$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft File: 7loKCg1eD1xijRpwW1rGj-8gxG8.mft (raw, json) Hash identifier: SvtjzMVMbeTSnN1L2f+nAtblllYCyVSyv3qtaBOOVFk= Subject key identifier: 41:05:1B:85:74:BF:0A:42:CD:DC:A6:26:5D:9C:DC:24:B7:20:8B:DA Authority key identifier: EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F Certificate issuer: /CN=A91AB574/serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Certificate serial: FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft Manifest number: F9 Signing time: Sat 19 Jul 2025 05:24:52 +0000 Manifest this update: Sat 19 Jul 2025 05:24:51 +0000 Manifest next update: Sat 26 Jul 2025 05:24:51 +0000 Files and hashes: 1: 7loKCg1eD1xijRpwW1rGj-8gxG8.crl (hash: h8weesyD40Zsd3XdjDuD0inn0BA4QyUW+BXvPVzj8Cc=) 2: 521FC3D8E74211EE9A78EC6EC4F9AE02.roa (hash: Evu2uB2GkC2WPAp+Ym3GMN1P169UzI1o+wjhgoORlbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 252 (0xfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB574, serialNumber=EE5A0A0A0D5E0F5C628D1A705B5AC68FEF20C46F Validity Not Before: Jul 19 05:24:51 2025 GMT Not After : Jul 26 05:24:51 2025 GMT Subject: CN=687b2c24-ab3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:6b:99:4a:5f:e9:df:99:4d:0c:46:a3:5f: 9a:1d:a1:72:e5:79:6c:f9:4d:af:5f:3a:9e:7b:88: 36:db:8c:3d:6c:b0:4f:71:ef:b4:39:3f:6f:63:28: 49:e9:19:31:d6:4b:20:7a:a5:a1:69:0b:6f:45:92: 89:b2:08:48:e7:e5:bc:97:9b:84:d0:e2:8d:36:e9: 6f:10:8b:db:f5:56:7d:79:2e:1f:ca:dd:5b:61:2c: 87:68:52:d1:c3:4a:57:a5:89:14:1a:9b:3c:e4:98: 69:90:73:6c:96:93:c2:75:46:4b:95:3b:07:21:fd: 31:18:12:02:34:95:5b:c2:40:23:2f:ab:3f:5e:b9: b6:8a:2d:db:15:d8:03:dd:44:49:03:c1:95:d2:0e: ef:3d:25:5d:a0:96:80:ef:71:ac:32:fd:4f:92:aa: db:6c:9a:6b:e2:eb:cd:98:98:a2:56:ab:78:09:e2: a3:70:41:74:a1:3a:fc:8e:fe:69:8d:2f:06:46:c0: e8:33:ca:f3:ca:0f:42:84:6c:e6:fa:31:be:d6:1b: 50:a3:90:d8:eb:1d:73:94:a2:24:a7:c0:be:30:ad: 69:19:a7:e6:8a:88:df:13:1a:19:44:e1:bc:37:5f: 7e:a1:73:ba:ab:90:20:3c:45:6d:05:89:b9:fd:53: ab:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:05:1B:85:74:BF:0A:42:CD:DC:A6:26:5D:9C:DC:24:B7:20:8B:DA X509v3 Authority Key Identifier: keyid:EE:5A:0A:0A:0D:5E:0F:5C:62:8D:1A:70:5B:5A:C6:8F:EF:20:C4:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7loKCg1eD1xijRpwW1rGj-8gxG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB574/F07EBA26E74111EE93E8FC6DC4F9AE02/7loKCg1eD1xijRpwW1rGj-8gxG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:60:84:aa:b6:42:c0:3e:de:ad:21:98:66:7b:9a:bc:bc:60: 