$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft File: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft (raw, json) Hash identifier: fNOaAOCHbrlVx3LDdEfQs7wxDEzJ1qYDCGup4aZVD84= Subject key identifier: 29:CB:B5:76:9E:1D:05:CB:D5:47:76:AF:13:7A:B6:C7:83:D6:05:71 Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 Certificate issuer: /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Certificate serial: 0AC3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft Manifest number: 0ABD Signing time: Thu 18 Sep 2025 19:42:22 +0000 Manifest this update: Thu 18 Sep 2025 19:42:21 +0000 Manifest next update: Thu 25 Sep 2025 19:42:21 +0000 Files and hashes: 1: 7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl (hash: csU/0gj215xbdXa6MKBt6HRq7bQ8/MYvODcWUNHgNxs=) 2: A7D265605BB411EAB5B9A73BC4F9AE02.roa (hash: wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:42:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2755 (0xac3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B04E3, serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396 Validity Not Before: Sep 18 19:42:21 2025 GMT Not After : Sep 25 19:42:21 2025 GMT Subject: CN=68cc609d-f99d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:60:43:58:fc:08:0b:45:9d:d3:52:c6:0d: 0e:e0:de:49:da:db:df:44:ca:3a:92:d7:dd:2e:fd: 04:7d:63:dc:f6:19:4f:3d:9d:62:93:95:6d:f8:60: 34:43:71:e6:21:48:b3:a3:63:4a:ba:41:0e:96:7e: 4a:d4:92:fc:bc:89:58:f1:51:fd:fd:a9:d4:b6:84: 6e:91:24:f6:cc:0d:2d:9a:8a:05:fe:38:ce:7e:a2: 78:67:2f:a1:14:8e:00:1e:87:56:d5:b7:da:70:ee: 5e:6f:da:f7:c0:a6:40:00:41:64:01:e1:1e:4e:4c: dc:9a:1d:a1:02:8a:5d:69:9b:76:d0:6e:f0:99:94: 53:6b:ec:7e:27:ce:d3:d4:b0:92:4f:6e:d0:55:08: f0:c9:5f:76:b2:f8:5f:ee:02:1a:d5:c9:21:37:bd: 95:4e:21:5c:8d:31:dd:3c:f6:8d:9e:fd:b9:75:c3: e0:93:4d:a0:18:01:84:e6:28:7b:7b:3a:db:0c:4d: 8f:ec:f6:e3:99:c7:ef:03:af:96:55:8d:8e:af:54: 8a:93:4a:16:c8:ed:b8:07:10:5b:2e:83:81:bf:5e: d5:cf:50:79:70:b1:fa:41:9e:2e:35:35:29:17:15: 78:e3:bf:90:4f:05:f2:a3:ef:fd:c3:d1:f0:5e:0a: f7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CB:B5:76:9E:1D:05:CB:D5:47:76:AF:13:7A:B6:C7:83:D6:05:71 X509v3 Authority Key Identifier: keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:dd:9f:00:ed:3a:5c:a7:f5:e3:17:88:d5:71:b6:7b:7f:a5: 43:e4:2e:c7:2d:ad:db:79:c7:10:83:38:a6:50:b7:ac:8d:68: 25:ef:41:01:a5:f9:5a:9b:1f:5d:cb:00:4b:38:6b:ce:cf:21: 75:07:35:74:a1:11:e7:90:bb:6c:a1:fb:f6:31:fc:1d:9b:be: 4d:e1:8f:31:f2:28:5d:be:5b:4a:ee:d9:50:d2:2d:f4:c6:71: f8:32:e8:df:27:da:4d:95:ce:3c:43:8a:82:49:50:b0:97:5b: 94:9f:4a:c4:ea:a0:1a:38:58:c3:b7:19:fd:3d:b4:fc:17:04: 3d:21:cc:a0:fe:d5:e7:4b:db:04:d8:70:c6:46:65:f3:ba:43: b9:33:a5:93:ae:b4:03:fb:8c:5d:e3:c9:43:1a:15:62:bf:84: e6:ab:a1:6d:54:63:3d:67:13:31:18:e0:8a:0c:97:10:fb:f6: e6:4a:6d:b8:0b:ff:5b:5b:76:1c:54:43:ea:3c:f7:3f:d8:8c: 3d:56:26:2c:0c:50:21:26:a1:ad:bd:90:71:2a:ba:06:95:b5: 50:02:c0:a9:33:27:aa:cb:06:58:27:68:f9:e0:35:13:5f:9e: a0:51:49:ce:28:57:c6:89:9a:cb:a3:04:86:b7:5a:f8:e7:02: d5:8f:ea:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA0RTMxMTAvBgNVBAUTKEVDNThCNDM3OEZDQkZGNENCMTI0MUY4MkYzQkNDMEU4 NzJFNEIzOTYwHhcNMjUwOTE4MTk0MjIxWhcNMjUwOTI1MTk0MjIxWjAYMRYwFAYD VQQDEw02OGNjNjA5ZC1mOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxhdgQ1j8CAtFndNSxg0O4N5J2tvfRMo6ktfdLv0EfWPc9hlPPZ1ik5Vt+GA0 Q3HmIUizo2NKukEOln5K1JL8vIlY8VH9/anUtoRukST2zA0tmooF/jjOfqJ4Zy+h FI4AHodW1bfacO5eb9r3wKZAAEFkAeEeTkzcmh2hAopdaZt20G7wmZRTa+x+J87T 1LCST27QVQjwyV92svhf7gIa1ckhN72VTiFcjTHdPPaNnv25dcPgk02gGAGE5ih7 ezrbDE2P7PbjmcfvA6+WVY2Or1SKk0oWyO24BxBbLoOBv17Vz1B5cLH6QZ4uNTUp FxV447+QTwXyo+/9w9HwXgr38QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCnLtXae HQXL1Ud2rxN6tseD1gVxMB8GA1UdIwQYMBaAFOxYtDePy/9MsSQfgvO8wOhy5LOW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDRFMy8xNDgzQkQzNjVC QjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8weXhKQi1DODd6QTZITGtz NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGaTBONF9MXzB5eEpCLUM4N3pBNkhMa3M1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDRFMy8xNDgzQkQzNjVCQjQxMUVBODhENTY3M0JDNEY5QUUwMi83RmkwTjRfTF8w eXhKQi1DODd6QTZITGtzNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl3Z8A7Tpcp/XjF4jVcbZ7f6VD5C7HLa3beccQgzimULesjWgl70EB pflamx9dywBLOGvOzyF1BzV0oRHnkLtsofv2Mfwdm75N4Y8x8ihdvltK7tlQ0i30 xnH4MujfJ9pNlc48Q4qCSVCwl1uUn0rE6qAaOFjDtxn9PbT8FwQ9Icyg/tXnS9sE 2HDGRmXzukO5M6WTrrQD+4xd48lDGhViv4Tmq6FtVGM9ZxMxGOCKDJcQ+/bmSm24 C/9bW3YcVEPqPPc/2Iw9ViYsDFAhJqGtvZBxKroGlbVQAsCpMyeqywZYJ2j54DUT X56gUUnOKFfGiZrLowSGt1r45wLVj+pi -----END CERTIFICATE-----Generated at Thu Sep 18 23:51:15 2025 by rpki-client