$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: rPscAfu4ODNPFhPwIC5gjMR7atR1ZsvDGnU6Icu+RHY= Subject key identifier: B3:34:40:CC:7C:9D:D9:CD:C2:F1:A3:FD:E0:30:17:4E:D1:BF:FC:F6 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0AA3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0A9D Signing time: Fri 18 Jul 2025 19:46:36 +0000 Manifest this update: Fri 18 Jul 2025 19:46:35 +0000 Manifest next update: Fri 25 Jul 2025 19:46:35 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: CWeHBkAh1v0BLut3K1ibUjcY+PJCrkeugzaWMLQYLuY=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2723 (0xaa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Jul 18 19:46:35 2025 GMT Not After : Jul 25 19:46:35 2025 GMT Subject: CN=687aa49c-8775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:a5:7b:f5:4c:a0:96:bf:d3:ea:c1:3a:9a: a1:c3:c6:98:7a:fc:bd:28:8b:4d:47:e4:e3:18:70: d3:5c:87:c0:55:33:c9:57:71:27:43:7f:65:2b:0d: 15:53:46:e7:e6:95:b1:c0:9e:01:f9:e8:33:c9:c9: 8d:d2:d4:3b:72:18:c6:2e:f0:75:8e:31:71:b1:4b: cd:01:9d:8e:f2:f3:70:04:d6:d4:0d:65:7a:53:c4: 22:3f:be:59:86:96:08:36:51:64:a1:6a:55:93:d4: b9:22:ee:14:ab:da:fe:ac:f1:4c:41:7a:08:7d:a7: 1f:86:c7:32:22:7b:62:36:31:94:b7:ef:4e:d1:8a: 6d:1c:97:e1:d2:6b:34:8f:f9:58:d8:7d:bf:8c:1a: e4:75:70:75:ad:f3:88:dc:d9:38:5a:57:9b:d3:04: 57:93:7e:db:09:f5:ee:d0:6d:75:f3:e6:ca:fd:87: 36:58:fd:b7:80:a1:e4:ec:23:4d:43:56:87:d5:74: d4:ad:82:a4:03:59:5f:e0:b4:ed:c9:bc:28:df:a6: 34:24:fb:8c:b6:e3:e6:2b:3a:c6:71:5c:94:2d:3c: 8c:9e:17:57:72:f6:70:96:a3:b3:71:f5:91:b3:38: 0a:62:4c:90:89:01:a9:41:11:00:57:1a:b8:86:f2: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:34:40:CC:7C:9D:D9:CD:C2:F1:A3:FD:E0:30:17:4E:D1:BF:FC:F6 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:1d:5a:00:d5:54:2c:4b:f5:73:51:3e:17:a2:32:12:c8:1d: 74:97:6e:3a:55:83:87:b6:ad:d5:72:96:be:3f:5a:6f:bf:25: 53:07:2e:24:4a:7d:d3:9b:a0:f6:69:6b:93:9e:1a:3d:14:0e: 81:06:ac:fd:14:5a:f8:11:c0:e2:40:27:93:9e:19:a5:1f:54: 6a:91:19:34:c9:f4:e7:1b:8f:bf:eb:ac:f9:58:67:65:59:a7: c7:9d:20:5b:fb:24:8d:73:af:31:17:9e:4e:c5:17:26:ce:84: 55:c7:82:92:d4:c0:06:cf:74:34:fc:75:72:4d:e9:25:b3:11: 1f:00:e8:83:cb:36:44:fc:0f:30:1c:88:ec:77:85:f7:ee:ec: 90:57:9f:af:dc:d2:88:72:84:71:43:e0:c5:fc:0b:ca:db:66: 14:b0:88:47:45:f9:9a:80:3c:fb:17:de:38:83:07:b6:80:65: ac:fd:e0:18:55:ca:57:e9:88:df:b4:b4:5e:c6:07:4f:4c:a4: 52:22:2a:87:3b:ee:4a:5e:5b:05:85:60:3e:65:71:0e:9b:32: e4:6e:f8:20:3c:f6:16:f1:3b:45:94:7f:4d:a8:29:ac:9f:4a: 97:16:ab:b4:c3:29:f8:f4:fa:13:92:3d:95:e8:15:fa:69:7f: 99:d1:02:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwNzE4MTk0NjM1WhcNMjUwNzI1MTk0NjM1WjAYMRYwFAYD VQQDEw02ODdhYTQ5Yy04Nzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusSle/VMoJa/0+rBOpqhw8aYevy9KItNR+TjGHDTXIfAVTPJV3EnQ39lKw0V U0bn5pWxwJ4B+egzycmN0tQ7chjGLvB1jjFxsUvNAZ2O8vNwBNbUDWV6U8QiP75Z hpYINlFkoWpVk9S5Iu4Uq9r+rPFMQXoIfacfhscyIntiNjGUt+9O0YptHJfh0ms0 j/lY2H2/jBrkdXB1rfOI3Nk4Wleb0wRXk37bCfXu0G118+bK/Yc2WP23gKHk7CNN Q1aH1XTUrYKkA1lf4LTtybwo36Y0JPuMtuPmKzrGcVyULTyMnhdXcvZwlqOzcfWR szgKYkyQiQGpQREAVxq4hvKLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLM0QMx8 ndnNwvGj/eAwF07Rv/z2MB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjHVoA1VQsS/VzUT4XojISyB10l246VYOHtq3Vcpa+P1pvvyVTBy4k Sn3Tm6D2aWuTnho9FA6BBqz9FFr4EcDiQCeTnhmlH1RqkRk0yfTnG4+/66z5WGdl WafHnSBb+ySNc68xF55OxRcmzoRVx4KS1MAGz3Q0/HVyTeklsxEfAOiDyzZE/A8w HIjsd4X37uyQV5+v3NKIcoRxQ+DF/AvK22YUsIhHRfmagDz7F944gwe2gGWs/eAY VcpX6YjftLRexgdPTKRSIiqHO+5KXlsFhWA+ZXEOmzLkbvggPPYW8TtFlH9NqCms n0qXFqu0wyn49PoTkj2V6BX6aX+Z0QKQ -----END CERTIFICATE-----Generated at Sun Jul 20 04:31:41 2025 by rpki-client