$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft File: r7CNb36XeFtvMRce-C4xux0G4uM.mft (raw, json) Hash identifier: 5RAnTBDyS3WTxEH6N8NHbubHWseUxaiTX0ALyAxanPI= Subject key identifier: 20:DF:80:EB:90:70:D6:D1:8C:CD:91:64:6E:83:5F:3A:6D:C7:6C:84 Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 Certificate issuer: /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Certificate serial: 149A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft Manifest number: 147C Signing time: Sun 20 Jul 2025 16:55:36 +0000 Manifest this update: Sun 20 Jul 2025 16:55:36 +0000 Manifest next update: Sun 27 Jul 2025 16:55:36 +0000 Files and hashes: 1: r7CNb36XeFtvMRce-C4xux0G4uM.crl (hash: AEdFHKrHSHEqG3Yp0YV99tMRrZ9gQ9HGOsCOOep4pog=) 2: 4EED8CBE029911EF96760924C4F9AE02.roa (hash: nVELww+GgEMji9swA1+nobEPfsSUHSJgjMoFUJZQMqM=) 3: CC2A0136F58C11EEB142585CC4F9AE02.roa (hash: NmgnSbqhNrVMFG4Dg8/Hr5BSKbryNdhaQqVsZnbZ5iU=) 4: A0375A56964511EF9481CA74C4F9AE02.roa (hash: kEtEyPhK0r3E14+zMjIhhxmIsJuQscWu62026oNy4Ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5274 (0x149a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3 Validity Not Before: Jul 20 16:55:36 2025 GMT Not After : Jul 27 16:55:36 2025 GMT Subject: CN=687d1f88-adb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:76:39:03:d2:02:51:40:7b:ad:8f:79:1c: f2:88:99:00:e9:b7:16:a2:86:c1:14:87:11:50:00: 7a:38:78:c6:7e:f1:79:24:2f:75:dd:3e:04:06:ec: 06:cf:59:c8:ac:89:d9:44:93:a4:29:06:ae:5b:9b: e8:9b:47:af:8d:b9:a4:d9:44:4d:8e:24:d7:a0:a0: 77:f2:c5:f4:cc:81:69:a5:e2:ba:15:c4:d9:ec:69: 66:bf:77:14:b9:24:4a:c3:12:56:3b:24:62:ad:fd: 30:85:99:ea:e2:23:83:63:4c:1f:9e:13:a3:a3:7b: 2a:3f:54:83:b5:af:fe:47:a3:2c:00:18:13:1f:61: 83:6b:ea:29:56:9b:87:b8:0a:5d:1d:7f:2f:93:df: a7:f5:aa:31:83:22:c2:df:89:ef:95:ac:5b:b7:26: 8e:2e:ce:74:fe:14:b4:d8:5f:26:92:8e:e8:d2:1e: f7:0e:af:c7:e9:37:f0:df:73:a0:fe:f9:e2:87:26: f2:53:59:55:95:0d:d1:2c:11:92:9d:b2:d5:10:d2: f7:92:09:d9:90:61:8e:ba:4f:30:0a:92:cb:a7:e7: b0:d6:e2:4a:ac:30:90:d2:da:9a:88:a5:af:47:14: 0d:94:6a:60:6f:ca:19:53:b1:b1:ab:c8:be:80:60: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DF:80:EB:90:70:D6:D1:8C:CD:91:64:6E:83:5F:3A:6D:C7:6C:84 X509v3 Authority Key Identifier: keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:da:3b:83:22:ab:2e:f3:9d:d4:fd:33:91:02:71:70:2b:71: 