$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft File: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft (raw, json) Hash identifier: F+CzL93eS8OxFmL2Sa0Txo1Ph+SbIqqWP4I8YOLscdw= Subject key identifier: 7F:57:DF:98:28:C2:74:6E:63:E3:58:2C:B6:38:25:4F:68:16:BD:56 Authority key identifier: EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF Certificate issuer: /CN=A91E7083/serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft Manifest number: 0693 Signing time: Thu 18 Sep 2025 22:36:00 +0000 Manifest this update: Thu 18 Sep 2025 22:36:00 +0000 Manifest next update: Thu 25 Sep 2025 22:35:59 +0000 Files and hashes: 1: 7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl (hash: js3EYFe8tEsemwRWnaAX59ow9WTpsftsBL8LjJ+Ldhc=) 2: 22009BF2854111EBA0658B42C4F9AE02.roa (hash: twDSchPdGzrqlLCoHP097W881rTgiSF0Kw2KrznKgJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7083, serialNumber=EE396A01E24A910D6E8B8BF4629DA8C2AE5BC0EF Validity Not Before: Sep 18 22:36:00 2025 GMT Not After : Sep 25 22:35:59 2025 GMT Subject: CN=68cc8950-0292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:46:2c:9b:c0:b7:43:39:c6:21:02:c6:57: f5:04:a4:3b:c6:6e:48:5d:0e:18:00:0b:ff:59:10: 87:91:7c:50:e3:cf:60:42:51:7b:dc:da:6a:17:bd: eb:e5:39:52:d9:80:b2:78:3e:fa:05:5c:60:b5:1b: cf:b6:ac:a4:fc:68:52:5e:69:16:61:fc:fb:c2:61: 60:55:3e:2b:44:3f:03:1e:b7:04:2b:a0:77:dd:5f: db:85:22:fd:eb:7f:5f:54:5e:9d:fc:2d:27:12:05: 4a:10:d4:6f:5b:88:5e:58:e4:49:d7:b5:22:d5:10: d4:bd:72:01:68:64:f1:2d:2c:bb:c9:9d:87:1e:5e: 0f:62:2e:ee:4e:07:18:49:28:19:7b:8a:7f:f2:12: 2e:6f:66:4b:23:21:73:dc:de:2b:aa:ad:ea:76:4c: 87:dd:1d:e7:7c:3f:0b:89:2f:68:9a:70:aa:59:eb: a8:4c:2d:40:66:fb:a0:43:49:6a:33:8e:54:fe:fe: 68:59:b4:47:79:6a:8b:f3:05:62:08:01:2f:88:74: 6c:bd:76:d8:e6:8f:54:f8:5a:3b:25:d9:26:2d:43: f7:15:22:22:23:de:70:f2:39:79:2b:50:7d:05:3b: 6b:8c:ee:4c:e6:9d:a5:45:7a:c7:39:7d:50:b6:84: 9a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:57:DF:98:28:C2:74:6E:63:E3:58:2C:B6:38:25:4F:68:16:BD:56 X509v3 Authority Key Identifier: keyid:EE:39:6A:01:E2:4A:91:0D:6E:8B:8B:F4:62:9D:A8:C2:AE:5B:C0:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7083/E266240E853F11EB8C2EFE41C4F9AE02/7jlqAeJKkQ1ui4v0Yp2owq5bwO8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:16:48:e2:b3:be:ef:90:57:73:f2:9b:be:65:9b:fe:fb:11: 