$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft File: 7IKxn5B5ht6zu4AtInPQNNFBSy0.mft (raw, json) Hash identifier: s5nJBsnEGqFUkcxdKV/xXt27x/vzA26FQRJtuGqcHbg= Subject key identifier: CB:E3:6F:A1:AD:B5:62:D7:F1:4D:A5:3B:42:8A:FA:FF:62:3A:71:4A Authority key identifier: EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D Certificate issuer: /CN=A91EC3CA/serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Certificate serial: 0BDE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft Manifest number: 0BD8 Signing time: Fri 22 Aug 2025 19:00:30 +0000 Manifest this update: Fri 22 Aug 2025 19:00:29 +0000 Manifest next update: Fri 29 Aug 2025 19:00:29 +0000 Files and hashes: 1: 7IKxn5B5ht6zu4AtInPQNNFBSy0.crl (hash: T308hdz27Zal14DzPXps4+w20p5STsjN4zqxBxl9N8I=) 2: 8C76CF46218411EAA6A8DB38C4F9AE02.roa (hash: ygQ6vfqXgCOjWaI/M9+8sSQcLe6CReohgnbLpV4rvKo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3038 (0xbde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3CA, serialNumber=EC82B19F907986DEB3BB802D2273D034D1414B2D Validity Not Before: Aug 22 19:00:29 2025 GMT Not After : Aug 29 19:00:29 2025 GMT Subject: CN=68a8be4e-5eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5b:7a:a5:aa:6e:6a:94:8c:ce:b2:82:8b:b8: 97:cc:03:aa:e3:61:5d:f9:21:c7:7e:4f:66:a0:98: 83:21:d6:dd:7e:e1:1e:23:e2:0b:5f:aa:1f:48:f2: 2a:3a:35:72:e8:2a:f7:f2:78:e2:8d:3f:49:35:b0: f3:4a:bf:18:be:02:ce:f0:51:7e:d4:50:75:c8:3d: a6:aa:ef:2f:a0:d5:92:0a:7e:85:11:12:0f:39:91: 4d:e5:ac:29:85:7d:78:bb:a3:aa:75:d8:00:c9:ab: 95:33:76:a7:70:31:71:48:e9:9c:33:bc:31:c4:a4: 6d:30:9d:a0:70:57:1b:fd:ae:dd:0a:7a:a7:90:8f: c3:51:9d:49:cc:ab:a2:8e:5c:11:af:d9:cf:2c:85: a2:ac:ec:08:d2:a2:b0:e7:f9:5a:b1:9e:87:18:ac: af:44:e0:23:0b:3f:3d:df:0e:57:6b:29:da:66:da: 18:ef:24:4e:04:80:1d:31:28:96:e0:34:6f:1f:4d: 0a:b7:3c:9e:73:99:3e:c9:27:88:a0:36:32:50:10: 67:e7:e3:3a:e9:a5:32:ba:69:d2:c7:6e:35:53:05: 9d:90:7c:27:3b:17:73:8c:20:a6:85:81:55:81:3e: ae:28:e3:84:6d:8e:00:b5:b7:e3:dd:09:17:c8:af: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:6F:A1:AD:B5:62:D7:F1:4D:A5:3B:42:8A:FA:FF:62:3A:71:4A X509v3 Authority Key Identifier: keyid:EC:82:B1:9F:90:79:86:DE:B3:BB:80:2D:22:73:D0:34:D1:41:4B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7IKxn5B5ht6zu4AtInPQNNFBSy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3CA/81386046218311EA8CB84737C4F9AE02/7IKxn5B5ht6zu4AtInPQNNFBSy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:aa:f4:d1:1b:61:10:15:32:93:7c:30:7f:5a:72:6a:0c:6f: