$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: Grtz6zdXeIgcsLvrPZUZyA7xpIzXuewTwkdfnINrudE= Subject key identifier: 2D:41:A6:22:3F:89:6D:40:4B:2A:9E:8F:DE:05:A4:11:63:25:CC:CB Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 15 Signing time: Mon 21 Jul 2025 08:22:24 +0000 Manifest this update: Mon 21 Jul 2025 08:22:23 +0000 Manifest next update: Mon 28 Jul 2025 08:22:23 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: 6dstRpe/yGCa799LuKhqBlgLbzDvogwLrrhwohx/nbI=) 2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=) 3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=) 4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 08:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Jul 21 08:22:23 2025 GMT Not After : Jul 28 08:22:23 2025 GMT Subject: CN=687df8c0-3d54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:4d:e7:9a:ce:73:c2:90:cd:94:e0:c2:e9: 8c:bc:3c:c4:fc:a3:58:d6:1f:54:88:f5:f6:fe:03: df:2c:5d:87:8b:e5:b1:5a:0e:83:7e:67:df:75:85: 45:c1:17:7d:6f:a6:4d:f0:90:7b:15:0f:08:64:d8: 44:f2:4e:5d:84:e5:43:3a:b4:ff:40:79:14:f6:6d: a1:34:6e:5a:9a:08:63:06:85:d4:0f:75:d5:19:96: d0:03:ad:6e:fe:2f:b0:f6:df:42:66:65:d0:f4:e5: 7e:f9:12:7b:c7:7a:b6:19:27:ad:a6:51:27:4a:50: eb:f1:08:9f:b9:2a:f9:3b:24:d8:7a:65:1d:3a:0f: 9b:1f:f4:cf:b4:c6:8d:6f:1f:ac:c1:4e:8f:eb:3b: 6a:75:63:78:c7:af:5b:16:43:45:8e:a0:e6:93:50: 70:2e:f5:35:4f:e1:0c:b4:bf:2f:00:7c:58:a0:86: 58:34:29:30:9f:5c:8e:7a:f8:80:fd:8c:a5:d2:95: 55:89:03:ff:de:31:4b:c6:e7:49:6f:73:e0:4b:f9: 0e:b9:16:5d:7d:7b:93:0f:1b:cd:85:1d:a8:f5:9d: 32:7c:46:c4:0b:d3:78:dd:e1:19:36:b4:bc:b1:04: ae:29:0f:cd:af:8d:9f:09:94:45:c2:df:02:3d:61: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:41:A6:22:3F:89:6D:40:4B:2A:9E:8F:DE:05:A4:11:63:25:CC:CB X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:e6:d9:a6:33:da:6a:b6:2a:09:5f:d9:b8:8e:cf:72:32:18: e7:c6:7b:e4:1c:56:f6:5e:52:eb:68:17:b9:a2:49:40:65:42: 51:a9:69:29:66:7a:1e:60:0c:e7:fc:7c:80:8e:f9:17:d2:2d: e6:42:6e:15:f8:f0:f6:09:e6:46:18:3e:b8:d5:3e:25:10:26: c9:57:01:fa:15:09:34:c9:a2:e0:6e:0a:24:5d:35:57:d8:52: 19:05:fc:fd:4d:cb:12:cd:8a:66:7d:c7:15:61:0e:2a:ea:c8: ca:96:f8:0c:21:c2:41:75:53:1d:69:19:79:b2:d2:53:2b:23: 7b:34:f0:d0:f5:ed:b1:e7:40:4f:19:be:86:a9:d7:19:c5:cc: 41:e0:23:6f:1d:cf:ad:94:14:cb:6d:9d:79:66:23:49:1f:33: 74:26:f8:1e:b2:96:51:aa:73:ae:ec:cd:28:91:37:c1:5b:e6: 40:07:ee:25:0c:9f:9d:cc:00:17:b2:61:5e:f6:7b:97:d0:1d: 19:e3:b8:7f:43:80:4b:1e:5f:70:17:d7:7e:81:a4:0f:f3:3d: 29:90:a5:71:5c:c7:ba:b2:d5:63:26:8a:c9:ec:64:6a:70:6a: 6e:0f:c7:d2:54:7a:5e:74:67:05:ce:f3:b6:de:4c:9a:45:4b: 81:da:e2:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTA3MjEwODIyMjNaFw0yNTA3MjgwODIyMjNaMBgxFjAUBgNV BAMTDTY4N2RmOGMwLTNkNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxpE3nms5zwpDNlODC6Yy8PMT8o1jWH1SI9fb+A98sXYeL5bFaDoN+Z991hUXB F31vpk3wkHsVDwhk2ETyTl2E5UM6tP9AeRT2baE0blqaCGMGhdQPddUZltADrW7+ L7D230JmZdD05X75EnvHerYZJ62mUSdKUOvxCJ+5Kvk7JNh6ZR06D5sf9M+0xo1v H6zBTo/rO2p1Y3jHr1sWQ0WOoOaTUHAu9TVP4Qy0vy8AfFighlg0KTCfXI56+ID9 jKXSlVWJA//eMUvG50lvc+BL+Q65Fl19e5MPG82FHaj1nTJ8RsQL03jd4Rk2tLyx BK4pD82vjZ8JlEXC3wI9YaEnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULUGmIj+J bUBLKp6P3gWkEWMlzMswHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0M1REFCRUVBNUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNO Z0RGdE9lVF8wMUh0bEJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEXm2aYz2mq2Kglf2biOz3IyGOfGe+QcVvZeUutoF7miSUBlQlGpaSlm eh5gDOf8fICO+RfSLeZCbhX48PYJ5kYYPrjVPiUQJslXAfoVCTTJouBuCiRdNVfY UhkF/P1NyxLNimZ9xxVhDirqyMqW+AwhwkF1Ux1pGXmy0lMrI3s08ND17bHnQE8Z voap1xnFzEHgI28dz62UFMttnXlmI0kfM3Qm+B6yllGqc67szSiRN8Fb5kAH7iUM n53MABeyYV72e5fQHRnjuH9DgEseX3AX136BpA/zPSmQpXFcx7qy1WMmisnsZGpw am4Px9JUel50ZwXO87beTJpFS4Ha4nc= -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:27 2025 by rpki-client