$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: lBo9/txGGXASCLMBqaT2PKqECAypR2JnkFMz4bLPAfI= Subject key identifier: D8:76:0A:D7:C3:DC:04:BB:70:8D:CF:E4:44:02:36:77:3F:66:DE:E9 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 0719 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 070D Signing time: Sun 20 Jul 2025 22:01:08 +0000 Manifest this update: Sun 20 Jul 2025 22:01:07 +0000 Manifest next update: Sun 27 Jul 2025 22:01:07 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: I156UA6A+IMHIBjmcfpdsmBvfOn8PjwzOaw9/qMNMGc=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1817 (0x719) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: Jul 20 22:01:07 2025 GMT Not After : Jul 27 22:01:07 2025 GMT Subject: CN=687d6723-ac07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:3c:40:67:07:cf:bb:6e:dd:f5:28:8f:a0: e3:62:f9:7d:41:ed:5e:bf:7c:0e:17:72:4e:06:45: cc:76:6c:af:8b:6c:4b:af:15:28:2e:9e:a9:73:5a: a3:a2:6b:82:87:f1:2e:a8:9b:66:2a:9d:92:6e:07: 27:02:5f:6d:fc:a9:02:d3:c7:ec:95:28:18:2a:20: 3a:b0:06:01:f7:8c:e1:20:bf:8e:0b:94:73:26:f2: aa:03:34:03:42:4d:d5:c5:02:d8:1a:f9:76:5a:58: dc:db:b4:6b:66:7e:6a:15:7a:a5:be:3f:e9:a8:bc: 52:4a:3d:fe:09:52:e9:04:22:70:d2:62:65:31:61: 8d:20:6f:c1:05:33:8d:d5:aa:6c:f2:1c:9c:9f:d8: 5e:5d:51:d5:27:fb:4a:4d:01:40:6e:e0:e9:a8:90: 70:e9:4f:c5:8c:35:f1:3a:b4:aa:8b:5e:86:ae:0e: 52:7a:43:47:53:07:82:6c:25:b0:3a:d1:45:15:5c: d8:db:c7:50:6f:52:18:4b:52:cb:21:0f:d2:21:8d: 55:52:7e:d3:35:e8:09:58:5b:a6:88:f1:ad:3a:1b: 14:6a:25:ed:7b:9b:a2:b3:b9:ef:ec:7b:4f:cb:9a: c4:47:a7:23:08:98:1a:69:eb:0f:68:4a:d0:d8:2e: 27:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:76:0A:D7:C3:DC:04:BB:70:8D:CF:E4:44:02:36:77:3F:66:DE:E9 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:5e:92:7d:93:4d:be:bf:9b:e5:d6:c5:86:52:47:d0:44:f6: eb:61:39:0c:6c:76:dc:a0:e6:11:ab:64:4b:35:cd:3d:bf:4c: 99:01:3e:90:6d:6e:bd:d0:98:c4:f2:0a:69:ec:33:a6:00:d1: fe:d3:69:21:9b:30:bb:5c:e4:52:07:9e:d4:ef:6c:42:d7:eb: 88:d6:2a:dc:19:b9:e1:19:bb:af:03:ba:3b:fd:d3:25:25:27: 8f:51:70:af:9f:84:9d:89:b8:30:69:f5:87:61:dd:5f:7d:40: 9c:5e:0a:28:57:ca:ea:55:8f:ee:e5:9d:be:0e:19:46:c8:36: a6:6e:61:6a:74:be:a7:76:57:6c:2e:35:0b:6a:43:74:08:49: 34:8b:d6:b3:ff:4c:4a:49:db:94:7f:02:a6:10:03:97:9c:9d: 42:6b:e8:ec:df:4d:b1:1a:ad:24:fc:1d:4f:39:a5:72:86:18: 7c:be:e4:b2:e6:47:4f:60:ac:e2:47:66:2b:86:ad:02:dd:20: 14:20:25:9c:0d:3e:4d:5e:6c:15:c7:64:5d:bc:09:aa:fb:de: e5:2a:44:55:8e:8e:55:17:23:09:f3:1c:af:d8:4a:82:43:00: 88:09:70:5b:bb:98:67:fd:8c:77:fd:72:87:85:10:2d:f6:c1: d0:28:19:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUwNzIwMjIwMTA3WhcNMjUwNzI3MjIwMTA3WjAYMRYwFAYD VQQDEw02ODdkNjcyMy1hYzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXo8QGcHz7tu3fUoj6DjYvl9Qe1ev3wOF3JOBkXMdmyvi2xLrxUoLp6pc1qj omuCh/EuqJtmKp2SbgcnAl9t/KkC08fslSgYKiA6sAYB94zhIL+OC5RzJvKqAzQD Qk3VxQLYGvl2Wljc27RrZn5qFXqlvj/pqLxSSj3+CVLpBCJw0mJlMWGNIG/BBTON 1aps8hycn9heXVHVJ/tKTQFAbuDpqJBw6U/FjDXxOrSqi16Grg5SekNHUweCbCWw OtFFFVzY28dQb1IYS1LLIQ/SIY1VUn7TNegJWFumiPGtOhsUaiXte5uis7nv7HtP y5rER6cjCJgaaesPaErQ2C4nGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNh2CtfD 3AS7cI3P5EQCNnc/Zt7pMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAXpJ9k02+v5vl1sWGUkfQRPbrYTkMbHbcoOYRq2RLNc09v0yZAT6Q bW690JjE8gpp7DOmANH+02khmzC7XORSB57U72xC1+uI1ircGbnhGbuvA7o7/dMl JSePUXCvn4SdibgwafWHYd1ffUCcXgooV8rqVY/u5Z2+DhlGyDambmFqdL6ndlds LjULakN0CEk0i9az/0xKSduUfwKmEAOXnJ1Ca+js302xGq0k/B1POaVyhhh8vuSy 5kdPYKziR2Yrhq0C3SAUICWcDT5NXmwVx2RdvAmq+97lKkRVjo5VFyMJ8xyv2EqC QwCICXBbu5hn/Yx3/XKHhRAt9sHQKBny -----END CERTIFICATE-----Generated at Mon Jul 21 08:09:20 2025 by rpki-client