$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft File: 7AyaWMsKzUJztF4bkYE7___QgUA.mft (raw, json) Hash identifier: CK/o9oPDeWrq3Hfa15mgY4nUJDVsZuNZQKCAhBdD5hs= Subject key identifier: A4:CA:F0:E8:7D:D9:11:38:36:36:42:5E:88:49:64:1C:87:F1:F5:C3 Authority key identifier: EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 Certificate issuer: /CN=A91B7691/serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft Manifest number: 0208 Signing time: Tue 09 Sep 2025 02:25:40 +0000 Manifest this update: Tue 09 Sep 2025 02:25:40 +0000 Manifest next update: Tue 16 Sep 2025 02:25:40 +0000 Files and hashes: 1: 7AyaWMsKzUJztF4bkYE7___QgUA.crl (hash: FE2reJV3/R2U8sDV0y/87cThGdsP25uaSOQxdZ9nf9g=) 2: EB9F5762EE8F11EF98C58C75C4F9AE02.roa (hash: ScqtXrKQFBst0F27eHzdcS8cxxg6r7Zs+kEeCrfoHcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:25:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7691, serialNumber=EC0C9A58CB0ACD4273B45E1B91813BFFFFD08140 Validity Not Before: Sep 9 02:25:40 2025 GMT Not After : Sep 16 02:25:40 2025 GMT Subject: CN=68bf9024-b700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:ba:89:34:0b:a0:f3:56:af:fb:73:bf:ca: 54:cf:80:69:3e:bf:a7:d7:f5:6f:e7:23:a3:ec:df: 55:3f:33:d0:7b:dc:43:c9:90:73:aa:d6:55:e5:5a: 29:5c:3d:2c:d9:d9:13:9c:0a:6c:82:a8:37:aa:93: 35:ed:f2:ff:f2:1d:76:d4:75:27:1d:7f:ca:cc:c7: dd:96:43:84:e2:e1:6f:28:d0:c0:2c:71:63:f5:c8: 94:e4:04:d8:e1:49:73:61:c7:4d:c6:eb:2b:96:47: ca:40:99:fb:46:84:8f:5a:9c:3e:cf:bc:85:27:a7: 88:a7:42:ff:0f:d3:9c:bf:9b:1e:60:1f:ba:80:67: a1:89:52:e2:2a:db:be:90:12:38:55:c7:1c:56:09: bd:17:3b:95:23:ce:c7:c4:55:b3:ba:b1:be:c4:13: 59:d6:dc:98:3f:71:c4:5c:61:64:b5:9b:15:a3:93: 0c:91:7f:18:b1:64:37:d2:e2:f2:4a:2e:a1:83:6d: 18:e0:59:2e:0a:73:15:27:02:77:a8:ff:2f:d5:48: ce:be:db:8f:d0:79:8e:73:40:29:86:50:e3:d5:2c: 2a:bb:88:36:8e:e0:74:87:1f:52:c3:48:24:74:e5: a8:3a:a4:84:7f:5d:8e:38:be:2f:83:54:22:82:2f: 42:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CA:F0:E8:7D:D9:11:38:36:36:42:5E:88:49:64:1C:87:F1:F5:C3 X509v3 Authority Key Identifier: keyid:EC:0C:9A:58:CB:0A:CD:42:73:B4:5E:1B:91:81:3B:FF:FF:D0:81:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AyaWMsKzUJztF4bkYE7___QgUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7691/82164D047D5911EDBEB55D0AC4F9AE02/7AyaWMsKzUJztF4bkYE7___QgUA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:36:ee:fd:1b:3d:ba:75:92:f4:cb:dc:71:cc:fb:34:cd:c2: 