:80:7a: 81:46:9c:43:39:08:ea:39:1a:79:0d:03:04:a7:84: 18:61:e9:eb:a0:6b:eb:7e:d9:30:6c:29:63:78:f4: a6:e1:23:5e:c5:dd:de:f3:42:3d:8c:92:c9:b1:8b: 05:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:84:3B:A8:9E:89:62:E4:E5:B7:49:30:7F:73:E0:06:91:02:57:B2 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a1:55:c0:8b:7f:fa:9a:2f:87:44:ba:b9:e7:cf:ac:41:0d: f7:52:78:ec:95:f7:3b:d0:cb:96:57:d3:6e:9a:ee:c4:85:cf: 47:bd:21:8b:e7:92:ab:79:72:cb:48:5e:9c:5a:e3:9d:c0:2d: 55:56:7c:00:1e:ac:15:83:5e:5d:ef:10:e2:88:97:9d:41:90: 1b:9d:4a:df:d4:1b:7e:ec:83:9f:44:ad:8a:6c:c8:f9:14:f3: 4c:4f:b9:33:d7:71:38:f4:79:c9:f2:a4:1b:0d:ee:a5:57:07: 2c:39:0e:c3:37:a2:eb:80:51:c3:21:64:61:b1:b5:1c:74:d7: 81:df:51:df:fc:fd:79:26:f1:f9:52:1d:68:49:48:50:e5:76: ec:ed:d3:16:5e:c9:dc:29:17:7a:71:5a:5f:f5:4b:96:1a:de: c1:ce:bd:04:04:80:b4:81:1c:15:bd:72:c6:5f:ef:15:b2:36: f1:d5:a5:15:36:0e:d7:ae:c0:9a:64:61:05:12:f8:a0:ba:a6: c2:db:8a:a2:3b:be:ff:aa:9f:77:fa:84:ec:a8:af:e4:66:bf: 57:f5:5e:03:14:cb:80:ff:54:4f:36:a0:42:33:44:ad:e2:97: a6:c5:5f:8b:d2:fd:76:60:de:8d:40:a4:66:3c:c1:64:4a:c8: 34:68:2c:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTA4MjMwODEyMzRaFw0yNTA4MzAwODEyMzRaMBgxFjAUBgNV BAMTDTY4YTk3N2YzLTE1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7YQJHRJ5RIbEuWJeIOeV/Eh7crPTSKGOoIKAybj5Ry+RpP3f8O8EOl7+N+jpr 5YsgK3uf3xstu14Gxv3mvCCaCkC24KrG607wt3nHQSmYiRPP3zgNiM3ZhQX0ufXZ 9L5a2Q4twr+kVNf9kPtbfGBcYuFpM4cztQF2mGtP+KWMtNgV4Hjbd3Ll5+4025I5 M8vzBXllZGeWUDikwqXEzQ8uXUTjY77uFQVowgNrYQ7rLiOZX9nuy0oRUS+uiLsa GZK7qKySW6DsqM10SKQxPYCAeoFGnEM5COo5GnkNAwSnhBhh6euga+t+2TBsKWN4 9KbhI17F3d7zQj2MksmxiwWDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURYQ7qJ6J YuTlt0kwf3PgBpECV7IwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0M1REFCRUVBNUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNO Z0RGdE9lVF8wMUh0bEJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG6hVcCLf/qaL4dEurnnz6xBDfdSeOyV9zvQy5ZX026a7sSFz0e9IYvn kqt5cstIXpxa453ALVVWfAAerBWDXl3vEOKIl51BkBudSt/UG37sg59ErYpsyPkU 80xPuTPXcTj0ecnypBsN7qVXByw5DsM3ouuAUcMhZGGxtRx014HfUd/8/Xkm8flS HWhJSFDlduzt0xZeydwpF3pxWl/1S5Ya3sHOvQQEgLSBHBW9csZf7xWyNvHVpRU2 DteuwJpkYQUS+KC6psLbiqI7vv+qn3f6hOyor+Rmv1f1XgMUy4D/VE82oEIzRK3i l6bFX4vS/XZg3o1ApGY8wWRKyDRoLBg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:15:33 2025 by rpki-client