$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft File: 7w5JMvxot1LjQokiqT5mq-MfNDE.mft (raw, json) Hash identifier: QsIjYJ0B4b7B25qQq1xNLpH1aq12dtb+J6nEbZyGm2M= Subject key identifier: 1B:FE:BB:14:E3:2D:37:71:C0:44:5F:20:44:13:AD:E9:AD:3A:1A:35 Authority key identifier: EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 Certificate issuer: /CN=A91B4B33/serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft Manifest number: EC Signing time: Fri 05 Sep 2025 05:43:16 +0000 Manifest this update: Fri 05 Sep 2025 05:43:16 +0000 Manifest next update: Fri 12 Sep 2025 05:43:15 +0000 Files and hashes: 1: 7w5JMvxot1LjQokiqT5mq-MfNDE.crl (hash: 3rw6NLT39yB87fusrcAzvVXwed/cLw6wM/wxPAhk064=) 2: 80741B04221F11EF92A42E1AC4F9AE02.roa (hash: tCXmsiS2pZhfyBR2w7/CD7l4+Sf7uzGB1XazUIv4/b4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4B33, serialNumber=EF0E4932FC68B752E3428922A93E66ABE31F3431 Validity Not Before: Sep 5 05:43:16 2025 GMT Not After : Sep 12 05:43:15 2025 GMT Subject: CN=68ba7874-1d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:e9:7f:fc:75:6b:3c:a5:43:06:3a:4e:59: 78:ba:fe:86:a8:53:b8:47:e9:04:83:ed:95:4c:b3: cb:54:03:e4:35:2c:ad:9a:b7:7d:a2:d3:a8:71:a9: 2c:cf:6b:e6:be:0e:78:0c:bd:fa:43:cd:d0:9c:b4: 62:ce:fe:78:24:b8:74:3b:81:a8:83:9c:a8:d0:9d: e1:70:46:57:47:c5:f5:e4:b3:4d:78:40:00:88:e7: 0e:cb:a2:c6:e9:c6:67:62:1f:c1:d8:ea:ea:5a:2b: f1:f4:b6:5a:ae:31:0d:41:5f:89:64:f5:2e:3c:2c: 64:41:e5:d5:6e:51:4f:52:19:d1:38:37:7f:8e:91: 89:ef:60:f1:85:75:31:1e:db:a5:5b:bb:a4:da:21: 2f:0e:7d:ec:95:b1:ad:5b:8a:4e:1b:2d:69:55:f9: e3:dd:d9:55:36:fb:41:7b:8d:7f:d2:34:22:df:b3: 93:22:20:67:e5:0e:bb:3e:a8:8d:0f:6a:b0:3b:25: 8d:97:3c:87:6b:7e:9b:d0:0b:4e:9b:4f:5f:90:45: 98:27:c2:e0:e7:84:d9:91:1b:f7:1b:57:64:23:56: 4f:ff:e3:84:c6:c9:d3:56:17:1b:31:78:7e:5f:72: e0:72:08:56:5f:a8:0d:35:ac:c5:ae:28:f8:d4:90: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FE:BB:14:E3:2D:37:71:C0:44:5F:20:44:13:AD:E9:AD:3A:1A:35 X509v3 Authority Key Identifier: keyid:EF:0E:49:32:FC:68:B7:52:E3:42:89:22:A9:3E:66:AB:E3:1F:34:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7w5JMvxot1LjQokiqT5mq-MfNDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4B33/1ACE7D04221E11EF9344A309C4F9AE02/7w5JMvxot1LjQokiqT5mq-MfNDE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e2:3f:e1:e7:95:f1:40:8b:89:f3:c1:40:11:7f:34:9f:de:d3: 