$ rpki-client -vvf rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft File: -sKy5UFEW1tHxZ2uHeLd6IeauLs.mft (raw, json) Hash identifier: v7eUcNx4zA0rzeOxODg5ANQmcLxd1yq6DFgDYTAuIyc= Subject key identifier: 75:76:C3:1F:E4:E4:9F:70:14:25:6B:F3:70:7C:A4:62:BB:96:A3:97 Authority key identifier: FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB Certificate issuer: /CN=A91F11EE/serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft Manifest number: C7 Signing time: Mon 21 Jul 2025 05:58:38 +0000 Manifest this update: Mon 21 Jul 2025 05:58:37 +0000 Manifest next update: Mon 28 Jul 2025 05:58:37 +0000 Files and hashes: 1: -sKy5UFEW1tHxZ2uHeLd6IeauLs.crl (hash: TVZ7v692Iar9yETzgBjocT0qs3rdSzKR9HvajSDFxB0=) 2: 8B0201183E8911EFB2DCA846C4F9AE02.roa (hash: 8zOiXd3kRlQoiz32Gjahx1aoeuvy3cZGr/aU3t8eEp8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F11EE, serialNumber=FAC2B2E541445B5B47C59DAE1DE2DDE8879AB8BB Validity Not Before: Jul 21 05:58:37 2025 GMT Not After : Jul 28 05:58:37 2025 GMT Subject: CN=687dd70e-20bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:39:6d:87:09:3e:c9:db:93:3b:ec:72:5a:df: ad:39:9a:a6:3c:e5:7f:c2:48:89:68:0d:da:61:5a: 5f:8e:fa:e6:f9:5f:57:57:b5:14:c1:cb:1a:ff:b4: 77:4b:0e:ca:a8:a4:07:ee:6c:f0:38:58:9d:24:a0: d7:75:6d:3e:b5:34:f3:ca:f7:35:1b:49:38:af:1a: 50:a7:d6:0f:54:0b:06:00:c9:7f:2f:85:f7:7b:1e: 71:35:3f:68:20:1a:ac:3b:38:c5:52:0f:b6:62:b5: 11:b9:8d:02:07:ed:e3:42:9e:3d:eb:a9:79:23:3a: f8:a1:4a:3b:d1:d5:d3:88:0f:83:6a:70:62:fc:02: 72:3e:54:b5:dd:11:c1:1a:5b:64:b0:e7:b1:32:8b: 23:0f:13:be:2f:be:3d:50:f8:16:8d:21:45:a2:21: 93:82:ce:a7:d6:10:5e:a1:8f:a0:2b:27:18:a8:cf: 82:3d:3a:a7:33:fd:6f:f1:b8:65:33:67:fa:1a:e0: 0c:22:46:85:3f:89:b2:b8:00:01:c2:16:1f:aa:91: 98:15:6e:17:f1:64:b6:82:7a:d5:26:56:92:64:ba: 6c:60:af:c1:8f:4c:2b:c8:4c:5b:f8:5d:33:60:55: ef:56:5b:75:57:7d:af:23:37:56:e6:c6:83:9f:89: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:76:C3:1F:E4:E4:9F:70:14:25:6B:F3:70:7C:A4:62:BB:96:A3:97 X509v3 Authority Key Identifier: keyid:FA:C2:B2:E5:41:44:5B:5B:47:C5:9D:AE:1D:E2:DD:E8:87:9A:B8:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sKy5UFEW1tHxZ2uHeLd6IeauLs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F11EE/E98A46523E8711EFAA24AA43C4F9AE02/-sKy5UFEW1tHxZ2uHeLd6IeauLs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:52:7d:d6:08:b4:fe:5e:02:36:54:d7:f0:a4:2c:33:ef:1e: 