$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft File: t7c-ibYhCBYJzWiasK73-vFIkmw.mft (raw, json) Hash identifier: 4mlUvi9lKlki4ds8JQNNd6LiBDTUSmbtIrZKSJQl+/g= Subject key identifier: C3:88:15:16:10:CA:A4:13:18:8A:7E:4B:2B:0A:57:D4:44:08:02:88 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2656 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft Manifest number: 25D0 Signing time: Fri 18 Jul 2025 15:51:00 +0000 Manifest this update: Fri 18 Jul 2025 15:50:59 +0000 Manifest next update: Fri 25 Jul 2025 15:50:59 +0000 Files and hashes: 1: t7c-ibYhCBYJzWiasK73-vFIkmw.crl (hash: dfk7Uf+xQQAtcA6q4xXR2lFaB2WxmfbQLpMSovHcNek=) 2: C9848396CD1711ED898C311FC4F9AE02.roa (hash: qiiCfqFkoE73eTUuEAWAlpV2z6GCWd7ckeeiGxi5A4g=) 3: AEEA3AE45BF611E984E25E54C4F9AE02.roa (hash: 8E9asmBCPDP2vspF6SfkqxDFa3zUOjR86wRCRSbANb0=) 4: BE402F16707F11EDBD17DD28C4F9AE02.roa (hash: OnnEcT/kT/2u+quSNu4e6UQE5EuukB+yT7k1rnta/B8=) 5: 4A479BB45A7911E998A6BE80C4F9AE02.roa (hash: 7w5j+dyzSy7t29HEAco9XLxp6MYZWlL3SdlWBrNw0GY=) 6: 1A982CC85A7C11E9A28B110DC4F9AE02.roa (hash: rA4hkIUyghNJGhY6y7qlDGe8Bvu+DeS8X5hf3GA24oo=) 7: 6223956A752011ED84F8CD3CC4F9AE02.roa (hash: qP1taxaDkzPIRlzYJOWEFK27iFdTzqw6PgRMtNqW7DY=) 8: 8F92939C46C711E9A5547325C4F9AE02.roa (hash: OMcalDpUDIv29WHDH5fBd3k9KPtvhZaxcTh0ykbSM4A=) 9: 3824883E72ED11EE812CE764C4F9AE02.roa (hash: SGtpHicj9fj12PvzOePuISsi6bvGYuZWMeMkAXSkEcc=) 10: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (hash: R4Hu6VZOII2INVF3IDAiNevmkDezpOVd/aGcqQwbfzw=) 11: FF145268EEAB11EFAD1FDC0CC4F9AE02.roa (hash: BUsQ5wBegaz/A2q7GTFIUHkDuT4PXl4dcLWVKVnr0mQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 15:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9814 (0x2656) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Jul 18 15:50:59 2025 GMT Not After : Jul 25 15:50:59 2025 GMT Subject: CN=687a6d63-029e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:d4:29:c7:85:02:61:db:b3:99:94:42:08: 66:b2:02:38:d7:cf:c6:f5:36:9b:8e:64:d6:3f:83: 1b:bc:30:5f:16:d0:a5:c0:82:1f:e1:b6:fc:58:71: c0:63:e2:91:04:19:be:9a:bc:50:25:f3:62:72:50: 5a:b6:52:b2:63:4a:99:87:03:99:0a:55:df:c7:5b: f5:88:36:78:7d:e7:9a:a5:cc:24:c8:ce:81:2b:81: b2:3e:ea:09:6e:15:40:4d:c8:87:7f:7a:e2:eb:f8: 55:f8:54:26:a2:86:7d:0d:24:f7:80:65:b0:13:fa: 8d:37:6e:08:b3:f0:a8:7e:00:17:89:8e:96:af:1b: 0b:7f:f4:7b:44:9a:f6:d6:e4:8a:ca:8b:f6:1b:fa: 87:c1:2e:de:b6:83:d5:40:a6:08:5a:18:ea:ec:a4: 