$ rpki-client -vvf rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft File: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft (raw, json) Hash identifier: Ghkpj80lOzoxx96P2vumSvf62KREWLNH9D/vGQmtMHI= Subject key identifier: 9F:FF:6B:8F:0D:4A:5C:48:77:4E:67:EF:22:8F:D9:92:91:40:2E:65 Authority key identifier: ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 Certificate issuer: /CN=A91E04ED/serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Certificate serial: 0687 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft Manifest number: 0680 Signing time: Sat 06 Sep 2025 22:43:56 +0000 Manifest this update: Sat 06 Sep 2025 22:43:56 +0000 Manifest next update: Sat 13 Sep 2025 22:43:56 +0000 Files and hashes: 1: 7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl (hash: yGaVAYcu1QsL5HOiqD4utxUfMCNj7TdtRv7u9GV9G1E=) 2: 0665D2328D1A11EB80593760C4F9AE02.roa (hash: 9RcU5RMIguV5RGzPowAleQQk2yHbByHLcaosyfn/YYw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1671 (0x687) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E04ED, serialNumber=EDA2AABB40212EB3C092AAEAF15142A769EF5907 Validity Not Before: Sep 6 22:43:56 2025 GMT Not After : Sep 13 22:43:56 2025 GMT Subject: CN=68bcb92c-7c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:5c:ca:f3:09:9c:87:4b:d3:ea:1f:be:44: 02:29:9c:ac:bd:39:42:2f:45:12:67:12:9f:fb:e4: fb:0d:dd:24:71:8d:cd:f2:ef:2e:d1:e3:97:58:d8: e0:20:76:e4:a5:6f:ae:64:72:3c:40:32:0f:1e:92: d4:1a:25:fa:02:6d:4a:84:17:af:f3:5f:f4:ab:14: 4b:45:34:c4:13:cb:c5:2b:4f:8a:0a:7f:1a:13:3d: 03:f1:ed:31:b4:4b:74:d8:f0:02:0c:c1:49:6d:4e: 02:89:76:81:33:5d:f3:e3:3c:82:43:a4:4e:55:83: 15:1c:f9:85:2f:63:82:2e:3e:7e:4d:ce:c7:97:55: a5:58:00:81:d9:7e:11:4c:9d:26:7d:e0:14:77:91: cf:0d:f8:aa:2f:08:aa:00:70:22:a0:46:6c:3d:d4: b6:0f:a8:a3:ab:6c:67:02:d0:b2:1f:fd:a5:8c:67: 6b:e9:a2:60:c6:f0:7a:0a:48:b3:c8:36:5f:c9:0e: 9d:67:3d:43:49:a1:c8:ad:19:fb:c8:94:a6:ae:27: 06:27:df:0a:f7:57:e4:24:a3:16:1a:dd:f8:07:ee: ae:11:8a:77:d2:b5:49:d2:96:19:c1:8f:b9:ea:0c: 71:43:fc:7f:26:18:b5:45:f3:57:69:c2:5f:77:bb: 9b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:FF:6B:8F:0D:4A:5C:48:77:4E:67:EF:22:8F:D9:92:91:40:2E:65 X509v3 Authority Key Identifier: keyid:ED:A2:AA:BB:40:21:2E:B3:C0:92:AA:EA:F1:51:42:A7:69:EF:59:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aKqu0AhLrPAkqrq8VFCp2nvWQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E04ED/DBE90BAC8D1711EB9368855CC4F9AE02/7aKqu0AhLrPAkqrq8VFCp2nvWQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d2:89:5f:f5:a5:02:26:ee:30:ec:4e:2f:b2:d2:c8:4a:45: