$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: rl7jhX6aCTmR1WqgeymEp5A+MjKos11x12qgoWCGZU0= Subject key identifier: 03:F5:D2:FD:2E:C9:C8:E7:67:86:50:3E:A3:0C:7C:C3:75:F8:38:92 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0F94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0F84 Signing time: Wed 10 Sep 2025 17:41:45 +0000 Manifest this update: Wed 10 Sep 2025 17:41:45 +0000 Manifest next update: Wed 17 Sep 2025 17:41:45 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: GCLjtvuv3DVTZ3MGZURMdCUJafijRS2QIM3HxJxQc40=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: O5M1jbKU4KBTSC5g58y6skgHkeCwY767jwNIVlihlmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 17:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3988 (0xf94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Sep 10 17:41:45 2025 GMT Not After : Sep 17 17:41:45 2025 GMT Subject: CN=68c1b859-9db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:49:39:b4:54:3c:61:15:26:bd:d4:75:64: 31:fd:41:8e:53:90:2e:f0:e0:8a:c5:31:a9:76:b7: d3:87:34:f0:e4:2a:40:86:99:a2:b7:d0:7a:a0:83: f6:f3:f0:06:54:a3:5e:da:fc:be:f0:84:61:6d:fc: f2:6e:9e:59:6c:02:37:c2:08:71:7a:07:8b:48:64: ca:cd:6b:bf:97:e1:fc:e5:98:f2:f1:9a:1e:ac:65: c0:cd:7a:59:2a:03:85:1d:99:6c:f9:2e:cb:2b:8d: db:d8:0f:13:4c:f7:0f:4d:20:41:fa:2a:59:4c:5a: 90:a8:57:df:35:02:82:80:48:f6:95:13:f5:46:b9: 83:0f:99:a4:91:5b:2e:10:af:35:8a:0f:74:dd:56: 2d:2d:b2:b9:84:ca:71:a6:a2:96:7b:c0:3f:81:b6: 38:df:60:ba:ac:02:66:12:a4:32:1c:1f:13:1a:18: 33:2f:2d:4a:16:51:3b:ef:a3:ab:43:e8:9e:a6:bb: dd:06:da:d9:41:26:d3:25:43:38:63:bd:5a:a3:b2: f1:d5:f0:8a:2f:ac:dd:d1:c3:32:40:68:66:4c:ef: 7a:e6:d5:51:ff:f2:d4:3b:c2:24:fa:c6:05:99:be: 60:b1:78:2d:4b:a8:ef:64:9e:8d:98:f3:45:37:b1: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F5:D2:FD:2E:C9:C8:E7:67:86:50:3E:A3:0C:7C:C3:75:F8:38:92 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cd:1e:6f:06:9c:0d:7e:7e:e1:4e:f6:e2:ac:09:d3:2d:8d: 34:e1:36:55:7d:20:f6:92:70:a4:ab:a7:93:13:cc:3b:58:5c: 88:02:78:91:b9:1b:a0:aa:07:02:13:46:ed:7a:3d:43:c2:ca: 8a:2e:e6:ab:7a:0f:31:6e:14:d1:b7:3b:38:18:33:e4:e6:50: 21:04:fb:8e:ab:f1:2a:49:58:ec:5f:82:3b:82:2a:4a:64:bf: dd:66:fa:cf:5b:2d:67:dc:ae:e8:f6:d7:e8:bf:97:f6:1c:35: ce:bf:8c:88:0d:ce:68:af:4e:1c:b5:70:14:5b:35:e5:05:1f: b3:3c:59:f8:b2:3d:8d:ac:52:71:cb:5e:86:47:91:d1:82:e0: 0e:8d:d7:86:a0:ba:69:8f:6d:f3:4a:45:57:bd:10:1b:bb:94: 08:ca:22:ff:e9:9c:c6:4f:3e:d4:1f:f6:a5:d2:1e:c7:4a:5f: b7:8b:d3:42:62:92:83:b0:3c:cc:39:53:3b:6f:21:a7:8c:15: d9:49:83:cf:c2:78:ef:6f:b7:d8:80:3c:64:26:0d:6b:90:d6: aa:e4:10:2c:f6:a8:11:25:ea:56:0a:0c:a9:a0:6a:34:cb:37: ba:5c:3f:7a:36:99:e2:14:85:75:71:2b:f8:26:84:29:2b:8f: 61:4e:77:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUwOTEwMTc0MTQ1WhcNMjUwOTE3MTc0MTQ1WjAYMRYwFAYD VQQDEw02OGMxYjg1OS05ZGIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymRJObRUPGEVJr3UdWQx/UGOU5Au8OCKxTGpdrfThzTw5CpAhpmit9B6oIP2 8/AGVKNe2vy+8IRhbfzybp5ZbAI3wghxegeLSGTKzWu/l+H85Zjy8ZoerGXAzXpZ KgOFHZls+S7LK43b2A8TTPcPTSBB+ipZTFqQqFffNQKCgEj2lRP1RrmDD5mkkVsu EK81ig903VYtLbK5hMpxpqKWe8A/gbY432C6rAJmEqQyHB8TGhgzLy1KFlE776Or Q+ieprvdBtrZQSbTJUM4Y71ao7Lx1fCKL6zd0cMyQGhmTO965tVR//LUO8Ik+sYF mb5gsXgtS6jvZJ6NmPNFN7H5YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAP10v0u ycjnZ4ZQPqMMfMN1+DiSMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPzR5vBpwNfn7hTvbirAnTLY004TZVfSD2knCkq6eTE8w7WFyIAniR uRugqgcCE0btej1DwsqKLuareg8xbhTRtzs4GDPk5lAhBPuOq/EqSVjsX4I7gipK ZL/dZvrPWy1n3K7o9tfov5f2HDXOv4yIDc5or04ctXAUWzXlBR+zPFn4sj2NrFJx y16GR5HRguAOjdeGoLppj23zSkVXvRAbu5QIyiL/6ZzGTz7UH/al0h7HSl+3i9NC YpKDsDzMOVM7byGnjBXZSYPPwnjvb7fYgDxkJg1rkNaq5BAs9qgRJepWCgypoGo0 yze6XD96NpniFIV1cSv4JoQpK49hTndy -----END CERTIFICATE-----Generated at Thu Sep 11 02:39:51 2025 by rpki-client