$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json) Hash identifier: m+R0/1BaZoQ9t13cSNpPbBidkcRBcoq+gItRcTEbVuA= Subject key identifier: 1B:7F:29:17:D8:AE:DC:B8:B8:43:E1:D9:20:BC:0D:16:13:30:29:44 Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB Certificate issuer: /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Certificate serial: 0132 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft Manifest number: 0124 Signing time: Sat 23 Aug 2025 04:59:24 +0000 Manifest this update: Sat 23 Aug 2025 04:59:23 +0000 Manifest next update: Sat 30 Aug 2025 04:59:23 +0000 Files and hashes: 1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: 4EW+m8pO6bKDo2wodaa44EuZMl4g6B1/VEtR2/NEGus=) 2: F89ECDC443A511F09D656024C4F9AE02.roa (hash: WmYOIdHhJmp20fF6Ocugd6eKuqM04EWvfaYLSQzq950=) 3: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=) 4: 4257053043A611F0820E8527C4F9AE02.roa (hash: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 306 (0x132) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Validity Not Before: Aug 23 04:59:23 2025 GMT Not After : Aug 30 04:59:23 2025 GMT Subject: CN=68a94aab-7fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cc:79:57:05:e5:7d:46:b9:da:95:17:07:dd: 3a:3d:c3:3a:06:91:12:54:05:ff:57:90:0b:ab:9b: 17:8d:6a:75:e9:ea:19:74:5d:bb:23:5c:24:78:5a: 96:71:a9:22:5b:bc:bd:6a:bb:e2:36:b6:5b:f6:71: f6:2e:4e:49:b5:18:c5:19:e1:bf:b9:ae:be:76:73: fb:3f:ce:57:42:1e:fe:fa:53:f1:29:8f:e0:66:69: 55:32:28:c6:80:8f:01:0d:a6:db:5e:bc:d4:8b:2f: 24:85:d1:fe:dd:16:1a:ec:d4:ac:22:a6:93:3c:f1: 1e:b3:32:fc:93:24:6e:06:71:fe:0f:d1:14:88:7a: 1e:fb:f7:fa:53:7e:5c:43:12:58:07:ff:55:82:99: de:2b:d7:d7:4e:fd:f0:c4:ec:fa:d8:4e:69:f8:33: fc:7f:f4:d1:3a:9b:5c:43:9f:fa:73:15:a1:c7:01: ba:ba:93:a3:71:7e:77:03:e8:44:6c:70:03:d5:88: 78:16:5a:3a:3b:35:a0:4a:a3:ed:ae:70:54:11:21: 73:aa:93:22:54:43:f5:98:c3:27:66:53:b5:95:de: 9e:9d:d3:38:ef:d5:51:0c:be:c1:f2:ca:cd:47:b6: 8a:24:db:ee:53:a4:0c:c2:fe:04:35:16:83:79:b3: fe:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7F:29:17:D8:AE:DC:B8:B8:43:E1:D9:20:BC:0D:16:13:30:29:44 X509v3 Authority Key Identifier: keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ef:6d:64:a9:8d:da:d8:21:8f:8c:4b:0f:ac:bd:a1:8f:3b: 9a:a2:fd:c4:d6:e4:5e:26:4e:2f:f4:f1:1f:d1:04:d7:bb:a5: 94:1e:51:9d:e7:dd:a2:1e:e8:88:38:75:e8:c1:dc:88:ea:09: 7f:4d:3f:be:a4:d9:18:6e:84:0d:37:99:d8:ed:a3:cd:b8:39: 6d:fd:82:8f:d4:07:b0:22:81:77:f7:4f:01:8d:e6:1d:f3:bd: eb:65:52:cb:0c:b1:4f:6a:4d:a2:7d:54:e3:0b:18:16:cc:18: c6:dc:ce:bc:50:04:2a:11:57:2f:75:90:b5:f3:b1:47:a7:b8: 2e:a6:0b:0c:c6:55:85:ec:e8:f4:cc:06:57:55:51:26:bd:3b: 6b:fd:e6:d6:83:98:f0:38:a3:ce:83:30:25:de:7f:d1:9b:0e: a9:0a:a0:28:4d:fa:66:90:09:d0:1c:a0:88:42:ec:fc:88:b9: 99:93:0b:0f:3a:16:1d:66:f2:1b:44:97:bb:1a:b5:0d:f8:61: 21:ac:a1:71:01:87:f0:04:75:36:f1:dc:a3:2f:ce:1d:7c:ed: 66:9c:18:a2:67:99:40:5b:b0:98:a4:ab:3b:74:eb:a1:5b:50: d3:6a:06:e6:3b:98:25:a0:04:04:00:ca:ad:1a:e4:90:b4:00: 97:9d:1e:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAwRUREQkJFRUUx MEI3NTQ5QUIwHhcNMjUwODIzMDQ1OTIzWhcNMjUwODMwMDQ1OTIzWjAYMRYwFAYD VQQDEw02OGE5NGFhYi03ZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Mx5VwXlfUa52pUXB906PcM6BpESVAX/V5ALq5sXjWp16eoZdF27I1wkeFqW cakiW7y9arviNrZb9nH2Lk5JtRjFGeG/ua6+dnP7P85XQh7++lPxKY/gZmlVMijG gI8BDabbXrzUiy8khdH+3RYa7NSsIqaTPPEeszL8kyRuBnH+D9EUiHoe+/f6U35c QxJYB/9VgpneK9fXTv3wxOz62E5p+DP8f/TROptcQ5/6cxWhxwG6upOjcX53A+hE bHAD1Yh4Flo6OzWgSqPtrnBUESFzqpMiVEP1mMMnZlO1ld6endM479VRDL7B8srN R7aKJNvuU6QMwv4ENRaDebP+7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBt/KRfY rty4uEPh2SC8DRYTMClEMB8GA1UdIwQYMBaAFO0R60w0gEGZ6ndQDt277uELdUmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZCQy82Njg3RUYyMkQx NEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFabnFkMUFPM2J2dTRRdDFT YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSSHJURFNBUVpucWQxQU8zYnZ1NFF0MVNhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZCQy82Njg3RUYyMkQxNEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFa bnFkMUFPM2J2dTRRdDFTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE721kqY3a2CGPjEsPrL2hjzuaov3E1uReJk4v9PEf0QTXu6WUHlGd 592iHuiIOHXowdyI6gl/TT++pNkYboQNN5nY7aPNuDlt/YKP1AewIoF3908BjeYd 873rZVLLDLFPak2ifVTjCxgWzBjG3M68UAQqEVcvdZC187FHp7gupgsMxlWF7Oj0 zAZXVVEmvTtr/ebWg5jwOKPOgzAl3n/Rmw6pCqAoTfpmkAnQHKCIQuz8iLmZkwsP OhYdZvIbRJe7GrUN+GEhrKFxAYfwBHU28dyjL84dfO1mnBiiZ5lAW7CYpKs7dOuh W1DTagbmO5gloAQEAMqtGuSQtACXnR7k -----END CERTIFICATE-----Generated at Sat Aug 23 20:17:13 2025 by rpki-client