$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft File: 788FLZiSks6xBQkSnI3iA9SfaAQ.mft (raw, json) Hash identifier: WzohYCcnOHR+yoa3GilVBnng4zrH2dIJ78nXr3HCZ8I= Subject key identifier: 21:CA:3F:B7:96:95:F1:65:F5:D0:12:68:B7:AF:5A:51:8E:E1:13:F7 Authority key identifier: EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 Certificate issuer: /CN=A91EB9C0/serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Certificate serial: 0D7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft Manifest number: 0D75 Signing time: Wed 20 Aug 2025 18:02:15 +0000 Manifest this update: Wed 20 Aug 2025 18:02:15 +0000 Manifest next update: Wed 27 Aug 2025 18:02:15 +0000 Files and hashes: 1: 788FLZiSks6xBQkSnI3iA9SfaAQ.crl (hash: EltszXg2LeZj9+4qoySkDO92LPClFypzqrCNrtyEO10=) 2: 1004D41ED21D11E992825429C4F9AE02.roa (hash: FAN1R0kTPo6CVZLPRUbNgZ570C6pJVmhGPN5h/j558A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 18:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3453 (0xd7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB9C0, serialNumber=EFCF052D989292CEB10509129C8DE203D49F6804 Validity Not Before: Aug 20 18:02:15 2025 GMT Not After : Aug 27 18:02:15 2025 GMT Subject: CN=68a60da7-4691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:12:7d:b1:64:d0:71:03:e7:89:6b:16:77:42: 6a:87:3b:1d:77:d1:78:6f:6c:3b:16:34:31:1b:97: 9e:43:0f:20:4f:b3:85:c7:f2:42:a6:2f:c8:87:bc: ea:61:98:02:e9:06:c8:1a:d8:f8:9a:85:bb:ce:33: a7:91:0b:b6:fb:55:0e:fb:49:36:77:e4:1e:6d:d6: fb:52:10:ae:75:29:e1:e7:96:fd:72:b7:14:93:a4: 45:54:64:3c:40:6f:0d:92:e0:4f:b4:04:91:2f:18: 90:9a:f2:17:6c:38:74:a7:09:5f:64:f0:77:ed:ac: 87:c3:c3:4a:b5:7e:c1:4c:c9:62:96:6a:03:15:65: b0:e7:41:fe:d1:3f:76:04:35:18:80:a7:6c:9a:6a: 10:ed:6b:07:46:ee:d1:84:7a:b0:aa:9a:79:1c:72: 77:06:80:c8:ad:e1:02:06:05:e7:9a:4d:e3:de:c3: 36:bf:45:f3:bf:fa:e3:49:d2:02:5e:fa:02:db:13: 84:4d:8c:06:60:00:cc:13:f5:70:ab:d7:0f:5e:6a: 71:9a:59:53:8a:56:e0:87:15:59:3d:a0:9c:06:41: 01:5d:0c:56:cf:c8:ba:59:8f:e7:1d:5b:1d:95:4b: cf:31:2a:31:66:e6:b4:54:19:f0:e9:82:c3:83:18: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CA:3F:B7:96:95:F1:65:F5:D0:12:68:B7:AF:5A:51:8E:E1:13:F7 X509v3 Authority Key Identifier: keyid:EF:CF:05:2D:98:92:92:CE:B1:05:09:12:9C:8D:E2:03:D4:9F:68:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/788FLZiSks6xBQkSnI3iA9SfaAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB9C0/D364F0CCD21A11E983F9E524C4F9AE02/788FLZiSks6xBQkSnI3iA9SfaAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:f8:01:b3:c4:23:81:85:6b:ac:12:24:58:14:20:c9:ae:97: 