2e:46:78:29:d1:4b:05:6d:25:3e:57:3e:f5:df:d1:f8:56:94: c0:74:b4:fe:b9:6b:86:5d:d8:e2:f7:87:8e:21:86:54:c0:64: ff:f6:e5:21:00:e5:0a:3d:ce:93:52:44:38:7b:cd:11:24:17: 15:af:09:68:a8:f1:07:16:ce:47:36:01:aa:70:37:f5:e2:fd: 00:de:c3:04:57:9a:d6:a4:ce:a1:fa:09:50:ef:63:ff:14:e2: f9:72:66:b6:a6:59:96:7a:ee:f8:e0:57:08:0b:4a:27:63:29: f4:27:f4:68:5e:f8:3c:0e:1b:16:7d:40:c0:0c:ba:c1:88:83: 71:03:39:c0:9f:b2:33:69:25:3e:d0:90:92:e9:e4:6f:38:e1: a9:e4:b0:32:d2:58:8c:06:31:c3:c7:61:3d:cc:8b:f1:31:f2: fb:5a:4a:15:39:ac:3e:c5:0f:3e:d3:15:9b:ac:db:f8:6a:5f: 76:55:ab:8c:16:19:11:f2:ee:12:6a:d1:7f:22:56:ba:51:d9: 84:45:d3:42:08:e5:02:db:04:ad:b8:20:1c:cb:42:61:c4:e4: a0:d7:01:6f:15:87:41:46:91:6e:69:26:67:9c:f1:28:5c:24: 25:e4:d0:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCMTUxMTAvBgNVBAUTKEFGQjA4RDZGN0U5Nzc4NUI2RjMxMTcxRUY4MkUzMUJC MUQwNkUyRTMwHhcNMjUwNzIwMTY1NTM2WhcNMjUwNzI3MTY1NTM2WjAYMRYwFAYD VQQDEw02ODdkMWY4OC1hZGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwId2OQPSAlFAe62PeRzyiJkA6bcWoobBFIcRUAB6OHjGfvF5JC913T4EBuwG z1nIrInZRJOkKQauW5vom0evjbmk2URNjiTXoKB38sX0zIFppeK6FcTZ7Glmv3cU uSRKwxJWOyRirf0whZnq4iODY0wfnhOjo3sqP1SDta/+R6MsABgTH2GDa+opVpuH uApdHX8vk9+n9aoxgyLC34nvlaxbtyaOLs50/hS02F8mko7o0h73Dq/H6Tfw33Og /vnihybyU1lVlQ3RLBGSnbLVENL3kgnZkGGOuk8wCpLLp+ew1uJKrDCQ0tqaiKWv RxQNlGpgb8oZU7Gxq8i+gGAoewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDfgOuQ cNbRjM2RZG6DXzptx2yEMB8GA1UdIwQYMBaAFK+wjW9+l3hbbzEXHvguMbsdBuLj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0IxNS9GQUY2RkQ3ODcx RTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVGdHZNUmNlLUM0eHV4MEc0 dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I3Q05iMzZYZUZ0dk1SY2UtQzR4dXgwRzR1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0IxNS9GQUY2RkQ3ODcxRTYxMUU4OTk2RTJFNjRDNEY5QUUwMi9yN0NOYjM2WGVG dHZNUmNlLUM0eHV4MEc0dU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE2juDIqsu853U/TORAnFwK3EuRngp0UsFbSU+Vz7139H4VpTAdLT+ uWuGXdji94eOIYZUwGT/9uUhAOUKPc6TUkQ4e80RJBcVrwloqPEHFs5HNgGqcDf1 4v0A3sMEV5rWpM6h+glQ72P/FOL5cma2plmWeu744FcIC0onYyn0J/RoXvg8DhsW fUDADLrBiINxAznAn7IzaSU+0JCS6eRvOOGp5LAy0liMBjHDx2E9zIvxMfL7WkoV Oaw+xQ8+0xWbrNv4al92VauMFhkR8u4SatF/Ila6UdmERdNCCOUC2wStuCAcy0Jh xOSg1wFvFYdBRpFuaSZnnPEoXCQl5NBK -----END CERTIFICATE-----Generated at Mon Jul 21 06:52:35 2025 by rpki-client