50:47:25:92:b8:d4:32:5f:e2:89:1b:1b:33:a5:77: 37:aa:f0:09:87:4a:be:d9:dc:63:4f:e1:a4:03:97: 0e:75:52:48:d5:cb:54:95:a3:dc:5a:f0:f3:34:4f: 44:78:20:3f:ea:fd:cb:8b:7d:58:dc:97:cf:a1:4a: 31:ea:b6:2a:2b:c9:79:f0:a2:67:3f:6e:5b:b2:6a: c5:07:69:33:1a:3e:93:72:dc:e5:4d:33:c5:7a:0b: d7:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:88:15:16:10:CA:A4:13:18:8A:7E:4B:2B:0A:57:D4:44:08:02:88 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:33:d5:f8:71:52:1c:35:d6:a7:fe:31:f4:ff:9a:b8:f0:0f: cb:bd:05:73:04:2d:37:36:8b:0f:ce:92:e1:cb:e0:57:25:7f: fa:63:1a:ae:e0:a3:3f:4a:bf:0c:77:bf:7f:70:cb:21:78:67: 0c:ea:b6:2e:39:09:f2:d4:ac:97:46:41:36:78:16:4f:08:b8: 46:49:8a:38:c2:68:1d:0c:26:e5:46:0f:06:89:e9:8f:f3:05: 31:be:e7:91:28:ac:11:4d:5d:d0:70:07:66:db:c8:a9:34:de: b7:aa:8e:65:4e:68:78:8c:8a:04:59:8b:6f:87:6c:c7:3e:15: 4e:97:11:29:9e:0d:84:bc:e6:41:fa:3b:08:6b:52:57:ea:af: e9:db:67:81:19:a0:d4:ee:4e:ff:44:a0:01:af:bc:26:57:69: 6b:b4:c8:b1:7e:f0:ca:06:d4:85:6a:79:32:a2:e0:ff:e4:08: d4:c3:fc:a8:d5:55:0f:89:8c:79:d0:91:bc:83:99:c2:a7:9e: 17:dd:5e:6b:d7:b1:82:bc:45:9f:c3:c0:08:73:e2:27:98:fd: 16:af:70:94:c2:b3:00:f3:e9:aa:63:f6:bb:d0:cf:84:15:72: 3c:ee:45:9c:f3:1f:cd:a5:97:68:cb:fd:e8:18:5f:2c:7c:7b: 41:a4:0d:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwNzE4MTU1MDU5WhcNMjUwNzI1MTU1MDU5WjAYMRYwFAYD VQQDEw02ODdhNmQ2My0wMjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnrUKceFAmHbs5mUQghmsgI418/G9TabjmTWP4MbvDBfFtClwIIf4bb8WHHA Y+KRBBm+mrxQJfNiclBatlKyY0qZhwOZClXfx1v1iDZ4feeapcwkyM6BK4GyPuoJ bhVATciHf3ri6/hV+FQmooZ9DST3gGWwE/qNN24Is/CofgAXiY6WrxsLf/R7RJr2 1uSKyov2G/qHwS7etoPVQKYIWhjq7KRQRyWSuNQyX+KJGxszpXc3qvAJh0q+2dxj T+GkA5cOdVJI1ctUlaPcWvDzNE9EeCA/6v3Li31Y3JfPoUox6rYqK8l58KJnP25b smrFB2kzGj6TctzlTTPFegvXzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOIFRYQ yqQTGIp+SysKV9RECAKIMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEzNi9DRjMyODFDODIxNUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENC WUp6V2lhc0s3My12RklrbXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjM9X4cVIcNdan/jH0/5q48A/LvQVzBC03NosPzpLhy+BXJX/6Yxqu 4KM/Sr8Md79/cMsheGcM6rYuOQny1KyXRkE2eBZPCLhGSYo4wmgdDCblRg8GiemP 8wUxvueRKKwRTV3QcAdm28ipNN63qo5lTmh4jIoEWYtvh2zHPhVOlxEpng2EvOZB +jsIa1JX6q/p22eBGaDU7k7/RKABr7wmV2lrtMixfvDKBtSFankyouD/5AjUw/yo 1VUPiYx50JG8g5nCp54X3V5r17GCvEWfw8AIc+InmP0Wr3CUwrMA8+mqY/a70M+E FXI87kWc8x/NpZdoy/3oGF8sfHtBpA3G -----END CERTIFICATE-----Generated at Sun Jul 20 02:51:53 2025 by rpki-client