$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: 4MPjGZ2QFS3Y49JzZyqtK2+KSxWlc7j1toaz5wImO7w= Subject key identifier: 22:3B:C3:D1:92:0C:0C:58:66:F1:E1:16:70:01:8E:52:DE:C8:7D:8F Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 7D Signing time: Sat 19 Jul 2025 06:56:31 +0000 Manifest this update: Sat 19 Jul 2025 06:56:30 +0000 Manifest next update: Sat 26 Jul 2025 06:56:30 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: BqHPAMIUDXCcIONiMfxuzCwzbbK1RG8gmdQR7WZDVlk=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Jul 19 06:56:30 2025 GMT Not After : Jul 26 06:56:30 2025 GMT Subject: CN=687b419f-5908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:39:f4:23:ee:41:8e:0f:09:04:85:0e:9f:86: 43:39:c6:49:d4:8f:1d:af:62:fa:fb:85:e2:da:40: 77:06:fe:7d:3f:38:37:23:21:18:02:cc:ac:34:27: 52:b9:1d:d7:3e:a1:4b:d6:d0:13:31:a3:26:ec:71: a0:b3:2d:0b:c8:40:37:7c:37:e9:25:f7:00:1a:29: 5d:10:4c:e5:a9:14:4f:77:6a:ee:0e:a6:c9:ab:70: 4e:25:3a:be:2d:00:3c:02:06:40:14:cd:33:6b:e5: 83:4f:90:05:d7:b4:81:d2:11:ac:1d:f6:83:75:e9: 82:06:46:d1:70:93:dd:5d:c3:85:b9:bb:b1:85:f4: 13:c1:e3:b4:5e:22:bf:20:3f:d1:ad:11:c3:e5:50: 60:61:b9:15:4d:ae:91:22:d4:36:68:fa:3f:6e:67: 1c:63:c9:a0:3e:4c:c4:84:a4:b7:c7:91:da:eb:32: 78:9b:dd:26:76:96:ba:88:7e:5c:4e:ad:62:54:04: 58:38:0a:59:03:e3:ec:4e:c2:91:3f:23:a0:1c:ec: 5f:62:08:10:7c:c3:f0:5d:48:0d:12:c6:8d:55:26: a2:ed:b6:55:98:23:25:ba:cb:9f:b6:89:31:46:df: f8:33:dc:c6:5a:30:8a:29:7d:d5:6e:99:4b:30:20: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3B:C3:D1:92:0C:0C:58:66:F1:E1:16:70:01:8E:52:DE:C8:7D:8F X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:a3:99:8f:b4:11:4b:e1:b1:5b:6c:2a:72:9f:e7:a5:6b:a6: ca:f3:47:50:28:48:1e:20:72:42:7a:47:35:a6:29:ab:4e:c4: 1f:c8:fd:4f:1d:14:04:57:d7:99:64:ea:2c:c8:50:0a:9b:5e: fc:07:41:87:f8:26:df:fc:62:3b:6f:e4:c5:61:4a:c8:25:2a: 5b:04:a2:cf:95:b9:ed:45:e4:4c:13:fa:6b:f4:ee:7f:e7:03: 12:0a:89:76:3e:4c:63:aa:26:15:43:e7:2b:4d:6b:4f:31:e7: 66:8e:66:30:15:68:0b:9c:78:38:d7:ee:2f:bd:47:91:4a:11: 96:81:f7:46:e7:aa:28:b9:10:d7:f7:06:52:0c:68:7f:22:63: 68:e5:9d:b8:7f:3b:1b:dc:fa:20:60:24:f5:ac:0f:6d:e4:54: 37:e9:3e:b0:aa:59:56:63:fa:3e:71:a4:5f:7d:44:fd:8c:27: 9a:66:f4:45:00:dc:e8:57:a6:0f:32:ce:b6:ae:0d:38:48:38: 10:7e:8a:7e:b6:e2:e7:4c:4c:f2:ae:98:a6:df:a0:02:5f:27: 72:a0:cb:43:fb:07:81:a2:4c:2c:7d:e4:d1:27:8a:17:96:77: 2d:ad:2e:39:4e:76:35:c6:a9:96:05:cd:fc:8d:ba:4d:46:9e: a5:5d:00:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoRjA0OTI5RUY3NDNDNTRDMDhCNDVFMTlDRkM1MUJGMkFB NTU5REFBMTAeFw0yNTA3MTkwNjU2MzBaFw0yNTA3MjYwNjU2MzBaMBgxFjAUBgNV BAMTDTY4N2I0MTlmLTU5MDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEOfQj7kGODwkEhQ6fhkM5xknUjx2vYvr7heLaQHcG/n0/ODcjIRgCzKw0J1K5 Hdc+oUvW0BMxoybscaCzLQvIQDd8N+kl9wAaKV0QTOWpFE93au4OpsmrcE4lOr4t ADwCBkAUzTNr5YNPkAXXtIHSEawd9oN16YIGRtFwk91dw4W5u7GF9BPB47ReIr8g P9GtEcPlUGBhuRVNrpEi1DZo+j9uZxxjyaA+TMSEpLfHkdrrMnib3SZ2lrqIflxO rWJUBFg4ClkD4+xOwpE/I6Ac7F9iCBB8w/BdSA0Sxo1VJqLttlWYIyW6y5+2iTFG 3/gz3MZaMIopfdVumUswIEvhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIjvD0ZIM DFhm8eEWcAGOUt7IfY8wHwYDVR0jBBgwFoAU8Ekp73Q8VMCLReGc/FG/KqVZ2qEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzhDMjE0OTc0QTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEVrcDczUThWTUNMUmVHY19GR19LcVZaMnFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx NjVGLzhDMjE0OTc0QTRCMzExRUY4ODlDNzY4N0M0RjlBRTAyLzhFa3A3M1E4Vk1D TFJlR2NfRkdfS3FWWjJxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALOjmY+0EUvhsVtsKnKf56VrpsrzR1AoSB4gckJ6RzWmKatOxB/I/U8d FARX15lk6izIUAqbXvwHQYf4Jt/8Yjtv5MVhSsglKlsEos+Vue1F5EwT+mv07n/n AxIKiXY+TGOqJhVD5ytNa08x52aOZjAVaAuceDjX7i+9R5FKEZaB90bnqii5ENf3 BlIMaH8iY2jlnbh/Oxvc+iBgJPWsD23kVDfpPrCqWVZj+j5xpF99RP2MJ5pm9EUA 3OhXpg8yzrauDThIOBB+in624udMTPKumKbfoAJfJ3Kgy0P7B4GiTCx95NEniheW dy2tLjlOdjXGqZYFzfyNuk1GnqVdAN4= -----END CERTIFICATE-----Generated at Sun Jul 20 07:40:39 2025 by rpki-client