$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: M19ZJDasDS6U5SPYHo9fq8J1Il5/DMCcldOyd1mldW0= Subject key identifier: A5:87:06:8C:5A:CA:DE:E0:54:91:53:49:C7:B7:55:35:8B:69:B4:BD Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0B91 Signing time: Mon 30 Jun 2025 19:08:50 +0000 Manifest this update: Mon 30 Jun 2025 19:08:49 +0000 Manifest next update: Mon 07 Jul 2025 19:08:49 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: QO1WSFBUP2WJxrDpdq0IRt7WXrOGMXUenW8wIlLNVbQ=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Jun 30 19:08:49 2025 GMT Not After : Jul 7 19:08:49 2025 GMT Subject: CN=6862e0c2-c36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:28:3c:ca:bd:7f:8c:ae:57:31:f9:db:1a:b9: a2:ce:46:2f:2a:35:7e:a7:da:16:da:e3:c9:af:6d: 7c:6b:af:07:d7:e7:58:ba:9c:9d:f0:d8:90:f8:b8: b7:16:33:38:c8:29:f5:74:8f:d2:8e:3b:cf:55:55: 7a:eb:0f:93:ae:f8:0b:1a:31:fc:d8:35:92:e4:a2: 10:d1:44:41:a6:b9:98:fc:4c:04:46:11:57:47:7b: 86:71:48:09:51:e0:be:e5:71:92:08:cf:0f:04:42: 2c:bf:25:e7:6b:4a:c8:93:12:d9:23:45:36:84:7d: d1:ca:22:d6:16:58:51:75:b5:dd:e1:96:ac:b0:5a: 11:a4:1f:0e:a9:fa:8c:9e:d7:36:45:cb:c9:70:65: 74:bb:a8:91:58:36:ee:fd:b4:8e:67:97:81:84:2e: 6d:9a:d2:9a:5b:88:84:56:b7:12:18:5a:13:91:93: b5:15:57:2d:d8:63:6c:3b:a5:af:0a:62:38:d5:00: 60:0f:2a:12:1c:26:2a:7b:ca:07:c5:03:a3:20:ed: 66:71:e1:1a:95:48:76:f6:c0:5e:09:c8:07:43:b8: 9a:2a:cc:52:48:b3:26:84:11:fc:48:86:ff:68:6f: d1:f1:9e:cf:dc:82:b4:b1:cd:cf:4d:35:7e:a5:dc: 49:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:87:06:8C:5A:CA:DE:E0:54:91:53:49:C7:B7:55:35:8B:69:B4:BD X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:54:d9:60:63:1a:71:f0:91:db:14:5d:79:1f:bf:14:9d:c3: 30:96:92:ed:ce:92:eb:f6:ac:bd:b1:5c:a9:c3:67:2d:45:e9: 17:61:34:c1:20:9d:6c:c8:37:ce:0c:a4:80:20:74:24:a4:7c: b7:16:aa:e1:5a:6c:e7:a5:2b:83:52:41:87:40:34:36:57:05: 2f:b7:5f:a0:b1:0a:61:7a:53:05:11:3c:13:9e:4f:38:40:b0: b4:fa:41:62:73:ce:dc:88:39:58:25:d1:73:6d:9f:0c:7a:f5: 6f:5e:f5:75:21:ea:8c:f0:11:05:db:56:50:1e:55:76:02:b2: 0c:54:11:70:f7:c8:36:6a:36:e9:7f:05:5e:1d:54:66:6d:d6: 25:f1:8f:76:31:37:a0:3d:ec:9c:6c:e5:81:fc:99:6d:0a:16: a8:9f:50:e8:e0:4e:06:83:45:13:90:e5:b0:ed:8a:20:97:3b: f0:b9:f8:b2:a2:29:ff:d4:25:5c:ba:a9:ed:45:40:d7:78:9d: 1e:00:6b:5e:ca:c9:4d:16:65:ca:89:53:f4:7a:e9:09:b6:77: 6c:14:0d:04:c3:8c:f5:62:04:17:ea:e8:37:68:8a:9e:4a:8f: a9:71:4c:ac:3f:76:2f:b1:10:c8:92:e2:3c:34:19:b4:cc:16: 81:90:25:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwNjMwMTkwODQ5WhcNMjUwNzA3MTkwODQ5WjAYMRYwFAYD VQQDEw02ODYyZTBjMi1jMzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0yg8yr1/jK5XMfnbGrmizkYvKjV+p9oW2uPJr218a68H1+dYupyd8NiQ+Li3 FjM4yCn1dI/SjjvPVVV66w+TrvgLGjH82DWS5KIQ0URBprmY/EwERhFXR3uGcUgJ UeC+5XGSCM8PBEIsvyXna0rIkxLZI0U2hH3RyiLWFlhRdbXd4ZassFoRpB8OqfqM ntc2RcvJcGV0u6iRWDbu/bSOZ5eBhC5tmtKaW4iEVrcSGFoTkZO1FVct2GNsO6Wv CmI41QBgDyoSHCYqe8oHxQOjIO1mceEalUh29sBeCcgHQ7iaKsxSSLMmhBH8SIb/ aG/R8Z7P3IK0sc3PTTV+pdxJqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWHBoxa yt7gVJFTSce3VTWLabS9MB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCVNlgYxpx8JHbFF15H78UncMwlpLtzpLr9qy9sVypw2ctRekXYTTB IJ1syDfODKSAIHQkpHy3FqrhWmznpSuDUkGHQDQ2VwUvt1+gsQphelMFETwTnk84 QLC0+kFic87ciDlYJdFzbZ8MevVvXvV1IeqM8BEF21ZQHlV2ArIMVBFw98g2ajbp fwVeHVRmbdYl8Y92MTegPeycbOWB/JltChaon1Do4E4Gg0UTkOWw7Yoglzvwufiy oin/1CVcuqntRUDXeJ0eAGteyslNFmXKiVP0eukJtndsFA0Ew4z1YgQX6ug3aIqe So+pcUysP3YvsRDIkuI8NBm0zBaBkCWY -----END CERTIFICATE-----Generated at Tue Jul 1 12:49:42 2025 by rpki-client