$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: b0LxNBDv9zGyoIH0S73OAv9c2p+ElBi7WBbaAy4xYwk= Subject key identifier: B6:78:78:14:68:B1:E0:57:B3:45:C6:FB:1F:A5:22:D5:9E:F4:A0:37 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 01DF Signing time: Mon 21 Jul 2025 02:50:16 +0000 Manifest this update: Mon 21 Jul 2025 02:50:15 +0000 Manifest next update: Mon 28 Jul 2025 02:50:15 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: GclLB+2j1sEAzpSRt9yG/Dg9tavdI49DHVWi68bdBao=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jul 21 02:50:15 2025 GMT Not After : Jul 28 02:50:15 2025 GMT Subject: CN=687daae7-9bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:22:5c:a0:3d:0c:55:ad:6b:06:df:f1:fa: c1:ac:ec:3c:a5:69:0e:84:e6:7e:84:cc:a1:c9:21: 86:37:ad:16:4a:09:54:5f:62:62:8c:5f:17:86:29: bc:ec:2e:c8:e6:8b:ce:b3:3e:42:13:d7:a7:52:1d: fc:03:bb:8d:9b:dd:31:32:51:d5:3e:dd:0b:01:72: d9:4d:0e:28:ff:60:b4:1e:3e:23:9d:0c:7f:a1:ed: 50:a3:26:97:4d:a2:cd:ae:5d:6a:a3:db:9f:eb:c4: bd:27:51:1f:c1:40:eb:ad:6b:66:22:ab:fa:49:87: fa:f5:67:62:bc:2b:df:14:d2:4a:0b:c9:0c:c5:6e: 70:82:51:d1:88:e2:c3:d4:af:af:29:3a:f7:9c:bb: 47:4b:70:d2:d4:83:d1:1f:51:ec:d0:c5:96:06:db: 71:62:91:52:20:9c:d2:89:7e:d6:9b:7e:94:90:0c: 02:47:61:f8:e4:62:0e:17:3b:1f:81:cd:6e:18:b4: af:3a:25:e2:4d:ef:40:e2:f1:47:d5:9e:54:68:66: 6f:eb:29:59:81:9a:6e:63:9e:dc:93:6a:cb:56:44: 9d:ac:c6:b2:d4:af:85:03:33:df:bb:47:06:0f:20: e6:93:bf:9b:52:8e:c5:eb:68:67:84:f5:f7:95:7d: e6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:78:78:14:68:B1:E0:57:B3:45:C6:FB:1F:A5:22:D5:9E:F4:A0:37 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:c7:a9:04:14:5b:d5:82:d1:ba:d4:70:12:36:20:8a:ef: 90:bd:93:cf:d4:2f:30:44:c4:4c:88:69:1c:d6:51:f2:bc:b2: b3:40:52:f2:4b:e3:3b:ca:c6:0f:e6:98:93:be:3e:b5:f7:a9: 35:73:12:95:db:ac:70:aa:7a:f7:23:c5:f9:2a:f5:a1:93:c5: a7:3b:ca:c9:0e:47:f9:b9:76:96:0c:f0:b8:de:d3:01:55:bd: 55:f6:71:1f:2c:4c:4b:54:20:9c:f6:21:bb:e2:9c:c6:40:45: 7e:14:a8:61:ee:7f:be:2f:17:14:b6:1a:4f:42:e3:35:1a:9f: ff:dc:c7:24:79:0e:b2:ce:6a:4e:7c:33:84:96:fc:bc:3b:04: 5e:d8:6a:cd:dc:98:03:01:70:9d:ef:77:50:d9:1c:d4:37:99: 0e:4b:4c:7c:d4:a0:53:bb:14:ec:4a:a8:29:bb:fb:54:77:d1: f4:54:39:e3:fb:9e:1b:e1:f8:0e:ff:55:53:d1:6c:3f:a6:87: 7a:18:f5:96:53:f4:2f:7a:23:8a:3f:8d:d3:59:4c:65:db:aa: 2e:ce:c9:ce:9e:bd:7d:f8:3e:37:76:73:5a:b0:8e:1f:5c:27: f6:48:32:75:3a:fe:fd:cc:20:dc:a2:dc:67:29:03:00:cf:66: 26:60:d7:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwNzIxMDI1MDE1WhcNMjUwNzI4MDI1MDE1WjAYMRYwFAYD VQQDEw02ODdkYWFlNy05YmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz38iXKA9DFWtawbf8frBrOw8pWkOhOZ+hMyhySGGN60WSglUX2JijF8Xhim8 7C7I5ovOsz5CE9enUh38A7uNm90xMlHVPt0LAXLZTQ4o/2C0Hj4jnQx/oe1QoyaX TaLNrl1qo9uf68S9J1EfwUDrrWtmIqv6SYf69WdivCvfFNJKC8kMxW5wglHRiOLD 1K+vKTr3nLtHS3DS1IPRH1Hs0MWWBttxYpFSIJzSiX7Wm36UkAwCR2H45GIOFzsf gc1uGLSvOiXiTe9A4vFH1Z5UaGZv6ylZgZpuY57ck2rLVkSdrMay1K+FAzPfu0cG DyDmk7+bUo7F62hnhPX3lX3mxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZ4eBRo seBXs0XG+x+lItWe9KA3MB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT9MepBBRb1YLRutRwEjYgiu+QvZPP1C8wRMRMiGkc1lHyvLKzQFLy S+M7ysYP5piTvj6196k1cxKV26xwqnr3I8X5KvWhk8WnO8rJDkf5uXaWDPC43tMB Vb1V9nEfLExLVCCc9iG74pzGQEV+FKhh7n++LxcUthpPQuM1Gp//3MckeQ6yzmpO fDOElvy8OwRe2GrN3JgDAXCd73dQ2RzUN5kOS0x81KBTuxTsSqgpu/tUd9H0VDnj +54b4fgO/1VT0Ww/pod6GPWWU/QveiOKP43TWUxl26ouzsnOnr19+D43dnNasI4f XCf2SDJ1Ov79zCDcotxnKQMAz2YmYNfA -----END CERTIFICATE-----Generated at Mon Jul 21 23:51:34 2025 by rpki-client