$ rpki-client -vvf rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft File: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft (raw, json) Hash identifier: rSEFo2X9L1SZ8idwp15mw70btKaE9B5AsfQzB3ez+DI= Subject key identifier: FD:75:7D:F3:DF:95:EA:D1:7A:9B:AE:69:FE:A2:90:B8:99:45:09:F6 Authority key identifier: ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC Certificate issuer: /CN=A91A02D8/serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft Manifest number: F2 Signing time: Wed 17 Sep 2025 05:55:43 +0000 Manifest this update: Wed 17 Sep 2025 05:55:42 +0000 Manifest next update: Wed 24 Sep 2025 05:55:42 +0000 Files and hashes: 1: 7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl (hash: sr9F3VWfStg3cpc1ip99aGl6aLQeXsinVK8abtn6vxw=) 2: 86F9CBCC2AB711EF996EC819C4F9AE02.roa (hash: YJwOvl48MytuGc6I1DEuIiMXD3Gk+mKKkditJ1faO0o=) 3: 2C7C9DD2258E11F0B42E1529C4F9AE02.roa (hash: KCTQ3tbaoeUAbY8WbJ6K6Z4PRHlUfgdv71MIHaYTETs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A02D8, serialNumber=ED9B0E6085A25DF26749FF27581A4E8BC7C186CC Validity Not Before: Sep 17 05:55:42 2025 GMT Not After : Sep 24 05:55:42 2025 GMT Subject: CN=68ca4d5e-26ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f2:8c:f7:1b:c7:6a:71:24:92:b7:05:16:e6: f9:55:28:f6:bc:8f:6f:1b:31:7c:4d:a2:2e:22:b1: 18:a7:2b:ec:ab:51:5a:ed:e4:15:93:d5:e1:33:4c: 45:75:83:50:79:f9:39:d8:0c:4b:c7:5a:e9:c3:73: 01:c3:a4:23:d5:a5:bc:f8:82:e7:03:3a:7f:aa:96: 38:5e:51:b5:4e:cc:e2:85:9f:17:73:2d:fa:87:ff: 5e:f9:82:d5:22:fe:c7:b8:91:5d:7f:37:b6:72:5c: 8f:ae:ab:2e:8a:f7:5b:14:f2:2e:db:83:f2:7a:1e: 33:80:a9:9b:ee:49:31:fa:9f:37:53:a2:db:bf:2e: bf:d9:82:1a:51:63:a1:84:54:4c:eb:c8:7f:d9:cf: f2:00:35:a7:a4:f7:2e:92:fe:90:ab:88:68:30:b2: 35:2b:07:1a:5e:21:93:e6:85:56:c4:a0:28:d2:f1: af:28:d7:b5:56:88:46:d0:1b:1f:28:52:28:3f:e3: 1b:0d:cc:81:4f:15:c5:f7:f8:27:f0:38:0e:a4:08: 75:f7:52:0d:be:e4:1b:bd:31:33:fb:90:80:32:2b: 06:f3:43:bb:98:e2:78:38:95:1f:37:cf:12:43:85: 9d:a6:1e:27:92:e1:42:29:bf:64:1c:39:e2:a9:a8: 2b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:75:7D:F3:DF:95:EA:D1:7A:9B:AE:69:FE:A2:90:B8:99:45:09:F6 X509v3 Authority Key Identifier: keyid:ED:9B:0E:60:85:A2:5D:F2:67:49:FF:27:58:1A:4E:8B:C7:C1:86:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A02D8/E09248EA2AB611EFB339FD81C4F9AE02/7ZsOYIWiXfJnSf8nWBpOi8fBhsw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:dd:d7:e5:e0:cf:12:d7:c1:73:7b:ca:c6:44:11:f6:bc: 