$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft File: c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft (raw, json) Hash identifier: p6ifWMzaUUnHu/vBB0RFc+aBQI11O1DaTn2T8qIBFms= Subject key identifier: 75:12:1B:69:F6:30:CA:68:81:D4:79:E2:C1:A9:E8:E7:1C:63:0A:0A Authority key identifier: 73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 Certificate issuer: /CN=A91B2492/serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Certificate serial: 0B66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft Manifest number: 0B5C Signing time: Mon 08 Sep 2025 19:07:52 +0000 Manifest this update: Mon 08 Sep 2025 19:07:52 +0000 Manifest next update: Mon 15 Sep 2025 19:07:52 +0000 Files and hashes: 1: c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl (hash: ebKBpT+tSmCpiYu2uQKZdfqH7mOoSP8Y3EOw1XzmJtk=) 2: C8436A008D7B11EDB7EB7F37C4F9AE02.roa (hash: yf7uD6ZoAkwSZ6smBK5+++p61GtYidM7gXgm7RNFP38=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2918 (0xb66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2492, serialNumber=73B561DF3A58976F7FAD997A9BA8DE5F676DCFB2 Validity Not Before: Sep 8 19:07:52 2025 GMT Not After : Sep 15 19:07:52 2025 GMT Subject: CN=68bf2988-fb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:24:e3:7b:42:bf:70:ce:cd:8f:57:ee:12:94: a5:7f:88:12:d3:1c:53:61:e6:a3:98:36:3b:a4:4c: 34:96:2c:56:5b:4b:9c:29:3d:a9:1e:fa:51:8e:36: fe:19:0a:55:fa:e5:81:09:d4:e8:98:9a:08:95:f8: ff:c1:5c:ee:41:3b:28:1b:c0:c8:94:b9:c7:63:06: d5:79:3b:d3:38:4b:a9:bf:eb:6a:7c:a7:46:2d:f3: f5:08:0a:b1:57:02:89:40:61:1c:a5:87:17:10:7e: 37:92:f6:d3:00:32:bc:4f:72:62:4c:ae:b9:79:dd: 54:24:ab:50:f9:84:ae:5d:bc:a7:e4:3b:c6:88:af: 12:00:d8:91:92:7f:61:70:79:7a:e8:f8:2f:34:21: a6:0b:9c:8a:f5:d3:e7:91:9c:68:87:cd:72:a8:11: 01:0c:b5:d0:1d:d5:2d:f4:94:ee:8f:53:1f:d9:a6: 1c:9d:01:66:ee:49:53:6d:7a:7a:3c:d6:a4:64:83: ad:4b:ba:5f:12:2f:8a:7e:d3:77:ae:df:25:81:28: 65:38:71:d1:b8:46:cb:e8:72:d2:14:ba:24:2d:f2: 27:ec:e5:05:22:17:5b:a5:08:d7:4e:5d:18:4e:ba: 33:79:24:c7:17:05:7e:be:95:a8:b2:29:10:8e:91: d3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:12:1B:69:F6:30:CA:68:81:D4:79:E2:C1:A9:E8:E7:1C:63:0A:0A X509v3 Authority Key Identifier: keyid:73:B5:61:DF:3A:58:97:6F:7F:AD:99:7A:9B:A8:DE:5F:67:6D:CF:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7Vh3zpYl29_rZl6m6jeX2dtz7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2492/DAD510D43CB511EAB82CCC6CC4F9AE02/c7Vh3zpYl29_rZl6m6jeX2dtz7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:cc:af:5a:f0:22:12:84:d8:f2:7b:e3:19:b8:bc:5f:f2:21: