$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: eIMXXgtlCv/UUl4icI1wI4xnbTkf35V2xF0gAl1Cpo4= Subject key identifier: C1:83:52:3D:5E:D4:C9:D3:8B:BF:C5:C5:A4:C6:33:B9:2B:A3:5F:A0 Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 07F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 07EA Signing time: Sun 20 Jul 2025 21:08:08 +0000 Manifest this update: Sun 20 Jul 2025 21:08:07 +0000 Manifest next update: Sun 27 Jul 2025 21:08:07 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: IsZ72F/SUhPGOzBIkd/Tnt+3KTPEgzPdQ0SIYRxcCi4=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: QmpltAdf0nLFZT8gwBfGo76407/WjBUywxAPLq9iwsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Jul 20 21:08:07 2025 GMT Not After : Jul 27 21:08:07 2025 GMT Subject: CN=687d5ab8-4fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:f5:54:b6:02:f1:9b:de:04:a3:46:8f:7f:ca: cd:8d:6e:af:2f:fe:54:a0:ab:93:19:eb:32:6b:22: 5c:68:2c:3e:d0:d5:7c:2e:4e:cd:ea:05:ee:f1:c1: 44:ba:ac:2d:29:61:95:c2:20:38:2c:e5:94:cc:1c: ea:66:cc:c2:30:ce:dd:3b:78:13:96:c6:ec:c5:68: cc:56:35:48:54:49:b1:9b:d4:38:fd:65:12:9f:13: 79:b5:f1:1c:f4:5b:ed:d4:a4:03:3b:6b:37:cb:fd: b6:ba:3e:b4:3f:3b:a5:3a:d0:bd:f6:db:aa:ac:a6: 42:80:f7:b2:b2:c2:b8:70:a3:05:37:a7:d0:a8:81: b5:7f:68:98:e5:d5:48:1a:d4:7f:fd:9c:e2:13:6e: 88:33:e3:a9:ce:0d:a1:eb:b8:89:bc:09:a5:67:51: 3c:da:87:2e:53:37:8e:21:85:8e:0d:ce:6f:da:8b: fe:02:16:60:40:15:e4:0b:cb:80:4e:14:bb:d3:56: 09:6a:93:a5:42:45:93:6f:59:b5:78:7a:60:de:76: 1e:e0:83:96:77:f9:f0:cd:cb:fd:f1:5d:97:0c:5c: 5f:02:ba:ed:a1:59:56:65:a5:72:65:da:93:66:ca: 5b:a6:a4:dd:a2:16:72:99:66:b8:b2:b4:c9:5a:84: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:83:52:3D:5E:D4:C9:D3:8B:BF:C5:C5:A4:C6:33:B9:2B:A3:5F:A0 X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b9:a1:a0:54:2b:87:e6:e7:fe:4c:b3:f7:f3:e0:f1:73:ba: dd:94:48:0f:84:75:e3:eb:2f:9b:26:34:75:d4:ef:c3:45:c3: e9:a5:9d:19:8a:61:c8:38:25:b2:0c:0a:dd:3a:42:8b:64:3c: ab:bb:0d:c1:9b:14:4b:e8:e2:86:4f:67:cc:cb:b4:47:99:ee: 33:46:07:27:df:2b:bd:c5:dc:b1:5a:0d:ec:d6:42:14:3b:e7: 2e:65:d3:4e:24:f9:dd:26:b9:f3:8d:e6:7f:1c:e3:8a:b4:b4: 70:5b:e9:43:1c:95:c3:a7:8e:75:79:b9:07:1f:d3:3e:d9:b2: 7e:4b:c9:10:57:73:fb:e4:6b:e0:08:89:32:ec:c3:c3:4a:0a: b2:5a:96:d7:f1:0b:b0:cf:e8:97:43:eb:9f:8d:78:58:39:bc: 61:4a:ed:28:c5:1d:81:63:84:4f:f8:77:52:64:94:4f:a0:fb: 34:52:76:4f:0f:37:12:95:d8:7e:5c:87:72:d2:b6:47:7f:9a: e1:6a:15:60:7b:70:c2:65:d5:5f:f6:a8:a7:c9:f9:87:6d:0f: e8:d1:7d:3f:ad:d0:b0:dc:7e:ee:3b:df:34:50:69:77:d8:83: 6c:38:35:ae:c9:4c:8c:47:1b:47:5e:a5:16:48:35:da:8b:3c: 7a:d4:dd:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUwNzIwMjEwODA3WhcNMjUwNzI3MjEwODA3WjAYMRYwFAYD VQQDEw02ODdkNWFiOC00ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7fVUtgLxm94Eo0aPf8rNjW6vL/5UoKuTGesyayJcaCw+0NV8Lk7N6gXu8cFE uqwtKWGVwiA4LOWUzBzqZszCMM7dO3gTlsbsxWjMVjVIVEmxm9Q4/WUSnxN5tfEc 9Fvt1KQDO2s3y/22uj60PzulOtC99tuqrKZCgPeyssK4cKMFN6fQqIG1f2iY5dVI GtR//ZziE26IM+Opzg2h67iJvAmlZ1E82ocuUzeOIYWODc5v2ov+AhZgQBXkC8uA ThS701YJapOlQkWTb1m1eHpg3nYe4IOWd/nwzcv98V2XDFxfArrtoVlWZaVyZdqT ZspbpqTdohZymWa4srTJWoRCdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMGDUj1e 1MnTi7/FxaTGM7kro1+gMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChuaGgVCuH5uf+TLP38+Dxc7rdlEgPhHXj6y+bJjR11O/DRcPppZ0Z imHIOCWyDArdOkKLZDyruw3BmxRL6OKGT2fMy7RHme4zRgcn3yu9xdyxWg3s1kIU O+cuZdNOJPndJrnzjeZ/HOOKtLRwW+lDHJXDp451ebkHH9M+2bJ+S8kQV3P75Gvg CIky7MPDSgqyWpbX8Quwz+iXQ+ufjXhYObxhSu0oxR2BY4RP+HdSZJRPoPs0UnZP DzcSldh+XIdy0rZHf5rhahVge3DCZdVf9qinyfmHbQ/o0X0/rdCw3H7uO980UGl3 2INsODWuyUyMRxtHXqUWSDXaizx61N0B -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:34 2025 by rpki-client