$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json) Hash identifier: EqajkHqN7m8pNNVPp+6KM5Z0mGs6EvRzzOwilugxc20= Subject key identifier: 00:99:0C:1F:98:12:B9:7D:AB:59:9E:AE:69:79:58:B7:7B:FA:8E:AF Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Certificate serial: 067F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft Manifest number: 0678 Signing time: Fri 22 Aug 2025 22:37:28 +0000 Manifest this update: Fri 22 Aug 2025 22:37:27 +0000 Manifest next update: Fri 29 Aug 2025 22:37:27 +0000 Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: 7EH9utzPqckl02KXKKz76sv4fT93TuIwpKAF0YWdN48=) 2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 9RcU5RMIguV5RGzPowAleQQk2yHbByHLcaosyfn/YYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:37:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Validity Not Before: Aug 22 22:37:27 2025 GMT Not After : Aug 29 22:37:27 2025 GMT Subject: CN=68a8f128-c4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d5:b3:fe:e8:16:38:09:fa:74:76:20:62:84: 44:f4:fe:84:f9:d8:f4:72:d3:79:8e:1d:14:15:86: a0:95:62:e0:c3:04:c7:82:42:67:fd:f5:ce:f4:ef: 9f:fe:83:6a:9f:be:4b:16:95:ce:df:8e:5b:10:6e: ac:97:cc:35:0d:4e:d8:82:69:4e:a1:83:66:63:bd: 1b:35:a0:fc:5c:03:e2:b3:1e:ff:dd:cb:1c:c4:ee: 88:b8:0a:47:15:fc:bc:4b:96:36:bc:99:f8:ea:ac: 78:95:31:d7:01:e1:a0:4c:e3:97:d1:61:99:36:01: 59:41:6f:98:29:73:84:4c:ba:b9:23:d9:14:cf:1b: d1:0d:73:d3:83:0d:ae:3a:a5:b1:3a:89:6d:e7:ac: 79:b7:03:e3:f5:da:e6:45:b5:7d:f9:e4:96:4e:53: 28:de:e2:9b:23:e7:3f:12:fb:83:f2:35:fd:af:24: 69:0f:57:29:26:ad:f5:bd:73:2a:ef:e8:b9:00:1a: a0:23:c0:61:66:d7:10:4a:9e:9b:47:40:e7:8c:86: de:32:92:ec:b0:8a:92:7c:70:79:f7:68:db:76:3b: d6:f6:08:48:8c:ad:cd:18:cf:e0:6d:8f:1a:40:f1: 90:06:16:26:45:d3:ec:a4:78:c6:93:9c:ab:d0:b1: 68:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:0C:1F:98:12:B9:7D:AB:59:9E:AE:69:79:58:B7:7B:FA:8E:AF X509v3 Authority Key Identifier: keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:d7:ed:53:9e:5a:45:50:e9:8d:51:97:6c:59:68:fe:45:27: a2:fe:70:aa:c0:90:99:f5:0f:f8:1a:7e:65:69:d9:22:45:11: 93:e6:90:6c:83:b1:ea:1c:46:a3:51:56:28:14:11:c1:d5:d6: 76:bf:0b:bc:5a:28:be:9c:79:e5:09:18:cd:86:35:17:76:ab: 60:e5:c5:2b:34:ad:78:4f:2e:46:0c:b9:ea:c4:3f:4f:99:06: 71:f5:3b:83:1a:89:66:fc:5a:fc:49:cf:d2:51:0e:29:40:7c: 5b:49:c5:51:2b:67:7e:cb:75:94:77:a1:36:8f:13:80:b5:10: 99:fc:ad:e8:71:e1:7a:01:88:6c:fc:5c:ed:60:ee:c3:2a:ca: 94:37:f0:9e:b6:f1:7b:c7:8b:b8:c5:60:bf:27:b8:aa:2b:6f: 61:6e:c7:36:c0:c6:18:05:d2:ae:b6:3e:6c:de:f6:fd:31:58: 65:2d:28:e0:97:86:8e:6e:53:8a:01:74:16:9a:5f:cc:32:47: 85:5f:2b:65:c3:84:86:84:49:71:66:a4:d2:21:07:c1:58:57: aa:41:de:bd:6f:4c:ee:28:19:85:cd:b1:40:e5:f8:ce:b7:f2: 81:75:38:ef:5c:43:d8:ae:81:6f:9c:36:c8:4b:a7:22:41:09: b6:41:3a:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3 NjlFRjU5MDcwHhcNMjUwODIyMjIzNzI3WhcNMjUwODI5MjIzNzI3WjAYMRYwFAYD VQQDEw02OGE4ZjEyOC1jNGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttWz/ugWOAn6dHYgYoRE9P6E+dj0ctN5jh0UFYaglWLgwwTHgkJn/fXO9O+f /oNqn75LFpXO345bEG6sl8w1DU7YgmlOoYNmY70bNaD8XAPisx7/3cscxO6IuApH Ffy8S5Y2vJn46qx4lTHXAeGgTOOX0WGZNgFZQW+YKXOETLq5I9kUzxvRDXPTgw2u OqWxOolt56x5twPj9drmRbV9+eSWTlMo3uKbI+c/EvuD8jX9ryRpD1cpJq31vXMq 7+i5ABqgI8BhZtcQSp6bR0DnjIbeMpLssIqSfHB592jbdjvW9ghIjK3NGM/gbY8a QPGQBhYmRdPspHjGk5yr0LFodQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFACZDB+Y Erl9q1merml5WLd7+o6vMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRFRC9EQkU5MEJBQzhEMTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExy UEFrcXJxOFZGQ3AybnZXUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp1+1TnlpFUOmNUZdsWWj+RSei/nCqwJCZ9Q/4Gn5ladkiRRGT5pBs g7HqHEajUVYoFBHB1dZ2vwu8Wii+nHnlCRjNhjUXdqtg5cUrNK14Ty5GDLnqxD9P mQZx9TuDGolm/Fr8Sc/SUQ4pQHxbScVRK2d+y3WUd6E2jxOAtRCZ/K3oceF6AYhs /FztYO7DKsqUN/CetvF7x4u4xWC/J7iqK29hbsc2wMYYBdKutj5s3vb9MVhlLSjg l4aOblOKAXQWml/MMkeFXytlw4SGhElxZqTSIQfBWFeqQd69b0zuKBmFzbFA5fjO t/KBdTjvXEPYroFvnDbIS6ciQQm2QTqJ -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:42 2025 by rpki-client