$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: gCp/1aGIOZmeQepA8gvw+5KUwZZ9ih9XtA+ESsFu4SM= Subject key identifier: B8:A9:A5:FE:D0:66:38:BF:B1:B8:5B:98:3C:58:E4:8A:EB:2D:E6:5D Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21D6 Signing time: Fri 22 Aug 2025 15:56:38 +0000 Manifest this update: Fri 22 Aug 2025 15:56:37 +0000 Manifest next update: Fri 29 Aug 2025 15:56:37 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: fHpHCbvvBqjE/IyDiTrKIpL+bOl4vDgx8awfZbIlCXQ=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8695 (0x21f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Aug 22 15:56:37 2025 GMT Not After : Aug 29 15:56:37 2025 GMT Subject: CN=68a89335-c153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:6e:a0:6a:8a:69:e3:87:c1:cc:df:88:6b: 5e:ad:2f:24:5e:03:b9:23:ad:4c:a2:ea:df:31:6f: a7:de:fd:77:d5:00:81:42:ec:6d:86:da:c3:d2:e9: 47:e6:1e:fe:25:2e:11:b1:65:49:46:54:fb:26:16: d6:ce:a4:65:7a:7a:6f:55:e5:82:d9:2b:a9:97:1f: 88:42:47:2b:06:6b:08:56:b8:0a:49:2c:49:b8:dc: 59:ca:45:cb:fe:56:6a:eb:48:37:e8:a6:5b:74:df: 85:c9:6b:3d:de:d5:c8:64:37:6d:f9:98:23:ed:66: d1:91:bf:85:6f:48:92:b6:2f:03:13:be:78:04:8c: 9f:25:f3:33:fa:79:35:51:96:88:d5:ff:8f:23:19: f2:ff:c8:8e:82:db:b0:67:35:43:50:a1:df:a9:b1: 33:ba:44:31:d6:a9:76:ce:9a:24:b8:a3:9c:64:30: 5c:5c:8f:09:17:83:48:2a:51:fc:6f:e4:84:32:b8: 7f:36:69:d0:95:16:5b:9c:b7:5b:9e:a1:b2:11:5f: c4:9a:ba:8a:a3:19:b1:30:cc:b5:62:59:63:34:40: 9b:bf:30:e3:e9:34:b0:78:27:06:6a:24:c5:6a:b7: 8a:d5:32:3c:d9:23:ed:46:0a:62:a2:fb:54:22:d8: 91:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A9:A5:FE:D0:66:38:BF:B1:B8:5B:98:3C:58:E4:8A:EB:2D:E6:5D X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3b:e5:42:4b:ca:78:11:94:64:e8:c3:9b:53:48:90:b5:12: 8d:40:52:6e:74:a0:3f:a9:6e:5b:62:f0:bb:2b:3c:d1:62:1d: 94:ed:a4:95:ac:a0:45:68:8b:05:a6:b6:50:ca:ae:10:7d:84: aa:91:c3:f9:1b:45:6e:68:ba:08:ed:e6:4f:d3:90:ca:b6:8f: 72:ee:e9:01:9b:1b:e1:32:5b:62:c9:bd:74:3d:ef:77:db:8c: 2a:b9:52:c8:09:29:45:17:58:18:aa:75:5f:2f:d5:98:34:df: 99:03:17:d7:ec:db:23:95:32:fd:92:72:c3:3b:cc:81:69:52: 27:de:dd:9b:b6:c7:df:dd:c5:99:50:67:61:16:87:35:d8:41: ed:87:18:6c:1f:25:3a:a0:4c:98:a8:db:31:b5:cc:f5:ee:5d: 06:f6:63:c1:02:ca:db:ed:ec:f6:b8:62:02:6e:00:ac:21:c5: 13:76:f1:6a:c4:99:79:f1:4a:1f:a1:79:ad:2c:54:d7:fb:5e: ef:f8:2d:f8:2c:ae:47:8c:cf:15:af:4a:7e:e9:69:3f:8d:23: 22:0c:01:2e:b9:5a:89:d5:63:14:28:d6:32:8b:4f:81:48:fc: 63:82:40:9a:20:d8:87:3f:52:d3:a3:00:ee:2a:59:fd:fe:e0: 94:6a:bf:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwODIyMTU1NjM3WhcNMjUwODI5MTU1NjM3WjAYMRYwFAYD VQQDEw02OGE4OTMzNS1jMTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sxuoGqKaeOHwczfiGterS8kXgO5I61MourfMW+n3v131QCBQuxthtrD0ulH 5h7+JS4RsWVJRlT7JhbWzqRlenpvVeWC2Suplx+IQkcrBmsIVrgKSSxJuNxZykXL /lZq60g36KZbdN+FyWs93tXIZDdt+Zgj7WbRkb+Fb0iSti8DE754BIyfJfMz+nk1 UZaI1f+PIxny/8iOgtuwZzVDUKHfqbEzukQx1ql2zpokuKOcZDBcXI8JF4NIKlH8 b+SEMrh/NmnQlRZbnLdbnqGyEV/EmrqKoxmxMMy1YlljNECbvzDj6TSweCcGaiTF areK1TI82SPtRgpiovtUItiRywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLippf7Q Zji/sbhbmDxY5IrrLeZdMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdO+VCS8p4EZRk6MObU0iQtRKNQFJudKA/qW5bYvC7KzzRYh2U7aSV rKBFaIsFprZQyq4QfYSqkcP5G0VuaLoI7eZP05DKto9y7ukBmxvhMltiyb10Pe93 24wquVLICSlFF1gYqnVfL9WYNN+ZAxfX7NsjlTL9knLDO8yBaVIn3t2btsff3cWZ UGdhFoc12EHthxhsHyU6oEyYqNsxtcz17l0G9mPBAsrb7ez2uGICbgCsIcUTdvFq xJl58UofoXmtLFTX+17v+C34LK5HjM8Vr0p+6Wk/jSMiDAEuuVqJ1WMUKNYyi0+B SPxjgkCaINiHP1LTowDuKln9/uCUar8q -----END CERTIFICATE-----Generated at Sat Aug 23 17:14:59 2025 by rpki-client