$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: 2Z7PJGWcxQYESajQIUs/SCnMW2s3TomerQmxh/MbtBw= Subject key identifier: BE:29:CC:70:AB:ED:B8:07:62:E0:6C:B0:59:91:D2:39:A8:A4:1F:18 Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1BFE Signing time: Sun 20 Jul 2025 16:16:14 +0000 Manifest this update: Sun 20 Jul 2025 16:16:14 +0000 Manifest next update: Sun 27 Jul 2025 16:16:14 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: ijewEGHt3am6uZplgT9zv2HISAezkkkRTGk/fZ7zDAE=) 2: 5949B76C00DB11E8A9CA373DC4F9AE02.roa (hash: uYIH2Df820V7sq00NPl6eOckfu5/+u+T1sNhFFho9vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7192 (0x1c18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Jul 20 16:16:14 2025 GMT Not After : Jul 27 16:16:14 2025 GMT Subject: CN=687d164e-7b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dc:93:f5:a1:15:dd:21:62:0e:51:d4:89:2e: 77:d9:23:86:28:07:a1:d5:85:bb:5d:f2:ea:29:f9: 1d:f5:3c:d1:d2:fc:4a:a2:76:6a:a6:77:fb:74:62: 21:81:6a:26:9b:2d:b3:f0:e2:69:d5:84:96:cb:7e: 4f:34:5a:ed:36:ac:a9:67:3e:8d:7d:58:90:39:0f: dd:47:6f:7b:91:b9:90:58:2d:eb:51:4f:b7:df:3c: 7d:87:32:85:d2:b4:3c:9b:96:b6:cf:9b:c9:57:4d: e8:06:dd:f6:6e:0e:72:c4:de:fb:74:9c:e9:36:ce: 30:f8:4c:5a:9b:e0:77:67:7c:d6:6c:4a:92:ab:8e: 87:4c:1e:a9:48:3f:73:12:91:25:f1:3b:17:a8:26: 51:f8:ca:12:70:fd:80:f4:86:18:f8:10:ad:d7:e7: 77:1c:5e:d5:a1:67:e0:fd:77:21:a6:87:39:d6:13: c6:24:a6:9b:dd:70:99:8d:66:0e:59:0f:c1:9a:23: ac:e2:4a:cb:2a:e4:ee:32:b5:89:c4:ee:ba:af:82: c5:cf:17:a3:ab:10:06:ed:ab:87:be:ff:e6:13:b5: 8d:5e:94:61:e8:c1:13:58:80:00:a1:d6:f1:19:cc: 3d:71:55:c5:05:54:53:09:77:5c:d6:35:b3:08:4b: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:29:CC:70:AB:ED:B8:07:62:E0:6C:B0:59:91:D2:39:A8:A4:1F:18 X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:76:c0:38:46:5b:c3:9e:f7:83:e3:79:f9:b8:59:a1:e8:12: b2:63:4b:5e:91:39:87:a5:d9:9c:c9:84:be:f1:d5:6f:82:51: 9c:76:38:f9:d1:2b:4d:bf:df:58:6a:c0:22:21:f9:4f:13:5e: 94:c1:bc:d7:a8:d0:c9:71:66:b9:7e:f0:d1:ca:67:b5:62:a1: c1:bc:6d:ff:4c:d5:de:ca:a6:c8:85:b5:11:29:81:5c:1b:70: 5d:17:64:26:12:a9:ee:c2:93:a4:9b:22:c8:06:b6:a8:0b:05: a4:ee:62:47:15:af:e5:3a:7c:0e:86:54:4d:65:59:ca:48:4d: 93:bf:47:1c:98:86:ef:3b:58:13:76:21:58:ad:3c:fe:8f:ed: 95:26:c2:a1:03:92:3d:2d:a1:aa:28:4a:9b:87:5c:9d:ae:03: 97:58:33:87:e7:0c:93:f1:8f:3f:03:cb:4f:2d:97:95:16:e0: 3e:72:bf:a0:0a:14:6f:46:6f:5c:a7:55:5a:4b:7f:61:00:ea: d8:9f:18:ff:3f:c5:b6:eb:fc:5a:9b:f6:c8:3a:31:93:f9:85: e6:02:c5:90:95:2b:07:ab:fd:a2:90:00:d6:0a:50:84:18:00: 20:be:7c:cb:6d:8b:2d:4d:e7:80:1f:2d:1b:4c:86:6e:fd:bd: 64:c5:ef:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHBgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUwNzIwMTYxNjE0WhcNMjUwNzI3MTYxNjE0WjAYMRYwFAYD VQQDEw02ODdkMTY0ZS03Yjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NyT9aEV3SFiDlHUiS532SOGKAeh1YW7XfLqKfkd9TzR0vxKonZqpnf7dGIh gWommy2z8OJp1YSWy35PNFrtNqypZz6NfViQOQ/dR297kbmQWC3rUU+33zx9hzKF 0rQ8m5a2z5vJV03oBt32bg5yxN77dJzpNs4w+Exam+B3Z3zWbEqSq46HTB6pSD9z EpEl8TsXqCZR+MoScP2A9IYY+BCt1+d3HF7VoWfg/Xchpoc51hPGJKab3XCZjWYO WQ/BmiOs4krLKuTuMrWJxO66r4LFzxejqxAG7auHvv/mE7WNXpRh6METWIAAodbx Gcw9cVXFBVRTCXdc1jWzCEufmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4pzHCr 7bgHYuBssFmR0jmopB8YMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAudsA4RlvDnveD43n5uFmh6BKyY0tekTmHpdmcyYS+8dVvglGcdjj5 0StNv99YasAiIflPE16UwbzXqNDJcWa5fvDRyme1YqHBvG3/TNXeyqbIhbURKYFc G3BdF2QmEqnuwpOkmyLIBraoCwWk7mJHFa/lOnwOhlRNZVnKSE2Tv0ccmIbvO1gT diFYrTz+j+2VJsKhA5I9LaGqKEqbh1ydrgOXWDOH5wyT8Y8/A8tPLZeVFuA+cr+g ChRvRm9cp1VaS39hAOrYnxj/P8W26/xam/bIOjGT+YXmAsWQlSsHq/2ikADWClCE GAAgvnzLbYstTeeAHy0bTIZu/b1kxe8g -----END CERTIFICATE-----Generated at Mon Jul 21 12:46:04 2025 by rpki-client