$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft File: R7V3ucir4sNgDFtOeT_01HtlBiA.mft (raw, json) Hash identifier: R/EDb9zjagyZYVY9FchqAAYALC/FwWHJ1RVmQDzTGS8= Subject key identifier: BC:0E:D9:6C:1A:DA:4D:0D:7E:AF:D5:0D:99:CE:AC:E6:47:9A:95:A6 Authority key identifier: 47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 Certificate issuer: /CN=A91CC0C9/serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Certificate serial: 43 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft Manifest number: 2F Signing time: Sun 07 Sep 2025 08:23:52 +0000 Manifest this update: Sun 07 Sep 2025 08:23:52 +0000 Manifest next update: Sun 14 Sep 2025 08:23:52 +0000 Files and hashes: 1: R7V3ucir4sNgDFtOeT_01HtlBiA.crl (hash: fKZ7TRBp7y9ChESQOg1vssbbJdO1ToSo3Of/eDb5PQk=) 2: 30B2E99E5FB611F089B44784C4F9AE02.roa (hash: negZFqmBMo6VKE4VUMOsRrfxv0TCnbtWxCJ6jQA2XAg=) 3: 10958AE05FB611F0BF84DD83C4F9AE02.roa (hash: 99rILg0lAp1MtFrGVsL1ZVmf1GEn+BZy/AOnEIUCEaI=) 4: C6811EDA5FB811F094135B2FC4F9AE02.roa (hash: +YrktxlVC+PsFpuKkXdgvfc2lY3YsjGZkj0Z7YYEcZU=) 5: C6EC548E5FB811F094135B2FC4F9AE02.roa (hash: vQxvyyxrHRBa4iZJFOrEvTxzuAri97r7swFzpbuyhQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC0C9, serialNumber=47B577B9C8ABE2C3600C5B4E793FF4D47B650620 Validity Not Before: Sep 7 08:23:52 2025 GMT Not After : Sep 14 08:23:52 2025 GMT Subject: CN=68bd4118-86ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:83:91:b3:d8:15:4e:a3:3a:8d:ae:bc:52:32: 3c:db:ab:b7:42:24:c7:62:55:a6:81:e5:92:a1:fc: 6c:a3:c7:36:83:d6:bc:6e:c8:2a:8c:2b:97:2a:62: 92:1b:e7:68:48:c2:33:4a:c1:06:b3:49:72:1a:60: 9f:05:74:3c:94:54:88:05:43:77:29:4b:11:23:33: 42:7b:29:23:00:72:04:29:fc:59:74:a1:c0:1e:bd: a3:fc:42:67:49:27:23:49:0f:4c:e4:41:a6:2d:40: 67:02:c4:f5:4b:e3:88:16:ea:45:bf:e8:5f:3c:93: 68:50:c1:c1:a0:cd:0b:6a:93:63:f9:60:f9:1e:a1: 00:66:db:09:5a:13:e3:ce:24:c8:86:c8:2a:70:e2: f4:2d:b5:02:a1:d5:21:f0:ff:b5:43:00:b2:ea:ac: 6b:af:b7:86:e4:ba:04:0b:7f:ed:97:10:8a:38:f4: 53:af:80:36:0d:b9:71:3c:30:b4:f4:62:2d:5e:af: b3:53:cf:f5:4a:ae:ac:27:17:74:d6:81:b7:ab:4d: 5c:6b:a4:5e:11:b4:89:30:b3:9c:cc:c6:a2:a0:27: 9f:97:b9:ec:8c:cc:3a:71:ef:f3:07:dd:e7:92:6f: f1:78:fe:cd:12:c3:da:62:5d:34:f1:7f:6f:ac:21: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0E:D9:6C:1A:DA:4D:0D:7E:AF:D5:0D:99:CE:AC:E6:47:9A:95:A6 X509v3 Authority Key Identifier: keyid:47:B5:77:B9:C8:AB:E2:C3:60:0C:5B:4E:79:3F:F4:D4:7B:65:06:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R7V3ucir4sNgDFtOeT_01HtlBiA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC0C9/C5DABEEA5FB411F08203447DC4F9AE02/R7V3ucir4sNgDFtOeT_01HtlBiA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:31:e1:f7:d1:15:59:d5:15:0d:a9:26:3a:52:f3:21:a0:20: 86:30:a5:1c:15:b2:4e:d4:7e:00:f3:77:ca:e5:e0:fc:d1:f0: 5c:4b:e1:47:c7:f6:74:f0:f3:e3:a9:cf:b8:83:8f:2e:c7:81: be:86:d3:91:d1:3a:fd:df:e1:eb:7e:35:c6:9e:0f:df:5b:88: 61:f9:d4:f0:e0:26:6f:dc:70:61:d9:33:5a:a0:23:35:0a:c5: 16:7b:ef:fc:e0:a4:cb:be:8e:47:e0:6b:7b:5a:7b:bb:c0:e8: 40:a8:56:39:47:e8:ba:d4:b6:51:8e:e1:f3:b7:d6:11:05:0e: f1:1e:93:e7:49:fa:89:f5:01:67:e6:53:d4:19:a7:8e:82:e7: b9:f3:12:a9:78:00:11:f4:94:8a:b6:a3:8a:80:03:93:a1:4d: 90:56:62:5b:82:5a:54:de:ba:fe:b3:a2:87:16:58:16:2a:8d: dd:f0:2f:da:ec:d6:ed:ee:af:5b:ed:c6:f5:e8:79:8a:80:d2: 34:45:cc:68:0f:5e:62:21:e6:7c:a4:9e:f8:05:86:98:3e:5e: b2:f0:83:e8:3f:f2:60:08:b6:bf:26:ea:23:17:5b:c1:70:df: 9a:bc:d8:34:d8:fc:e9:a4:03:ca:d7:32:68:a7:3b:c5:11:67: 10:c1:c9:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QzBDOTExMC8GA1UEBRMoNDdCNTc3QjlDOEFCRTJDMzYwMEM1QjRFNzkzRkY0RDQ3 QjY1MDYyMDAeFw0yNTA5MDcwODIzNTJaFw0yNTA5MTQwODIzNTJaMBgxFjAUBgNV BAMTDTY4YmQ0MTE4LTg2ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVg5Gz2BVOozqNrrxSMjzbq7dCJMdiVaaB5ZKh/GyjxzaD1rxuyCqMK5cqYpIb 52hIwjNKwQazSXIaYJ8FdDyUVIgFQ3cpSxEjM0J7KSMAcgQp/Fl0ocAevaP8QmdJ JyNJD0zkQaYtQGcCxPVL44gW6kW/6F88k2hQwcGgzQtqk2P5YPkeoQBm2wlaE+PO JMiGyCpw4vQttQKh1SHw/7VDALLqrGuvt4bkugQLf+2XEIo49FOvgDYNuXE8MLT0 Yi1er7NTz/VKrqwnF3TWgberTVxrpF4RtIkws5zMxqKgJ5+XueyMzDpx7/MH3eeS b/F4/s0Sw9piXTTxf2+sIRQ5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvA7ZbBra TQ1+r9UNmc6s5kealaYwHwYDVR0jBBgwFoAUR7V3ucir4sNgDFtOeT/01HtlBiAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNDMEM5L0M1REFCRUVBNUZC NDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNOZ0RGdE9lVF8wMUh0bEJp QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjdWM3VjaXI0c05nREZ0T2VUXzAxSHRsQmlBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUND MEM5L0M1REFCRUVBNUZCNDExRjA4MjAzNDQ3REM0RjlBRTAyL1I3VjN1Y2lyNHNO Z0RGdE9lVF8wMUh0bEJpQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJsx4ffRFVnVFQ2pJjpS8yGgIIYwpRwVsk7UfgDzd8rl4PzR8FxL4UfH 9nTw8+Opz7iDjy7Hgb6G05HROv3f4et+NcaeD99biGH51PDgJm/ccGHZM1qgIzUK xRZ77/zgpMu+jkfga3tae7vA6ECoVjlH6LrUtlGO4fO31hEFDvEek+dJ+on1AWfm U9QZp46C57nzEql4ABH0lIq2o4qAA5OhTZBWYluCWlTeuv6zoocWWBYqjd3wL9rs 1u3ur1vtxvXoeYqA0jRFzGgPXmIh5nyknvgFhpg+XrLwg+g/8mAItr8m6iMXW8Fw 35q82DTY/OmkA8rXMminO8URZxDByZU= -----END CERTIFICATE-----Generated at Mon Sep 8 08:38:16 2025 by rpki-client