$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft File: d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json) Hash identifier: OTociM/XKxDoVN+43lHbBDHulel4KKNvI96by54H9O0= Subject key identifier: 14:33:2E:CD:BC:5C:A5:42:75:64:6E:DF:8F:4A:6C:38:DA:F7:5A:76 Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B Certificate issuer: /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft Manifest number: 7B Signing time: Thu 21 Aug 2025 06:56:28 +0000 Manifest this update: Thu 21 Aug 2025 06:56:28 +0000 Manifest next update: Thu 28 Aug 2025 06:56:28 +0000 Files and hashes: 1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: 0OdVykfuSz59Y1QMGJAKgrAHluz0QaVFcMpAWOpAIq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:56:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B Validity Not Before: Aug 21 06:56:28 2025 GMT Not After : Aug 28 06:56:28 2025 GMT Subject: CN=68a6c31c-8f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:78:d8:67:a0:dc:9e:a7:e8:6b:86:bf:c7:20: 4b:1c:b6:ea:37:f6:75:f9:cc:ef:96:d1:16:cf:5c: 2c:e0:25:80:15:18:ba:27:25:f2:2a:fc:39:01:38: 90:f3:ba:23:30:fa:79:20:08:5e:30:fb:e7:cb:45: d9:bf:74:e3:b0:ec:88:fe:0a:fb:cd:b6:24:cc:91: d2:19:99:0f:e5:5a:50:87:d5:d9:3e:32:9a:66:7b: 1c:d0:df:03:4c:ba:49:19:0c:32:44:c8:45:8c:be: 1c:91:ce:c2:64:f1:60:e5:9f:69:3e:79:39:96:b7: 96:09:7e:de:69:ad:04:87:0a:c0:ca:9a:44:64:e3: 19:75:cd:f9:46:dc:10:5b:3f:4d:c3:21:5f:0b:0c: 8a:cd:d8:f3:78:0b:d0:7a:43:b5:05:9a:99:78:c0: c4:5d:cf:cb:d9:b3:17:b5:97:70:5e:50:3a:22:5e: ac:34:08:0e:6f:8b:74:e2:18:5c:e1:0f:d7:ea:da: 2c:c5:7f:4c:98:ef:ab:5c:3d:0f:d9:48:2e:33:a4: 26:5f:3c:5a:3d:7c:a6:24:35:0a:28:e9:5f:fa:bf: f9:c5:cd:b4:88:be:0c:4c:21:9e:15:3e:6a:2e:a5: d2:15:be:14:4f:70:14:71:9f:b5:c5:b2:60:4c:ad: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:33:2E:CD:BC:5C:A5:42:75:64:6E:DF:8F:4A:6C:38:DA:F7:5A:76 X509v3 Authority Key Identifier: keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:72:a6:9e:36:bc:4f:47:5c:cb:9e:a5:0b:9b:2e:f1:ac:47: e5:45:61:80:cb:bf:39:ba:96:b2:a8:73:20:57:b5:a8:ac:3c: ea:42:fd:e0:be:80:26:78:a9:70:74:50:bd:fb:1f:7b:05:7c: d6:c8:a6:44:ae:eb:1c:51:d0:57:4e:6f:55:fd:89:34:2e:73: c9:4e:f3:58:15:29:18:d7:3c:22:08:9e:c1:15:d3:2f:71:e5: e9:6a:da:50:8a:88:e9:1a:50:ce:d7:2e:7d:19:97:96:99:68: c3:47:e1:84:21:b1:4b:32:ed:3d:07:de:e3:6b:ff:21:8e:21: d2:6b:59:51:c5:03:78:b1:1d:8f:fc:17:30:2c:26:4a:21:58: 6d:ad:f9:15:4e:bd:5e:44:d5:ab:1b:e0:3d:14:0a:2f:f2:ba: c9:86:04:ea:60:3b:ad:c1:af:b4:be:bc:8c:f5:80:17:30:e9: 2b:88:eb:5b:bf:eb:a8:d9:9b:2e:2a:52:91:ea:66:cd:0a:60: dc:84:25:25:e5:d3:f9:98:09:34:41:57:15:79:bb:96:8f:07: 9f:f0:d7:a0:f3:6d:2e:79:24:0d:ab:91:39:b5:40:7d:0c:1f: 06:b7:7e:61:e8:54:f6:d9:c5:b6:84:e0:66:1c:be:45:ed:46: 10:aa:3d:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RjIwNzExMC8GA1UEBRMoNzc3REI4OTc0NTcwRTlCNkMwNEUyNjU3RTZEMEE1MDM3 QzcxODg2QjAeFw0yNTA4MjEwNjU2MjhaFw0yNTA4MjgwNjU2MjhaMBgxFjAUBgNV BAMTDTY4YTZjMzFjLThmMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD1eNhnoNyep+hrhr/HIEsctuo39nX5zO+W0RbPXCzgJYAVGLonJfIq/DkBOJDz uiMw+nkgCF4w++fLRdm/dOOw7Ij+CvvNtiTMkdIZmQ/lWlCH1dk+MppmexzQ3wNM ukkZDDJEyEWMvhyRzsJk8WDln2k+eTmWt5YJft5prQSHCsDKmkRk4xl1zflG3BBb P03DIV8LDIrN2PN4C9B6Q7UFmpl4wMRdz8vZsxe1l3BeUDoiXqw0CA5vi3TiGFzh D9fq2izFf0yY76tcPQ/ZSC4zpCZfPFo9fKYkNQoo6V/6v/nFzbSIvgxMIZ4VPmou pdIVvhRPcBRxn7XFsmBMrbbxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFDMuzbxc pUJ1ZG7fj0psONr3WnYwHwYDVR0jBBgwFoAUd324l0Vw6bbATiZX5tClA3xxiGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGMjA3L0I0ODg2MUM2QzIy ODExRUY4NkUzNDg0RkM0RjlBRTAyL2QzMjRsMFZ3NmJiQVRpWlg1dENsQTN4eGlH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZDMyNGwwVnc2YmJBVGlaWDV0Q2xBM3h4aUdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG MjA3L0I0ODg2MUM2QzIyODExRUY4NkUzNDg0RkM0RjlBRTAyL2QzMjRsMFZ3NmJi QVRpWlg1dENsQTN4eGlHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdypp42vE9HXMuepQubLvGsR+VFYYDLvzm6lrKocyBXtaisPOpC/eC+ gCZ4qXB0UL37H3sFfNbIpkSu6xxR0FdOb1X9iTQuc8lO81gVKRjXPCIInsEV0y9x 5elq2lCKiOkaUM7XLn0Zl5aZaMNH4YQhsUsy7T0H3uNr/yGOIdJrWVHFA3ixHY/8 FzAsJkohWG2t+RVOvV5E1asb4D0UCi/yusmGBOpgO63Br7S+vIz1gBcw6SuI61u/ 66jZmy4qUpHqZs0KYNyEJSXl0/mYCTRBVxV5u5aPB5/w16DzbS55JA2rkTm1QH0M Hwa3fmHoVPbZxbaE4GYcvkXtRhCqPZ8= -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:30 2025 by rpki-client