e5:71:81:1a:bd:a7:d8:92:2f:9b:63:56:d0:70:21:2d:17:4c: a7:5d:6e:83:58:9e:f4:07:b3:34:43:38:fc:5e:59:e5:ee:98: a1:a7:72:11:1d:84:89:07:73:c9:e3:da:28:86:b8:cf:81:f7: 52:6e:ef:e3:a4:9a:cd:bb:5c:6f:84:03:aa:80:7a:55:70:ee: 59:bd:58:2f:94:4b:1a:bb:4a:cc:02:da:27:ac:06:77:83:eb: b5:91:66:f4:8c:3e:87:ae:4a:91:7d:eb:5a:2f:2d:51:21:1f: 17:3c:af:86:e2:61:d4:36:75:68:a8:af:0c:8c:c5:b3:2d:12: 04:8c:03:42:0a:07:40:f8:7b:16:45:b0:a8:32:8c:d8:4c:0d: 7b:c9:ae:86:5a:6d:09:5e:ab:5c:03:1b:74:d2:d4:31:ab:66: 89:47:4c:57:71:69:ed:12:84:3c:60:5c:6a:1b:ce:6a:6f:b0: 55:17:88:0a:18:57:63:8c:66:96:82:ae:eb:46:d8:50:61:f5: 90:87:97:db:18:5b:34:82:7e:65:62:ef:8d:3c:49:97:1e:81: d3:ea:09:29:99:df:bd:b1:39:76:28:f1:3d:a7:82:49:66:3d: 40:bd:ec:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC94wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQ0ExMTAvBgNVBAUTKEVDODJCMTlGOTA3OTg2REVCM0JCODAyRDIyNzNEMDM0 RDE0MTRCMkQwHhcNMjUwODIyMTkwMDI5WhcNMjUwODI5MTkwMDI5WjAYMRYwFAYD VQQDEw02OGE4YmU0ZS01ZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFt6papuapSMzrKCi7iXzAOq42Fd+SHHfk9moJiDIdbdfuEeI+ILX6ofSPIq OjVy6Cr38njijT9JNbDzSr8YvgLO8FF+1FB1yD2mqu8voNWSCn6FERIPOZFN5awp hX14u6OqddgAyauVM3ancDFxSOmcM7wxxKRtMJ2gcFcb/a7dCnqnkI/DUZ1JzKui jlwRr9nPLIWirOwI0qKw5/lasZ6HGKyvROAjCz893w5XaynaZtoY7yROBIAdMSiW 4DRvH00Ktzyec5k+ySeIoDYyUBBn5+M66aUyumnSx241UwWdkHwnOxdzjCCmhYFV gT6uKOOEbY4Atbfj3QkXyK86HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvjb6Gt tWLX8U2lO0KK+v9iOnFKMB8GA1UdIwQYMBaAFOyCsZ+QeYbes7uALSJz0DTRQUst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDQS84MTM4NjA0NjIx ODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0Nnp1NEF0SW5QUU5ORkJT eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdJS3huNUI1aHQ2enU0QXRJblBRTk5GQlN5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDQS84MTM4NjA0NjIxODMxMUVBOENCODQ3MzdDNEY5QUUwMi83SUt4bjVCNWh0 Nnp1NEF0SW5QUU5ORkJTeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEqvTRG2EQFTKTfDB/WnJqDG/lcYEavafYki+bY1bQcCEtF0ynXW6D WJ70B7M0Qzj8Xlnl7pihp3IRHYSJB3PJ49oohrjPgfdSbu/jpJrNu1xvhAOqgHpV cO5ZvVgvlEsau0rMAtonrAZ3g+u1kWb0jD6HrkqRfetaLy1RIR8XPK+G4mHUNnVo qK8MjMWzLRIEjANCCgdA+HsWRbCoMozYTA17ya6GWm0JXqtcAxt00tQxq2aJR0xX cWntEoQ8YFxqG85qb7BVF4gKGFdjjGaWgq7rRthQYfWQh5fbGFs0gn5lYu+NPEmX HoHT6gkpmd+9sTl2KPE9p4JJZj1Avexs -----END CERTIFICATE-----Generated at Sat Aug 23 19:12:23 2025 by rpki-client