$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: sstPa4MUAGwTIq1I1rVmdpCnqdofHvuMehxizcnL+HI= Subject key identifier: F0:F0:65:EF:24:D2:30:44:AE:1D:11:40:0A:3D:06:46:2C:E4:8F:5C Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0685 Signing time: Fri 22 Aug 2025 22:30:58 +0000 Manifest this update: Fri 22 Aug 2025 22:30:58 +0000 Manifest next update: Fri 29 Aug 2025 22:30:58 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: nwayyuxQgWDlYTfZNDrf7zCZohwI9mo71ko235qCo6M=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: Aug 22 22:30:58 2025 GMT Not After : Aug 29 22:30:58 2025 GMT Subject: CN=68a8efa2-fc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:48:ac:4d:31:1b:90:8d:4a:49:47:d2:4c:21: f1:79:07:af:01:5d:6d:14:83:85:24:90:aa:f0:84: 1a:fc:cf:92:9e:cf:91:37:e1:c4:e1:37:dd:b1:e1: 57:9e:cd:9c:64:7c:2c:65:d0:50:79:05:ee:e7:65: 96:60:0a:d8:bb:95:63:4f:92:91:e3:60:5c:1e:15: 53:e8:a3:69:01:8f:35:ae:30:ba:f8:cd:87:15:c4: c9:42:5b:aa:41:47:73:b2:a9:4e:d4:f8:74:e7:1c: ef:c7:c9:fe:71:d8:86:6e:41:33:9f:66:6c:aa:06: d1:1e:61:4e:72:ee:4d:86:53:7f:be:36:45:74:24: 5f:c4:90:bf:24:3e:b2:49:27:e0:85:c6:97:91:57: 5d:26:78:51:d0:a0:73:37:d5:cd:b7:d7:8a:06:9f: 6a:08:36:98:5b:e2:a3:3b:82:58:98:b2:fa:b8:8a: 2f:9c:6c:9b:68:70:5b:74:e5:87:16:d9:08:e6:13: 1e:64:75:ac:02:b8:88:32:23:13:3b:7a:fe:a7:b8: 6f:60:f3:b3:81:c2:69:45:b4:e0:a5:9c:9b:e9:51: 0e:8b:8f:b5:95:42:e8:fc:4d:63:7d:5d:bd:d9:99: 5a:9b:a3:01:be:dd:bc:3a:e8:b2:28:1d:96:38:6b: 9e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F0:65:EF:24:D2:30:44:AE:1D:11:40:0A:3D:06:46:2C:E4:8F:5C X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:f1:91:5d:b9:d5:4c:cb:fe:51:da:07:c6:56:68:a0:84:3f: 5e:85:b6:1a:03:24:46:ab:80:18:6a:2d:0e:f5:75:4e:8e:cf: 3a:fd:28:d8:a2:c0:50:50:ac:6a:80:5c:20:67:7d:d1:43:6e: 05:3c:36:32:ac:18:6f:2f:1d:5c:69:2d:0b:24:ba:75:8a:a1: 1d:65:53:9b:78:9b:ae:c6:e6:19:f5:19:6a:a0:6e:cf:04:4d: 04:e8:b1:2d:f9:44:f7:9c:a4:f7:be:1f:e6:2a:1a:12:2e:3a: 96:fa:d7:85:86:a2:2a:bf:4a:9b:71:73:1c:49:28:11:81:66: 85:2c:a3:e8:a4:93:65:90:58:e5:a5:91:a7:5b:97:ff:1f:2d: 8a:73:de:8a:c7:23:99:77:71:4b:b2:dd:5d:52:a7:45:bf:7c: d9:ff:8a:33:9d:3e:c4:18:e6:07:87:21:8f:06:4a:9d:86:56: d8:25:d4:72:84:de:7a:20:31:01:94:e7:4b:5e:53:1b:61:40: 6c:71:8e:94:0e:e5:95:44:f8:d1:32:6c:7e:5e:14:9d:cd:e7: f6:99:5e:85:d8:a8:8a:e6:da:c0:5a:16:78:40:59:f1:fa:95: 19:33:34:61:f9:a4:bc:98:84:86:1a:ff:4e:e2:e3:c9:b7:67: e0:d3:24:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwODIyMjIzMDU4WhcNMjUwODI5MjIzMDU4WjAYMRYwFAYD VQQDEw02OGE4ZWZhMi1mYzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmUisTTEbkI1KSUfSTCHxeQevAV1tFIOFJJCq8IQa/M+Sns+RN+HE4TfdseFX ns2cZHwsZdBQeQXu52WWYArYu5VjT5KR42BcHhVT6KNpAY81rjC6+M2HFcTJQluq QUdzsqlO1Ph05xzvx8n+cdiGbkEzn2ZsqgbRHmFOcu5NhlN/vjZFdCRfxJC/JD6y SSfghcaXkVddJnhR0KBzN9XNt9eKBp9qCDaYW+KjO4JYmLL6uIovnGybaHBbdOWH FtkI5hMeZHWsAriIMiMTO3r+p7hvYPOzgcJpRbTgpZyb6VEOi4+1lULo/E1jfV29 2Zlam6MBvt28OuiyKB2WOGuehwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDwZe8k 0jBErh0RQAo9BkYs5I9cMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX8ZFdudVMy/5R2gfGVmighD9ehbYaAyRGq4AYai0O9XVOjs86/SjY osBQUKxqgFwgZ33RQ24FPDYyrBhvLx1caS0LJLp1iqEdZVObeJuuxuYZ9RlqoG7P BE0E6LEt+UT3nKT3vh/mKhoSLjqW+teFhqIqv0qbcXMcSSgRgWaFLKPopJNlkFjl pZGnW5f/Hy2Kc96KxyOZd3FLst1dUqdFv3zZ/4oznT7EGOYHhyGPBkqdhlbYJdRy hN56IDEBlOdLXlMbYUBscY6UDuWVRPjRMmx+XhSdzef2mV6F2KiK5trAWhZ4QFnx +pUZMzRh+aS8mISGGv9O4uPJt2fg0yT+ -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:17 2025 by rpki-client