$ rpki-client -vvf rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft File: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft (raw, json) Hash identifier: FlFOWl25mqz7mx6CchqRBtGUvZwyMHgZF8Dt80KtItQ= Subject key identifier: 01:6A:E2:BD:71:2D:6F:62:3D:1E:87:66:01:96:24:95:48:25:7A:2A Authority key identifier: F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 Certificate issuer: /CN=A91B268A/serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Certificate serial: 1263 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft Manifest number: 124B Signing time: Thu 24 Jul 2025 17:26:41 +0000 Manifest this update: Thu 24 Jul 2025 17:26:40 +0000 Manifest next update: Thu 31 Jul 2025 17:26:40 +0000 Files and hashes: 1: -O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl (hash: 01wlRw0gBJNLGEdsD8UxCwO+RuRL1tw6AEMkkczEyOo=) 2: 0AF12B12DDA411E88E25E96FC4F9AE02.roa (hash: u2n7hXJfpPkswx+8ZUw3IUUcjyPvy2JG1QnFE+FNubg=) 3: 801B5CA0D49711EFBF7D3414C4F9AE02.roa (hash: EhJYlBjQzArjJUepcPMKlhW0SwABK8otVcs5MS+goNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4707 (0x1263) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B268A, serialNumber=F8EECE7D3C0CF5922EA3D803553638823FAEEA08 Validity Not Before: Jul 24 17:26:40 2025 GMT Not After : Jul 31 17:26:40 2025 GMT Subject: CN=68826cd1-0cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e5:da:77:ae:f9:e7:9a:73:55:80:0e:10:c8: 02:54:8d:87:a6:5a:9e:ad:02:5e:5b:04:cc:c2:22: 43:e1:9c:8a:af:e5:53:99:4c:49:3b:b7:a8:f3:3e: 30:91:0c:84:d1:8c:79:9f:07:db:6a:74:2b:95:a0: 48:ad:29:ce:9f:3c:3d:27:14:4a:63:6b:ba:19:45: 29:1a:5d:37:df:d4:81:e9:9b:40:b1:0c:0b:d3:44: 80:6f:73:6c:0d:dd:5a:81:fe:5c:fa:a1:a7:ce:c9: 02:8e:4d:0d:5b:bd:44:65:7e:67:e3:a1:37:04:c9: ea:f2:60:f9:3e:4c:a8:70:f1:01:12:b7:2c:c8:53: 16:a4:2a:24:3d:e1:43:6f:e3:45:f7:a2:69:0b:db: 8d:e1:5f:9b:ac:4d:a9:c3:64:d2:39:69:4b:3c:47: 80:e9:05:ac:14:9d:68:88:d6:b8:5f:31:ae:4d:95: da:d0:b1:65:85:2e:24:41:c4:ed:e3:6d:c2:86:61: 71:27:fc:8b:16:aa:60:40:e6:d4:40:d3:80:ad:23: 3d:08:b5:4c:e3:de:b8:80:58:19:12:46:21:e6:48: d8:fd:8c:f5:ce:17:fb:7a:51:24:9b:d9:3f:73:ab: 08:81:fc:73:c0:9f:06:45:fd:7f:57:6e:b7:6c:11: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6A:E2:BD:71:2D:6F:62:3D:1E:87:66:01:96:24:95:48:25:7A:2A X509v3 Authority Key Identifier: keyid:F8:EE:CE:7D:3C:0C:F5:92:2E:A3:D8:03:55:36:38:82:3F:AE:EA:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B268A/84FB4C9CDDA111E8A2E78A69C4F9AE02/-O7OfTwM9ZIuo9gDVTY4gj-u6gg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:25:0e:1a:79:37:1c:a0:4d:9d:61:62:ed:5c:3a:eb:8e:63: 