98:53:b4:0f:ad:92:f7:d9:e6:45:32:fb:3f:93:b5:09:29:18: c3:a9:10:f6:c4:81:85:61:e5:7f:53:2a:9b:18:01:ad:07:93: 74:fa:e2:99:ee:67:ae:55:4e:0e:d6:a6:83:7c:9b:37:c3:e6: 7c:dc:d9:53:84:31:92:99:91:47:eb:4e:cd:02:14:4c:7a:49: 80:15:9f:a3:a2:a6:63:ac:77:b8:ae:e1:70:2e:80:21:9d:d4: 71:88:fb:07:e8:18:16:12:41:fb:f3:20:c0:1a:0d:d4:a5:0b: f4:a4:97:e8:6c:c9:38:c6:44:5e:15:e5:7e:55:62:db:50:97: 42:79:55:f9:ba:68:d1:41:a0:cf:5f:26:92:c0:a2:65:c2:1c: 6d:a8:3a:c2:4d:4e:2e:2f:0f:56:3d:99:34:e5:71:90:fe:28: 47:dd:f6:74:c3:df:77:d2:24:59:2b:58:45:fd:3d:10:21:34: 24:f1:56:bd:86:ce:9c:74:98:18:80:57:97:a8:f0:a1:3a:60: 76:33:b3:52:02:7e:4c:79:43:91:3c:e3:f2:be:94:a3:2f:25: 37:cc:f4:b7:5e:b9:b1:c7:c1:89:2a:bc:0b:76:be:f3:8a:75: 8e:7a:03:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRCMzMxMTAvBgNVBAUTKEVGMEU0OTMyRkM2OEI3NTJFMzQyODkyMkE5M0U2NkFC RTMxRjM0MzEwHhcNMjUwOTA1MDU0MzE2WhcNMjUwOTEyMDU0MzE1WjAYMRYwFAYD VQQDEw02OGJhNzg3NC0xZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0Tpf/x1azylQwY6Tll4uv6GqFO4R+kEg+2VTLPLVAPkNSytmrd9otOocaks z2vmvg54DL36Q83QnLRizv54JLh0O4Gog5yo0J3hcEZXR8X15LNNeEAAiOcOy6LG 6cZnYh/B2OrqWivx9LZarjENQV+JZPUuPCxkQeXVblFPUhnRODd/jpGJ72DxhXUx HtulW7uk2iEvDn3slbGtW4pOGy1pVfnj3dlVNvtBe41/0jQi37OTIiBn5Q67PqiN D2qwOyWNlzyHa36b0AtOm09fkEWYJ8Lg54TZkRv3G1dkI1ZP/+OExsnTVhcbMXh+ X3LgcghWX6gNNazFrij41JDOEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBv+uxTj LTdxwERfIEQTremtOho1MB8GA1UdIwQYMBaAFO8OSTL8aLdS40KJIqk+ZqvjHzQx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEIzMy8xQUNFN0QwNDIy MUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3QxTGpRb2tpcVQ1bXEtTWZO REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzd3NUpNdnhvdDFMalFva2lxVDVtcS1NZk5ERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEIzMy8xQUNFN0QwNDIyMUUxMUVGOTM0NEEzMDlDNEY5QUUwMi83dzVKTXZ4b3Qx TGpRb2tpcVQ1bXEtTWZOREUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDiP+HnlfFAi4nzwUARfzSf3tOYU7QPrZL32eZFMvs/k7UJKRjDqRD2 xIGFYeV/UyqbGAGtB5N0+uKZ7meuVU4O1qaDfJs3w+Z83NlThDGSmZFH607NAhRM ekmAFZ+joqZjrHe4ruFwLoAhndRxiPsH6BgWEkH78yDAGg3UpQv0pJfobMk4xkRe FeV+VWLbUJdCeVX5umjRQaDPXyaSwKJlwhxtqDrCTU4uLw9WPZk05XGQ/ihH3fZ0 w9930iRZK1hF/T0QITQk8Va9hs6cdJgYgFeXqPChOmB2M7NSAn5MeUORPOPyvpSj LyU3zPS3Xrmxx8GJKrwLdr7zinWOegM8 -----END CERTIFICATE-----Generated at Sat Sep 6 20:58:19 2025 by rpki-client