$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft File: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft (raw, json) Hash identifier: SzgXge4JBmn1zKsTXbMZB8K0fhJ535oyQ5qeeNd6FN8= Subject key identifier: 58:BB:59:9F:94:12:D1:86:11:3E:F1:3B:F8:62:16:01:5D:DB:3A:33 Authority key identifier: EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C Certificate issuer: /CN=A91F9F87/serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Certificate serial: 0BB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft Manifest number: 0BAD Signing time: Sun 24 Aug 2025 18:56:16 +0000 Manifest this update: Sun 24 Aug 2025 18:56:16 +0000 Manifest next update: Sun 31 Aug 2025 18:56:16 +0000 Files and hashes: 1: 7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl (hash: uIM7yhh+8RNYA7wQN9W+dS/DQP65Ja8LhoUBsSlYxlg=) 2: 001209082A2111EAB1BF9C2EC4F9AE02.roa (hash: vpJeDwiHWNxR3ZSraALkWmUoFKXJKlqfWZWB6I2fGis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:56:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2995 (0xbb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9F87, serialNumber=ECC1DC8288F845A91C9F6CC187A99C99D9098C1C Validity Not Before: Aug 24 18:56:16 2025 GMT Not After : Aug 31 18:56:16 2025 GMT Subject: CN=68ab6050-4e49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:10:72:f5:28:00:f4:9e:3a:18:96:85:6c: 87:46:84:d1:bd:74:02:9c:c3:5a:7b:a8:83:a3:12: 4b:e9:2d:82:43:3e:dc:20:6f:40:a3:af:91:3e:47: 78:c9:f9:d7:e5:56:2e:42:b0:ad:b5:3f:e7:5d:68: 75:0c:f5:1d:03:1f:bc:27:44:f9:49:ed:23:f8:36: cc:e3:f9:78:67:73:22:04:44:54:90:ae:3d:6c:fe: 56:ab:b5:7d:3f:bf:3b:16:e3:2d:ea:a8:05:e3:28: 8c:24:b3:a3:fc:f6:eb:eb:4a:95:14:e1:af:bc:89: 72:61:2d:c5:93:8a:23:1b:97:77:7c:98:64:07:5e: 81:a6:d1:d2:a8:14:50:39:42:54:bf:65:2d:41:49: a9:51:75:f7:73:82:42:75:ff:c2:6a:95:9c:1a:05: bb:22:cd:10:2b:e6:27:df:d0:2f:00:62:7a:e7:b4: 93:58:f5:38:da:c2:39:c2:95:a7:1f:ca:6d:05:0d: 0b:a5:e0:bd:e0:29:07:14:cd:0d:bb:b7:83:2e:7d: ed:0d:03:cc:a2:a2:8d:8c:3c:2e:35:eb:c6:6e:47: 5c:43:5a:ce:b3:98:d3:f1:fd:93:e9:6c:60:8b:29: 8a:4a:f4:de:ae:73:d8:c7:fe:b9:53:44:2a:cc:14: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:BB:59:9F:94:12:D1:86:11:3E:F1:3B:F8:62:16:01:5D:DB:3A:33 X509v3 Authority Key Identifier: keyid:EC:C1:DC:82:88:F8:45:A9:1C:9F:6C:C1:87:A9:9C:99:D9:09:8C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7MHcgoj4Rakcn2zBh6mcmdkJjBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9F87/7027C29C2A2011EAA1152C2EC4F9AE02/7MHcgoj4Rakcn2zBh6mcmdkJjBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:94:44:c4:c8:ff:a0:1d:88:0b:f1:4f:ca:2e:e9:7d:99:66: aa:88:b2:db:69:1a:54:9f:22:3f:32:e5:59:0b:31:75:60:3f: c6:ea:0a:7f:7a:b3:39:c1:a6:42:93:ce:1c:c3:1a:e9:46:33: 56:24:15:44:8e:93:e6:dc:a5:7c:76:03:cd:d6:df:5f:34:7f: 46:b2:16:7b:de:a2:49:c9:66:f3:c4:73:7f:1f:73:29:9d:2f: 57:79:fa:c3:d1:20:1b:d5:ab:b1:dd:f1:ff:52:16:60:58:f3: fc:f3:11:7d:0d:50:b1:38:54:dc:f3:ee:a4:fc:4d:9e:d3:e6: c3:a6:1c:2b:26:92:f3:7d:2b:65:b8:2f:78:f7:af:1b:1e:95: 86:df:64:61:e7:27:6d:56:11:52:77:8d:bf:d7:1a:79:c2:1d: 9f:53:62:e3:71:51:8b:ff:6c:d0:ae:24:99:2b:15:f9:c1:5a: 7b:17:e2:c9:04:de:d0:68:e3:d4:2c:be:e9:4a:18:83:58:69: 92:fb:a5:8c:92:5a:55:b5:c8:ae:d9:66:a6:6a:c5:5c:19:89: ff:1a:b3:97:b8:da:96:b6:ae:56:a9:63:93:ff:49:f8:94:11: 8f:9c:04:5e:1c:ca:2f:d7:5c:c1:b7:89:f2:80:10:a5:b2:30: cf:fc:5e:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlGODcxMTAvBgNVBAUTKEVDQzFEQzgyODhGODQ1QTkxQzlGNkNDMTg3QTk5Qzk5 RDkwOThDMUMwHhcNMjUwODI0MTg1NjE2WhcNMjUwODMxMTg1NjE2WjAYMRYwFAYD VQQDEw02OGFiNjA1MC00ZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5m0QcvUoAPSeOhiWhWyHRoTRvXQCnMNae6iDoxJL6S2CQz7cIG9Ao6+RPkd4 yfnX5VYuQrCttT/nXWh1DPUdAx+8J0T5Se0j+DbM4/l4Z3MiBERUkK49bP5Wq7V9 P787FuMt6qgF4yiMJLOj/Pbr60qVFOGvvIlyYS3Fk4ojG5d3fJhkB16BptHSqBRQ OUJUv2UtQUmpUXX3c4JCdf/CapWcGgW7Is0QK+Yn39AvAGJ657STWPU42sI5wpWn H8ptBQ0LpeC94CkHFM0Nu7eDLn3tDQPMoqKNjDwuNevGbkdcQ1rOs5jT8f2T6Wxg iymKSvTernPYx/65U0QqzBQ2HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFi7WZ+U EtGGET7xO/hiFgFd2zozMB8GA1UdIwQYMBaAFOzB3IKI+EWpHJ9swYepnJnZCYwc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUY4Ny83MDI3QzI5QzJB MjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJha2NuMnpCaDZtY21ka0pq QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdNSGNnb2o0UmFrY24yekJoNm1jbWRrSmpCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUY4Ny83MDI3QzI5QzJBMjAxMUVBQTExNTJDMkVDNEY5QUUwMi83TUhjZ29qNFJh a2NuMnpCaDZtY21ka0pqQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnlETEyP+gHYgL8U/KLul9mWaqiLLbaRpUnyI/MuVZCzF1YD/G6gp/ erM5waZCk84cwxrpRjNWJBVEjpPm3KV8dgPN1t9fNH9GshZ73qJJyWbzxHN/H3Mp nS9XefrD0SAb1aux3fH/UhZgWPP88xF9DVCxOFTc8+6k/E2e0+bDphwrJpLzfStl uC94968bHpWG32Rh5ydtVhFSd42/1xp5wh2fU2LjcVGL/2zQriSZKxX5wVp7F+LJ BN7QaOPULL7pShiDWGmS+6WMklpVtciu2WamasVcGYn/GrOXuNqWtq5WqWOT/0n4 lBGPnAReHMov11zBt4nygBClsjDP/F6y -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:36 2025 by rpki-client