$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: SP2oPAI98hg2qUNGzlqmYvbxHIHS38Q7dT0aicxYWfU= Subject key identifier: 20:32:24:84:EC:4F:54:EC:7B:A6:F9:14:01:87:60:FC:F2:6C:F8:7E Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 21F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21D7 Signing time: Sun 24 Aug 2025 15:52:04 +0000 Manifest this update: Sun 24 Aug 2025 15:52:03 +0000 Manifest next update: Sun 31 Aug 2025 15:52:03 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: Qx93EU2iDH4p+Jz/vvskbwOXd6XVfRWn31sRGgbM/OI=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8696 (0x21f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Aug 24 15:52:03 2025 GMT Not After : Aug 31 15:52:03 2025 GMT Subject: CN=68ab3523-11f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4a:cc:ea:04:41:46:7c:79:7f:3b:31:9f:d6: 3d:8e:7b:67:5d:89:27:fb:8e:44:ab:1f:0a:0e:e2: ff:55:a6:9a:9f:3d:db:93:b2:4b:aa:0a:5a:0c:38: 7f:d8:7e:45:60:95:57:bb:8d:46:97:db:33:da:b2: 28:63:72:99:67:92:9b:a5:72:c2:1f:2d:1e:d5:13: aa:03:f6:9f:b9:df:e8:1f:d9:41:fc:dd:f7:d3:50: 9c:84:47:80:1a:a6:b6:70:dd:77:b2:33:5e:de:f7: 90:30:2e:a5:b5:98:0a:d1:63:fd:0c:48:73:d5:b7: a9:31:11:eb:c8:3c:96:1b:1b:de:8a:5a:ca:ad:58: d4:e5:00:78:7b:3f:9c:d6:90:03:00:42:a9:eb:72: d1:52:60:4d:ed:b2:55:a7:dc:a0:3a:2a:a2:89:12: 01:2a:ea:66:3c:6b:6a:81:3c:a8:b1:87:6d:4f:37: 6e:20:75:34:ee:77:68:04:fa:e0:b1:c5:94:a4:bf: 65:0a:9e:bc:6e:cf:88:ba:fd:3a:16:46:6a:80:d4: 96:fd:93:e5:da:ad:da:0c:15:99:23:4d:30:48:d2: 40:8d:62:0a:e2:4f:e4:41:51:30:3f:27:4c:88:7f: e5:5d:2b:dd:f7:60:58:c5:b4:6c:5d:38:34:b5:f3: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:32:24:84:EC:4F:54:EC:7B:A6:F9:14:01:87:60:FC:F2:6C:F8:7E X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:1e:ec:91:83:68:4a:58:13:37:8f:fc:aa:d8:06:18:43:03: c4:89:75:64:f4:92:bb:e4:68:a8:f7:85:4c:2c:93:71:2c:4f: 1f:5e:a0:30:dc:8f:90:96:70:69:d1:ab:21:57:75:bc:be:09: 9f:e1:b3:b3:83:41:ff:a8:80:d6:e4:21:7b:ea:1d:3d:6d:e9: ec:93:f4:d8:87:ee:88:f0:2c:9d:0f:4a:78:95:dc:f9:b8:df: cf:e2:bd:34:c3:4e:05:7a:fe:d9:ff:ad:09:5c:cb:0f:3d:a0: 81:83:12:37:1f:7b:09:b9:27:25:5d:0d:e3:de:09:dc:94:91: 66:bf:94:d4:03:af:14:18:c8:00:96:f0:02:bb:5e:32:3b:cf: 83:1c:8e:bc:98:26:ce:73:72:88:c3:8a:9b:1e:8e:a5:27:4e: be:cf:44:da:b0:fa:54:e2:3a:6e:3d:9b:e1:4b:31:d2:b0:8e: 54:df:86:ec:50:44:06:cd:e6:d2:1b:5c:53:60:f6:76:61:57: 29:58:0a:45:53:99:2d:b9:6f:61:0c:da:d5:09:ca:d1:d0:d9: 3c:6c:98:5f:69:ea:46:0c:49:ea:e5:c9:78:54:f5:ba:99:7f: 07:ea:d3:67:21:47:c8:5c:fa:4c:89:fb:63:ff:2a:7d:c4:e9: b2:80:6f:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUwODI0MTU1MjAzWhcNMjUwODMxMTU1MjAzWjAYMRYwFAYD VQQDEw02OGFiMzUyMy0xMWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzErM6gRBRnx5fzsxn9Y9jntnXYkn+45Eqx8KDuL/Vaaanz3bk7JLqgpaDDh/ 2H5FYJVXu41Gl9sz2rIoY3KZZ5KbpXLCHy0e1ROqA/afud/oH9lB/N3301CchEeA Gqa2cN13sjNe3veQMC6ltZgK0WP9DEhz1bepMRHryDyWGxveilrKrVjU5QB4ez+c 1pADAEKp63LRUmBN7bJVp9ygOiqiiRIBKupmPGtqgTyosYdtTzduIHU07ndoBPrg scWUpL9lCp68bs+Iuv06FkZqgNSW/ZPl2q3aDBWZI00wSNJAjWIK4k/kQVEwPydM iH/lXSvd92BYxbRsXTg0tfNDJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCAyJITs T1Tse6b5FAGHYPzybPh+MB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSHuyRg2hKWBM3j/yq2AYYQwPEiXVk9JK75Gio94VMLJNxLE8fXqAw 3I+QlnBp0ashV3W8vgmf4bOzg0H/qIDW5CF76h09bensk/TYh+6I8CydD0p4ldz5 uN/P4r00w04Fev7Z/60JXMsPPaCBgxI3H3sJuSclXQ3j3gnclJFmv5TUA68UGMgA lvACu14yO8+DHI68mCbOc3KIw4qbHo6lJ06+z0TasPpU4jpuPZvhSzHSsI5U34bs UEQGzebSG1xTYPZ2YVcpWApFU5ktuW9hDNrVCcrR0Nk8bJhfaepGDEnq5cl4VPW6 mX8H6tNnIUfIXPpMiftj/yp9xOmygG8J -----END CERTIFICATE-----Generated at Sun Aug 24 21:44:34 2025 by rpki-client