$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: FAmYZI6aqCKL+nNHuORJvkMihPxomAF/y6ZllZ6IYUY= Subject key identifier: 4A:6C:38:82:C6:92:C7:EF:FB:DB:55:CF:0D:B3:BE:1D:A3:C6:7F:8A Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B48 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B39 Signing time: Sun 24 Aug 2025 19:15:56 +0000 Manifest this update: Sun 24 Aug 2025 19:15:55 +0000 Manifest next update: Sun 31 Aug 2025 19:15:55 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: SxvmBVV3To1CDsrPmTrZFKhIGAonrWx7W1D95qTG6gI=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2888 (0xb48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Aug 24 19:15:55 2025 GMT Not After : Aug 31 19:15:55 2025 GMT Subject: CN=68ab64eb-dcd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4c:13:4b:6d:18:63:91:9c:3e:11:2e:c8:17: 35:c1:17:b3:ac:61:25:ce:e2:f0:10:13:d6:b1:f9: 4e:d7:be:96:e8:ac:97:58:03:4a:fa:50:e9:6c:3d: 45:56:4a:b9:3f:7f:6b:69:10:24:a2:d8:e7:40:8b: 75:96:fd:6c:b9:92:f4:4b:d4:be:46:6d:ad:49:57: 04:09:eb:e4:13:b6:b3:e6:c8:9f:b7:37:20:6a:0e: 34:ae:28:72:29:0f:25:93:1c:f1:9b:21:c0:ee:38: ec:36:e0:bf:d2:41:9c:8c:10:1a:89:df:d3:f0:b8: 95:37:19:c0:5b:83:cd:46:71:75:a9:a8:c7:93:57: 5e:47:8c:33:5f:2e:83:91:3c:06:69:cd:76:3c:e3: bf:b2:a7:a2:fc:11:2a:15:cd:12:a4:1e:76:83:eb: 76:ed:f7:6a:41:d9:89:8a:7e:3a:42:e2:1c:c4:4d: 49:9d:07:87:68:7f:18:18:81:a5:ee:16:12:cc:f2: bf:b7:97:f2:cb:b4:f6:a9:95:42:f2:18:cc:a8:c1: f6:43:94:8b:e6:6f:57:26:d9:88:3c:3a:a3:19:0b: da:75:b6:38:60:88:b0:53:d6:64:d2:02:ae:47:7e: 96:79:ea:f1:10:8c:bf:70:08:a5:5c:1f:49:52:49: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6C:38:82:C6:92:C7:EF:FB:DB:55:CF:0D:B3:BE:1D:A3:C6:7F:8A X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:f8:0d:e4:1f:b2:91:ff:04:e3:35:96:86:e9:dc:bb:5c:58: 7a:3c:7c:8b:62:bb:00:e3:57:b1:2e:93:04:f1:e3:3c:8a:28: e3:b7:fd:59:eb:e3:69:95:a4:dc:c3:fc:35:8c:10:39:ac:5d: 90:f6:d6:3a:88:35:0a:e1:1a:db:ca:83:17:c2:49:4c:6f:c8: 23:4f:21:87:79:17:58:6f:39:37:f9:3b:d2:e4:1d:a8:38:d2: 7b:54:dd:96:4e:95:a2:40:39:77:8f:c5:81:56:23:a4:ff:c9: ad:20:0a:b5:1c:d1:02:ce:ea:cc:20:5a:47:be:3d:16:1d:d8: 82:5c:18:81:a6:6a:d9:e8:40:18:7a:64:bb:9a:3e:2d:a5:ee: 03:50:94:9a:82:36:16:17:94:ea:3b:78:29:35:5a:c3:af:c0: 29:2e:8a:4a:0d:38:64:26:a8:9a:c9:34:00:c0:33:a0:f6:38: 3f:23:b5:7c:2b:1a:2c:4f:14:25:37:6d:ac:48:e9:58:f4:1b: a1:71:e5:b8:65:0f:5f:14:d7:d9:55:1d:50:b3:81:02:e7:72: 79:82:20:85:20:8b:ef:85:01:00:cc:b3:65:5e:a1:56:8c:dd: 0a:b3:e5:61:ca:4f:c3:6c:93:4d:5b:26:1a:2c:76:c4:83:c6: 95:ca:e4:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUwODI0MTkxNTU1WhcNMjUwODMxMTkxNTU1WjAYMRYwFAYD VQQDEw02OGFiNjRlYi1kY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60wTS20YY5GcPhEuyBc1wRezrGElzuLwEBPWsflO176W6KyXWANK+lDpbD1F Vkq5P39raRAkotjnQIt1lv1suZL0S9S+Rm2tSVcECevkE7az5siftzcgag40rihy KQ8lkxzxmyHA7jjsNuC/0kGcjBAaid/T8LiVNxnAW4PNRnF1qajHk1deR4wzXy6D kTwGac12POO/sqei/BEqFc0SpB52g+t27fdqQdmJin46QuIcxE1JnQeHaH8YGIGl 7hYSzPK/t5fyy7T2qZVC8hjMqMH2Q5SL5m9XJtmIPDqjGQvadbY4YIiwU9Zk0gKu R36WeerxEIy/cAilXB9JUklqXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpsOILG ksfv+9tVzw2zvh2jxn+KMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx+A3kH7KR/wTjNZaG6dy7XFh6PHyLYrsA41exLpME8eM8iijjt/1Z 6+NplaTcw/w1jBA5rF2Q9tY6iDUK4RrbyoMXwklMb8gjTyGHeRdYbzk3+TvS5B2o ONJ7VN2WTpWiQDl3j8WBViOk/8mtIAq1HNECzurMIFpHvj0WHdiCXBiBpmrZ6EAY emS7mj4tpe4DUJSagjYWF5TqO3gpNVrDr8ApLopKDThkJqiayTQAwDOg9jg/I7V8 KxosTxQlN22sSOlY9BuhceW4ZQ9fFNfZVR1Qs4EC53J5giCFIIvvhQEAzLNlXqFW jN0Ks+Vhyk/DbJNNWyYaLHbEg8aVyuRg -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:14 2025 by rpki-client