$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft File: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json) Hash identifier: jEOjpOa1bo0r3K7vjsJKuue63E/C3qPXVzdw41/khoQ= Subject key identifier: F9:85:DD:6F:DC:AF:BB:E2:CF:FC:03:6F:40:7D:50:EF:91:52:8C:F7 Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB Certificate issuer: /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft Manifest number: 0114 Signing time: Wed 23 Jul 2025 05:17:40 +0000 Manifest this update: Wed 23 Jul 2025 05:17:39 +0000 Manifest next update: Wed 30 Jul 2025 05:17:39 +0000 Files and hashes: 1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: O31O8l27Ngst9dx1PNIiM0pVaDyqzevpJ3NYVvNvVxw=) 2: F89ECDC443A511F09D656024C4F9AE02.roa (hash: WmYOIdHhJmp20fF6Ocugd6eKuqM04EWvfaYLSQzq950=) 3: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=) 4: 4257053043A611F0820E8527C4F9AE02.roa (hash: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB Validity Not Before: Jul 23 05:17:39 2025 GMT Not After : Jul 30 05:17:39 2025 GMT Subject: CN=68807073-e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:d6:30:42:2d:21:05:b1:56:3f:e0:7d:59: 8b:fa:18:85:05:c1:82:a4:af:8c:13:f8:ff:2d:70: fa:68:ca:4b:40:99:c8:dc:ed:f5:3a:de:c0:04:97: 47:f3:84:b3:20:73:f8:83:3b:b0:df:33:74:c6:90: 87:2e:e7:9a:0f:f9:06:8b:9d:4b:22:75:75:2d:bf: f4:56:33:87:b6:b2:a9:3a:19:1a:82:1f:4e:4c:0a: 8c:31:68:0f:e4:9f:52:bc:97:2d:aa:cc:c1:c2:ae: e5:39:ad:cd:d9:41:6e:6f:23:f6:fb:9f:2a:df:63: 8c:23:be:bc:71:13:bd:e1:0c:d9:11:a7:d5:da:a5: aa:b5:4b:ba:bf:bf:50:d8:ec:86:af:28:af:b0:f3: a3:08:8c:43:b8:35:24:be:8e:81:d3:2d:39:6c:33: c0:06:5a:a8:d3:b1:ce:1a:10:a1:94:9f:4a:b8:91: 9f:3a:a5:f9:49:a9:88:90:df:84:32:06:f5:2a:b1: 12:ab:a9:3b:e1:ba:59:5f:7a:8d:0f:cb:59:b9:53: 75:f6:12:67:1b:a9:eb:31:58:7d:7d:c6:fa:9f:a6: 46:9f:65:5a:fb:04:fc:77:6d:fa:44:8a:f7:ac:8d: 79:4c:33:6c:9c:03:d2:e4:e3:b8:4f:6b:0c:45:65: 0f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:85:DD:6F:DC:AF:BB:E2:CF:FC:03:6F:40:7D:50:EF:91:52:8C:F7 X509v3 Authority Key Identifier: keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:78:f6:75:23:80:41:f9:fb:b1:d4:bc:e7:57:06:a5:b8:bb: e1:7a:71:0b:8f:12:d3:24:c2:81:de:dc:dd:e3:35:aa:1e:4a: ba:3d:6d:35:62:4d:97:2a:cd:58:8e:6d:c9:57:8d:e9:34:d8: 51:19:8b:a8:2f:d1:fd:e0:06:d2:2f:c7:27:e4:c1:e2:e5:fd: 58:43:aa:39:74:79:f1:c3:25:59:b4:ba:11:47:36:be:e4:a9: fa:eb:67:9e:bb:ff:ad:a2:16:19:e7:3d:5b:6c:91:4d:c5:c6: 9b:d4:e5:b0:d7:a6:77:c9:3d:8b:62:48:8a:dc:a0:78:d3:e3: 00:85:3f:76:43:df:87:fb:aa:e2:cb:7d:ab:2d:79:8c:4e:5a: 1f:8a:2c:96:43:f7:6d:61:9b:a1:1b:94:6c:fd:0a:3e:6c:4e: 21:61:82:c5:47:c4:09:6c:33:bb:65:0b:0b:05:8b:bb:c0:0f: e5:94:fc:da:f3:98:bf:e8:72:93:45:d4:7d:ad:9f:de:9b:f0: 7f:6e:8a:0f:0a:e0:90:97:91:5b:af:cd:dc:77:b3:db:b2:5e: 41:17:36:59:56:61:6b:7f:39:e8:30:93:7b:7b:a3:74:f4:6b: 4d:58:cc:ee:b9:a2:aa:74:ad:0e:2d:80:02:ae:7b:4d:51:a7: e6:ee:a1:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAwRUREQkJFRUUx MEI3NTQ5QUIwHhcNMjUwNzIzMDUxNzM5WhcNMjUwNzMwMDUxNzM5WjAYMRYwFAYD VQQDEw02ODgwNzA3My1lMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7wHWMEItIQWxVj/gfVmL+hiFBcGCpK+ME/j/LXD6aMpLQJnI3O31Ot7ABJdH 84SzIHP4gzuw3zN0xpCHLueaD/kGi51LInV1Lb/0VjOHtrKpOhkagh9OTAqMMWgP 5J9SvJctqszBwq7lOa3N2UFubyP2+58q32OMI768cRO94QzZEafV2qWqtUu6v79Q 2OyGryivsPOjCIxDuDUkvo6B0y05bDPABlqo07HOGhChlJ9KuJGfOqX5SamIkN+E Mgb1KrESq6k74bpZX3qND8tZuVN19hJnG6nrMVh9fcb6n6ZGn2Va+wT8d236RIr3 rI15TDNsnAPS5OO4T2sMRWUPnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmF3W/c r7viz/wDb0B9UO+RUoz3MB8GA1UdIwQYMBaAFO0R60w0gEGZ6ndQDt277uELdUmr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZCQy82Njg3RUYyMkQx NEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFabnFkMUFPM2J2dTRRdDFT YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSSHJURFNBUVpucWQxQU8zYnZ1NFF0MVNhcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTZCQy82Njg3RUYyMkQxNEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFa bnFkMUFPM2J2dTRRdDFTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlePZ1I4BB+fux1LznVwaluLvhenELjxLTJMKB3tzd4zWqHkq6PW01 Yk2XKs1Yjm3JV43pNNhRGYuoL9H94AbSL8cn5MHi5f1YQ6o5dHnxwyVZtLoRRza+ 5Kn662eeu/+tohYZ5z1bbJFNxcab1OWw16Z3yT2LYkiK3KB40+MAhT92Q9+H+6ri y32rLXmMTlofiiyWQ/dtYZuhG5Rs/Qo+bE4hYYLFR8QJbDO7ZQsLBYu7wA/llPza 85i/6HKTRdR9rZ/em/B/booPCuCQl5Fbr83cd7Pbsl5BFzZZVmFrfznoMJN7e6N0 9GtNWMzuuaKqdK0OLYACrntNUafm7qFB -----END CERTIFICATE-----Generated at Thu Jul 24 17:12:10 2025 by rpki-client