01:b6:a4:64:33:d7:65:18:ec:9f:19:86:2c:8b:5b:90:63:1f: 26:22:0f:02:fa:c1:cd:7c:4b:eb:3a:1e:ca:03:73:b5:1f:b0: 62:66:11:52:e0:14:66:a4:9a:88:59:d2:92:c1:35:69:d4:70: 80:81:39:11:b2:ee:62:cc:d7:7d:58:74:13:7c:09:12:76:9b: 57:b5:81:1c:e1:b3:fa:21:1f:b0:98:70:8b:e2:80:80:a7:f2: 09:ab:bc:5a:f3:87:d7:d4:7c:06:96:e9:a4:be:56:32:53:51: 76:43:52:ab:b2:56:df:f5:01:fb:e1:97:37:c7:84:58:15:77: 11:82:78:30:b2:e0:cc:a0:63:66:af:af:7f:57:5b:cc:e7:cf: ce:66:f3:b4:e4:35:50:19:37:cb:20:f3:03:f7:23:46:ad:b4: 5c:81:a9:61:99:4d:cd:f2:fd:3e:26:ab:7b:ca:29:35:a8:52: aa:b3:60:5b:9a:65:2f:e6:e0:40:b5:56:bb:c4:d0:dc:66:84: 6c:ec:5d:2e:22:0f:ae:f1:ff:a6:3a:15:34:d6:c8:3c:9b:4d: 4b:17:fe:8a:bb:bf:24:74:d7:f0:fd:60:b6:c5:14:f4:a4:ed: 5e:0b:a6:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI1NzQxMTAvBgNVBAUTKEVFNUEwQTBBMEQ1RTBGNUM2MjhEMUE3MDVCNUFDNjhG RUYyMEM0NkYwHhcNMjUwNzE5MDUyNDUxWhcNMjUwNzI2MDUyNDUxWjAYMRYwFAYD VQQDEw02ODdiMmMyNC1hYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDNrmUpf6d+ZTQxGo1+aHaFy5Xls+U2vXzqee4g224w9bLBPce+0OT9vYyhJ 6Rkx1ksgeqWhaQtvRZKJsghI5+W8l5uE0OKNNulvEIvb9VZ9eS4fyt1bYSyHaFLR w0pXpYkUGps85JhpkHNslpPCdUZLlTsHIf0xGBICNJVbwkAjL6s/Xrm2ii3bFdgD 3URJA8GV0g7vPSVdoJaA73GsMv1PkqrbbJpr4uvNmJiiVqt4CeKjcEF0oTr8jv5p jS8GRsDoM8rzyg9ChGzm+jG+1htQo5DY6x1zlKIkp8C+MK1pGafmiojfExoZROG8 N19+oXO6q5AgPEVtBYm5/VOrMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEFG4V0 vwpCzdymJl2c3CS3IIvaMB8GA1UdIwQYMBaAFO5aCgoNXg9cYo0acFtaxo/vIMRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjU3NC9GMDdFQkEyNkU3 NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQxeGlqUnB3VzFyR2otOGd4 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsb0tDZzFlRDF4aWpScHdXMXJHai04Z3hHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjU3NC9GMDdFQkEyNkU3NDExMUVFOTNFOEZDNkRDNEY5QUUwMi83bG9LQ2cxZUQx eGlqUnB3VzFyR2otOGd4RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbYISqtkLAPt6tIZhme5q8vGABtqRkM9dlGOyfGYYsi1uQYx8mIg8C +sHNfEvrOh7KA3O1H7BiZhFS4BRmpJqIWdKSwTVp1HCAgTkRsu5izNd9WHQTfAkS dptXtYEc4bP6IR+wmHCL4oCAp/IJq7xa84fX1HwGlumkvlYyU1F2Q1Krslbf9QH7 4Zc3x4RYFXcRgngwsuDMoGNmr69/V1vM58/OZvO05DVQGTfLIPMD9yNGrbRcgalh mU3N8v0+Jqt7yik1qFKqs2BbmmUv5uBAtVa7xNDcZoRs7F0uIg+u8f+mOhU01sg8 m01LF/6Ku78kdNfw/WC2xRT0pO1eC6YH -----END CERTIFICATE-----Generated at Sun Jul 20 03:19:17 2025 by rpki-client