$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft File: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft (raw, json) Hash identifier: DnfVgzDhVdT37krtDMiQD2a++kpFUvAhlmLfJlTGJOI= Subject key identifier: DC:E8:FE:A4:69:2C:AE:FA:34:3C:91:7A:66:BE:2F:FB:56:5D:84:D3 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft Manifest number: 012D Signing time: Sun 07 Sep 2025 00:28:53 +0000 Manifest this update: Sun 07 Sep 2025 00:28:53 +0000 Manifest next update: Sun 14 Sep 2025 00:28:53 +0000 Files and hashes: 1: 7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl (hash: MbId+74JlZcqktyPfS/ApuKOHE6tGtxfwqHW2ULRGZE=) 2: D66D72562EAB11EF9B369566C4F9AE02.roa (hash: iVqZPKyDqQducLQTxL6bBlV8UAL5mtY7QS4Lu05AYB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 00:28:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Sep 7 00:28:53 2025 GMT Not After : Sep 14 00:28:53 2025 GMT Subject: CN=68bcd1c5-2e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:69:92:f9:21:7a:ab:18:f8:99:d5:a3:ea:aa: 35:8b:14:93:e0:7e:be:56:cb:8f:8b:5f:7f:32:1a: ed:eb:7b:66:ba:21:24:b0:8f:76:4f:45:2f:88:e0: b9:0c:eb:b2:67:6a:cf:da:3c:68:36:7d:62:fc:0b: a1:b5:d3:6b:08:7c:ca:47:62:bc:b2:79:3a:8a:eb: 27:38:a3:95:24:eb:bb:52:87:1a:d9:dd:c6:88:48: 39:08:b5:90:86:89:71:83:ac:1f:cf:d4:46:0c:75: ab:31:88:5c:1d:95:1b:63:c5:da:cc:5b:20:e1:e9: 30:84:ec:dd:bc:a8:b2:a7:ce:8d:9f:95:27:34:9c: 2d:c3:16:fb:de:ef:9e:1a:91:14:68:c8:d3:f7:83: af:4c:53:40:f6:e3:8a:c4:01:56:ce:5c:39:ee:a3: 05:27:6d:e2:c3:c0:e1:49:0f:ba:2e:66:a4:f6:30: cc:66:76:cc:f3:c6:21:fc:7a:d8:a9:ad:61:83:1c: 82:ff:50:a2:b5:7a:9b:47:f5:0d:50:6d:50:b5:74: 88:c9:7b:dd:f5:42:18:08:35:71:36:7b:ca:0f:37: dd:bd:e2:49:5a:f4:45:65:58:c8:88:3c:e8:4d:30: 75:6f:04:62:bb:ad:d3:bf:f8:f0:b9:5a:0d:a9:18: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E8:FE:A4:69:2C:AE:FA:34:3C:91:7A:66:BE:2F:FB:56:5D:84:D3 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:1d:5e:9a:ec:c6:7c:54:a7:ec:8c:4a:c6:d7:ef:96:ed:32: fd:be:c9:7c:4f:d4:35:6b:45:92:91:44:82:67:28:83:fb:3c: d0:42:60:09:2b:8e:2a:03:09:00:9c:f6:78:e1:d9:0f:f9:09: 89:63:a9:c7:af:bb:72:ee:9e:95:8d:db:3a:63:38:c5:cb:4e: de:ae:51:ea:11:1a:74:d0:0a:f0:60:d5:2d:5a:7c:e8:fc:42: d0:65:6a:f9:54:e8:36:67:ee:18:21:8d:79:a0:50:85:5a:42: c5:31:e6:4c:0a:f5:90:b8:f0:5a:d6:de:b1:47:26:24:dd:9c: 3f:6a:2f:f9:e9:35:3a:3d:aa:43:20:1a:36:3a:b1:58:aa:54: 92:3b:f3:cd:f7:c0:2e:87:95:23:75:df:d7:ea:53:55:11:9a: 61:4a:09:f3:54:18:73:4c:a0:0a:57:26:6b:3f:cf:51:19:37: 88:44:74:e1:21:24:eb:3e:92:59:14:cd:9d:c6:99:d1:67:bc: a1:57:1e:9e:84:3d:3f:c9:2b:8b:ca:23:4d:bd:85:d4:a0:58: 64:4e:97:36:11:0f:a1:5c:83:bd:6c:87:5e:dc:eb:ba:0f:43: a2:bb:12:6f:ae:39:7b:30:84:47:ec:47:ab:94:4c:64:6e:da: 84:ef:23:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUwOTA3MDAyODUzWhcNMjUwOTE0MDAyODUzWjAYMRYwFAYD VQQDEw02OGJjZDFjNS0yZThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5mmS+SF6qxj4mdWj6qo1ixST4H6+VsuPi19/Mhrt63tmuiEksI92T0UviOC5 DOuyZ2rP2jxoNn1i/AuhtdNrCHzKR2K8snk6iusnOKOVJOu7Uoca2d3GiEg5CLWQ holxg6wfz9RGDHWrMYhcHZUbY8XazFsg4ekwhOzdvKiyp86Nn5UnNJwtwxb73u+e GpEUaMjT94OvTFNA9uOKxAFWzlw57qMFJ23iw8DhSQ+6Lmak9jDMZnbM88Yh/HrY qa1hgxyC/1CitXqbR/UNUG1QtXSIyXvd9UIYCDVxNnvKDzfdveJJWvRFZVjIiDzo TTB1bwRiu63Tv/jwuVoNqRhUTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzo/qRp LK76NDyRema+L/tWXYTTMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC N0JEQy83OUVFMEJDNEUyNzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRM cnZVa1ZxczdNSnQwY0VEZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyHV6a7MZ8VKfsjErG1++W7TL9vsl8T9Q1a0WSkUSCZyiD+zzQQmAJ K44qAwkAnPZ44dkP+QmJY6nHr7ty7p6Vjds6YzjFy07erlHqERp00ArwYNUtWnzo /ELQZWr5VOg2Z+4YIY15oFCFWkLFMeZMCvWQuPBa1t6xRyYk3Zw/ai/56TU6PapD IBo2OrFYqlSSO/PN98Auh5Ujdd/X6lNVEZphSgnzVBhzTKAKVyZrP89RGTeIRHTh ISTrPpJZFM2dxpnRZ7yhVx6ehD0/ySuLyiNNvYXUoFhkTpc2EQ+hXIO9bIde3Ou6 D0OiuxJvrjl7MIRH7EerlExkbtqE7yMb -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:35 2025 by rpki-client