$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: /AZOySdA0WXTNOw1fw7KOSsgG1P1xKxBpFA+LKT0k9M= Subject key identifier: 7E:76:05:76:5A:3B:B0:39:BA:13:78:8E:93:9F:D1:52:8A:29:38:8B Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: A7 Signing time: Sat 23 Aug 2025 06:27:54 +0000 Manifest this update: Sat 23 Aug 2025 06:27:53 +0000 Manifest next update: Sat 30 Aug 2025 06:27:53 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: /6PG9Rn+wnoxs3RttW/gwhw/YfxN5SSCRduhXLPuSws=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: xlW1WRvz7DCMXZZnV+rfb+Ls8+ewucJliDacTm3Al7M=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: Sw+02xDE4zOVH8jJoCIIJ4Q+dPTGSSy4jLCilaWklfA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Aug 23 06:27:53 2025 GMT Not After : Aug 30 06:27:53 2025 GMT Subject: CN=68a95f69-e5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:39:c0:fa:1b:16:43:fa:17:1c:0d:63:61:86: e4:98:e6:c4:97:e6:88:4f:9e:62:e2:6e:c4:35:ef: 61:66:ef:b9:79:fd:8d:bc:fb:d5:67:bc:f5:66:0a: 53:aa:59:f1:7e:dd:1d:90:e3:5e:5e:8e:13:2e:e8: 35:ad:15:70:23:55:57:8b:2b:e9:90:42:a3:f9:b6: 59:8e:58:5c:b9:cd:15:b9:bf:5e:59:1d:b0:5c:de: d7:59:68:53:1a:c1:33:c5:6d:8d:e9:06:f2:3f:1b: e4:25:ab:53:65:f9:d4:df:b7:bd:e4:d9:ee:26:dd: b5:0e:ff:11:6e:f6:37:be:de:8d:c7:b9:63:e3:d4: 81:0f:53:bd:d8:5c:b2:99:93:fd:14:b0:2e:a0:f0: 08:36:aa:74:6f:08:5a:cf:e6:b7:85:96:03:f8:da: 9b:08:1f:04:b5:2c:af:3a:69:a8:84:39:28:c0:d8: 9e:ee:06:bb:3d:29:49:d4:21:4d:a6:d7:29:3e:1f: 2b:60:78:72:5b:65:16:bc:a6:bb:a3:16:b1:52:aa: cd:b0:fc:f6:37:89:97:b5:a1:9a:4f:f0:36:f5:b5: 12:63:4d:76:d3:22:fd:c9:42:4b:40:52:aa:e8:f4: c4:dd:5d:fc:f3:d2:d1:9c:a3:36:a4:60:9b:b2:39: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:76:05:76:5A:3B:B0:39:BA:13:78:8E:93:9F:D1:52:8A:29:38:8B X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ef:5e:35:0c:8b:0f:98:fc:cf:33:1a:95:7b:ef:e9:bf:28: 27:e4:d8:31:d8:94:f7:ea:e4:66:02:8d:33:32:0e:ca:55:3a: 2c:06:18:0d:e2:14:77:d6:35:2f:53:3b:eb:16:60:97:83:ff: 2a:cb:53:63:12:56:49:46:ef:a9:e3:45:0a:22:cc:a0:34:af: 5c:5f:35:1c:38:74:17:c5:6b:b5:4a:8f:74:b1:45:e1:64:79: 60:b1:a8:6a:ea:04:0f:2d:20:d9:09:37:3d:52:c8:dc:70:5e: de:d4:f9:59:65:0b:f8:1d:45:3c:a4:e5:e9:be:ce:b6:87:10: e7:68:85:3c:04:c6:9f:c7:eb:7d:4b:91:e5:99:97:0f:8a:fc: 58:c4:23:68:2c:59:84:0b:d4:b3:13:6a:eb:13:c7:50:f6:a0: 48:d4:00:1e:82:6b:b6:52:e0:23:9f:07:4b:0e:1d:26:0a:8a: 61:f8:06:5e:c0:f8:8c:6d:10:81:d2:86:f6:f9:77:d7:40:a7: 9f:77:c3:48:83:d7:53:df:33:46:f3:6a:42:15:4d:4c:2d:8f: c3:e9:78:8a:fe:c6:a5:af:1e:46:3f:4f:fe:fb:3e:f5:32:17: 6c:41:14:8e:c4:58:a2:37:b6:51:ba:59:8b:c6:f5:96:59:05: 47:fb:99:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUwODIzMDYyNzUzWhcNMjUwODMwMDYyNzUzWjAYMRYwFAYD VQQDEw02OGE5NWY2OS1lNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2jnA+hsWQ/oXHA1jYYbkmObEl+aIT55i4m7ENe9hZu+5ef2NvPvVZ7z1ZgpT qlnxft0dkONeXo4TLug1rRVwI1VXiyvpkEKj+bZZjlhcuc0Vub9eWR2wXN7XWWhT GsEzxW2N6QbyPxvkJatTZfnU37e95NnuJt21Dv8RbvY3vt6Nx7lj49SBD1O92Fyy mZP9FLAuoPAINqp0bwhaz+a3hZYD+NqbCB8EtSyvOmmohDkowNie7ga7PSlJ1CFN ptcpPh8rYHhyW2UWvKa7oxaxUqrNsPz2N4mXtaGaT/A29bUSY0120yL9yUJLQFKq 6PTE3V3889LRnKM2pGCbsjnotwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH52BXZa O7A5uhN4jpOf0VKKKTiLMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB67141DIsPmPzPMxqVe+/pvygn5Ngx2JT36uRmAo0zMg7KVTosBhgN 4hR31jUvUzvrFmCXg/8qy1NjElZJRu+p40UKIsygNK9cXzUcOHQXxWu1So90sUXh ZHlgsahq6gQPLSDZCTc9UsjccF7e1PlZZQv4HUU8pOXpvs62hxDnaIU8BMafx+t9 S5HlmZcPivxYxCNoLFmEC9SzE2rrE8dQ9qBI1AAegmu2UuAjnwdLDh0mCoph+AZe wPiMbRCB0ob2+XfXQKefd8NIg9dT3zNG82pCFU1MLY/D6XiK/salrx5GP0/++z71 MhdsQRSOxFiiN7ZRulmLxvWWWQVH+5n9 -----END CERTIFICATE-----Generated at Sat Aug 23 10:31:56 2025 by rpki-client