$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft File: 7EhKUeRjuYr44bAq4ilVoTIvH3U.mft (raw, json) Hash identifier: gu5YuVfQmZXTLz2g4ncnyAvjSwhxCIKCFtiKUR558Xk= Subject key identifier: 13:6F:45:7F:E7:73:15:68:7A:7F:F7:5F:24:8F:73:F0:D9:77:8F:F9 Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft Manifest number: 34CF Signing time: Fri 22 Aug 2025 15:17:46 +0000 Manifest this update: Fri 22 Aug 2025 15:17:45 +0000 Manifest next update: Fri 29 Aug 2025 15:17:45 +0000 Files and hashes: 1: 7EhKUeRjuYr44bAq4ilVoTIvH3U.crl (hash: w33/xYVua/S0e99IW5vC8DsUd+vVTsP32YZpYJWmzzw=) 2: 10704342B82811EFBBBB8612C4F9AE02.roa (hash: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=) 3: 650B909C903B11EF924F0B86C4F9AE02.roa (hash: l9dH5Yk/IsrZlDMhS/m7QsOx2yvq3McTRworcFa7eFQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F2, serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75 Validity Not Before: Aug 22 15:17:45 2025 GMT Not After : Aug 29 15:17:45 2025 GMT Subject: CN=68a88a19-538c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:ad:e5:78:a4:41:5b:fb:2c:57:c4:b4:aa: a5:0c:1a:d1:74:a9:6f:b4:8d:01:45:e4:c3:c5:0f: b9:25:c3:bd:2b:86:3a:81:05:e1:e1:52:68:4d:8d: 77:2f:bf:8f:dc:88:a6:66:7f:86:a5:53:6f:4e:5a: 0f:86:d7:f6:a9:57:ad:57:c7:81:93:f8:31:60:f1: ce:9a:6f:3c:08:e3:62:0a:54:69:e8:04:4c:09:4f: 2b:59:2c:40:fd:ee:d5:c2:c8:7f:a8:f2:40:18:f6: 06:b4:c1:3d:67:1e:f5:65:3e:f3:fc:68:2f:b4:88: 0a:e0:5a:1a:c4:e1:ad:c8:52:9c:7c:3a:01:67:19: 8e:f0:b8:d6:5a:d7:43:35:9a:01:fb:1d:4d:79:70: da:01:3a:71:b4:d2:61:d7:9b:59:92:bf:62:e6:88: 0b:20:15:d9:38:56:2e:1f:28:5d:6d:0a:83:08:a2: 7e:34:9c:5d:5d:e4:0a:44:d7:bf:99:88:08:c3:93: 7f:2a:2f:02:19:67:8d:90:60:16:63:e9:d2:d2:6f: d8:f2:a6:30:d3:e9:83:c4:d5:b7:f6:38:e4:16:37: cb:2c:b4:55:84:4c:a0:34:dc:f3:a5:ff:73:86:e4: 79:2b:b2:aa:38:fe:0d:5c:80:2e:68:6f:d1:ed:6a: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6F:45:7F:E7:73:15:68:7A:7F:F7:5F:24:8F:73:F0:D9:77:8F:F9 X509v3 Authority Key Identifier: keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:84:0a:94:df:2b:f8:d0:bf:4b:29:ff:9b:af:e8:f8:ba:2c: 1f:af:49:0e:cc:91:10:bb:a6:a7:84:d8:78:02:6b:65:ab:f4: b3:ac:e8:0a:7a:2e:f8:2a:1e:29:ea:08:f6:6e:aa:76:d0:00: 64:74:1b:b8:2d:3e:c0:1a:39:86:71:68:90:83:56:f6:b1:03: 22:5d:a0:84:04:2e:11:b7:35:33:5f:90:85:72:af:1d:b9:f2: 45:62:4a:26:01:4f:78:4f:6c:99:fc:eb:6b:10:f7:42:be:e9: 5c:47:08:c2:54:b1:88:ab:7c:0b:45:ac:22:45:37:1e:27:cb: be:87:59:95:21:f1:be:da:b7:ca:36:fd:51:34:a7:84:87:c3: 76:7c:28:21:5c:ad:29:2a:a7:9b:be:3f:9d:ee:7e:41:a6:b9: 0a:63:4e:f9:02:99:08:b8:df:88:9a:35:56:a6:2d:f2:28:af: 16:f9:4b:a0:34:7d:29:04:9d:d3:df:55:f9:9d:b9:6a:6d:de: a0:51:4f:bd:c6:e2:f4:d0:31:90:b2:e1:2d:27:88:03:19:29: dd:68:03:79:6a:45:98:6a:89:dd:83:c8:ac:c4:e9:42:eb:03: 26:c2:4b:ec:d0:c1:0d:a1:e4:ff:cb:9b:b2:f9:7c:d4:a8:22: 1d:94:55:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjIxMTAvBgNVBAUTKEVDNDg0QTUxRTQ2M0I5OEFGOEUxQjAyQUUyMjk1NUEx MzIyRjFGNzUwHhcNMjUwODIyMTUxNzQ1WhcNMjUwODI5MTUxNzQ1WjAYMRYwFAYD VQQDEw02OGE4OGExOS01MzhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiSt5XikQVv7LFfEtKqlDBrRdKlvtI0BReTDxQ+5JcO9K4Y6gQXh4VJoTY13 L7+P3IimZn+GpVNvTloPhtf2qVetV8eBk/gxYPHOmm88CONiClRp6ARMCU8rWSxA /e7Vwsh/qPJAGPYGtME9Zx71ZT7z/GgvtIgK4FoaxOGtyFKcfDoBZxmO8LjWWtdD NZoB+x1NeXDaATpxtNJh15tZkr9i5ogLIBXZOFYuHyhdbQqDCKJ+NJxdXeQKRNe/ mYgIw5N/Ki8CGWeNkGAWY+nS0m/Y8qYw0+mDxNW39jjkFjfLLLRVhEygNNzzpf9z huR5K7KqOP4NXIAuaG/R7WqQRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBNvRX/n cxVoen/3XySPc/DZd4/5MB8GA1UdIwQYMBaAFOxISlHkY7mK+OGwKuIpVaEyLx91 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMi80NkQwOTE5ODFE QTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZcjQ0YkFxNGlsVm9USXZI M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdFaEtVZVJqdVlyNDRiQXE0aWxWb1RJdkgzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMi80NkQwOTE5ODFEQTkxMUUyOUNGRDNFQTQwOEIwMkNEMi83RWhLVWVSanVZ cjQ0YkFxNGlsVm9USXZIM1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7hAqU3yv40L9LKf+br+j4uiwfr0kOzJEQu6anhNh4Amtlq/SzrOgK ei74Kh4p6gj2bqp20ABkdBu4LT7AGjmGcWiQg1b2sQMiXaCEBC4RtzUzX5CFcq8d ufJFYkomAU94T2yZ/OtrEPdCvulcRwjCVLGIq3wLRawiRTceJ8u+h1mVIfG+2rfK Nv1RNKeEh8N2fCghXK0pKqebvj+d7n5BprkKY075ApkIuN+ImjVWpi3yKK8W+Uug NH0pBJ3T31X5nblqbd6gUU+9xuL00DGQsuEtJ4gDGSndaAN5akWYaondg8isxOlC 6wMmwkvs0MENoeT/y5uy+XzUqCIdlFWm -----END CERTIFICATE-----Generated at Sat Aug 23 14:33:11 2025 by rpki-client