$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft File: A7x0msFoLEtG2iWat-tmKqIlsO4.mft (raw, json) Hash identifier: YacjSXgWR6+fSdfsqLya8Ru8Rx4RAfP9kD+f9uQDi7A= Subject key identifier: 95:FB:5E:E4:06:75:E2:1B:7C:04:3A:FC:DA:DF:47:B4:FB:94:92:7A Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft Manifest number: 02C7 Signing time: Tue 09 Sep 2025 01:33:42 +0000 Manifest this update: Tue 09 Sep 2025 01:33:41 +0000 Manifest next update: Tue 16 Sep 2025 01:33:41 +0000 Files and hashes: 1: A7x0msFoLEtG2iWat-tmKqIlsO4.crl (hash: Ds8PZormwZElUH/Z8SV79lCUtW4kWwTK4kEgU1vit0s=) 2: 810DCA288C6511EF813EB90EC4F9AE02.roa (hash: 9vbaTvEONgGnCCzzlIBphmxj6A21NbejzXiij71gCyE=) 3: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (hash: Nuqi/DwAfsIbvqEslH1o2Nq9pgL64KpNEMZ+W/5PR6U=) 4: 0A9DA996655311EF8D61E41CC4F9AE02.roa (hash: YEePosDji6p318PSaVsMzMykST1cQDsNsrEk48Tp9ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:33:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: Sep 9 01:33:41 2025 GMT Not After : Sep 16 01:33:41 2025 GMT Subject: CN=68bf83f5-f01d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e5:e5:08:09:b0:c9:4b:b5:7c:d1:30:b1:6c: 22:8a:07:12:65:3d:23:07:84:b4:8e:37:ef:12:97: cb:a5:61:ca:2f:ce:ea:ca:93:4e:c8:2e:93:ba:e7: 6f:84:7c:9e:d5:75:80:33:6b:4b:d7:3c:2d:e9:9b: 7d:75:42:d9:0e:f8:6b:b0:f6:67:ea:cc:74:91:09: 77:07:76:ac:dd:1b:ae:f6:3a:8b:e3:e7:ae:04:2d: ec:01:9e:5d:d8:e8:34:79:9d:67:69:fc:04:74:e9: 3e:bc:98:70:1b:6e:26:67:9e:14:b5:7e:af:2c:c9: 88:b6:37:1a:f2:76:ec:a6:ed:5e:f0:d8:a2:a2:bc: 00:ab:e5:7a:5c:27:83:fa:db:18:bd:f5:f5:9f:47: 7c:78:a5:48:52:8a:cf:88:c0:a5:6c:f1:aa:e8:54: 4b:1d:17:c9:f8:30:b9:07:9d:ce:e9:7a:c5:db:3b: 7c:49:3e:1a:b5:d3:1f:dc:27:94:1b:f5:c9:a8:6a: 3c:d7:10:86:ac:c5:65:42:8c:46:6a:6b:52:9f:b8: d5:37:c2:94:19:d4:a6:de:d9:ff:9c:3f:93:92:b2: 06:99:b3:42:2c:1f:66:c9:05:36:0b:6e:d1:39:2a: a6:03:45:2f:82:03:d2:70:0b:97:39:f4:87:87:b5: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FB:5E:E4:06:75:E2:1B:7C:04:3A:FC:DA:DF:47:B4:FB:94:92:7A X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:ab:84:d7:11:04:e1:dc:99:81:82:62:78:b4:70:87:13:51: 86:78:92:d6:61:00:a4:fd:45:b5:1e:5f:42:88:b1:0e:0d:24: f3:7e:1e:a3:20:1d:79:e0:5d:de:5e:bd:42:f9:78:71:8a:96: 72:20:39:ba:65:f7:4e:c3:e9:ec:b8:78:db:de:a2:1e:c4:c1: 0e:5d:79:02:69:71:35:e4:1e:bf:91:c8:37:22:28:ca:3c:9b: a9:4f:0c:ea:db:42:69:ec:c3:c2:52:c3:dc:b3:91:a5:3e:e7: 68:3f:df:58:39:77:b6:f8:d9:e1:d3:40:7d:4a:6d:5d:36:0f: ce:f8:1b:19:f7:81:28:33:f1:51:6c:f7:2e:69:d5:ca:81:72: 71:9b:7a:1f:5c:b0:72:84:f8:9b:a4:fe:04:75:26:9c:e7:f6: 49:92:a9:6d:70:53:34:ef:a1:f8:65:17:62:7e:96:dc:d0:bf: a6:71:71:78:23:bb:fe:7e:f6:97:30:55:21:a1:87:e6:fe:ea: fa:2d:41:4a:4d:d9:e0:ce:5f:ea:5b:71:9f:46:a4:68:47:54: f1:66:ad:e1:4d:cb:39:fd:4a:1c:4b:f4:dd:34:cd:96:d4:19: 37:43:6e:26:f3:75:ba:29:fe:7a:2d:56:55:0c:d2:6b:03:c0: 20:2a:66:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwOTA5MDEzMzQxWhcNMjUwOTE2MDEzMzQxWjAYMRYwFAYD VQQDEw02OGJmODNmNS1mMDFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OXlCAmwyUu1fNEwsWwiigcSZT0jB4S0jjfvEpfLpWHKL87qypNOyC6Tuudv hHye1XWAM2tL1zwt6Zt9dULZDvhrsPZn6sx0kQl3B3as3Ruu9jqL4+euBC3sAZ5d 2Og0eZ1nafwEdOk+vJhwG24mZ54UtX6vLMmItjca8nbspu1e8NiiorwAq+V6XCeD +tsYvfX1n0d8eKVIUorPiMClbPGq6FRLHRfJ+DC5B53O6XrF2zt8ST4atdMf3CeU G/XJqGo81xCGrMVlQoxGamtSn7jVN8KUGdSm3tn/nD+TkrIGmbNCLB9myQU2C27R OSqmA0UvggPScAuXOfSHh7XnZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJX7XuQG deIbfAQ6/NrfR7T7lJJ6MB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCMi81RDRDQzJGNjA4QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xF dEcyaVdhdC10bUtxSWxzTzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwq4TXEQTh3JmBgmJ4tHCHE1GGeJLWYQCk/UW1Hl9CiLEODSTzfh6j IB154F3eXr1C+XhxipZyIDm6ZfdOw+nsuHjb3qIexMEOXXkCaXE15B6/kcg3IijK PJupTwzq20Jp7MPCUsPcs5GlPudoP99YOXe2+Nnh00B9Sm1dNg/O+BsZ94EoM/FR bPcuadXKgXJxm3ofXLByhPibpP4EdSac5/ZJkqltcFM076H4ZRdifpbc0L+mcXF4 I7v+fvaXMFUhoYfm/ur6LUFKTdngzl/qW3GfRqRoR1TxZq3hTcs5/UocS/TdNM2W 1Bk3Q24m83W6Kf56LVZVDNJrA8AgKmb4 -----END CERTIFICATE-----Generated at Tue Sep 9 17:41:04 2025 by rpki-client