2a:eb:fd:a1:2d:51:c7:8f:ab:e5:3b:89:99:0c:7c:2a:d4:49: 42:31:bb:90:a5:ba:d3:7c:ea:44:43:50:2b:28:e4:3f:dc:c8: 42:c3:8e:dc:e8:aa:fa:ff:6b:79:a3:14:30:b8:86:47:57:72: dc:f9:c0:9a:20:37:cc:2a:fe:34:e9:2e:5f:f2:f3:fe:7f:e2: fb:60:7b:f8:98:44:42:ba:4c:55:21:46:bb:3a:3b:e8:d8:ab: 32:8b:38:8c:d2:23:1f:7d:78:d4:24:41:ff:e1:9c:99:f7:2d: 63:20:9a:e9:cd:9f:eb:00:6a:dd:1f:10:be:cb:93:b8:4d:80: 3d:c4:a6:3a:88:03:0f:d4:3b:05:b3:88:2a:47:36:0d:c4:f0: 75:8e:80:fa:d7:d8:ff:20:99:e9:57:c4:b9:75:e8:fe:5f:a4: 70:60:b7:c3:ef:0f:04:c1:9c:20:8b:ca:0b:e1:b2:75:17:ce: c1:64:b0:c0:6a:d6:71:00:2c:d9:1a:4d:50:4f:9e:07:96:30: c3:50:73:e7:34:d3:ac:48:b4:41:10:06:3a:75:f5:25:a8:8b: b9:1d:f6:35:6c:b2:50:82:ec:cd:2c:90:ef:bd:33:38:8b:e6: 29:73:65:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTcwODMxMTAvBgNVBAUTKEVFMzk2QTAxRTI0QTkxMEQ2RThCOEJGNDYyOURBOEMy QUU1QkMwRUYwHhcNMjUwOTE4MjIzNjAwWhcNMjUwOTI1MjIzNTU5WjAYMRYwFAYD VQQDEw02OGNjODk1MC0wMjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxO9GLJvAt0M5xiECxlf1BKQ7xm5IXQ4YAAv/WRCHkXxQ489gQlF73NpqF73r 5TlS2YCyeD76BVxgtRvPtqyk/GhSXmkWYfz7wmFgVT4rRD8DHrcEK6B33V/bhSL9 639fVF6d/C0nEgVKENRvW4heWORJ17Ui1RDUvXIBaGTxLSy7yZ2HHl4PYi7uTgcY SSgZe4p/8hIub2ZLIyFz3N4rqq3qdkyH3R3nfD8LiS9omnCqWeuoTC1AZvugQ0lq M45U/v5oWbRHeWqL8wViCAEviHRsvXbY5o9U+Fo7JdkmLUP3FSIiI95w8jl5K1B9 BTtrjO5M5p2lRXrHOX1QtoSavwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9X35go wnRuY+NYLLY4JU9oFr1WMB8GA1UdIwQYMBaAFO45agHiSpENbouL9GKdqMKuW8Dv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzA4My9FMjY2MjQwRTg1 M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tRMXVpNHYwWXAyb3dxNWJ3 TzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdqbHFBZUpLa1ExdWk0djBZcDJvd3E1YndPOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzA4My9FMjY2MjQwRTg1M0YxMUVCOEMyRUZFNDFDNEY5QUUwMi83amxxQWVKS2tR MXVpNHYwWXAyb3dxNWJ3TzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuFkjis77vkFdz8pu+ZZv++xEq6/2hLVHHj6vlO4mZDHwq1ElCMbuQ pbrTfOpEQ1ArKOQ/3MhCw47c6Kr6/2t5oxQwuIZHV3Lc+cCaIDfMKv406S5f8vP+ f+L7YHv4mERCukxVIUa7Ojvo2KsyiziM0iMffXjUJEH/4ZyZ9y1jIJrpzZ/rAGrd HxC+y5O4TYA9xKY6iAMP1DsFs4gqRzYNxPB1joD619j/IJnpV8S5dej+X6RwYLfD 7w8EwZwgi8oL4bJ1F87BZLDAatZxACzZGk1QT54HljDDUHPnNNOsSLRBEAY6dfUl qIu5HfY1bLJQguzNLJDvvTM4i+Ypc2V8 -----END CERTIFICATE-----Generated at Fri Sep 19 12:22:59 2025 by rpki-client