$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: rOLNbaDmmUN7LEDQCp517ZA874cKczwEFnGlDXnI6OM= Subject key identifier: CB:13:5E:AF:55:C7:6B:BF:78:84:6B:FC:F5:1F:AA:B0:35:62:0D:5F Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 03F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 03EE Signing time: Tue 19 Aug 2025 00:54:49 +0000 Manifest this update: Tue 19 Aug 2025 00:54:49 +0000 Manifest next update: Tue 26 Aug 2025 00:54:49 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: i8SNFla2yfMuy2aQiVHJPUuDjttc80xTDQiHoYnaC1g=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:54:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1014 (0x3f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Aug 19 00:54:49 2025 GMT Not After : Aug 26 00:54:49 2025 GMT Subject: CN=68a3cb59-2164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:74:2d:4f:7f:ba:71:e0:0f:a3:c1:e4:dc:ef: 75:df:0a:fa:22:40:be:49:ff:c1:ee:8f:e6:e7:df: 09:3e:46:d3:0a:60:3a:fe:b6:1a:ee:f2:72:86:5f: f4:3c:e2:2f:95:14:29:30:6b:42:7b:1e:2d:f3:6e: 5b:05:01:21:c0:d9:27:39:c8:be:ef:ba:b4:74:10: 9e:11:48:de:be:24:e6:88:8f:cb:08:ff:cb:ec:f4: 0e:d3:19:99:58:b7:18:8a:5a:d9:39:6d:53:2b:30: 7b:99:3f:92:5b:5c:51:0c:61:24:ed:21:d4:d3:79: 34:08:b6:69:9a:39:32:f2:f8:1b:87:7a:f0:a7:b6: 41:51:87:56:e8:0f:6c:79:93:08:47:52:d0:3e:21: 86:d5:c6:a1:ac:53:8e:a0:30:40:6f:ed:c0:bb:8b: d9:f5:83:14:00:83:dc:ff:32:d8:63:9e:b6:37:59: 8a:f8:24:ed:d5:fd:5b:97:19:e5:ae:5b:a8:a2:31: 69:da:cd:c1:91:0e:ef:4f:27:12:b6:0b:65:8b:dd: a4:8b:0d:1d:ea:10:22:b9:57:76:15:63:8b:91:83: 67:af:d4:e5:05:de:33:b7:a4:a9:b9:d8:0b:eb:a9: db:59:33:f6:78:d4:fb:13:90:33:66:54:b6:e8:50: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:13:5E:AF:55:C7:6B:BF:78:84:6B:FC:F5:1F:AA:B0:35:62:0D:5F X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:71:89:43:d6:8a:56:7e:41:a7:ef:e5:e3:5c:51:e2:0c:d0: 6c:12:31:1b:23:3b:44:91:42:33:cc:98:f3:f3:b1:15:eb:3c: 63:6b:e6:f7:16:c2:6f:0c:72:ba:3c:4d:48:53:39:21:79:a1: 01:05:9c:c9:91:4e:be:c3:c3:55:b3:e4:79:10:f6:c7:b2:48: d0:da:c4:b6:85:3a:20:bf:65:e0:03:93:b3:af:af:d5:2e:cb: 22:a9:9c:34:88:75:f1:2d:30:49:c2:11:50:20:ed:4f:7b:21: c6:3f:b4:5e:45:91:02:56:f9:8e:37:46:01:8c:07:d6:66:7b: cb:c3:1a:1c:ba:06:69:27:b6:8b:6f:41:62:5a:2e:4d:f8:94: 80:c7:0c:73:40:eb:34:c8:2d:e9:06:17:c3:95:53:f5:1f:bf: 7e:31:60:1b:1f:a0:b8:31:dc:7c:81:cf:5d:70:b5:b2:be:b1: dc:49:17:f4:3c:84:17:b3:4d:23:17:0f:11:39:e5:62:dd:c5: 2e:b5:10:ad:2f:bf:67:e1:7d:e9:1d:19:db:b8:5b:46:4e:55: 1e:69:fe:8c:25:a5:bb:7f:0f:a1:f6:4b:c6:2c:dd:20:a7:90: 39:bc:1c:65:09:81:7d:42:1e:f1:4a:a9:85:d1:95:b1:47:e7: 3c:e1:1a:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUwODE5MDA1NDQ5WhcNMjUwODI2MDA1NDQ5WjAYMRYwFAYD VQQDEw02OGEzY2I1OS0yMTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXQtT3+6ceAPo8Hk3O913wr6IkC+Sf/B7o/m598JPkbTCmA6/rYa7vJyhl/0 POIvlRQpMGtCex4t825bBQEhwNknOci+77q0dBCeEUjeviTmiI/LCP/L7PQO0xmZ WLcYilrZOW1TKzB7mT+SW1xRDGEk7SHU03k0CLZpmjky8vgbh3rwp7ZBUYdW6A9s eZMIR1LQPiGG1cahrFOOoDBAb+3Au4vZ9YMUAIPc/zLYY562N1mK+CTt1f1blxnl rluoojFp2s3BkQ7vTycStgtli92kiw0d6hAiuVd2FWOLkYNnr9TlBd4zt6SpudgL 66nbWTP2eNT7E5AzZlS26FAsTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsTXq9V x2u/eIRr/PUfqrA1Yg1fMB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMcYlD1opWfkGn7+XjXFHiDNBsEjEbIztEkUIzzJjz87EV6zxja+b3 FsJvDHK6PE1IUzkheaEBBZzJkU6+w8NVs+R5EPbHskjQ2sS2hTogv2XgA5Ozr6/V LssiqZw0iHXxLTBJwhFQIO1PeyHGP7ReRZECVvmON0YBjAfWZnvLwxocugZpJ7aL b0FiWi5N+JSAxwxzQOs0yC3pBhfDlVP1H79+MWAbH6C4Mdx8gc9dcLWyvrHcSRf0 PIQXs00jFw8ROeVi3cUutRCtL79n4X3pHRnbuFtGTlUeaf6MJaW7fw+h9kvGLN0g p5A5vBxlCYF9Qh7xSqmF0ZWxR+c84Roi -----END CERTIFICATE-----Generated at Wed Aug 20 15:36:00 2025 by rpki-client