29:d7:18:97:e7:12:08:d3:fc:51:04:dd:6a:45:b2:b2:75:af: ae:9e:c9:cf:b0:7a:97:49:54:6f:2f:84:77:e2:e8:2d:41:4e: cd:30:54:3a:66:f5:40:52:9a:17:30:b9:32:9a:3f:96:31:05: b9:fa:ba:d3:54:2a:64:a0:aa:1c:ab:ae:11:ac:ad:65:78:b6: 1f:c7:84:c2:1a:48:87:b0:aa:24:96:f0:4c:41:93:b9:43:a5: 8b:8a:68:ce:1e:68:ca:0c:ed:98:71:75:f8:c2:4b:c7:b2:a1: c0:54:3e:76:81:53:b1:45:e3:a3:f6:d9:af:90:35:3e:bc:92: 13:02:e5:87:f9:97:8c:47:b4:ea:f3:4a:d6:22:fb:b5:07:f6: f7:b9:fb:c5:76:4c:72:a8:71:1e:50:1c:27:dd:63:61:ec:f6: 29:12:72:f5:ad:03:e6:70:7b:7e:ef:88:57:35:3e:ec:02:29: f4:c5:49:2b:a2:81:f8:fb:0b:79:fe:d4:53:a5:ef:d2:29:b3: 65:53:1e:30:09:7e:74:47:2c:63:ca:cd:1a:53:5e:47:f7:bb: 05:f1:1c:c4:54:07:fa:9c:c8:2d:6a:ce:e6:0c:78:a3:2b:44: 75:5b:8a:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjI2OEExMTAvBgNVBAUTKEY4RUVDRTdEM0MwQ0Y1OTIyRUEzRDgwMzU1MzYzODgy M0ZBRUVBMDgwHhcNMjUwNzI0MTcyNjQwWhcNMjUwNzMxMTcyNjQwWjAYMRYwFAYD VQQDEw02ODgyNmNkMS0wY2YxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveXad67555pzVYAOEMgCVI2HplqerQJeWwTMwiJD4ZyKr+VTmUxJO7eo8z4w kQyE0Yx5nwfbanQrlaBIrSnOnzw9JxRKY2u6GUUpGl0339SB6ZtAsQwL00SAb3Ns Dd1agf5c+qGnzskCjk0NW71EZX5n46E3BMnq8mD5PkyocPEBErcsyFMWpCokPeFD b+NF96JpC9uN4V+brE2pw2TSOWlLPEeA6QWsFJ1oiNa4XzGuTZXa0LFlhS4kQcTt 423ChmFxJ/yLFqpgQObUQNOArSM9CLVM4964gFgZEkYh5kjY/Yz1zhf7elEkm9k/ c6sIgfxzwJ8GRf1/V263bBGbFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFq4r1x LW9iPR6HZgGWJJVIJXoqMB8GA1UdIwQYMBaAFPjuzn08DPWSLqPYA1U2OII/ruoI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjY4QS84NEZCNEM5Q0RE QTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTlaSXVvOWdEVlRZNGdqLXU2 Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1PN09mVHdNOVpJdW85Z0RWVFk0Z2otdTZnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjY4QS84NEZCNEM5Q0REQTExMUU4QTJFNzhBNjlDNEY5QUUwMi8tTzdPZlR3TTla SXVvOWdEVlRZNGdqLXU2Z2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqJQ4aeTccoE2dYWLtXDrrjmMp1xiX5xII0/xRBN1qRbKyda+unsnP sHqXSVRvL4R34ugtQU7NMFQ6ZvVAUpoXMLkymj+WMQW5+rrTVCpkoKocq64RrK1l eLYfx4TCGkiHsKoklvBMQZO5Q6WLimjOHmjKDO2YcXX4wkvHsqHAVD52gVOxReOj 9tmvkDU+vJITAuWH+ZeMR7Tq80rWIvu1B/b3ufvFdkxyqHEeUBwn3WNh7PYpEnL1 rQPmcHt+74hXNT7sAin0xUkrooH4+wt5/tRTpe/SKbNlUx4wCX50Ryxjys0aU15H 97sF8RzEVAf6nMgtas7mDHijK0R1W4pt -----END CERTIFICATE-----Generated at Sat Jul 26 00:45:21 2025 by rpki-client