$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: 7mBDEZIKtd/Qzqie9dIiQv0LoNEk6Vcp+nW0ITqWnN4= Subject key identifier: 8B:03:A4:45:30:7C:5F:F5:BE:0A:35:F9:0E:DD:56:B4:B0:5C:67:48 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 01FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 01F0 Signing time: Sat 23 Aug 2025 02:42:32 +0000 Manifest this update: Sat 23 Aug 2025 02:42:32 +0000 Manifest next update: Sat 30 Aug 2025 02:42:32 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: EZUuij5umUrX67l6jtkuDawW1gHyuRaREsoaq724znA=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 506 (0x1fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Aug 23 02:42:32 2025 GMT Not After : Aug 30 02:42:32 2025 GMT Subject: CN=68a92a98-50ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:36:8d:cf:9e:b1:a6:d2:7a:62:f8:6f:35: a8:4d:61:6c:43:41:07:72:09:25:57:0c:79:49:7c: 20:4e:a5:eb:e0:db:74:97:f0:cb:8a:4c:ad:d5:68: b3:5c:08:20:c8:ad:fb:12:08:da:c1:34:c5:e7:ee: 09:23:84:fb:5e:60:47:e6:35:51:f6:62:2b:15:c1: 58:3f:a8:20:47:67:e1:66:2e:d5:3f:c7:42:51:a2: 6e:9c:7a:a4:4f:a7:0c:fb:79:85:01:54:e7:a9:02: d1:bf:54:d6:e8:2c:39:1f:f7:8e:41:f0:79:0c:91: 28:07:6a:bd:10:21:1d:85:c7:48:5d:94:f3:fb:e8: 28:ff:d4:63:9b:09:90:3b:eb:e0:3f:3f:6f:74:d2: 12:ca:b2:9b:ea:48:91:4e:5d:1e:44:07:3a:73:c6: 6e:f8:ce:ad:50:4f:8a:fd:79:e2:b3:03:a6:f3:d0: 57:e6:91:0c:20:e0:00:70:8b:97:e0:6d:32:cb:e1: 15:a1:3e:d2:0c:7a:dc:fb:7f:91:ba:d9:cb:7f:cb: 01:9d:8d:c1:61:b1:2b:4f:65:a2:12:c0:ed:ce:cc: ff:ea:ac:2d:44:97:70:65:d9:16:81:8b:33:38:fa: 64:50:0f:36:44:05:3b:58:de:ed:dd:b7:a1:37:19: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:A4:45:30:7C:5F:F5:BE:0A:35:F9:0E:DD:56:B4:B0:5C:67:48 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:54:a9:44:a9:72:60:db:c3:c6:57:0e:ee:26:82:71:42:91: 41:2c:73:78:29:f6:a0:19:07:de:ea:ca:4c:64:c2:a5:9f:e6: d5:1a:04:ca:16:15:67:a3:01:f8:64:84:76:5c:c2:75:c1:e6: 04:27:e4:08:f0:51:09:4f:8d:91:27:02:27:78:b7:0e:cc:d1: 0d:af:22:67:b6:8a:e9:03:83:1e:45:8a:04:9a:91:da:51:b8: 6b:67:4d:2a:67:07:76:af:ee:47:b3:77:55:5e:2b:2b:78:79: 04:ae:4d:61:05:de:20:13:98:51:06:e3:ef:b5:e9:69:48:ca: 23:c4:53:6a:60:89:a1:6c:3d:51:09:b6:f6:a5:a1:95:62:b3: 70:91:d1:0a:ba:52:ba:04:c8:b9:e3:74:3c:7f:42:e8:f8:88: 54:b2:fe:7b:d8:ef:a9:1a:32:80:9d:3f:79:c0:2b:3d:22:af: 94:57:68:a0:f4:86:66:a2:52:f6:b2:6e:94:e9:b2:ed:11:96: 96:ca:af:60:59:6b:af:aa:21:aa:3d:41:84:42:92:d7:c5:75: df:9d:25:8f:03:66:5e:44:c3:4d:33:c8:9b:fb:f8:08:98:48: fd:c3:9c:48:3a:8c:13:9e:9d:53:d4:9e:46:3b:4a:23:29:c0: 31:1c:fe:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwODIzMDI0MjMyWhcNMjUwODMwMDI0MjMyWjAYMRYwFAYD VQQDEw02OGE5MmE5OC01MGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvwA2jc+esabSemL4bzWoTWFsQ0EHcgklVwx5SXwgTqXr4Nt0l/DLikyt1Wiz XAggyK37EgjawTTF5+4JI4T7XmBH5jVR9mIrFcFYP6ggR2fhZi7VP8dCUaJunHqk T6cM+3mFAVTnqQLRv1TW6Cw5H/eOQfB5DJEoB2q9ECEdhcdIXZTz++go/9RjmwmQ O+vgPz9vdNISyrKb6kiRTl0eRAc6c8Zu+M6tUE+K/XniswOm89BX5pEMIOAAcIuX 4G0yy+EVoT7SDHrc+3+RutnLf8sBnY3BYbErT2WiEsDtzsz/6qwtRJdwZdkWgYsz OPpkUA82RAU7WN7t3behNxmg8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsDpEUw fF/1vgo1+Q7dVrSwXGdIMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcVKlEqXJg28PGVw7uJoJxQpFBLHN4KfagGQfe6spMZMKln+bVGgTK FhVnowH4ZIR2XMJ1weYEJ+QI8FEJT42RJwIneLcOzNENryJntorpA4MeRYoEmpHa UbhrZ00qZwd2r+5Hs3dVXisreHkErk1hBd4gE5hRBuPvtelpSMojxFNqYImhbD1R Cbb2paGVYrNwkdEKulK6BMi543Q8f0Lo+IhUsv572O+pGjKAnT95wCs9Iq+UV2ig 9IZmolL2sm6U6bLtEZaWyq9gWWuvqiGqPUGEQpLXxXXfnSWPA2ZeRMNNM8ib+/gI mEj9w5xIOowTnp1T1J5GO0ojKcAxHP7N -----END CERTIFICATE-----Generated at Sun Aug 24 04:46:17 2025 by rpki-client