$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft File: 7F7zNU5M1TSrhiW5m3MS1vTkixU.mft (raw, json) Hash identifier: NAMyIiqD5JsdDaPHITlsS4k8+Fq+/lNwoBh9jHyxSHo= Subject key identifier: 06:9E:37:9A:A3:70:FA:5D:DD:BE:4F:01:1D:10:77:B5:D5:6A:CD:9F Authority key identifier: EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 Certificate issuer: /CN=A91EF175/serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Certificate serial: F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft Manifest number: EC Signing time: Sat 19 Jul 2025 05:33:22 +0000 Manifest this update: Sat 19 Jul 2025 05:33:22 +0000 Manifest next update: Sat 26 Jul 2025 05:33:21 +0000 Files and hashes: 1: 7F7zNU5M1TSrhiW5m3MS1vTkixU.crl (hash: Iu8ByQqDJ2geOLO33MTOCyGVHt7Tld5ufANms37x9vE=) 2: 2636C6C6FBFC11EE85221046C4F9AE02.roa (hash: NQkxPngv0JrH8cspg2pDqvSp/RuMqfTf6Ox9XHDfB5k=) 3: A7EACE02FBFB11EE8DCAC620C4F9AE02.roa (hash: k1Tx0d7v2/DVXjcDjxa6UxUVJhpfspXydcHWpQGiFkY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:33:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=EC5EF3354E4CD534AB8625B99B7312D6F4E48B15 Validity Not Before: Jul 19 05:33:22 2025 GMT Not After : Jul 26 05:33:21 2025 GMT Subject: CN=687b2e22-db45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e1:a2:9d:a8:16:85:05:96:06:e1:ce:4f:ec: 25:8b:8a:08:37:a0:2e:22:c0:71:26:3d:c2:85:fa: ad:45:3d:01:14:34:0f:03:fc:0c:d7:ca:d8:0b:6c: dd:aa:e3:80:01:53:0c:60:ca:21:bb:f7:4a:c2:78: 7b:80:3c:18:f5:7d:95:a2:8a:aa:2d:e4:38:6d:15: 0b:51:be:17:92:1a:06:b9:06:14:a6:4f:e7:02:eb: 9d:89:73:fa:e1:a0:f8:ed:9d:16:5a:4c:94:46:35: e1:47:0b:c0:95:d0:ac:b3:28:03:f0:c8:fd:ab:6f: 36:66:ee:09:da:fb:81:d3:99:dd:56:2d:21:fd:01: ca:b0:46:92:01:39:bb:a7:7e:7a:e8:69:0b:9b:11: 90:60:ca:ac:83:3f:4e:7a:96:b2:f4:2b:b1:2a:1a: 33:ef:37:cd:99:27:d1:df:b4:5b:23:69:4c:e0:e2: c2:32:e9:82:53:f9:38:b0:fd:6f:2b:f1:46:5c:51: 87:4c:3a:e4:5f:6f:67:45:1e:f6:8e:e5:df:65:8f: ef:a2:f3:e1:d4:20:6d:fd:79:eb:1d:67:0c:41:9f: a1:5f:c0:25:b8:ff:58:e0:af:30:ba:ca:0d:0b:4f: da:fa:20:27:f4:93:ad:10:51:10:a6:fd:65:7d:14: c6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:37:9A:A3:70:FA:5D:DD:BE:4F:01:1D:10:77:B5:D5:6A:CD:9F X509v3 Authority Key Identifier: keyid:EC:5E:F3:35:4E:4C:D5:34:AB:86:25:B9:9B:73:12:D6:F4:E4:8B:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7F7zNU5M1TSrhiW5m3MS1vTkixU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/7F7zNU5M1TSrhiW5m3MS1vTkixU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:ba:34:f6:c8:35:43:d0:36:57:fc:f6:b5:88:0c:b7:83: