$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft File: 07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json) Hash identifier: QzDt2Tdqq/Mtt9j3C7WMR6hXJMuV293gzSg5FYVSEcM= Subject key identifier: 4C:87:86:0D:57:95:C9:F7:83:C6:EA:D8:F5:AC:EB:7A:C2:6C:8B:8B Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD Certificate issuer: /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Certificate serial: 067C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft Manifest number: 067A Signing time: Fri 22 Aug 2025 14:49:27 +0000 Manifest this update: Fri 22 Aug 2025 14:49:27 +0000 Manifest next update: Fri 29 Aug 2025 14:49:27 +0000 Files and hashes: 1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: 2v7VJuZjhJi52JR4li1TAcPt0wqs6It5ZZiVYbh9Anw=) 2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: /bP5RMzdbkL7/5EZqhq7cO3FfNuTY5k1xdEgv+lDTck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1660 (0x67c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD Validity Not Before: Aug 22 14:49:27 2025 GMT Not After : Aug 29 14:49:27 2025 GMT Subject: CN=68a88377-cd79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:2f:51:65:96:30:8e:fc:0f:ee:6c:60:1f: 26:aa:db:46:41:a4:5a:ad:22:38:33:ab:c6:e6:1a: 8a:4a:ad:89:6c:65:6d:73:7f:2e:97:e1:cc:76:a8: 0f:e2:e3:17:ad:fd:9e:3e:9d:50:3c:69:0f:0f:06: 81:6d:e6:43:8e:cf:be:2d:1b:f2:19:73:2c:03:d1: b3:21:df:a2:73:f9:7e:64:f3:89:63:e6:35:f9:0c: 33:64:0a:1b:39:50:e0:d5:43:b6:47:62:07:37:2f: 16:a6:0c:21:c0:9f:c8:10:a4:56:59:5b:80:0f:88: e2:dc:a1:9f:f9:d9:0c:b7:2b:9d:37:64:58:16:91: b7:91:b5:bc:63:8b:97:08:55:5d:a3:08:3d:11:58: 35:91:e7:96:01:e4:8a:91:45:d4:f0:69:64:62:95: 6d:ec:a1:dd:0c:bd:e6:55:c1:b5:12:58:19:89:a9: 0f:e1:61:cb:e7:5a:d0:49:2f:55:18:06:60:41:85: 70:df:4a:24:c4:86:06:42:d8:90:54:d2:b6:e3:1c: 88:40:74:e0:a6:29:51:54:7e:5b:d9:e2:d3:14:ce: 21:bf:06:8f:25:b3:67:7d:17:77:ca:d1:2b:b7:83: 88:22:1d:85:00:5b:f9:f3:70:23:de:6e:97:67:36: 59:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:86:0D:57:95:C9:F7:83:C6:EA:D8:F5:AC:EB:7A:C2:6C:8B:8B X509v3 Authority Key Identifier: keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:0a:fc:8f:bc:14:25:7e:03:f4:07:39:e9:d6:ea:07:79:25: 45:82:71:b9:21:fe:62:59:3d:33:b9:e9:c4:08:bb:1b:e8:b9: f8:23:3e:41:d6:1b:a5:b2:04:9f:9c:11:74:d0:8d:8c:07:f7: 21:e2:c9:04:d4:47:34:8b:65:85:7a:1a:ad:36:4d:9f:8c:f0: 29:dc:15:8e:33:c0:df:3a:5f:22:c1:30:0e:42:c4:b5:a1:be: 45:cf:ad:bd:44:a0:66:dd:27:7f:86:5b:4a:81:be:1a:41:91: aa:07:e7:5a:0a:03:bf:72:d0:8c:21:0b:2d:70:54:7f:96:ed: 2a:73:65:c3:7b:eb:7c:88:04:cd:37:7a:e4:fe:77:7f:3e:7b: 22:2b:da:f2:09:a3:be:d6:50:ae:03:ce:67:58:bb:56:c2:6d: 4d:a5:d1:e3:08:a7:12:d2:63:fc:04:a5:07:49:bb:0c:86:9a: f3:3b:6e:83:bb:93:31:a7:2b:bc:e3:5a:4d:00:44:5c:6c:5f: c4:fc:a5:86:cd:b2:57:80:bb:fe:ab:b8:2b:26:87:3e:91:fc: ab:8e:1a:99:71:77:d6:46:35:96:6c:8e:0f:52:ef:97:c9:ec: da:3d:ce:7e:39:b5:6b:dd:df:a0:87:b0:4e:10:1d:72:08:8e: 3e:c6:cc:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q0RTAxMTAvBgNVBAUTKEQzQjRFRUJDM0Q5RjVBMUVBMjAyOTY2OTlBRTk5Mjg4 MUIxRDhERkQwHhcNMjUwODIyMTQ0OTI3WhcNMjUwODI5MTQ0OTI3WjAYMRYwFAYD VQQDEw02OGE4ODM3Ny1jZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxRsvUWWWMI78D+5sYB8mqttGQaRarSI4M6vG5hqKSq2JbGVtc38ul+HMdqgP 4uMXrf2ePp1QPGkPDwaBbeZDjs++LRvyGXMsA9GzId+ic/l+ZPOJY+Y1+QwzZAob OVDg1UO2R2IHNy8WpgwhwJ/IEKRWWVuAD4ji3KGf+dkMtyudN2RYFpG3kbW8Y4uX CFVdowg9EVg1keeWAeSKkUXU8GlkYpVt7KHdDL3mVcG1ElgZiakP4WHL51rQSS9V GAZgQYVw30okxIYGQtiQVNK24xyIQHTgpilRVH5b2eLTFM4hvwaPJbNnfRd3ytEr t4OIIh2FAFv583Aj3m6XZzZZRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyHhg1X lcn3g8bq2PWs63rCbIuLMB8GA1UdIwQYMBaAFNO07rw9n1oeogKWaZrpkogbHY39 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDRFMC84MzQ1NzExNjhE N0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldoNmlBcFpwbXVtU2lCc2Rq ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA3VHV2RDJmV2g2aUFwWnBtdW1TaUJzZGpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDRFMC84MzQ1NzExNjhEN0IxMUVCOEQ4QkQ2MEJDNEY5QUUwMi8wN1R1dkQyZldo NmlBcFpwbXVtU2lCc2RqZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlCvyPvBQlfgP0Bznp1uoHeSVFgnG5If5iWT0zuenECLsb6Ln4Iz5B 1hulsgSfnBF00I2MB/ch4skE1Ec0i2WFehqtNk2fjPAp3BWOM8DfOl8iwTAOQsS1 ob5Fz629RKBm3Sd/hltKgb4aQZGqB+daCgO/ctCMIQstcFR/lu0qc2XDe+t8iATN N3rk/nd/PnsiK9ryCaO+1lCuA85nWLtWwm1NpdHjCKcS0mP8BKUHSbsMhprzO26D u5Mxpyu841pNAERcbF/E/KWGzbJXgLv+q7grJoc+kfyrjhqZcXfWRjWWbI4PUu+X yezaPc5+ObVr3d+gh7BOEB1yCI4+xsxj -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:25 2025 by rpki-client