$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft File: CK7T4dy27XdCMDzv9H3gLZKz7eU.mft (raw, json) Hash identifier: q3RsRUm73O1GjoveMxD9MVtK+3Poot317PDrrniHl44= Subject key identifier: 0B:68:FA:4C:F8:09:47:3C:06:E1:E8:7D:D6:2D:D6:53:73:27:AC:60 Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 Certificate issuer: /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft Manifest number: 0207 Signing time: Sat 23 Aug 2025 02:22:22 +0000 Manifest this update: Sat 23 Aug 2025 02:22:21 +0000 Manifest next update: Sat 30 Aug 2025 02:22:21 +0000 Files and hashes: 1: CK7T4dy27XdCMDzv9H3gLZKz7eU.crl (hash: J4g0o0U4HcUtHuD9wDGY1zagt01pqk+k7psmPN8VC80=) 2: 6DDD4756EEC411EEA4BB703CC4F9AE02.roa (hash: 8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=) 3: 6EB41DC6EEC411EEA4BB703CC4F9AE02.roa (hash: UKZjo7nlv5xaEfM2Q5iGETEP+0bko/kMccsOgiKgCVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:22:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED073, serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5 Validity Not Before: Aug 23 02:22:21 2025 GMT Not After : Aug 30 02:22:21 2025 GMT Subject: CN=68a925de-01f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e3:0c:ab:ac:9b:fe:7b:4e:bb:72:d5:bb:a7: ac:0a:29:e7:16:4b:e7:77:44:60:15:13:be:e9:35: e3:15:ad:5b:6f:ac:34:89:c0:db:9a:74:2f:a9:14: 2e:61:46:1a:08:c8:9b:b7:5d:e6:c3:20:ad:34:e4: b1:11:50:16:ef:59:42:c2:e2:47:e1:ed:18:2e:8b: be:b9:57:a5:a5:c8:53:b1:ab:fa:01:34:0c:83:98: 8e:8d:e7:c8:f9:ff:ce:4d:6e:fe:4a:4c:63:4f:42: 9f:4f:21:6a:74:ca:90:aa:3c:e6:f0:ca:52:0c:f0: 6c:67:c4:58:d5:4d:d4:9f:4f:aa:8b:93:6c:a3:29: 29:0b:d7:60:d2:07:20:29:ae:82:49:65:46:6e:9c: 38:cf:05:33:55:84:19:d2:de:c8:81:1a:3e:38:03: e0:69:cc:97:f3:b9:69:5d:0b:1a:3b:64:15:16:2a: 72:33:02:c5:93:27:d1:f8:15:94:d6:45:c7:20:24: 88:12:87:31:11:b4:c7:54:1f:dc:b6:89:29:20:86: 22:4a:d2:1c:7f:f4:4a:34:ea:f3:3b:fe:d7:6a:5e: 46:44:e8:ef:71:df:16:f9:36:28:c4:66:ad:52:50: 7e:e7:93:8d:44:ad:05:34:15:58:d0:d0:4f:ce:06: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:68:FA:4C:F8:09:47:3C:06:E1:E8:7D:D6:2D:D6:53:73:27:AC:60 X509v3 Authority Key Identifier: keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:5c:b7:e9:0f:eb:52:44:89:14:88:93:ad:17:fa:f9:c8:79: ba:84:cf:d8:f8:3f:06:cc:17:20:e5:c9:1f:47:46:f3:d8:d9: f2:87:14:51:4a:1d:48:0e:ae:af:87:25:c5:9d:a7:4f:ee:ba: 51:99:5f:4e:19:cd:c9:d6:47:89:7e:c0:39:de:c6:f4:76:64: 1f:6b:48:b5:66:87:e5:6c:f7:9b:dd:4e:00:13:d1:95:d8:d0: 17:49:66:fd:6b:bd:f5:d0:54:d5:24:53:2d:e9:20:b7:60:9b: 45:fb:a5:c0:3f:f8:08:ed:9f:65:32:5b:b8:74:5c:41:78:af: 32:af:48:70:e1:8b:6f:ba:0c:69:25:1e:6d:a8:82:8f:21:40: ab:f6:83:cc:14:05:d1:70:0b:0f:fe:fa:04:0f:da:4b:a0:c8: ec:c1:31:f9:4d:01:44:9b:65:c1:44:a7:d4:d0:00:40:4e:80: 2b:4d:4c:29:b0:6e:21:c5:1f:31:01:2d:75:a9:e1:27:0e:0a: a0:d6:5b:f6:fb:2c:1a:92:a5:a6:a8:33:73:be:fc:ec:67:dc: 3d:48:32:16:fe:6a:9d:9f:7f:74:cd:8d:14:bc:01:76:00:cb: 38:70:55:af:0b:b8:6f:b7:10:65:20:bd:2e:97:05:74:ff:09: c4:57:ed:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQwNzMxMTAvBgNVBAUTKDA4QUVEM0UxRENCNkVENzc0MjMwM0NFRkY0N0RFMDJE OTJCM0VERTUwHhcNMjUwODIzMDIyMjIxWhcNMjUwODMwMDIyMjIxWjAYMRYwFAYD VQQDEw02OGE5MjVkZS0wMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+MMq6yb/ntOu3LVu6esCinnFkvnd0RgFRO+6TXjFa1bb6w0icDbmnQvqRQu YUYaCMibt13mwyCtNOSxEVAW71lCwuJH4e0YLou+uVelpchTsav6ATQMg5iOjefI +f/OTW7+SkxjT0KfTyFqdMqQqjzm8MpSDPBsZ8RY1U3Un0+qi5NsoykpC9dg0gcg Ka6CSWVGbpw4zwUzVYQZ0t7IgRo+OAPgacyX87lpXQsaO2QVFipyMwLFkyfR+BWU 1kXHICSIEocxEbTHVB/ctokpIIYiStIcf/RKNOrzO/7Xal5GROjvcd8W+TYoxGat UlB+55ONRK0FNBVY0NBPzgb7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAto+kz4 CUc8BuHofdYt1lNzJ6xgMB8GA1UdIwQYMBaAFAiu0+Hctu13QjA87/R94C2Ss+3l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDA3My9GNEI0Q0E1MjY0 QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdYZENNRHp2OUgzZ0xaS3o3 ZVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NLN1Q0ZHkyN1hkQ01EenY5SDNnTFpLejdlVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDA3My9GNEI0Q0E1MjY0QTQxMUVEQTA4NzZCMTZDNEY5QUUwMi9DSzdUNGR5MjdY ZENNRHp2OUgzZ0xaS3o3ZVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMXLfpD+tSRIkUiJOtF/r5yHm6hM/Y+D8GzBcg5ckfR0bz2NnyhxRR Sh1IDq6vhyXFnadP7rpRmV9OGc3J1keJfsA53sb0dmQfa0i1ZoflbPeb3U4AE9GV 2NAXSWb9a7310FTVJFMt6SC3YJtF+6XAP/gI7Z9lMlu4dFxBeK8yr0hw4Ytvugxp JR5tqIKPIUCr9oPMFAXRcAsP/voED9pLoMjswTH5TQFEm2XBRKfU0ABAToArTUwp sG4hxR8xAS11qeEnDgqg1lv2+ywakqWmqDNzvvzsZ9w9SDIW/mqdn390zY0UvAF2 AMs4cFWvC7hvtxBlIL0ulwV0/wnEV+0U -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:03 2025 by rpki-client