$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft File: P7eFXvMwunfZ87ct_97CBxKsFAc.mft (raw, json) Hash identifier: MK0LMcFWD3RLgcfjtu/XWjEm81zVD5MDj+2cYMc+Zpw= Subject key identifier: B7:C7:6F:44:D6:AD:E1:70:73:5C:F2:8E:6C:1E:63:7D:C4:C5:E4:6B Authority key identifier: 3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 Certificate issuer: /CN=A91CD4DB/serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Certificate serial: 17EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft Manifest number: 17D5 Signing time: Fri 22 Aug 2025 16:40:23 +0000 Manifest this update: Fri 22 Aug 2025 16:40:22 +0000 Manifest next update: Fri 29 Aug 2025 16:40:22 +0000 Files and hashes: 1: P7eFXvMwunfZ87ct_97CBxKsFAc.crl (hash: X8zZQFGZdPGETuveialiNadhluYU+0ZmBVHeivEpxog=) 2: BA140DB6707911F0A8415023C4F9AE02.roa (hash: 0YUnRIrkM+IzlTQK8voAM6732+ON45hB2hg7JmdBo3U=) 3: D9C4471C32D911F0B3466E0BC4F9AE02.roa (hash: kEqVolPWbZYybXeWnS2WqFsHodl52XHMAsJNtlbgCXo=) 4: 9BAC2C9C32D911F09D7CBD0AC4F9AE02.roa (hash: WA77dp8CFAMTuFtYEp44sxYc2n+DFG5Sigw0CHNE2Bg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:40:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6126 (0x17ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4DB, serialNumber=3FB7855EF330BA77D9F3B72DFFDEC20712AC1407 Validity Not Before: Aug 22 16:40:22 2025 GMT Not After : Aug 29 16:40:22 2025 GMT Subject: CN=68a89d76-015e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:22:8b:6e:61:40:23:ef:bb:ac:f5:d4:df: 2f:6b:9f:45:7a:33:0f:fe:f3:f5:0d:48:72:c0:9c: 3b:00:85:bb:43:98:48:af:8d:f6:32:70:e1:9e:b0: 94:e1:da:86:f0:84:ed:9f:1c:b6:44:fc:d9:19:84: 24:b5:05:62:0d:e7:c4:c6:4c:30:18:09:8b:8e:f2: 1e:01:11:aa:b6:c6:4f:a7:74:41:a2:05:0b:8d:bc: f5:14:9a:a9:91:9a:41:87:24:1e:1e:b1:8c:ad:a4: ff:4a:43:65:14:3d:6c:51:e7:ee:33:ba:70:38:a5: 3c:b1:0b:70:df:51:87:e8:f2:cb:e0:ba:24:7a:9a: b0:55:f7:f4:7d:83:22:a9:69:0b:35:9b:a6:2c:7b: 6e:8f:88:bb:79:07:03:64:8e:91:0c:2d:e9:48:ee: ef:a9:a8:88:dc:fa:c0:c9:8e:a7:75:c3:b8:b4:de: 7d:e0:7e:30:b5:c8:f7:f6:de:e8:a9:43:4e:6c:32: 1b:e4:46:24:bc:49:4e:a1:4c:f5:78:61:d1:50:41: c8:1c:1e:90:d7:5e:06:80:85:ba:fb:c7:9b:42:6b: 38:07:5e:60:e1:6e:4a:c2:03:79:63:2b:a0:8c:ac: 0a:97:1f:73:58:25:cd:83:7c:17:09:4a:ac:37:d5: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:6F:44:D6:AD:E1:70:73:5C:F2:8E:6C:1E:63:7D:C4:C5:E4:6B X509v3 Authority Key Identifier: