$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: s8e8V3Rw+IBRB+GbBBOhThUg+x2ctsxGWCfC+2LwSXA= Subject key identifier: AC:A0:B6:87:FE:7C:CE:DD:6C:98:EB:90:78:05:A9:30:68:8B:EF:94 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 068F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 0685 Signing time: Sun 20 Jul 2025 22:26:52 +0000 Manifest this update: Sun 20 Jul 2025 22:26:52 +0000 Manifest next update: Sun 27 Jul 2025 22:26:52 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: XH1DTZj9XsJmzuPGbvVefvRYpiX3hK2kAZSA1qMDfM8=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: Ck9VYv/1rcTBtaX5FrHIAevWzTx3mNc72bWTwUqMdEA=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: mTOOiMtwoSIKIvU9I/HZJyVIkpOV2ubS6z5GxznmdY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:26:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1679 (0x68f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Jul 20 22:26:52 2025 GMT Not After : Jul 27 22:26:52 2025 GMT Subject: CN=687d6d2c-ecfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:65:b7:01:e6:1a:7c:85:a0:3b:de:29:d9: 83:bd:61:a8:68:a2:eb:b0:4a:a4:ee:9f:3f:c5:19: 26:2b:c4:19:28:73:07:a6:35:5c:78:71:37:5a:36: 6d:41:50:0b:04:5a:2b:c9:f7:c2:81:81:04:d5:91: 54:f3:48:35:64:a4:2d:dc:da:75:de:8d:9a:62:f4: 1f:d5:1c:36:58:49:cb:c0:cd:51:56:f5:6b:ff:22: f4:dd:50:eb:09:b4:e3:5f:01:cf:91:4f:5b:b9:24: 3f:b3:44:ed:42:20:b7:af:99:32:27:fc:0f:b5:71: 27:a3:64:e7:e2:d8:61:2f:e1:67:b5:78:3d:db:5d: a9:45:67:55:8f:03:21:6b:aa:81:99:2d:74:b5:fb: cf:6b:c3:e9:33:ef:7a:9a:b6:f6:41:7b:00:5b:50: fa:da:6b:c8:50:5d:12:e7:8d:e7:79:d0:15:28:ee: 7a:32:f3:c1:34:82:ae:37:ad:2b:f5:6d:c0:3f:f7: 19:89:f3:85:1d:bd:53:e9:d5:4d:42:6e:46:35:a1: d4:f1:13:5a:97:32:62:21:32:28:5c:32:1d:30:ac: d6:19:5f:af:38:6d:16:c6:5d:ca:6b:a2:73:c5:a9: f2:30:a3:48:af:eb:1c:4c:7a:9a:9d:cf:43:a7:d2: 3a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A0:B6:87:FE:7C:CE:DD:6C:98:EB:90:78:05:A9:30:68:8B:EF:94 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ad:51:8a:41:9c:79:d3:5f:55:ef:0b:14:1a:d8:d5:46:f8: 22:77:a7:c8:e4:d9:06:40:58:5c:7d:46:d7:db:53:0a:ea:be: 0f:65:a2:0b:1e:b4:10:d8:e1:3c:96:b1:a1:9c:73:bf:1c:4a: ef:68:63:c6:13:85:53:37:87:39:db:df:76:f4:2b:c6:fb:ad: 89:4d:7f:23:3e:d4:a2:da:58:bf:30:65:88:7f:c9:af:2e:17: 34:82:af:aa:25:0b:4f:ae:e0:f3:4f:e9:f4:4c:33:46:15:70: 92:79:35:86:0c:e6:e9:ad:b6:c4:34:fb:68:76:b0:23:e7:a3: 31:5e:6c:3f:34:f3:b9:d7:2a:1f:a4:87:c3:91:cc:19:26:f2: 8e:9d:41:7d:44:d2:2d:d0:bf:1b:c5:03:81:6b:da:34:32:b9: b2:12:18:e0:e8:28:8b:e5:80:2e:bb:74:43:aa:5c:eb:83:2e: ae:6e:94:6e:89:28:3f:0d:32:90:12:da:b1:9e:85:63:bf:f7: e6:e6:0f:d4:e4:25:d8:5f:56:2e:0e:a0:d3:92:aa:1d:27:55: 1c:44:3d:b8:91:c7:f7:a2:8a:3c:b4:c5:02:02:eb:41:6e:d8: 01:fe:7f:5a:7e:93:42:88:3f:64:52:0e:c0:ce:5e:82:2b:9b: 2b:37:90:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUwNzIwMjIyNjUyWhcNMjUwNzI3MjIyNjUyWjAYMRYwFAYD VQQDEw02ODdkNmQyYy1lY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT1ltwHmGnyFoDveKdmDvWGoaKLrsEqk7p8/xRkmK8QZKHMHpjVceHE3WjZt QVALBForyffCgYEE1ZFU80g1ZKQt3Np13o2aYvQf1Rw2WEnLwM1RVvVr/yL03VDr CbTjXwHPkU9buSQ/s0TtQiC3r5kyJ/wPtXEno2Tn4thhL+FntXg9212pRWdVjwMh a6qBmS10tfvPa8PpM+96mrb2QXsAW1D62mvIUF0S543nedAVKO56MvPBNIKuN60r 9W3AP/cZifOFHb1T6dVNQm5GNaHU8RNalzJiITIoXDIdMKzWGV+vOG0Wxl3Ka6Jz xanyMKNIr+scTHqanc9Dp9I6+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKygtof+ fM7dbJjrkHgFqTBoi++UMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBerVGKQZx5019V7wsUGtjVRvgid6fI5NkGQFhcfUbX21MK6r4PZaIL HrQQ2OE8lrGhnHO/HErvaGPGE4VTN4c529929CvG+62JTX8jPtSi2li/MGWIf8mv Lhc0gq+qJQtPruDzT+n0TDNGFXCSeTWGDObprbbENPtodrAj56MxXmw/NPO51yof pIfDkcwZJvKOnUF9RNIt0L8bxQOBa9o0MrmyEhjg6CiL5YAuu3RDqlzrgy6ubpRu iSg/DTKQEtqxnoVjv/fm5g/U5CXYX1YuDqDTkqodJ1UcRD24kcf3ooo8tMUCAutB btgB/n9afpNCiD9kUg7Azl6CK5srN5Dz -----END CERTIFICATE-----Generated at Mon Jul 21 06:07:10 2025 by rpki-client