$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: w+SGxZVd91kvSMZPtFcJ2haes3HVuwEBrZSI978o+PI= Subject key identifier: 33:D8:1F:F7:94:75:43:02:0C:3F:0D:D1:7B:09:28:2A:5B:8C:63:7C Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 0625 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 0616 Signing time: Fri 22 Aug 2025 23:04:41 +0000 Manifest this update: Fri 22 Aug 2025 23:04:41 +0000 Manifest next update: Fri 29 Aug 2025 23:04:41 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: m83Yi8yyYWq5RPt48sf5tywTjdsj/SGm5GzrCSrbdXM=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: T+T+1Z/cawjlF+EJ2TY+wUSApzd2WBwRzpxk9RHEA54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1573 (0x625) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Aug 22 23:04:41 2025 GMT Not After : Aug 29 23:04:41 2025 GMT Subject: CN=68a8f789-ac54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ff:6c:cc:3b:7d:7d:26:06:2f:06:e5:47:cf: 3c:04:70:3c:39:c2:72:ce:5e:1b:be:7c:e1:ab:4a: 9c:06:2d:15:8b:34:b9:f4:28:4d:c4:10:ec:2a:86: ef:e6:c5:35:6e:6a:a1:3e:19:4b:5e:64:d7:21:40: d0:37:a9:62:e3:9c:74:12:45:18:43:6b:69:28:58: 80:5b:12:a9:a7:99:38:cf:68:55:26:7c:ed:40:6c: 52:b3:33:00:43:c1:64:1e:7e:c0:77:d0:c9:a4:93: 59:34:f7:e7:c8:6f:b3:c4:ba:5a:5d:4d:8a:8e:45: 24:85:13:b5:ae:34:61:e2:7f:11:52:f3:8a:11:6f: 20:6f:10:a2:3f:f2:3d:c9:83:c8:d5:28:5c:71:64: f6:6a:bb:1a:79:db:3d:dc:21:34:ca:c6:7f:2f:a1: c4:ed:62:65:8a:91:99:38:ef:d8:61:99:78:5b:69: d9:31:91:76:72:7e:c7:61:c0:26:98:ba:b3:8a:93: 68:6d:91:4e:10:d2:7e:19:e3:c8:48:9a:dd:b0:ca: db:21:21:b4:20:b8:92:6f:12:21:fc:3d:f9:52:c5: 83:5e:14:98:00:a1:56:4c:30:c6:2f:f4:eb:2d:86: c0:b2:8a:0d:95:48:bb:ab:df:5b:0e:89:d0:64:30: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:1F:F7:94:75:43:02:0C:3F:0D:D1:7B:09:28:2A:5B:8C:63:7C X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:fc:1d:34:35:a8:d7:eb:1c:78:2c:be:c6:69:92:d9:d5:03: de:25:e5:a6:77:33:ca:94:5b:74:ea:4d:2e:89:59:9f:a8:85: cb:72:77:1a:69:4f:38:76:31:bc:bc:e8:40:04:de:3d:1d:17: 3c:a3:c6:06:99:a9:fb:32:d6:68:41:95:7d:ba:e3:4a:d9:66: 63:56:5c:63:b3:23:88:4a:f4:8b:ae:1f:2d:7f:28:53:c3:33: 15:b0:f8:f7:73:7c:37:d1:b3:73:0f:5b:d6:22:3e:45:49:ba: 41:c4:79:bd:ab:37:f3:c4:c1:4a:70:09:54:eb:8f:94:f5:ef: 1c:d8:16:84:ff:78:47:ee:4f:28:48:8c:44:6d:ab:9d:6e:d4: 36:f1:f8:d8:8a:a6:a2:13:0e:3e:0f:2b:bd:0a:72:cd:14:31: fc:41:cc:85:85:36:d4:ef:9b:ff:39:43:32:9f:f4:6e:0f:2d: 57:f9:50:7f:5c:5e:7a:fb:29:57:7c:06:a0:6d:45:02:55:b8: 44:ef:3e:7a:27:f9:d9:38:47:c4:d2:1a:82:39:f8:ee:b3:d9: c4:53:7c:96:02:38:e6:8b:9d:73:59:d6:b5:85:00:05:89:25: c0:fb:21:d8:62:f6:05:e4:8c:d6:70:a6:53:ad:4c:73:6b:ec: 2f:e6:be:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUwODIyMjMwNDQxWhcNMjUwODI5MjMwNDQxWjAYMRYwFAYD VQQDEw02OGE4Zjc4OS1hYzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf9szDt9fSYGLwblR888BHA8OcJyzl4bvnzhq0qcBi0VizS59ChNxBDsKobv 5sU1bmqhPhlLXmTXIUDQN6li45x0EkUYQ2tpKFiAWxKpp5k4z2hVJnztQGxSszMA Q8FkHn7Ad9DJpJNZNPfnyG+zxLpaXU2KjkUkhRO1rjRh4n8RUvOKEW8gbxCiP/I9 yYPI1ShccWT2arsaeds93CE0ysZ/L6HE7WJlipGZOO/YYZl4W2nZMZF2cn7HYcAm mLqzipNobZFOENJ+GePISJrdsMrbISG0ILiSbxIh/D35UsWDXhSYAKFWTDDGL/Tr LYbAsooNlUi7q99bDonQZDCRPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPYH/eU dUMCDD8N0XsJKCpbjGN8MB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAk/B00NajX6xx4LL7GaZLZ1QPeJeWmdzPKlFt06k0uiVmfqIXLcnca aU84djG8vOhABN49HRc8o8YGman7MtZoQZV9uuNK2WZjVlxjsyOISvSLrh8tfyhT wzMVsPj3c3w30bNzD1vWIj5FSbpBxHm9qzfzxMFKcAlU64+U9e8c2BaE/3hH7k8o SIxEbaudbtQ28fjYiqaiEw4+Dyu9CnLNFDH8QcyFhTbU75v/OUMyn/RuDy1X+VB/ XF56+ylXfAagbUUCVbhE7z56J/nZOEfE0hqCOfjus9nEU3yWAjjmi51zWda1hQAF iSXA+yHYYvYF5IzWcKZTrUxza+wv5r66 -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:20 2025 by rpki-client