02:93:bd:26:dc:a3:8e:b4:8c:52:83:3b:de:96:21:36:07:97: b9:2c:e2:d4:86:bd:14:cd:ed:d1:d1:d5:53:26:da:f7:24:4d: 5e:1d:1c:39:f3:2b:7d:7e:3d:88:3c:71:31:1e:15:bc:33:38: 8b:16:b7:79:5f:fe:e3:c6:5b:a9:2b:18:de:e2:07:2b:17:24: 64:45:1a:0a:b1:3b:b0:b4:1b:13:dc:34:b1:68:92:5d:cf:39: 87:5a:d8:69:cd:36:cd:3c:53:b9:5c:d8:4f:22:f1:7c:57:6a: 9c:65:1f:89:a8:28:a0:29:bf:95:ac:99:02:c9:aa:b3:f0:6f: 75:70:6a:ec:d6:57:7a:28:96:39:50:b2:60:36:11:09:11:40: 90:e2:f6:04:a1:5c:d1:45:6a:5b:bb:d9:05:cf:65:89:65:0e: 1e:c6:35:8a:69:8b:86:96:5c:9f:1a:86:d6:1a:ab:d9:08:1b: 20:e1:5a:0c:65:ae:a0:48:ab:cf:d7:a4:c5:f8:09:83:b5:a3: 98:23:04:ab:a0:7e:60:b1:a1:98:62:7c:d1:57:8f:22:69:a4: 00:21:45:05:4f:ea:66:3e:a8:2a:c8:3b:ba:10:09:50:f8:34: 44:da:8a:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc2OTExMTAvBgNVBAUTKEVDMEM5QTU4Q0IwQUNENDI3M0I0NUUxQjkxODEzQkZG RkZEMDgxNDAwHhcNMjUwOTA5MDIyNTQwWhcNMjUwOTE2MDIyNTQwWjAYMRYwFAYD VQQDEw02OGJmOTAyNC1iNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04O6iTQLoPNWr/tzv8pUz4BpPr+n1/Vv5yOj7N9VPzPQe9xDyZBzqtZV5Vop XD0s2dkTnApsgqg3qpM17fL/8h121HUnHX/KzMfdlkOE4uFvKNDALHFj9ciU5ATY 4UlzYcdNxusrlkfKQJn7RoSPWpw+z7yFJ6eIp0L/D9Ocv5seYB+6gGehiVLiKtu+ kBI4VcccVgm9FzuVI87HxFWzurG+xBNZ1tyYP3HEXGFktZsVo5MMkX8YsWQ30uLy Si6hg20Y4FkuCnMVJwJ3qP8v1UjOvtuP0HmOc0AphlDj1Swqu4g2juB0hx9Sw0gk dOWoOqSEf12OOL4vg1Qigi9COwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKTK8Oh9 2RE4NjZCXohJZByH8fXDMB8GA1UdIwQYMBaAFOwMmljLCs1Cc7ReG5GBO///0IFA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzY5MS84MjE2NEQwNDdE NTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pVSnp0RjRia1lFN19fX1Fn VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBeWFXTXNLelVKenRGNGJrWUU3X19fUWdVQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzY5MS84MjE2NEQwNDdENTkxMUVEQkVCNTVEMEFDNEY5QUUwMi83QXlhV01zS3pV Snp0RjRia1lFN19fX1FnVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByNu79Gz26dZL0y9xxzPs0zcICk70m3KOOtIxSgzveliE2B5e5LOLU hr0Uze3R0dVTJtr3JE1eHRw58yt9fj2IPHExHhW8MziLFrd5X/7jxlupKxje4gcr FyRkRRoKsTuwtBsT3DSxaJJdzzmHWthpzTbNPFO5XNhPIvF8V2qcZR+JqCigKb+V rJkCyaqz8G91cGrs1ld6KJY5ULJgNhEJEUCQ4vYEoVzRRWpbu9kFz2WJZQ4exjWK aYuGllyfGobWGqvZCBsg4VoMZa6gSKvP16TF+AmDtaOYIwSroH5gsaGYYnzRV48i aaQAIUUFT+pmPqgqyDu6EAlQ+DRE2ooS -----END CERTIFICATE-----Generated at Tue Sep 9 09:33:30 2025 by rpki-client