22:a1:e2:d6:2f:3c:f0:c9:28:59:e9:cc:48:a4:d0:40:43:9b: bf:64:af:d9:35:64:d1:af:47:60:08:ae:03:2f:e7:f3:68:38: ee:d0:a5:0f:42:15:d1:00:7b:2f:62:4c:84:0b:e5:4b:92:ec: fa:d8:ab:86:90:11:45:56:bb:99:17:bd:7e:7e:5c:aa:c7:76: 81:41:21:dd:c9:c1:d9:c4:4b:64:40:a9:78:d1:10:87:2c:71: 43:5c:6d:9b:f4:69:50:59:56:56:a7:1f:e7:21:8b:17:38:52: be:39:e3:b9:b8:84:fe:3a:79:fa:12:a3:e1:2a:bb:fd:cc:7d: 15:a0:2c:b6:1f:46:fd:d5:d9:d9:66:84:44:9a:1c:f2:e1:17: ac:e4:a7:f8:22:09:ad:a9:6a:02:74:01:9d:2d:76:aa:83:3b: 92:09:2b:36:3d:27:9d:15:b4:2e:2e:f3:96:a2:e1:87:a5:11: 30:95:72:f0:db:b3:b2:ea:9b:60:04:25:30:53:ce:be:d7:f2: d8:fa:15:d5:d0:6d:ef:d3:03:fd:c2:12:42:c4:0c:a2:68:ca: 1e:42:43:f7:53:b1:44:3e:09:63:c4:29:53:3c:2d:6f:d8:58: 88:ee:76:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTAyRDgxMTAvBgNVBAUTKEVEOUIwRTYwODVBMjVERjI2NzQ5RkYyNzU4MUE0RThC QzdDMTg2Q0MwHhcNMjUwOTE3MDU1NTQyWhcNMjUwOTI0MDU1NTQyWjAYMRYwFAYD VQQDEw02OGNhNGQ1ZS0yNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvKM9xvHanEkkrcFFub5VSj2vI9vGzF8TaIuIrEYpyvsq1Fa7eQVk9XhM0xF dYNQefk52AxLx1rpw3MBw6Qj1aW8+ILnAzp/qpY4XlG1TszihZ8Xcy36h/9e+YLV Iv7HuJFdfze2clyPrqsuivdbFPIu24Pyeh4zgKmb7kkx+p83U6Lbvy6/2YIaUWOh hFRM68h/2c/yADWnpPcukv6Qq4hoMLI1KwcaXiGT5oVWxKAo0vGvKNe1VohG0Bsf KFIoP+MbDcyBTxXF9/gn8DgOpAh191INvuQbvTEz+5CAMisG80O7mOJ4OJUfN88S Q4Wdph4nkuFCKb9kHDniqagr6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP11ffPf lerRepuuaf6ikLiZRQn2MB8GA1UdIwQYMBaAFO2bDmCFol3yZ0n/J1gaTovHwYbM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDJEOC9FMDkyNDhFQTJB QjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhmSm5TZjhuV0JwT2k4ZkJo c3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdac09ZSVdpWGZKblNmOG5XQnBPaThmQmhzdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDJEOC9FMDkyNDhFQTJBQjYxMUVGQjMzOUZEODFDNEY5QUUwMi83WnNPWUlXaVhm Sm5TZjhuV0JwT2k4ZkJoc3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZjN3X5eDPEtfBc3vKxkQR9rwioeLWLzzwyShZ6cxIpNBAQ5u/ZK/Z NWTRr0dgCK4DL+fzaDju0KUPQhXRAHsvYkyEC+VLkuz62KuGkBFFVruZF71+flyq x3aBQSHdycHZxEtkQKl40RCHLHFDXG2b9GlQWVZWpx/nIYsXOFK+OeO5uIT+Onn6 EqPhKrv9zH0VoCy2H0b91dnZZoREmhzy4Res5Kf4IgmtqWoCdAGdLXaqgzuSCSs2 PSedFbQuLvOWouGHpREwlXLw27Oy6ptgBCUwU86+1/LY+hXV0G3v0wP9whJCxAyi aMoeQkP3U7FEPgljxClTPC1v2FiI7na1 -----END CERTIFICATE-----Generated at Fri Sep 19 02:50:32 2025 by rpki-client