$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: oRL6gqQ9b1CsyJZe352Mhn/DbRFoog89Pv6do3HxOvQ= Subject key identifier: D0:57:5D:70:F7:FD:A0:1B:BE:78:41:76:4A:07:24:F9:94:1D:B0:30 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 013C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0139 Signing time: Tue 09 Sep 2025 04:36:13 +0000 Manifest this update: Tue 09 Sep 2025 04:36:12 +0000 Manifest next update: Tue 16 Sep 2025 04:36:12 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: Ica6SfhAw5HUKBmUbm8XwebYCmm5W8afNw9yZrFxJO8=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Sep 9 04:36:12 2025 GMT Not After : Sep 16 04:36:12 2025 GMT Subject: CN=68bfaebc-2c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:d6:4c:2a:f3:55:b9:0e:1b:7c:0d:a4:d3: da:9f:4c:6b:61:ee:1f:37:7f:92:7c:8d:28:33:5f: 2b:0e:7c:e7:c2:77:ff:0d:f4:67:fc:e6:0c:0c:ce: d3:4b:fd:e9:8b:05:36:2b:30:97:a3:f2:49:67:69: 02:65:c9:08:2b:99:f1:6d:c0:35:c4:c8:2c:7e:4a: 72:f4:0d:e9:ae:37:cb:5e:8a:0d:9b:7a:9a:36:4a: c8:a7:6b:d4:a4:f2:cf:c3:01:f7:7a:f9:42:87:6c: a7:8d:c0:cf:c1:eb:a6:bd:9d:07:3e:7f:4c:9a:79: 1c:93:a6:d8:08:45:06:6a:49:63:d5:fd:0b:a6:2e: 51:c9:76:75:47:f2:a0:31:f7:87:a0:e3:79:9f:50: 0c:b4:54:b7:56:7d:04:05:60:9d:f0:3a:09:49:ef: a4:65:0a:e8:54:03:52:09:38:89:28:ba:ba:6f:79: 19:f6:1d:b1:92:7d:11:e1:e1:44:69:0e:fc:0f:b6: ce:5b:0d:b1:e2:83:71:d4:a0:5e:95:b2:f0:e1:79: 67:31:b5:4c:48:f7:e1:8c:0b:9e:fa:b2:99:6e:d0: 06:3d:6c:6d:42:ad:52:2c:f2:b1:c4:41:72:37:13: c2:0d:bd:02:4e:81:d2:4b:70:34:e8:8c:2f:dc:b5: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:57:5D:70:F7:FD:A0:1B:BE:78:41:76:4A:07:24:F9:94:1D:B0:30 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:05:54:ba:8e:e4:ae:08:a9:f4:fd:46:e3:3a:f8:4f:73: 57:47:d6:38:62:aa:e6:48:26:38:48:32:7d:7d:4f:a7:87:9f: 2b:35:f3:43:f7:d0:2b:81:d9:3f:56:b3:2a:cb:98:61:c9:2f: f7:15:63:93:ea:f1:24:27:36:4b:05:b8:5a:b8:b8:59:a0:63: 86:6c:ab:81:d0:45:a9:17:0a:84:f6:33:a1:f7:83:3c:cc:c6: e3:8c:ab:ca:07:23:fb:d1:10:c1:e2:1f:50:28:7d:37:e1:2c: c0:bc:2d:7b:ea:af:5c:94:4e:0f:65:8c:57:be:0f:42:3a:d3: 96:16:6b:09:43:9a:18:08:05:5f:29:26:c3:d8:6f:2b:e3:07: 71:3d:25:80:88:ec:f2:96:7b:8d:b2:b9:e0:43:68:ab:31:cf: 19:59:d5:54:73:6f:64:f0:84:77:c5:29:a9:35:23:bf:aa:b6: bb:19:1c:d2:2c:6b:b2:8a:d0:96:dc:58:a8:cb:cc:ed:76:9a: 1b:e2:1b:64:40:86:d6:39:71:90:d6:e7:6c:e5:1e:e4:91:51: 6c:05:5f:eb:55:0e:39:57:79:2c:8d:ac:b5:a7:9c:69:d1:f1: b2:4e:5c:ab:b0:7d:08:95:d4:77:06:b5:71:fd:e7:6a:8e:18: 1d:b6:72:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUwOTA5MDQzNjEyWhcNMjUwOTE2MDQzNjEyWjAYMRYwFAYD VQQDEw02OGJmYWViYy0yYzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/vWTCrzVbkOG3wNpNPan0xrYe4fN3+SfI0oM18rDnznwnf/DfRn/OYMDM7T S/3piwU2KzCXo/JJZ2kCZckIK5nxbcA1xMgsfkpy9A3prjfLXooNm3qaNkrIp2vU pPLPwwH3evlCh2ynjcDPweumvZ0HPn9Mmnkck6bYCEUGaklj1f0Lpi5RyXZ1R/Kg MfeHoON5n1AMtFS3Vn0EBWCd8DoJSe+kZQroVANSCTiJKLq6b3kZ9h2xkn0R4eFE aQ78D7bOWw2x4oNx1KBelbLw4XlnMbVMSPfhjAue+rKZbtAGPWxtQq1SLPKxxEFy NxPCDb0CToHSS3A06Iwv3LXYYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNBXXXD3 /aAbvnhBdkoHJPmUHbAwMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCd9QVUuo7krgip9P1G4zr4T3NXR9Y4YqrmSCY4SDJ9fU+nh58rNfND 99Argdk/VrMqy5hhyS/3FWOT6vEkJzZLBbhauLhZoGOGbKuB0EWpFwqE9jOh94M8 zMbjjKvKByP70RDB4h9QKH034SzAvC176q9clE4PZYxXvg9COtOWFmsJQ5oYCAVf KSbD2G8r4wdxPSWAiOzylnuNsrngQ2irMc8ZWdVUc29k8IR3xSmpNSO/qra7GRzS LGuyitCW3Fioy8ztdpob4htkQIbWOXGQ1uds5R7kkVFsBV/rVQ45V3ksjay1p5xp 0fGyTlyrsH0IldR3BrVx/edqjhgdtnIM -----END CERTIFICATE-----Generated at Tue Sep 9 17:47:37 2025 by rpki-client