b5:17:ad:61:d0:72:d5:32:bd:0b:97:0d:a2:74:6b:ed:e5:3f: c1:6d:db:4c:dc:41:66:63:c1:1e:09:97:bb:22:54:2f:88:67: bd:55:1e:04:37:4b:ef:b5:d6:b1:ed:58:36:d7:68:f3:1f:8f: 6c:84:09:36:af:ae:a7:63:93:7d:08:8d:68:41:e5:ff:15:ef: c1:ae:16:27:77:bb:cd:c6:b1:c8:12:ea:2f:6a:3c:df:9f:82: 06:1c:76:22:b8:48:82:70:73:d2:d5:c9:af:6b:9c:a3:7e:bd: f7:aa:1d:ce:3e:f2:bd:22:82:87:34:50:ce:e5:94:a0:20:ce: a3:07:c0:84:39:d1:fb:ea:76:f5:b6:ad:18:bb:11:a6:09:cc: ed:11:c8:c9:79:8a:b9:e0:84:12:c2:f5:36:df:f7:8c:15:b9: 48:a3:38:8f:76:00:72:40:b4:fc:63:79:33:89:95:5b:2c:ca: 29:8f:2e:e5:15:d8:59:3f:cd:9f:01:3f:6a:fb:d0:10:14:0f: 7e:1f:d3:57:8b:b9:19:09:2b:71:00:1f:32:07:ca:dd:45:30: 64:be:aa:f5:1c:62:71:2f:94:1b:0a:77:47:dc:c6:d4:2f:f2: 7e:4b:08:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxNzUxMTAvBgNVBAUTKEVDNUVGMzM1NEU0Q0Q1MzRBQjg2MjVCOTlCNzMxMkQ2 RjRFNDhCMTUwHhcNMjUwNzE5MDUzMzIyWhcNMjUwNzI2MDUzMzIxWjAYMRYwFAYD VQQDEw02ODdiMmUyMi1kYjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv+GinagWhQWWBuHOT+wli4oIN6AuIsBxJj3ChfqtRT0BFDQPA/wM18rYC2zd quOAAVMMYMohu/dKwnh7gDwY9X2VooqqLeQ4bRULUb4XkhoGuQYUpk/nAuudiXP6 4aD47Z0WWkyURjXhRwvAldCssygD8Mj9q282Zu4J2vuB05ndVi0h/QHKsEaSATm7 p3566GkLmxGQYMqsgz9Oepay9CuxKhoz7zfNmSfR37RbI2lM4OLCMumCU/k4sP1v K/FGXFGHTDrkX29nRR72juXfZY/vovPh1CBt/XnrHWcMQZ+hX8AluP9Y4K8wusoN C0/a+iAn9JOtEFEQpv1lfRTG7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaeN5qj cPpd3b5PAR0Qd7XVas2fMB8GA1UdIwQYMBaAFOxe8zVOTNU0q4YluZtzEtb05IsV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3NS8wNDYwQUExOEZC RkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFUU3JoaVc1bTNNUzF2VGtp eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGN3pOVTVNMVRTcmhpVzVtM01TMXZUa2l4VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3NS8wNDYwQUExOEZCRkIxMUVFQTFFRUFGMUZDNEY5QUUwMi83Rjd6TlU1TTFU U3JoaVc1bTNNUzF2VGtpeFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6nLo09sg1Q9A2V/z2tYgMt4O1F61h0HLVMr0Llw2idGvt5T/BbdtM 3EFmY8EeCZe7IlQviGe9VR4EN0vvtdax7Vg212jzH49shAk2r66nY5N9CI1oQeX/ Fe/BrhYnd7vNxrHIEuovajzfn4IGHHYiuEiCcHPS1cmva5yjfr33qh3OPvK9IoKH NFDO5ZSgIM6jB8CEOdH76nb1tq0YuxGmCcztEcjJeYq54IQSwvU23/eMFblIoziP dgByQLT8Y3kziZVbLMopjy7lFdhZP82fAT9q+9AQFA9+H9NXi7kZCStxAB8yB8rd RTBkvqr1HGJxL5QbCndH3MbUL/J+Swho -----END CERTIFICATE-----Generated at Sun Jul 20 09:53:25 2025 by rpki-client