$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: snwPbnFFLl9+AKe5rSz/q5OyVFKxOO2VZ/2LoNXWqTI= Subject key identifier: BE:A1:E4:82:25:FD:AB:86:7A:9D:13:6C:54:48:6A:BA:C3:BE:B1:0C Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0AF0 Signing time: Wed 20 Aug 2025 19:30:50 +0000 Manifest this update: Wed 20 Aug 2025 19:30:49 +0000 Manifest next update: Wed 27 Aug 2025 19:30:49 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: +sKVigG/pD0FdIdQa8xRM5u9ZP/VhXOLXiUAUoVCdIE=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2828 (0xb0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Aug 20 19:30:49 2025 GMT Not After : Aug 27 19:30:49 2025 GMT Subject: CN=68a62269-a7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c7:45:37:9a:db:5a:15:4c:fa:de:b5:a0:fb: b3:c9:3b:af:d5:c3:ff:84:fd:bb:02:8e:3f:14:c4: 8e:6c:1a:ab:38:b9:38:f2:17:d3:83:2b:bf:e2:4d: 49:21:da:19:c7:63:f9:77:09:c3:44:f9:e4:fc:b4: ac:4c:7a:a5:0f:8e:ac:03:95:39:a0:23:de:75:1d: 65:28:16:7f:eb:0b:71:0d:50:53:1c:5b:07:b3:24: 15:80:7f:db:6b:28:82:f6:1d:71:93:09:bf:ef:c8: ba:73:10:dc:ca:e3:38:40:16:9f:90:db:2d:1e:88: 52:a4:04:f8:cf:e5:2f:c9:8c:6a:28:a7:da:c7:f4: ca:49:4a:2a:03:2f:f0:47:ad:08:12:9f:f0:07:b2: ea:2c:2c:a7:de:a9:b7:d8:3b:20:24:cb:18:ec:a1: 6f:e2:25:20:8f:ff:f4:05:0f:38:d4:83:6f:77:ee: cf:1a:eb:28:39:ec:a3:de:90:65:23:c2:85:3f:b6: be:78:17:03:f8:32:fe:84:a1:0b:e7:e3:f8:c4:96: 90:a9:4d:04:3a:67:eb:60:f1:49:6a:53:ee:dd:36: 4e:1c:81:6a:9b:75:58:d8:7d:07:97:79:9a:c3:3f: 48:43:25:d1:32:ef:f4:b7:30:c7:a5:b7:ae:58:c7: b5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:E4:82:25:FD:AB:86:7A:9D:13:6C:54:48:6A:BA:C3:BE:B1:0C X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:6d:a0:aa:79:6d:ab:f6:df:74:76:3e:3e:91:e7:93:0f:ee: 81:6b:ce:a9:a1:5e:99:0b:29:db:56:59:c8:58:4a:3a:b1:44: a9:d8:1f:c9:70:5b:0f:e3:48:d5:96:f1:bb:8f:71:a2:88:40: 07:f9:47:7b:2d:7e:49:60:08:b3:df:87:5e:91:11:68:cb:96: f0:8d:1b:6e:8d:18:e8:ae:18:79:4a:fa:f1:bc:fe:69:9c:ac: 98:8b:2e:8d:e9:a4:2e:06:74:f8:96:f5:44:e5:3f:1a:05:c4: d5:65:be:2a:1a:f5:6d:ba:53:f9:8a:59:a8:d1:37:66:cb:be: 98:7b:db:6b:b3:5a:73:e2:61:f3:b7:93:56:05:20:5c:f4:ec: 85:ad:c6:4a:2d:09:65:3d:04:a0:98:e7:0e:b6:8a:9d:4e:e8: 7c:76:5f:2f:9b:f7:13:ff:e8:4a:18:8e:93:3e:ad:05:ff:2b: cc:20:78:c6:34:83:ec:4e:90:09:ae:4c:cc:7e:5f:8d:c6:e2: ab:48:69:eb:9b:16:41:38:9b:c2:e4:af:72:0b:a3:8d:53:ca: 7b:3e:ac:07:61:36:88:89:01:ff:8f:ce:b0:2f:cb:aa:f1:40: 01:3c:e8:46:83:94:3c:d0:83:fb:f9:da:19:0c:46:cd:cf:21: 1b:09:19:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUwODIwMTkzMDQ5WhcNMjUwODI3MTkzMDQ5WjAYMRYwFAYD VQQDEw02OGE2MjI2OS1hN2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9sdFN5rbWhVM+t61oPuzyTuv1cP/hP27Ao4/FMSObBqrOLk48hfTgyu/4k1J IdoZx2P5dwnDRPnk/LSsTHqlD46sA5U5oCPedR1lKBZ/6wtxDVBTHFsHsyQVgH/b ayiC9h1xkwm/78i6cxDcyuM4QBafkNstHohSpAT4z+UvyYxqKKfax/TKSUoqAy/w R60IEp/wB7LqLCyn3qm32DsgJMsY7KFv4iUgj//0BQ841INvd+7PGusoOeyj3pBl I8KFP7a+eBcD+DL+hKEL5+P4xJaQqU0EOmfrYPFJalPu3TZOHIFqm3VY2H0Hl3ma wz9IQyXRMu/0tzDHpbeuWMe1TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL6h5IIl /auGep0TbFRIarrDvrEMMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFbaCqeW2r9t90dj4+keeTD+6Ba86poV6ZCynbVlnIWEo6sUSp2B/J cFsP40jVlvG7j3GiiEAH+Ud7LX5JYAiz34dekRFoy5bwjRtujRjorhh5SvrxvP5p nKyYiy6N6aQuBnT4lvVE5T8aBcTVZb4qGvVtulP5ilmo0Tdmy76Ye9trs1pz4mHz t5NWBSBc9OyFrcZKLQllPQSgmOcOtoqdTuh8dl8vm/cT/+hKGI6TPq0F/yvMIHjG NIPsTpAJrkzMfl+NxuKrSGnrmxZBOJvC5K9yC6ONU8p7PqwHYTaIiQH/j86wL8uq 8UABPOhGg5Q80IP7+doZDEbNzyEbCRlU -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:00 2025 by rpki-client