26:26:4c:5d:e0:32:c1:0f:73:e4:5d:45:c8:65:2c:9a:78:05: b7:35:05:52:38:ee:d7:cf:d9:3b:92:64:1f:1a:1f:ef:fa:57: 6c:fe:02:2c:14:23:5b:a7:32:e4:54:ed:44:fa:b4:57:04:4b: 6a:8a:8f:09:2a:82:af:0e:98:6e:6b:bf:fd:3c:27:66:fb:32: 36:a8:72:64:6b:5c:5e:d9:01:0e:4b:86:18:4a:0c:7d:6c:ff: b2:89:f0:f3:0c:97:a4:ee:c5:67:ea:45:03:12:f8:bd:da:a9: f8:e1:3d:88:aa:25:66:f4:bc:97:53:e6:41:93:0d:26:1b:e9: 0e:58:ae:16:f2:31:8c:1a:f2:7a:49:30:55:60:2f:55:aa:ba: b2:70:e8:a4:41:fc:08:0c:ff:21:be:e9:09:f8:de:ca:cd:d5: 03:50:9e:99:4c:bd:76:aa:06:65:a8:58:50:8e:a1:d7:40:05: 62:ce:e7:05:45:4d:9c:c2:0c:d8:c4:e8:d0:c8:4b:53:cb:70: e8:b5:fb:f4:9a:1f:ad:82:e1:da:60:4c:01:12:bf:09:35:bf: df:55:bd:a2:c1:33:da:12:de:80:4f:89:7a:65:28:24:b1:72: 6c:13:99:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjExRUUxMTAvBgNVBAUTKEZBQzJCMkU1NDE0NDVCNUI0N0M1OURBRTFERTJEREU4 ODc5QUI4QkIwHhcNMjUwNzIxMDU1ODM3WhcNMjUwNzI4MDU1ODM3WjAYMRYwFAYD VQQDEw02ODdkZDcwZS0yMGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zlthwk+yduTO+xyWt+tOZqmPOV/wkiJaA3aYVpfjvrm+V9XV7UUwcsa/7R3 Sw7KqKQH7mzwOFidJKDXdW0+tTTzyvc1G0k4rxpQp9YPVAsGAMl/L4X3ex5xNT9o IBqsOzjFUg+2YrURuY0CB+3jQp4966l5Izr4oUo70dXTiA+DanBi/AJyPlS13RHB GltksOexMosjDxO+L749UPgWjSFFoiGTgs6n1hBeoY+gKycYqM+CPTqnM/1v8bhl M2f6GuAMIkaFP4myuAABwhYfqpGYFW4X8WS2gnrVJlaSZLpsYK/Bj0wryExb+F0z YFXvVlt1V32vIzdW5saDn4l47QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHV2wx/k 5J9wFCVr83B8pGK7lqOXMB8GA1UdIwQYMBaAFPrCsuVBRFtbR8Wdrh3i3eiHmri7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTFFRS9FOThBNDY1MjNF ODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcxdEh4WjJ1SGVMZDZJZWF1 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1zS3k1VUZFVzF0SHhaMnVIZUxkNkllYXVMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTFFRS9FOThBNDY1MjNFODcxMUVGQUEyNEFBNDNDNEY5QUUwMi8tc0t5NVVGRVcx dEh4WjJ1SGVMZDZJZWF1THMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYUn3WCLT+XgI2VNfwpCwz7x4mJkxd4DLBD3PkXUXIZSyaeAW3NQVS OO7Xz9k7kmQfGh/v+lds/gIsFCNbpzLkVO1E+rRXBEtqio8JKoKvDphua7/9PCdm +zI2qHJka1xe2QEOS4YYSgx9bP+yifDzDJek7sVn6kUDEvi92qn44T2IqiVm9LyX U+ZBkw0mG+kOWK4W8jGMGvJ6STBVYC9VqrqycOikQfwIDP8hvukJ+N7KzdUDUJ6Z TL12qgZlqFhQjqHXQAVizucFRU2cwgzYxOjQyEtTy3Dotfv0mh+tguHaYEwBEr8J Nb/fVb2iwTPaEt6AT4l6ZSgksXJsE5nv -----END CERTIFICATE-----Generated at Mon Jul 21 18:34:43 2025 by rpki-client