keyid:3F:B7:85:5E:F3:30:BA:77:D9:F3:B7:2D:FF:DE:C2:07:12:AC:14:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P7eFXvMwunfZ87ct_97CBxKsFAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4DB/3A315DCECD0211E7B0442D28C4F9AE02/P7eFXvMwunfZ87ct_97CBxKsFAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ee:bd:6e:1c:85:7a:68:f6:bf:7e:fb:a4:71:75:bb:91:fb: bf:d1:2d:61:7c:b1:03:09:43:f1:17:cf:60:b1:4a:01:39:7d: d9:4b:91:b5:b4:16:03:89:f3:c1:a3:d6:77:a4:1d:ce:a5:45: 3f:6e:e0:c3:f4:1a:4f:54:5f:59:d5:0f:ce:9d:00:17:da:52: 7e:eb:62:23:07:78:24:2b:3c:92:ce:ed:44:37:ac:f7:f5:1b: 8b:ff:17:9a:e4:6f:11:a6:83:9d:ad:68:5c:05:b3:db:83:d2: 5d:56:0a:6e:17:0c:95:c1:ea:e3:78:97:58:05:89:04:65:44: be:63:b6:d4:47:83:a8:07:a4:b1:78:e4:16:2c:25:bd:2f:75: ab:40:73:e7:f9:be:07:ce:cd:55:1e:50:f1:d8:2b:64:24:5b: 68:86:38:da:73:58:46:3e:4b:46:19:73:3d:98:aa:2d:3a:d7: a0:af:f5:7b:9f:24:79:b2:26:03:72:bf:df:9a:68:cc:79:7c: 0d:ce:80:9c:b2:01:6e:ea:b0:e7:f0:cf:1d:55:70:d2:4d:f9: ac:f7:45:30:5c:9b:77:93:3d:50:fa:12:35:6e:d8:14:46:5c: 7d:0b:da:1c:0e:85:cd:d3:59:96:6f:2c:d4:72:b8:7b:f2:66: ef:dd:3d:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0REIxMTAvBgNVBAUTKDNGQjc4NTVFRjMzMEJBNzdEOUYzQjcyREZGREVDMjA3 MTJBQzE0MDcwHhcNMjUwODIyMTY0MDIyWhcNMjUwODI5MTY0MDIyWjAYMRYwFAYD VQQDEw02OGE4OWQ3Ni0wMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxgoii25hQCPvu6z11N8va59FejMP/vP1DUhywJw7AIW7Q5hIr432MnDhnrCU 4dqG8ITtnxy2RPzZGYQktQViDefExkwwGAmLjvIeARGqtsZPp3RBogULjbz1FJqp kZpBhyQeHrGMraT/SkNlFD1sUefuM7pwOKU8sQtw31GH6PLL4LokepqwVff0fYMi qWkLNZumLHtuj4i7eQcDZI6RDC3pSO7vqaiI3PrAyY6ndcO4tN594H4wtcj39t7o qUNObDIb5EYkvElOoUz1eGHRUEHIHB6Q114GgIW6+8ebQms4B15g4W5KwgN5Yyug jKwKlx9zWCXNg3wXCUqsN9XPmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLfHb0TW reFwc1zyjmweY33ExeRrMB8GA1UdIwQYMBaAFD+3hV7zMLp32fO3Lf/ewgcSrBQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDREQi8zQTMxNURDRUNE MDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3VuZlo4N2N0Xzk3Q0J4S3NG QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A3ZUZYdk13dW5mWjg3Y3RfOTdDQnhLc0ZBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDREQi8zQTMxNURDRUNEMDIxMUU3QjA0NDJEMjhDNEY5QUUwMi9QN2VGWHZNd3Vu Zlo4N2N0Xzk3Q0J4S3NGQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv7r1uHIV6aPa/fvukcXW7kfu/0S1hfLEDCUPxF89gsUoBOX3ZS5G1 tBYDifPBo9Z3pB3OpUU/buDD9BpPVF9Z1Q/OnQAX2lJ+62IjB3gkKzySzu1EN6z3 9RuL/xea5G8RpoOdrWhcBbPbg9JdVgpuFwyVwerjeJdYBYkEZUS+Y7bUR4OoB6Sx eOQWLCW9L3WrQHPn+b4Hzs1VHlDx2CtkJFtohjjac1hGPktGGXM9mKotOtegr/V7 nyR5siYDcr/fmmjMeXwNzoCcsgFu6rDn8M8dVXDSTfms90UwXJt3kz1Q+hI1btgU Rlx9C9ocDoXN01mWbyzUcrh78mbv3T1t -----END CERTIFICATE-----Generated at Sat Aug 23 18:57:33 2025 by rpki-client