$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: KHZWQKW8iZXVZPcB0++lKz+fzaqfMB59FSOQryIp2M0= Subject key identifier: 46:9A:E2:0C:67:9F:C2:96:5E:78:62:19:D9:E2:B3:AB:E1:00:19:DA Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0673 Signing time: Fri 18 Jul 2025 22:42:22 +0000 Manifest this update: Fri 18 Jul 2025 22:42:22 +0000 Manifest next update: Fri 25 Jul 2025 22:42:22 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: nFoBj5RJkHRDWNj7EGpoycoLHUg7P/NhPHBILp9emnA=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:42:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: Jul 18 22:42:22 2025 GMT Not After : Jul 25 22:42:22 2025 GMT Subject: CN=687acdce-f8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:35:1d:4d:81:26:4a:bc:92:27:60:48:70:73: 8f:ad:10:72:33:c0:3f:a0:15:3d:3d:b6:e8:3a:ed: 4f:65:ef:1a:c1:2c:d9:eb:a6:64:32:39:3b:53:db: c1:95:78:95:0b:f1:01:18:c0:63:b1:0e:7f:a8:39: 70:4b:e3:44:10:e8:a8:c8:54:c0:a6:39:ec:4b:1b: 06:58:47:a5:22:84:9f:7b:89:44:9a:0c:94:03:2a: e2:9e:0a:b5:96:00:18:6a:91:45:94:7d:92:51:fc: 3f:26:ae:8e:62:87:d3:ee:9e:f9:f8:09:8a:e2:5f: f5:03:a5:16:88:26:1f:3d:7a:43:a0:17:94:7f:a1: d8:bc:65:21:c3:4f:e5:b3:4b:67:69:76:0e:58:b1: b6:8c:7a:3e:6f:9c:da:db:5b:ba:ce:09:8e:d3:7e: b1:0d:4d:da:dd:15:b1:bc:96:18:74:0a:06:f5:93: 35:88:67:80:8e:a6:7e:1b:d8:cb:7a:ef:4e:f1:e5: 98:06:e3:c1:b5:98:14:e7:4f:a2:a4:56:66:ba:b9: e8:f4:76:a7:2f:63:65:46:b6:05:47:2a:ce:01:25: ab:06:42:97:b0:f4:75:f0:c0:e0:89:e4:09:52:a0: a7:9a:20:9b:ad:4b:7b:2c:05:78:01:cd:c0:20:a5: 77:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9A:E2:0C:67:9F:C2:96:5E:78:62:19:D9:E2:B3:AB:E1:00:19:DA X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:91:11:e9:82:38:e5:dd:bf:9c:16:62:1b:d4:69:3b:87:dd: e8:e2:ee:86:86:df:86:bf:20:e5:6c:22:bd:7b:f1:39:aa:3b: 66:93:cb:98:d0:17:50:5e:e0:46:32:fe:6f:8e:4a:6f:29:1d: 5d:0d:49:76:5b:72:db:44:a0:aa:b1:78:a9:67:cb:5d:b5:67: b6:33:18:73:44:10:81:fe:bc:ab:af:c2:ec:d7:64:2e:ca:e6: 72:f3:a2:43:92:d7:47:68:0e:6c:50:9b:df:2b:f6:b8:17:98: 28:f6:21:1a:6b:57:2d:0b:04:50:02:db:56:8c:5d:95:cc:57: a9:fe:7d:e2:71:aa:e4:04:b3:48:42:03:03:f0:c4:8f:71:08: 65:77:1f:e4:46:c4:da:c0:29:00:69:90:43:0f:0b:b1:b2:ac: 9a:5c:28:36:88:79:89:3a:ca:53:05:67:3d:34:be:fc:b0:31: 45:56:56:e1:9f:cc:71:85:dc:5c:32:66:7c:11:a5:a3:51:5e: 4b:b1:a0:e6:fa:9f:c4:ec:5a:5c:d4:99:a3:52:22:a1:61:0a: 02:c5:49:72:e1:b3:7c:6c:10:44:3a:0a:45:a1:70:93:43:ea: 96:e2:be:6a:eb:93:9f:4f:8b:d7:2e:a1:36:9b:2c:bc:a8:bb: df:21:04:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwNzE4MjI0MjIyWhcNMjUwNzI1MjI0MjIyWjAYMRYwFAYD VQQDEw02ODdhY2RjZS1mOGVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApzUdTYEmSrySJ2BIcHOPrRByM8A/oBU9PbboOu1PZe8awSzZ66ZkMjk7U9vB lXiVC/EBGMBjsQ5/qDlwS+NEEOioyFTApjnsSxsGWEelIoSfe4lEmgyUAyringq1 lgAYapFFlH2SUfw/Jq6OYofT7p75+AmK4l/1A6UWiCYfPXpDoBeUf6HYvGUhw0/l s0tnaXYOWLG2jHo+b5za21u6zgmO036xDU3a3RWxvJYYdAoG9ZM1iGeAjqZ+G9jL eu9O8eWYBuPBtZgU50+ipFZmurno9HanL2NlRrYFRyrOASWrBkKXsPR18MDgieQJ UqCnmiCbrUt7LAV4Ac3AIKV3YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaa4gxn n8KWXnhiGdnis6vhABnaMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYkRHpgjjl3b+cFmIb1Gk7h93o4u6Ght+GvyDlbCK9e/E5qjtmk8uY 0BdQXuBGMv5vjkpvKR1dDUl2W3LbRKCqsXipZ8tdtWe2MxhzRBCB/ryrr8Ls12Qu yuZy86JDktdHaA5sUJvfK/a4F5go9iEaa1ctCwRQAttWjF2VzFep/n3icarkBLNI QgMD8MSPcQhldx/kRsTawCkAaZBDDwuxsqyaXCg2iHmJOspTBWc9NL78sDFFVlbh n8xxhdxcMmZ8EaWjUV5LsaDm+p/E7Fpc1JmjUiKhYQoCxUly4bN8bBBEOgpFoXCT Q+qW4r5q65OfT4vXLqE2myy8qLvfIQRT -----END CERTIFICATE-----Generated at Sun Jul 20 06:42:11 2025 by rpki-client