$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft File: 7aOF1FcjseHfKXP2K10jovv9JoY.mft (raw, json) Hash identifier: fsmhff1/SGbSb2C3qbs+Ysd7dJcHSb0xBYJl7YZ/VcU= Subject key identifier: DC:BA:35:43:3A:07:26:1F:41:81:3B:09:06:51:C1:5C:84:58:93:81 Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 Certificate issuer: /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Certificate serial: 02F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft Manifest number: 02D9 Signing time: Sat 23 Aug 2025 01:40:06 +0000 Manifest this update: Sat 23 Aug 2025 01:40:04 +0000 Manifest next update: Sat 30 Aug 2025 01:40:04 +0000 Files and hashes: 1: 7aOF1FcjseHfKXP2K10jovv9JoY.crl (hash: 1XKYnV/g/AUxJYeQ1+0gyeOo3zrkVipJDU5iiTRlFVU=) 2: E4F8A0BA47ED11EF8A746168C4F9AE02.roa (hash: BW5tT5Fwnb90kCw3kdyCo6pAhP8PZLajj0fwMdIDbDA=) 3: F3C5DF2CF03511EF83ECDC30C4F9AE02.roa (hash: z4aaUTQPt4LTmxBrxqPbGwAQr9ekPHI1lkNmNVVH7mw=) 4: 652A87CC65EC11F0BAEF8066C4F9AE02.roa (hash: 9Lyfdf8jewXKDNNSejND0Fdao81XqhdSmTyOn0pVCEo=) 5: FBE1E73689E311EF9021CE0CC4F9AE02.roa (hash: zUxzk8PVVaES9EMN0VkIqcIxDvXdbV+4WJwr6H3F2mM=) 6: 1C7AC7FE4B0711EFBB12B717C4F9AE02.roa (hash: 2FTQfXCf5iEijrWaIGoqW7OkD23cYHWReHvkr3RdiVo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 754 (0x2f2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686 Validity Not Before: Aug 23 01:40:04 2025 GMT Not After : Aug 30 01:40:04 2025 GMT Subject: CN=68a91bf4-8907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8b:c4:38:6c:af:63:1d:0d:4a:06:b6:f5:04: be:63:a7:c6:62:8a:1a:65:28:c4:a9:5a:76:56:0d: c8:a3:41:76:5b:d9:2f:c4:46:5d:64:db:bd:0a:89: 3a:c8:12:00:70:97:88:70:fd:09:11:7a:55:ed:67: 4c:49:53:cc:4f:7c:54:75:59:53:56:ec:b2:3b:88: 77:a7:f7:38:57:bc:1f:53:2b:ef:18:24:b3:24:48: 3d:17:f0:54:61:03:f4:26:4d:39:a7:60:7a:2d:64: 4b:8c:04:82:d3:8a:c3:ef:07:65:2a:97:72:37:f8: 10:06:8d:12:aa:8f:f2:92:27:80:4a:b9:28:9d:8f: f6:a4:93:20:71:01:64:97:19:0a:fe:5a:19:0d:f3: cb:44:26:4f:6a:25:4f:87:fa:79:e3:a5:a2:24:34: e8:05:58:e4:18:72:28:e4:30:2e:63:34:c0:82:1c: af:ff:5c:bf:53:4f:1d:1d:3e:8f:e4:bf:c4:34:52: d3:02:68:9e:bc:9f:e7:94:9e:a2:f7:d0:1d:6f:c1: 5f:f3:fa:74:12:3c:a0:90:93:69:19:54:8e:55:da: 9e:b2:9d:d5:3d:85:10:a2:7f:d5:d8:37:5b:52:59: 30:f8:88:12:b5:89:00:1d:31:bd:b7:de:63:36:62: 6d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BA:35:43:3A:07:26:1F:41:81:3B:09:06:51:C1:5C:84:58:93:81 X509v3 Authority Key Identifier: keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7f:4b:64:c8:08:bf:20:9b:1e:a7:ea:5b:d4:db:7c:27:52: 3a:ba:f9:2d:10:4c:89:62:74:a9:c9:df:1f:f9:ae:e1:84:d8: 8b:05:ce:da:42:b2:df:66:0b:97:d0:34:1b:fb:2e:01:b8:6e: 30:39:79:35:3d:1b:fc:3d:50:67:d5:f6:67:7e:40:70:67:af: 5d:1d:f2:95:07:fb:c0:52:18:dc:b8:bd:b8:b1:3a:ad:bb:9c: 5f:60:80:7a:1d:9d:e8:78:30:8d:08:3b:e0:4a:d8:17:99:cd: 45:0b:29:3a:48:bc:a0:be:81:f9:ee:6a:ef:d0:37:2d:99:89: f2:48:cb:12:48:bd:17:5e:7c:79:2b:17:93:0d:71:f8:90:b3: c8:32:30:bd:e0:f7:3e:2b:75:6e:14:ac:db:f8:68:76:43:49: e1:0a:0c:73:9e:4a:06:90:c9:d1:d8:fc:9b:46:36:a9:47:c4: 75:d4:20:f5:e7:53:81:86:79:e5:f0:34:e9:c2:1d:03:0e:40: fa:d8:b6:80:fc:c6:7e:66:2e:f5:83:12:cf:58:4e:e8:d6:22: 5f:fb:19:d0:c7:1b:38:c9:cb:27:08:30:d7:b8:9c:34:ae:7c: 25:4d:23:a7:41:50:a0:16:5c:38:ab:a8:07:c1:be:81:8d:5a: 1a:66:ee:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE0N0MxMTAvBgNVBAUTKEVEQTM4NUQ0NTcyM0IxRTFERjI5NzNGNjJCNUQyM0Ey RkJGRDI2ODYwHhcNMjUwODIzMDE0MDA0WhcNMjUwODMwMDE0MDA0WjAYMRYwFAYD VQQDEw02OGE5MWJmNC04OTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4vEOGyvYx0NSga29QS+Y6fGYooaZSjEqVp2Vg3Io0F2W9kvxEZdZNu9Cok6 yBIAcJeIcP0JEXpV7WdMSVPMT3xUdVlTVuyyO4h3p/c4V7wfUyvvGCSzJEg9F/BU YQP0Jk05p2B6LWRLjASC04rD7wdlKpdyN/gQBo0Sqo/ykieASrkonY/2pJMgcQFk lxkK/loZDfPLRCZPaiVPh/p546WiJDToBVjkGHIo5DAuYzTAghyv/1y/U08dHT6P 5L/ENFLTAmievJ/nlJ6i99Adb8Ff8/p0EjygkJNpGVSOVdqesp3VPYUQon/V2Ddb Ulkw+IgStYkAHTG9t95jNmJtmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNy6NUM6 ByYfQYE7CQZRwVyEWJOBMB8GA1UdIwQYMBaAFO2jhdRXI7Hh3ylz9itdI6L7/SaG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTQ3Qy83RTBGNTg3MjAx RTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNlSGZLWFAySzEwam92djlK b1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhT0YxRmNqc2VIZktYUDJLMTBqb3Z2OUpvWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ3Qy83RTBGNTg3MjAxRTkxMUVEQUY4QkRFMzBDNEY5QUUwMi83YU9GMUZjanNl SGZLWFAySzEwam92djlKb1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8f0tkyAi/IJsep+pb1Nt8J1I6uvktEEyJYnSpyd8f+a7hhNiLBc7a QrLfZguX0DQb+y4BuG4wOXk1PRv8PVBn1fZnfkBwZ69dHfKVB/vAUhjcuL24sTqt u5xfYIB6HZ3oeDCNCDvgStgXmc1FCyk6SLygvoH57mrv0DctmYnySMsSSL0XXnx5 KxeTDXH4kLPIMjC94Pc+K3VuFKzb+Gh2Q0nhCgxznkoGkMnR2PybRjapR8R11CD1 51OBhnnl8DTpwh0DDkD62LaA/MZ+Zi71gxLPWE7o1iJf+xnQxxs4ycsnCDDXuJw0 rnwlTSOnQVCgFlw4q6gHwb6BjVoaZu4f -----END CERTIFICATE-----Generated at Sat Aug 23 20:32:59 2025 by rpki-client