$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: t6PAwEFYp6XSKSzEzNQx5wu+RS6J5+Ui2zov2xkR1Pc= Subject key identifier: 60:F3:B6:75:30:E7:29:D7:2B:25:31:85:5F:31:22:C3:13:AF:86:DC Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 011E Signing time: Sat 19 Jul 2025 05:02:16 +0000 Manifest this update: Sat 19 Jul 2025 05:02:16 +0000 Manifest next update: Sat 26 Jul 2025 05:02:16 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: OI+ouMEduYNfNyfGRSC6C3ZAqznNtMsj7r6plFH8SZM=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Jul 19 05:02:16 2025 GMT Not After : Jul 26 05:02:16 2025 GMT Subject: CN=687b26d8-845e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:f1:64:74:d4:b3:75:38:0f:b2:e0:20:8a: 38:4c:81:e0:f4:65:25:88:d8:d0:98:06:16:a5:f0: 0f:ca:a9:7d:68:61:ce:67:ed:77:3c:8b:0f:14:8f: 3c:d6:94:67:8c:87:6c:3d:1c:48:31:97:b9:36:92: af:21:bb:ef:bf:f8:9f:64:af:7b:f2:84:0f:a3:26: 7c:f7:fb:52:c6:23:46:45:c8:fd:b7:ed:10:50:b5: d4:bc:46:60:94:74:cc:f5:e4:b9:af:1a:55:b0:d5: 02:99:2b:19:7b:f6:c8:1b:73:33:46:71:d6:91:f8: 59:ab:2b:04:09:d1:39:8e:16:ba:71:37:bb:b8:41: 88:e5:ae:db:65:2f:9b:d8:2d:a8:69:40:6c:74:22: 42:49:09:09:9d:84:8e:d8:f8:d2:3e:9b:76:3c:a8: cf:a0:cb:7c:88:e8:ed:92:f6:40:06:26:09:19:1d: 56:81:1d:1c:63:9b:c4:aa:f8:bd:d9:62:44:37:c7: 1f:8d:75:c7:6f:03:04:66:41:50:61:e5:a0:7e:b4: 01:28:d4:7a:c4:ed:0d:1c:09:ae:4b:46:87:96:0e: 59:48:41:c7:69:23:02:f9:3f:75:db:11:24:89:78: 50:a4:dd:99:48:db:68:60:f6:c6:c1:26:e3:b2:11: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F3:B6:75:30:E7:29:D7:2B:25:31:85:5F:31:22:C3:13:AF:86:DC X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:22:95:9e:49:96:47:d7:21:27:a1:b8:af:d5:c2:0d:38:40: 42:7f:95:66:e1:4b:dd:b9:ee:db:68:1f:c6:29:50:77:bd:1f: d7:f8:d3:66:83:85:1c:a8:d4:ef:23:4e:f3:16:19:43:20:89: 2b:df:4b:67:70:5a:de:74:04:54:15:dd:f3:c7:27:6d:98:23: af:eb:34:c3:f6:dc:ae:7b:4f:ea:46:ff:3f:a8:59:0b:a0:9a: 5d:4e:c8:17:94:43:29:b4:70:93:f5:0f:fc:d3:72:fa:da:1e: 8e:07:f5:ad:bd:a0:97:3c:ea:fa:a3:7c:c5:d3:e8:e2:e9:e7: 8d:3e:22:8c:60:f4:fb:86:87:8e:94:56:1f:40:4d:32:ba:a9: 98:e1:a1:70:9c:12:b6:f2:64:b5:24:c3:f7:6a:2b:1e:d8:0a: bb:61:63:79:4d:b0:5f:fe:1e:ec:14:f4:91:e8:a1:3b:11:e1: 25:3a:de:a4:f2:10:cb:9f:9b:23:b0:8e:bc:11:d9:22:98:7d: 20:2a:14:87:2d:d7:5f:2d:75:8b:be:99:7b:11:0b:25:e3:46: 3a:6e:6e:0b:42:59:01:aa:a1:22:7b:4d:bc:0c:fa:3a:7c:71: 19:e2:07:34:4e:73:dd:71:87:9d:f1:62:d6:da:25:2a:e6:5e: bb:4a:ed:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwNzE5MDUwMjE2WhcNMjUwNzI2MDUwMjE2WjAYMRYwFAYD VQQDEw02ODdiMjZkOC04NDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunXxZHTUs3U4D7LgIIo4TIHg9GUliNjQmAYWpfAPyql9aGHOZ+13PIsPFI88 1pRnjIdsPRxIMZe5NpKvIbvvv/ifZK978oQPoyZ89/tSxiNGRcj9t+0QULXUvEZg lHTM9eS5rxpVsNUCmSsZe/bIG3MzRnHWkfhZqysECdE5jha6cTe7uEGI5a7bZS+b 2C2oaUBsdCJCSQkJnYSO2PjSPpt2PKjPoMt8iOjtkvZABiYJGR1WgR0cY5vEqvi9 2WJEN8cfjXXHbwMEZkFQYeWgfrQBKNR6xO0NHAmuS0aHlg5ZSEHHaSMC+T912xEk iXhQpN2ZSNtoYPbGwSbjshHr2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDztnUw 5ynXKyUxhV8xIsMTr4bcMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPIpWeSZZH1yEnobiv1cINOEBCf5Vm4Uvdue7baB/GKVB3vR/X+NNm g4UcqNTvI07zFhlDIIkr30tncFredARUFd3zxydtmCOv6zTD9tyue0/qRv8/qFkL oJpdTsgXlEMptHCT9Q/803L62h6OB/WtvaCXPOr6o3zF0+ji6eeNPiKMYPT7hoeO lFYfQE0yuqmY4aFwnBK28mS1JMP3aise2Aq7YWN5TbBf/h7sFPSR6KE7EeElOt6k 8hDLn5sjsI68EdkimH0gKhSHLddfLXWLvpl7EQsl40Y6bm4LQlkBqqEie028DPo6 fHEZ4gc0TnPdcYed8WLW2iUq5l67Su3+ -----END CERTIFICATE-----Generated at Mon Jul 21 05:41:58 2025 by rpki-client