$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: tTgYpsCkCOO2lssq7POBqu2ZHHQxAr9B8tL3gL9ibJ4= Subject key identifier: CF:02:F4:AC:A3:2C:7A:0F:62:8C:1A:7C:89:EA:35:E7:94:FF:C3:A7 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F6B Signing time: Thu 24 Jul 2025 17:42:56 +0000 Manifest this update: Thu 24 Jul 2025 17:42:55 +0000 Manifest next update: Thu 31 Jul 2025 17:42:55 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: ccbvcymVWA0f/mpWG37cWB3hCtTEjp9xZMd/wKUZ9Gs=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: O5M1jbKU4KBTSC5g58y6skgHkeCwY767jwNIVlihlmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:42:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3963 (0xf7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Jul 24 17:42:55 2025 GMT Not After : Jul 31 17:42:55 2025 GMT Subject: CN=6882709f-4ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:77:5c:5c:46:bf:58:3a:61:51:ac:42:c5:a4: f1:1b:eb:38:f5:0b:56:a5:73:bb:ad:a0:b8:95:1e: a1:2e:9e:77:00:2c:42:d3:c9:92:bc:81:84:9b:ae: b6:74:40:e1:d8:bc:bf:98:2f:ad:ae:ff:94:fd:b9: bb:83:b7:1f:e7:54:c7:ab:fe:8f:a4:f8:7d:28:c0: 1f:1b:fb:18:5d:23:ae:0c:83:07:77:bf:87:f7:9e: 05:8e:25:47:1f:a9:8a:b7:28:13:8b:8f:52:bb:ad: 72:07:b6:c7:42:0a:a6:50:8c:24:c1:89:f3:75:2c: 73:fb:0a:17:00:8a:4b:b8:aa:08:60:1f:68:68:d7: 37:40:df:e6:ac:ae:55:c7:bf:64:15:1c:8c:85:cb: 50:f9:43:18:92:0f:bb:af:61:92:e6:f3:1f:0f:bb: 96:6c:a4:8a:c4:a5:23:f8:9d:15:90:4c:1f:d5:44: f9:19:87:91:65:8f:92:2f:27:1d:c2:39:19:59:b7: 58:3f:60:ed:04:b3:01:1e:0b:4b:f3:24:b5:d9:1f: 66:b2:11:02:ab:f5:13:8d:c7:59:58:58:93:80:9c: dd:36:bf:00:7e:cb:54:f1:c5:65:ca:32:1e:0d:70: 9c:57:36:da:05:e3:b6:f8:4b:b7:eb:25:8e:de:c4: 54:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:F4:AC:A3:2C:7A:0F:62:8C:1A:7C:89:EA:35:E7:94:FF:C3:A7 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:02:b8:fa:3b:05:4b:20:7b:53:09:2b:3e:7d:c8:f3:90:bf: f7:6a:e7:57:90:db:cc:8b:86:c7:02:ae:16:90:1b:af:22:c5: a7:6e:1c:85:1c:bb:e6:74:d7:4c:5e:d5:5d:05:08:b0:ba:e7: 35:16:e2:0c:9d:6e:10:39:a4:2d:08:2d:67:38:b6:4c:31:8d: d6:8f:55:77:70:b4:70:e9:98:5e:48:69:44:f2:09:2f:96:ad: 8d:7e:4b:60:eb:11:50:66:ec:ae:c5:87:43:a0:fa:b6:7a:03: bb:41:a6:b1:72:cc:d7:c4:f4:c2:1f:01:2d:86:eb:28:35:17: e5:6e:6a:75:c3:f2:9d:fd:6d:bf:e0:4b:e0:f8:83:68:d4:4c: 40:ee:11:ac:05:d5:4e:e1:7b:4b:af:de:f1:d2:4b:ba:44:f3: 68:50:5b:39:bd:5c:65:35:fb:43:52:b9:a8:c2:b5:6b:6f:50: 1d:a1:6d:d8:bb:a4:d7:ec:19:8a:3e:3a:48:6f:55:52:90:13: dc:d6:54:fc:8a:8d:dc:ce:44:cc:61:27:c7:e0:8b:cd:a1:8a: 3e:8b:c9:5e:0c:35:03:c6:9f:c5:aa:9d:6f:88:e2:c7:b3:d8: 86:90:5d:88:61:ab:9c:66:e5:9d:e0:19:63:34:5c:20:cd:a3: fe:87:6f:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwNzI0MTc0MjU1WhcNMjUwNzMxMTc0MjU1WjAYMRYwFAYD VQQDEw02ODgyNzA5Zi00ZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXdcXEa/WDphUaxCxaTxG+s49QtWpXO7raC4lR6hLp53ACxC08mSvIGEm662 dEDh2Ly/mC+trv+U/bm7g7cf51THq/6PpPh9KMAfG/sYXSOuDIMHd7+H954FjiVH H6mKtygTi49Su61yB7bHQgqmUIwkwYnzdSxz+woXAIpLuKoIYB9oaNc3QN/mrK5V x79kFRyMhctQ+UMYkg+7r2GS5vMfD7uWbKSKxKUj+J0VkEwf1UT5GYeRZY+SLycd wjkZWbdYP2DtBLMBHgtL8yS12R9mshECq/UTjcdZWFiTgJzdNr8AfstU8cVlyjIe DXCcVzbaBeO2+Eu36yWO3sRUmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM8C9Kyj LHoPYowafInqNeeU/8OnMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpArj6OwVLIHtTCSs+fcjzkL/3audXkNvMi4bHAq4WkBuvIsWnbhyF HLvmdNdMXtVdBQiwuuc1FuIMnW4QOaQtCC1nOLZMMY3Wj1V3cLRw6ZheSGlE8gkv lq2Nfktg6xFQZuyuxYdDoPq2egO7QaaxcszXxPTCHwEthusoNRflbmp1w/Kd/W2/ 4Evg+INo1ExA7hGsBdVO4XtLr97x0ku6RPNoUFs5vVxlNftDUrmowrVrb1AdoW3Y u6TX7BmKPjpIb1VSkBPc1lT8io3czkTMYSfH4IvNoYo+i8leDDUDxp/Fqp1viOLH s9iGkF2IYaucZuWd4BljNFwgzaP+h29s -----END CERTIFICATE-----Generated at Sat Jul 26 02:01:29 2025 by rpki-client