$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft File: 7DavWXkJHGv6WA6juiJXeTV1cNc.mft (raw, json) Hash identifier: gwxjLcbcOTi1bfgOubgnoY4+18fDDtIwwuRHgst5QHI= Subject key identifier: A6:21:D2:06:AF:80:BC:72:73:64:0D:EE:3A:2F:6B:8A:70:5F:4F:DB Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 Certificate issuer: /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Certificate serial: 062E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft Manifest number: 061F Signing time: Mon 08 Sep 2025 22:55:46 +0000 Manifest this update: Mon 08 Sep 2025 22:55:45 +0000 Manifest next update: Mon 15 Sep 2025 22:55:45 +0000 Files and hashes: 1: 7DavWXkJHGv6WA6juiJXeTV1cNc.crl (hash: 6zA4OmfKponsDBCFgOdvZtNO13H336Klk0o3lrdWJHQ=) 2: E8542DEA6B8811ECAC731B4EC4F9AE02.roa (hash: T+T+1Z/cawjlF+EJ2TY+wUSApzd2WBwRzpxk9RHEA54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1582 (0x62e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7 Validity Not Before: Sep 8 22:55:45 2025 GMT Not After : Sep 15 22:55:45 2025 GMT Subject: CN=68bf5ef1-7701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:49:82:18:3e:5c:3d:30:2a:7b:c9:ee:31: d9:9c:73:71:5b:2d:13:3b:a2:d2:9a:f8:1d:a3:c4: 99:a3:b0:f2:fd:c8:0a:d5:70:0d:ab:ad:84:26:1e: d1:c6:a7:85:15:4d:1c:2f:c3:2a:81:2e:a2:17:1e: 23:32:21:2f:a1:61:94:14:27:77:6b:0c:ac:38:f0: 40:59:b6:5e:bf:16:ec:45:d7:65:01:3b:30:d4:fd: c9:e5:d9:ea:d4:7f:0b:32:e0:d7:b4:06:9f:f6:d5: 41:6c:00:4e:6b:af:5a:8c:82:08:01:f6:a2:a2:02: 70:46:7e:b8:b1:cd:33:be:3c:9f:e1:6f:6c:30:5a: 53:94:84:57:1c:0c:41:ff:a2:2f:60:5d:1a:2d:8b: e0:16:da:b3:56:b3:cc:1e:55:8c:5f:09:bf:86:8c: 9d:3f:f3:44:42:e2:9f:1c:7a:54:79:93:a6:56:10: ed:d9:38:ff:3d:27:a2:25:8f:dd:c1:90:5d:03:77: cd:c0:a3:7d:29:45:ad:fc:ce:0d:cc:ef:06:54:ab: 16:18:39:28:cc:8b:d5:ec:ea:73:36:4f:66:98:fc: 9e:05:6f:d5:d2:e7:35:28:81:0f:2f:49:82:18:7b: 05:6a:ad:fc:8b:11:f1:a1:1a:13:8a:2f:f6:cc:50: d0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:21:D2:06:AF:80:BC:72:73:64:0D:EE:3A:2F:6B:8A:70:5F:4F:DB X509v3 Authority Key Identifier: keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:9a:c6:80:e9:04:f0:a7:2a:8a:d5:b7:7e:86:03:80:4d:dd: 0d:e5:65:5a:8d:55:93:26:ba:8a:e3:e7:92:b8:59:a1:e1:58: bd:34:e9:30:7f:57:c6:8d:24:d4:c4:2d:d3:86:5b:e3:3e:d6: bd:c2:3b:71:15:b3:14:87:64:bc:e1:7e:ee:3e:73:33:3a:63: b6:0c:30:dd:2f:5d:60:97:f2:3c:52:26:2a:f8:86:32:4d:49: cb:7f:ff:05:bd:f7:de:32:7e:3b:e1:a2:56:07:dc:e9:0f:d1: 7f:00:28:8b:9e:6c:38:a3:d2:f8:ec:a2:54:af:a8:af:0c:4d: c0:ce:df:25:f5:5b:bb:ee:c2:2a:59:2b:b7:2d:48:b5:d4:b6: bb:d8:da:d7:6b:cf:1b:8c:38:4a:29:4a:d6:f8:91:72:cd:be: 93:10:46:70:ea:fd:e6:13:97:11:6a:ee:36:98:20:3f:10:d3: 99:82:5d:81:83:6a:3a:03:cf:17:26:d2:34:25:db:04:9c:8a: 4c:c6:bc:ea:66:c9:c6:d1:8d:91:14:25:df:8a:60:d5:e1:e1: dd:62:8b:56:d9:a8:87:1d:51:87:9a:e1:41:c6:ee:a2:dd:5c: 78:36:7d:c3:20:c3:13:b0:4d:98:c7:ac:6f:4a:83:13:94:6b: 77:60:ba:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc1NzgxMTAvBgNVBAUTKEVDMzZBRjU5NzkwOTFDNkJGQTU4MEVBM0JBMjI1Nzc5 MzU3NTcwRDcwHhcNMjUwOTA4MjI1NTQ1WhcNMjUwOTE1MjI1NTQ1WjAYMRYwFAYD VQQDEw02OGJmNWVmMS03NzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZhJghg+XD0wKnvJ7jHZnHNxWy0TO6LSmvgdo8SZo7Dy/cgK1XANq62EJh7R xqeFFU0cL8MqgS6iFx4jMiEvoWGUFCd3awysOPBAWbZevxbsRddlATsw1P3J5dnq 1H8LMuDXtAaf9tVBbABOa69ajIIIAfaiogJwRn64sc0zvjyf4W9sMFpTlIRXHAxB /6IvYF0aLYvgFtqzVrPMHlWMXwm/hoydP/NEQuKfHHpUeZOmVhDt2Tj/PSeiJY/d wZBdA3fNwKN9KUWt/M4NzO8GVKsWGDkozIvV7OpzNk9mmPyeBW/V0uc1KIEPL0mC GHsFaq38ixHxoRoTii/2zFDQ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYh0gav gLxyc2QN7jova4pwX0/bMB8GA1UdIwQYMBaAFOw2r1l5CRxr+lgOo7oiV3k1dXDX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzU3OC9EM0MwMTkwQ0JC OUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhHdjZXQTZqdWlKWGVUVjFj TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEYXZXWGtKSEd2NldBNmp1aUpYZVRWMWNOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzU3OC9EM0MwMTkwQ0JCOUQxMUVCODRGNzNCM0FDNEY5QUUwMi83RGF2V1hrSkhH djZXQTZqdWlKWGVUVjFjTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwmsaA6QTwpyqK1bd+hgOATd0N5WVajVWTJrqK4+eSuFmh4Vi9NOkw f1fGjSTUxC3ThlvjPta9wjtxFbMUh2S84X7uPnMzOmO2DDDdL11gl/I8UiYq+IYy TUnLf/8FvffeMn474aJWB9zpD9F/ACiLnmw4o9L47KJUr6ivDE3Azt8l9Vu77sIq WSu3LUi11La72NrXa88bjDhKKUrW+JFyzb6TEEZw6v3mE5cRau42mCA/ENOZgl2B g2o6A88XJtI0JdsEnIpMxrzqZsnG0Y2RFCXfimDV4eHdYotW2aiHHVGHmuFBxu6i 3Vx4Nn3DIMMTsE2Yx6xvSoMTlGt3YLr4 -----END CERTIFICATE-----Generated at Tue Sep 9 09:21:12 2025 by rpki-client