88:89:0a:54:d1:cf:86:b9:2d:d8:6e:38:3a:9d:87:71:84:09: 53:6b:ef:bd:09:13:46:90:91:f6:49:5d:f7:2a:28:58:f4:12: 59:2f:df:fb:c3:b7:30:25:94:c9:b4:8e:15:a1:57:22:d2:7e: 9a:08:b8:c2:16:a1:6d:e1:e8:01:a0:ad:9e:6a:99:61:57:c7: 5e:c1:29:67:60:e7:2a:c7:ed:c0:6d:f2:92:9c:45:83:6f:27: e4:90:1a:af:0c:14:6a:05:bd:7f:6b:33:51:7b:e8:c1:2b:ef: 24:e5:be:63:99:27:0a:87:61:01:64:e2:29:41:24:81:cc:60: 9d:c8:f0:ad:18:48:48:bc:38:4c:46:ff:3c:ee:41:c6:df:41: b1:b2:d6:2b:2a:2d:2b:13:8e:d0:a2:95:f4:9b:a3:25:8c:d5: ec:5b:58:45:62:ff:87:43:2e:05:d9:f5:12:30:c2:42:d6:d7: c8:9e:96:f9:d4:14:1f:6e:c9:6d:5b:93:1f:f1:28:d6:87:a3: d8:ee:32:35:91:ea:de:58:76:8f:5a:a5:ab:e3:72:05:31:cb: a6:6c:64:3a:3c:84:1d:64:fe:99:7e:24:f2:bc:34:c6:95:63: b5:bd:81:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI5QzAxMTAvBgNVBAUTKEVGQ0YwNTJEOTg5MjkyQ0VCMTA1MDkxMjlDOERFMjAz RDQ5RjY4MDQwHhcNMjUwODIwMTgwMjE1WhcNMjUwODI3MTgwMjE1WjAYMRYwFAYD VQQDEw02OGE2MGRhNy00NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8xJ9sWTQcQPniWsWd0Jqhzsdd9F4b2w7FjQxG5eeQw8gT7OFx/JCpi/Ih7zq YZgC6QbIGtj4moW7zjOnkQu2+1UO+0k2d+Qebdb7UhCudSnh55b9crcUk6RFVGQ8 QG8NkuBPtASRLxiQmvIXbDh0pwlfZPB37ayHw8NKtX7BTMlilmoDFWWw50H+0T92 BDUYgKdsmmoQ7WsHRu7RhHqwqpp5HHJ3BoDIreECBgXnmk3j3sM2v0Xzv/rjSdIC XvoC2xOETYwGYADME/Vwq9cPXmpxmllTilbghxVZPaCcBkEBXQxWz8i6WY/nHVsd lUvPMSoxZua0VBnw6YLDgxhDxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHKP7eW lfFl9dASaLevWlGO4RP3MB8GA1UdIwQYMBaAFO/PBS2YkpLOsQUJEpyN4gPUn2gE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjlDMC9EMzY0RjBDQ0Qy MUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tzNnhCUWtTbkkzaUE5U2Zh QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc4OEZMWmlTa3M2eEJRa1NuSTNpQTlTZmFBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjlDMC9EMzY0RjBDQ0QyMUExMUU5ODNGOUU1MjRDNEY5QUUwMi83ODhGTFppU2tz NnhCUWtTbkkzaUE5U2ZhQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAj+AGzxCOBhWusEiRYFCDJrpeIiQpU0c+GuS3Ybjg6nYdxhAlTa++9 CRNGkJH2SV33KihY9BJZL9/7w7cwJZTJtI4VoVci0n6aCLjCFqFt4egBoK2eaplh V8dewSlnYOcqx+3AbfKSnEWDbyfkkBqvDBRqBb1/azNRe+jBK+8k5b5jmScKh2EB ZOIpQSSBzGCdyPCtGEhIvDhMRv887kHG30GxstYrKi0rE47QopX0m6MljNXsW1hF Yv+HQy4F2fUSMMJC1tfInpb51BQfbsltW5Mf8SjWh6PY7jI1kereWHaPWqWr43IF McumbGQ6PIQdZP6ZfiTyvDTGlWO1vYEK -----END CERTIFICATE-----Generated at Fri Aug 22 16:30:41 2025 by rpki-client