$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft File: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft (raw, json) Hash identifier: Rc4mCU/ldzuvRO6jSvvbHjb0B3NwotU6p05LEMbtLQw= Subject key identifier: 2E:00:00:FE:5D:C3:22:06:7A:5A:93:63:65:45:F3:51:E9:15:C0:9B Authority key identifier: ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD Certificate issuer: /CN=A91F8806/serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Certificate serial: 0120 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft Manifest number: 011B Signing time: Thu 21 Aug 2025 05:02:52 +0000 Manifest this update: Thu 21 Aug 2025 05:02:52 +0000 Manifest next update: Thu 28 Aug 2025 05:02:51 +0000 Files and hashes: 1: 7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl (hash: xCDvTYK+AL044pqOKcCoXlG0MBlRKaONtybTR0SffDc=) 2: 905F46DEE05A11EFA20EC133C4F9AE02.roa (hash: NVqWotupuz8BWtoYreL5BX+y3xeJG+CMVF0kE4qkEmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 288 (0x120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8806, serialNumber=ED1E63C4CA85204ECBAD26CE2C9462645E0B1CAD Validity Not Before: Aug 21 05:02:52 2025 GMT Not After : Aug 28 05:02:51 2025 GMT Subject: CN=68a6a87c-1e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:65:6f:e1:a1:43:d3:87:74:d4:8f:5e:6b: eb:12:8c:68:39:61:45:66:d2:11:b1:84:d0:8d:f5: 90:20:88:61:17:f8:66:90:82:6a:8d:a5:be:2e:70: 07:6a:e0:3b:bc:5d:2c:d8:f4:b2:64:29:6a:49:b1: 5c:6f:e7:48:31:2a:02:16:b6:57:bb:8c:74:09:d6: 36:cb:96:61:3c:1b:94:c1:b8:50:8b:72:33:0e:38: c1:c8:49:f0:50:96:7c:b5:86:c5:2f:72:a4:ff:f3: 69:e2:c1:9b:70:f3:1c:e7:6a:23:b7:fc:c4:a6:0a: c9:e7:31:07:03:46:05:75:9f:22:8f:af:c1:70:f3: c1:f7:61:64:45:96:bf:71:cb:25:fb:a1:89:7c:c7: 82:3b:4f:c2:25:25:0c:c5:c1:6d:40:b8:15:05:e7: 4b:27:66:b0:cf:74:21:26:f1:fb:6a:e2:5b:d6:7e: 58:c9:81:d4:53:14:21:00:73:af:2c:46:1c:76:80: 9c:fc:ec:9e:f5:94:27:f7:b2:b9:65:73:a0:b8:96: b1:5a:10:57:b6:cf:b4:5b:ff:ea:c1:78:78:d3:2f: ff:49:4f:c7:99:70:d5:67:04:7a:04:60:02:72:13: 01:14:65:a6:94:8c:a5:a7:e2:36:c2:b9:d8:e6:ef: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:00:00:FE:5D:C3:22:06:7A:5A:93:63:65:45:F3:51:E9:15:C0:9B X509v3 Authority Key Identifier: keyid:ED:1E:63:C4:CA:85:20:4E:CB:AD:26:CE:2C:94:62:64:5E:0B:1C:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R5jxMqFIE7LrSbOLJRiZF4LHK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8806/39D087AAD69811EEA544B438C4F9AE02/7R5jxMqFIE7LrSbOLJRiZF4LHK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:93:e2:4f:05:36:ab:02:fd:78:5b:80:7f:0e:b6:ba:e2: b3:05:f2:04:d6:a9:89:09:ee:70:93:e8:41:84:59:f6:93:62: 4a:40:45:c7:13:dd:c4:40:0c:d9:df:f7:a7:c9:1b:b0:0f:60: ac:f1:58:72:8b:04:24:f1:79:9c:2a:b9:ed:25:03:3e:5f:eb: 7f:04:9c:ce:37:b3:ae:a8:a1:7e:6f:25:9d:ca:f7:57:3f:3f: b2:dc:01:b5:d5:ca:fb:9b:95:76:71:9c:6f:d1:cb:54:d3:c2: 34:85:5b:50:31:9c:87:a1:38:92:73:be:48:ed:a9:b0:86:2c: 80:c0:6f:c6:2b:4e:45:c8:71:ca:64:59:89:76:28:61:18:31: 59:47:ad:5a:c0:77:e1:42:8d:c2:fa:fe:55:12:fc:dd:d8:57: 41:f2:f6:42:18:3c:cf:2e:16:83:01:15:54:22:e5:90:0a:19: c5:7a:09:9c:fa:ec:20:f2:62:c5:2f:bd:47:a1:65:e4:e3:87: 7a:14:7a:8e:c3:54:df:7b:88:c1:11:b1:b8:26:25:d5:a5:1b: db:09:12:45:a9:1c:d5:ef:9c:81:3c:d1:06:ba:71:27:1c:08: 23:e4:b4:19:74:05:08:6f:52:ec:97:c3:e1:8b:dc:20:51:39: be:62:d7:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg4MDYxMTAvBgNVBAUTKEVEMUU2M0M0Q0E4NTIwNEVDQkFEMjZDRTJDOTQ2MjY0 NUUwQjFDQUQwHhcNMjUwODIxMDUwMjUyWhcNMjUwODI4MDUwMjUxWjAYMRYwFAYD VQQDEw02OGE2YTg3Yy0xZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohNlb+GhQ9OHdNSPXmvrEoxoOWFFZtIRsYTQjfWQIIhhF/hmkIJqjaW+LnAH auA7vF0s2PSyZClqSbFcb+dIMSoCFrZXu4x0CdY2y5ZhPBuUwbhQi3IzDjjByEnw UJZ8tYbFL3Kk//Np4sGbcPMc52ojt/zEpgrJ5zEHA0YFdZ8ij6/BcPPB92FkRZa/ ccsl+6GJfMeCO0/CJSUMxcFtQLgVBedLJ2awz3QhJvH7auJb1n5YyYHUUxQhAHOv LEYcdoCc/Oye9ZQn97K5ZXOguJaxWhBXts+0W//qwXh40y//SU/HmXDVZwR6BGAC chMBFGWmlIylp+I2wrnY5u9QHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC4AAP5d wyIGelqTY2VF81HpFcCbMB8GA1UdIwQYMBaAFO0eY8TKhSBOy60mziyUYmReCxyt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODgwNi8zOUQwODdBQUQ2 OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklFN0xyU2JPTEpSaVpGNExI SzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdSNWp4TXFGSUU3THJTYk9MSlJpWkY0TEhLMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODgwNi8zOUQwODdBQUQ2OTgxMUVFQTU0NEI0MzhDNEY5QUUwMi83UjVqeE1xRklF N0xyU2JPTEpSaVpGNExISzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp5JPiTwU2qwL9eFuAfw62uuKzBfIE1qmJCe5wk+hBhFn2k2JKQEXH E93EQAzZ3/enyRuwD2Cs8VhyiwQk8XmcKrntJQM+X+t/BJzON7OuqKF+byWdyvdX Pz+y3AG11cr7m5V2cZxv0ctU08I0hVtQMZyHoTiSc75I7amwhiyAwG/GK05FyHHK ZFmJdihhGDFZR61awHfhQo3C+v5VEvzd2FdB8vZCGDzPLhaDARVUIuWQChnFegmc +uwg8mLFL71HoWXk44d6FHqOw1Tfe4jBEbG4JiXVpRvbCRJFqRzV75yBPNEGunEn HAgj5LQZdAUIb1Lsl8Phi9wgUTm+Yteu -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:21 2025 by rpki-client