d5:98:45:9d:5e:27:5e:d3:71:bc:8c:af:61:10:49:cc:44:33: 75:20:c6:39:4e:31:26:7c:95:13:da:72:1a:9b:9e:fa:ec:07: a0:be:00:fc:74:51:23:d3:ac:f8:0b:6f:1c:36:8e:62:b2:bd: c8:6d:fd:32:10:4c:f8:c3:4f:a0:5f:0c:76:0b:9e:79:b8:96: 3e:da:66:5e:cc:76:17:04:41:a6:d2:dd:79:5b:5f:e2:5e:63: 80:d8:ab:c0:b3:94:da:bc:f5:ad:ff:ab:3a:91:1b:77:77:2e: 5c:d5:87:db:14:ae:98:b6:78:e3:6a:a5:54:f2:8f:99:ee:89: 36:ef:d9:19:86:cf:cf:13:a1:78:cb:13:d5:36:68:51:78:b0: cb:41:14:b4:bb:55:99:c8:09:9d:38:37:b2:a8:b0:02:ea:34: 97:db:dd:b4:81:6d:fb:da:c8:a1:0e:69:5c:cf:b3:fe:31:80: f0:7a:70:39:6a:d8:a2:17:09:c3:5f:0e:56:35:50:52:73:9f: 29:d6:db:34:33:db:a2:b6:95:db:de:7d:c2:1b:ca:b5:c1:69: ec:d6:4b:93:7f:83:63:e9:04:46:a0:db:c6:a6:d4:91:fc:66: ce:8e:cb:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA0RUQxMTAvBgNVBAUTKEVEQTJBQUJCNDAyMTJFQjNDMDkyQUFFQUYxNTE0MkE3 NjlFRjU5MDcwHhcNMjUwOTA2MjI0MzU2WhcNMjUwOTEzMjI0MzU2WjAYMRYwFAYD VQQDEw02OGJjYjkyYy03YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztNcyvMJnIdL0+ofvkQCKZysvTlCL0USZxKf++T7Dd0kcY3N8u8u0eOXWNjg IHbkpW+uZHI8QDIPHpLUGiX6Am1KhBev81/0qxRLRTTEE8vFK0+KCn8aEz0D8e0x tEt02PACDMFJbU4CiXaBM13z4zyCQ6ROVYMVHPmFL2OCLj5+Tc7Hl1WlWACB2X4R TJ0mfeAUd5HPDfiqLwiqAHAioEZsPdS2D6ijq2xnAtCyH/2ljGdr6aJgxvB6Ckiz yDZfyQ6dZz1DSaHIrRn7yJSmricGJ98K91fkJKMWGt34B+6uEYp30rVJ0pYZwY+5 6gxxQ/x/Jhi1RfNXacJfd7ubjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ//a48N SlxId05n7yKP2ZKRQC5lMB8GA1UdIwQYMBaAFO2iqrtAIS6zwJKq6vFRQqdp71kH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDRFRC9EQkU5MEJBQzhE MTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExyUEFrcXJxOFZGQ3AybnZX UWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdhS3F1MEFoTHJQQWtxcnE4VkZDcDJudldRYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDRFRC9EQkU5MEJBQzhEMTcxMUVCOTM2ODg1NUNDNEY5QUUwMi83YUtxdTBBaExy UEFrcXJxOFZGQ3AybnZXUWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD0olf9aUCJu4w7E4vstLISkXVmEWdXide03G8jK9hEEnMRDN1IMY5 TjEmfJUT2nIam5767AegvgD8dFEj06z4C28cNo5isr3Ibf0yEEz4w0+gXwx2C555 uJY+2mZezHYXBEGm0t15W1/iXmOA2KvAs5TavPWt/6s6kRt3dy5c1YfbFK6Ytnjj aqVU8o+Z7ok279kZhs/PE6F4yxPVNmhReLDLQRS0u1WZyAmdODeyqLAC6jSX2920 gW372sihDmlcz7P+MYDwenA5atiiFwnDXw5WNVBSc58p1ts0M9uitpXb3n3CG8q1 wWns1kuTf4Nj6QRGoNvGptSR/GbOjsve -----END CERTIFICATE-----Generated at Mon Sep 8 21:51:38 2025 by rpki-client