$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: ZCAKZURGwF1QkpuPVWz4LDlBxQSiFG2H5bjeH6JeHt8= Subject key identifier: A8:F5:B1:BC:6F:09:BD:32:63:E1:FC:C1:7A:91:B1:78:84:9D:91:68 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BAC Signing time: Fri 22 Aug 2025 19:04:53 +0000 Manifest this update: Fri 22 Aug 2025 19:04:53 +0000 Manifest next update: Fri 29 Aug 2025 19:04:53 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: BZX9my6vKhxv9qnU3cUK6NuKkx9oWBSNvvjHzWZ/SsY=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Aug 22 19:04:53 2025 GMT Not After : Aug 29 19:04:53 2025 GMT Subject: CN=68a8bf55-a396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:d4:44:ce:a4:4e:c1:ac:a6:a0:d7:79:61: b2:54:a9:b6:05:95:13:16:ed:fa:d1:1c:5f:4d:cc: 56:82:14:54:8e:b1:d3:98:62:4c:c2:f4:d8:6f:e0: 34:7c:b8:e7:dd:ac:49:39:e1:c0:ae:40:03:01:76: af:c0:72:0d:f9:e7:c3:fa:76:60:d4:8c:7c:92:ce: 42:e0:17:5b:49:82:84:b1:0f:a7:ea:70:14:a0:df: 34:36:2e:4f:df:99:31:f1:63:d5:77:0d:49:81:8f: e8:a9:ec:98:b4:0a:ef:75:dd:e0:e6:de:62:8b:42: 9e:8f:04:32:5f:0d:4d:3b:14:4f:9e:cf:08:f3:83: 18:34:e7:79:1b:dd:87:ca:95:d1:3c:f7:5d:e0:f5: 0a:54:b0:cf:6d:13:ce:73:1a:2f:49:3d:58:3b:11: 5d:43:61:21:d7:55:8c:75:02:f4:b2:4e:74:c4:46: 27:3c:1c:98:03:79:3d:e9:0b:88:3b:50:53:32:77: 0d:2c:91:f6:63:9a:31:55:f1:36:d0:23:d0:9e:32: 99:c2:7e:8e:86:ff:41:5f:ad:a0:df:cc:86:69:40: 82:b1:33:67:53:02:aa:bb:36:d8:1b:18:5d:04:87: 5e:93:fb:e1:4b:f9:73:9a:a7:b5:f7:cc:f9:bf:df: 21:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F5:B1:BC:6F:09:BD:32:63:E1:FC:C1:7A:91:B1:78:84:9D:91:68 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:ed:e6:96:d6:32:db:2e:3d:3c:f8:7a:25:fe:74:59:30:6f: 37:53:e6:d8:af:87:f1:63:81:74:c8:68:62:ff:c1:eb:80:31: 37:22:2e:89:93:1e:3a:60:48:8c:12:6a:f9:c8:c4:42:7f:2e: 0a:30:23:15:7d:86:b7:bc:d2:35:59:55:0e:43:61:fb:26:7c: 29:b2:4b:f3:e5:26:ba:0a:ec:c3:9f:a1:4a:6c:c2:c4:b0:7d: a2:65:c8:a9:28:0f:8f:3e:84:87:ff:93:1d:28:09:2f:a4:04: b3:f5:c7:0d:36:86:f5:8a:c9:b9:97:5a:0f:33:0d:8b:22:b5: 75:77:7b:d8:52:1f:42:69:f1:00:35:af:8c:57:eb:9e:59:a3: b6:fa:33:2e:0d:ff:92:c3:cc:f3:b5:d8:07:c0:c4:bf:93:5b: f5:ae:37:c9:53:a9:41:07:f0:28:66:58:8a:ef:a1:57:76:07: 97:58:96:8e:ea:95:a3:4b:d0:54:57:6c:9b:b3:17:41:d2:3f: 6a:05:14:ef:f1:ad:ce:ab:ff:75:23:86:26:0f:ce:48:39:22: 22:c8:ef:68:00:1a:0d:f2:2d:0e:9a:92:2b:a7:0c:46:33:8f: ac:84:ca:67:12:4f:e6:48:f0:6a:cd:90:a6:27:42:86:ad:4b: 10:82:80:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwODIyMTkwNDUzWhcNMjUwODI5MTkwNDUzWjAYMRYwFAYD VQQDEw02OGE4YmY1NS1hMzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2hnURM6kTsGspqDXeWGyVKm2BZUTFu360RxfTcxWghRUjrHTmGJMwvTYb+A0 fLjn3axJOeHArkADAXavwHIN+efD+nZg1Ix8ks5C4BdbSYKEsQ+n6nAUoN80Ni5P 35kx8WPVdw1JgY/oqeyYtArvdd3g5t5ii0KejwQyXw1NOxRPns8I84MYNOd5G92H ypXRPPdd4PUKVLDPbRPOcxovST1YOxFdQ2Eh11WMdQL0sk50xEYnPByYA3k96QuI O1BTMncNLJH2Y5oxVfE20CPQnjKZwn6Ohv9BX62g38yGaUCCsTNnUwKquzbYGxhd BIdek/vhS/lzmqe198z5v98hXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKj1sbxv Cb0yY+H8wXqRsXiEnZFoMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp7eaW1jLbLj08+Hol/nRZMG83U+bYr4fxY4F0yGhi/8HrgDE3Ii6J kx46YEiMEmr5yMRCfy4KMCMVfYa3vNI1WVUOQ2H7Jnwpskvz5Sa6CuzDn6FKbMLE sH2iZcipKA+PPoSH/5MdKAkvpASz9ccNNob1ism5l1oPMw2LIrV1d3vYUh9CafEA Na+MV+ueWaO2+jMuDf+Sw8zztdgHwMS/k1v1rjfJU6lBB/AoZliK76FXdgeXWJaO 6pWjS9BUV2ybsxdB0j9qBRTv8a3Oq/91I4YmD85IOSIiyO9oABoN8i0OmpIrpwxG M4+shMpnEk/mSPBqzZCmJ0KGrUsQgoBn -----END CERTIFICATE-----Generated at Sat Aug 23 14:09:10 2025 by rpki-client