fd:13:c4:aa:05:f9:a3:21:79:d8:bd:8c:bd:07:60:45:c6:75: 00:d8:34:e3:fa:fb:d8:c6:3b:86:f7:d6:81:fb:dc:66:4a:ee: 1c:37:c8:35:f0:6a:76:f1:c4:f3:35:9f:e0:f7:1d:08:34:2c: c9:00:31:70:f5:0a:ba:c0:d5:7e:00:c1:04:f6:4f:d0:3d:c2: 49:ac:fb:2c:79:a0:31:6e:17:99:97:11:27:43:03:b1:c1:f8: 81:42:72:51:08:7c:1c:cd:d8:de:05:63:a0:08:92:d9:17:24: 72:01:8e:0b:7f:48:99:ef:af:f6:83:26:cf:ab:4b:8d:e5:fb: f0:9e:52:2c:05:c6:bc:35:af:50:48:be:b2:6f:4e:1c:12:da: f7:3b:00:49:2c:d1:7d:d9:d8:3e:b3:49:14:38:f8:49:ea:18: 85:8b:54:5a:00:c9:70:99:ba:72:63:e6:fc:ea:0a:bb:52:77: c0:72:de:f8:bc:3d:5f:df:de:5e:68:6d:1c:e9:e5:36:08:02: 87:80:66:8f:b2:8b:0a:b1:ed:49:d5:66:c1:e0:af:cd:56:5b: 21:2b:1a:7f:2f:d8:4d:15:80:82:2d:80:c9:90:1c:3a:d9:f7: ce:47:a4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI0OTIxMTAvBgNVBAUTKDczQjU2MURGM0E1ODk3NkY3RkFEOTk3QTlCQThERTVG Njc2RENGQjIwHhcNMjUwOTA4MTkwNzUyWhcNMjUwOTE1MTkwNzUyWjAYMRYwFAYD VQQDEw02OGJmMjk4OC1mYjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6iTje0K/cM7Nj1fuEpSlf4gS0xxTYeajmDY7pEw0lixWW0ucKT2pHvpRjjb+ GQpV+uWBCdTomJoIlfj/wVzuQTsoG8DIlLnHYwbVeTvTOEupv+tqfKdGLfP1CAqx VwKJQGEcpYcXEH43kvbTADK8T3JiTK65ed1UJKtQ+YSuXbyn5DvGiK8SANiRkn9h cHl66PgvNCGmC5yK9dPnkZxoh81yqBEBDLXQHdUt9JTuj1Mf2aYcnQFm7klTbXp6 PNakZIOtS7pfEi+KftN3rt8lgShlOHHRuEbL6HLSFLokLfIn7OUFIhdbpQjXTl0Y TrozeSTHFwV+vpWosikQjpHTFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHUSG2n2 MMpogdR54sGp6OccYwoKMB8GA1UdIwQYMBaAFHO1Yd86WJdvf62Zepuo3l9nbc+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjQ5Mi9EQUQ1MTBENDND QjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwyOV9yWmw2bTZqZVgyZHR6 N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3VmgzenBZbDI5X3JabDZtNmplWDJkdHo3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjQ5Mi9EQUQ1MTBENDNDQjUxMUVBQjgyQ0NDNkNDNEY5QUUwMi9jN1ZoM3pwWWwy OV9yWmw2bTZqZVgyZHR6N0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIzK9a8CIShNjye+MZuLxf8iH9E8SqBfmjIXnYvYy9B2BFxnUA2DTj +vvYxjuG99aB+9xmSu4cN8g18Gp28cTzNZ/g9x0INCzJADFw9Qq6wNV+AMEE9k/Q PcJJrPsseaAxbheZlxEnQwOxwfiBQnJRCHwczdjeBWOgCJLZFyRyAY4Lf0iZ76/2 gybPq0uN5fvwnlIsBca8Na9QSL6yb04cEtr3OwBJLNF92dg+s0kUOPhJ6hiFi1Ra AMlwmbpyY+b86gq7UnfAct74vD1f395eaG0c6eU2CAKHgGaPsosKse1J1WbB4K/N VlshKxp/L9hNFYCCLYDJkBw62ffOR6R+ -----END CERTIFICATE-----Generated at Tue Sep 9 22:16:47 2025 by rpki-client