$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft File: 7BeaWHQiKOMLffeXiCZYOHglW3g.mft (raw, json) Hash identifier: 1H+OOxCcsUxjHup9o8LW/f9rH7tmBJbI/VaxZU0IM3U= Subject key identifier: 83:BD:7E:16:D6:FA:A1:5A:8F:B9:F2:8B:60:37:17:4E:3B:85:D5:C1 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0DD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft Manifest number: 0DD1 Signing time: Sun 24 Aug 2025 17:50:46 +0000 Manifest this update: Sun 24 Aug 2025 17:50:46 +0000 Manifest next update: Sun 31 Aug 2025 17:50:46 +0000 Files and hashes: 1: 7BeaWHQiKOMLffeXiCZYOHglW3g.crl (hash: 9k87qhotOOY741HwdWihtkqpgzrM++8ZqEyyrsSVuyc=) 2: E64999C258D611ED86C99945C4F9AE02.roa (hash: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3541 (0xdd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Aug 24 17:50:46 2025 GMT Not After : Aug 31 17:50:46 2025 GMT Subject: CN=68ab50f6-a142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:d4:ad:0b:d8:12:2a:63:eb:e8:65:9e:68: ec:b0:85:d9:24:d6:84:ab:fa:d1:4a:3f:b1:ca:23: 34:c4:a7:8e:56:f9:bf:e6:ca:d5:3d:12:03:e4:37: 90:e9:4c:98:fa:da:9f:7e:d2:82:6b:d5:94:37:74: 61:72:43:85:41:6b:5b:8b:e0:3a:ac:69:cf:5b:36: 69:dd:03:f0:39:b5:44:ae:24:b0:09:57:01:22:7b: 90:bb:62:e7:61:4d:05:9d:8b:8c:65:d8:ee:47:ff: 98:a0:95:0f:c8:3e:21:4f:62:a2:ab:37:a3:d6:60: 2d:1f:71:0c:7b:1e:ea:82:27:64:03:7f:54:db:a2: 57:a8:59:5e:1f:d8:0a:51:3f:a1:79:85:5f:9f:16: 7d:f0:eb:57:63:69:af:1e:45:fb:ba:ea:c3:92:65: ac:81:b1:fb:25:e9:0d:3e:a6:43:f3:0f:65:f2:96: a8:e6:b1:2e:74:b3:0d:72:00:68:0f:ca:c0:72:4d: 82:1d:68:76:c7:9e:19:56:0e:7f:bd:58:2d:23:02: ec:d2:62:a6:40:ac:e2:d7:a6:00:3a:60:3c:e4:c5: 4c:a9:cf:e0:ec:bd:6f:3a:fc:67:ae:b0:1a:d9:73: 95:05:1b:24:39:1d:2f:84:75:ba:18:6e:a6:31:3e: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BD:7E:16:D6:FA:A1:5A:8F:B9:F2:8B:60:37:17:4E:3B:85:D5:C1 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:5f:7d:11:ae:ef:2a:03:db:d4:d6:40:21:2b:78:b5:40:7c: 4e:ba:1f:0b:75:33:62:45:b8:96:37:fd:8b:3c:60:4d:ab:d6: 54:8e:bd:37:c8:89:3e:d1:b6:b2:aa:c0:87:fe:0c:d7:e1:3d: 9f:6f:6a:de:4b:73:33:4e:1f:56:47:09:7b:c8:f8:8b:26:3d: fe:23:c8:13:d2:fd:ec:8d:5e:78:7f:b9:d0:ec:18:4c:84:b7: f8:68:cf:92:46:41:5f:8e:9b:17:fc:ca:8c:97:65:b1:11:14: c3:5f:01:3f:9a:6d:50:74:f2:e6:8e:6d:d5:89:65:2f:4d:2b: 7f:37:32:3d:fb:d4:45:92:7c:3a:25:ec:7c:d1:9f:77:86:1b: 2b:f6:86:0e:4b:cc:50:2d:dd:99:29:49:31:74:f5:b4:d1:1b: 95:6d:48:cf:2c:d2:58:b2:b0:5c:f2:1a:37:bc:d6:ba:58:e2: fe:dd:52:af:ed:48:fc:5a:b2:7a:5a:70:a9:c7:74:b8:82:d6: 62:76:ed:26:d8:48:a0:b9:ec:55:81:c7:92:ad:a3:51:79:7c: d4:53:cd:2d:ea:ee:b3:de:d0:a5:d9:39:23:1b:99:fa:72:7b: dc:48:37:87:ef:72:ae:f5:91:6e:dc:a2:64:60:06:b6:50:ab: 75:93:ee:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwODI0MTc1MDQ2WhcNMjUwODMxMTc1MDQ2WjAYMRYwFAYD VQQDEw02OGFiNTBmNi1hMTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuDUrQvYEipj6+hlnmjssIXZJNaEq/rRSj+xyiM0xKeOVvm/5srVPRID5DeQ 6UyY+tqfftKCa9WUN3RhckOFQWtbi+A6rGnPWzZp3QPwObVEriSwCVcBInuQu2Ln YU0FnYuMZdjuR/+YoJUPyD4hT2Kiqzej1mAtH3EMex7qgidkA39U26JXqFleH9gK UT+heYVfnxZ98OtXY2mvHkX7uurDkmWsgbH7JekNPqZD8w9l8pao5rEudLMNcgBo D8rAck2CHWh2x54ZVg5/vVgtIwLs0mKmQKzi16YAOmA85MVMqc/g7L1vOvxnrrAa 2XOVBRskOR0vhHW6GG6mMT4MqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIO9fhbW +qFaj7nyi2A3F047hdXBMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk1QS9CMEQxRDVGQ0JFNzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtP TUxmZmVYaUNaWU9IZ2xXM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYX30Rru8qA9vU1kAhK3i1QHxOuh8LdTNiRbiWN/2LPGBNq9ZUjr03 yIk+0bayqsCH/gzX4T2fb2reS3MzTh9WRwl7yPiLJj3+I8gT0v3sjV54f7nQ7BhM hLf4aM+SRkFfjpsX/MqMl2WxERTDXwE/mm1QdPLmjm3ViWUvTSt/NzI9+9RFknw6 Jex80Z93hhsr9oYOS8xQLd2ZKUkxdPW00RuVbUjPLNJYsrBc8ho3vNa6WOL+3VKv 7Uj8WrJ6WnCpx3S4gtZidu0m2EiguexVgceSraNReXzUU80t6u6z3tCl2TkjG5n6 cnvcSDeH73Ku9ZFu3KJkYAa2UKt1k+4Y -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:23 2025 by rpki-client