$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: 73NN4HFMCV/Z/bwbJx45GjVfg1B4QG0rVrTMvsV+g+A= Subject key identifier: 7B:7C:0A:DB:F5:67:D9:F1:80:E2:2E:83:A4:A7:4F:F7:D1:F2:3C:01 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0130 Signing time: Sat 23 Aug 2025 04:46:09 +0000 Manifest this update: Sat 23 Aug 2025 04:46:09 +0000 Manifest next update: Sat 30 Aug 2025 04:46:09 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: AEB+jdlqf/NHF/pt7xiClbvchtYHnkLJEQ77hIzOnxU=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Aug 23 04:46:09 2025 GMT Not After : Aug 30 04:46:09 2025 GMT Subject: CN=68a94791-eeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:46:53:93:d1:7f:25:58:4a:87:3f:9e:b5:14: 8f:c8:23:6d:34:51:8b:b4:69:4f:1c:86:bd:79:36: cf:80:53:34:a5:2f:03:78:4b:8e:4b:a2:0a:3e:8b: 9a:a9:e3:ca:f7:6f:cf:3f:f7:fa:bf:02:95:ae:99: 62:f2:4e:69:77:f1:9d:97:60:cd:ae:d4:cb:d5:7c: 87:c2:44:f8:00:f6:1b:2e:3b:31:16:ef:f4:95:d4: d4:e8:44:4a:bc:2f:6b:a5:5f:cb:fc:a2:5d:46:93: 31:49:5c:20:0b:a1:15:cb:f1:1d:8e:5d:ca:ea:42: d3:2e:ab:72:cc:92:37:f5:49:db:53:d1:03:8f:30: 85:8f:d6:f7:0d:6e:70:24:c4:5b:94:2f:49:c6:a0: 43:86:77:ee:48:b5:d2:ed:55:55:1a:dc:4f:b6:10: 92:3d:cc:e3:bf:8d:0f:74:60:cd:39:e0:26:ea:40: c5:0c:b3:ee:e8:81:f8:02:01:5f:2d:c2:03:d2:70: eb:a4:7f:8d:4b:4e:71:14:ec:99:4a:f8:48:80:40: 8d:6a:35:6f:f9:61:fb:fb:94:e0:ac:e2:5c:d2:bd: 91:0d:4d:40:9b:0b:f9:84:72:2e:58:6e:c9:ea:e7: ad:ec:3f:77:6a:d3:c1:68:2b:8d:54:e0:43:5d:14: 3c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7C:0A:DB:F5:67:D9:F1:80:E2:2E:83:A4:A7:4F:F7:D1:F2:3C:01 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:f0:83:67:c1:7f:af:34:63:93:da:35:89:f7:8d:49:7f:cf: ef:31:52:40:0f:81:ca:7c:1d:ca:81:7f:5f:2b:c1:2b:72:37: b2:d4:88:cb:82:ec:c3:3b:04:7b:c7:3c:c5:70:1f:e4:d0:1f: 8e:4c:c3:74:4e:05:87:80:32:dc:1a:fa:f9:dd:79:5f:ec:50: ed:e0:41:8c:68:96:d5:a3:41:be:ba:5b:dc:e9:be:e3:39:6b: 70:b8:b6:90:ed:86:d5:b7:62:aa:92:77:9b:42:e9:4f:88:66: b1:27:3d:f1:38:4f:77:57:8e:f3:7c:a7:d8:74:cc:f2:80:91: af:b7:72:32:e7:70:6d:c8:32:2e:13:d1:1f:2a:fe:99:b2:cf: aa:44:8e:c7:d5:e9:6f:16:14:95:1a:cb:c5:20:d1:37:9f:7e: 59:16:6f:f7:2b:11:ce:f3:62:88:14:82:02:64:9b:e4:c7:16: b1:ec:ec:3c:c4:8a:c9:1d:b3:4c:97:cb:62:63:59:e8:dd:1f: 95:90:71:9d:e7:d5:e6:ed:9f:e0:7a:bf:c0:47:d0:1d:dd:75: 39:e9:50:b2:f3:01:55:1c:e2:d2:db:2d:a9:6a:21:8c:d4:72: 69:ae:28:14:bf:a1:05:6b:9b:28:e2:9e:45:6b:47:7e:9b:62: d9:ad:16:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwODIzMDQ0NjA5WhcNMjUwODMwMDQ0NjA5WjAYMRYwFAYD VQQDEw02OGE5NDc5MS1lZWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ZTk9F/JVhKhz+etRSPyCNtNFGLtGlPHIa9eTbPgFM0pS8DeEuOS6IKPoua qePK92/PP/f6vwKVrpli8k5pd/Gdl2DNrtTL1XyHwkT4APYbLjsxFu/0ldTU6ERK vC9rpV/L/KJdRpMxSVwgC6EVy/Edjl3K6kLTLqtyzJI39UnbU9EDjzCFj9b3DW5w JMRblC9JxqBDhnfuSLXS7VVVGtxPthCSPczjv40PdGDNOeAm6kDFDLPu6IH4AgFf LcID0nDrpH+NS05xFOyZSvhIgECNajVv+WH7+5TgrOJc0r2RDU1Amwv5hHIuWG7J 6uet7D93atPBaCuNVOBDXRQ87wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt8Ctv1 Z9nxgOIug6SnT/fR8jwBMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ8INnwX+vNGOT2jWJ941Jf8/vMVJAD4HKfB3KgX9fK8Ercjey1IjL guzDOwR7xzzFcB/k0B+OTMN0TgWHgDLcGvr53Xlf7FDt4EGMaJbVo0G+ulvc6b7j OWtwuLaQ7YbVt2KqknebQulPiGaxJz3xOE93V47zfKfYdMzygJGvt3Iy53BtyDIu E9EfKv6Zss+qRI7H1elvFhSVGsvFINE3n35ZFm/3KxHO82KIFIICZJvkxxax7Ow8 xIrJHbNMl8tiY1no3R+VkHGd59Xm7Z/ger/AR9Ad3XU56VCy8wFVHOLS2y2paiGM 1HJprigUv6EFa5so4p5Fa0d+m2LZrRbR -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:15 2025 by rpki-client