$ rpki-client -vvf rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft File: fjub3aUOjafVD_OnwzKc9IPVF-k.mft (raw, json) Hash identifier: 7d7m9D2nebBBl0LgE/CcjQgkhCFA11Y+DOt0vrlIeG8= Subject key identifier: 09:26:02:71:3C:96:D8:F9:02:17:98:73:EF:97:82:9E:C4:A8:A8:6A Authority key identifier: 7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 Certificate issuer: /CN=A91128AE/serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft Manifest number: 01A3 Signing time: Sat 19 Jul 2025 03:31:29 +0000 Manifest this update: Sat 19 Jul 2025 03:31:28 +0000 Manifest next update: Sat 26 Jul 2025 03:31:28 +0000 Files and hashes: 1: fjub3aUOjafVD_OnwzKc9IPVF-k.crl (hash: VfZjttC2FsJOLlgcYijLLPiUbgXyj2I6g0LtNKfAT6Y=) 2: 12671028EDB211EDBD7A5059C4F9AE02.roa (hash: Obgr2Zd1OVsSRpdsU4YgCxrRpE7FbkGE3q8rgEYfK/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128AE, serialNumber=7E3B9BDDA50E8DA7D50FF3A7C3329CF483D517E9 Validity Not Before: Jul 19 03:31:28 2025 GMT Not After : Jul 26 03:31:28 2025 GMT Subject: CN=687b1190-4c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:0f:d7:ca:44:7b:5e:60:aa:27:82:02:01: 1e:44:f6:43:af:77:2b:24:c6:47:bf:ec:3e:49:eb: 4d:cd:f6:66:35:74:9c:f0:20:c5:00:70:4d:4d:5d: 11:f5:c3:67:38:a9:be:66:a6:f2:aa:7c:af:ed:bf: 46:66:7c:1b:bf:23:c6:a2:b1:48:56:40:a7:8f:d5: 85:7d:b2:42:33:49:78:d3:ea:db:03:c2:14:93:3d: 5d:0a:4a:06:8a:ca:cd:35:fc:a7:cf:c1:60:64:ba: 3a:5a:51:63:31:cd:f6:d3:41:20:f6:fd:ae:ce:8c: cb:08:69:ee:96:2b:a1:b4:23:0f:f7:f4:6f:ce:2c: 72:d4:46:3e:f6:cb:18:38:22:08:6f:f9:d5:37:bc: 48:b1:f0:f3:1b:91:f7:7f:67:d0:a5:fe:97:33:d1: 4a:c9:34:ba:55:29:34:11:e6:64:3e:d2:9a:a9:84: 2c:cb:8c:d2:56:66:85:cc:11:af:8b:fb:be:95:b6: f9:5b:3f:78:04:a9:0b:00:df:3e:37:9d:82:4f:3b: c1:9b:9d:f8:da:9b:49:eb:2a:5d:1c:e4:f2:5e:5b: 3b:fa:9b:e5:ed:72:86:70:8e:50:6f:eb:82:ec:95: 13:1f:0e:1f:7c:69:eb:0a:e9:bb:57:bf:76:6f:9c: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:26:02:71:3C:96:D8:F9:02:17:98:73:EF:97:82:9E:C4:A8:A8:6A X509v3 Authority Key Identifier: keyid:7E:3B:9B:DD:A5:0E:8D:A7:D5:0F:F3:A7:C3:32:9C:F4:83:D5:17:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjub3aUOjafVD_OnwzKc9IPVF-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128AE/53EE318EEDAD11ED9166FA53C4F9AE02/fjub3aUOjafVD_OnwzKc9IPVF-k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:db:d0:3b:58:4e:0d:22:0b:a8:02:db:ff:a9:d2:2e:a2:fc: a5:ac:d9:a0:88:a5:b7:9a:3f:49:38:f1:ec:29:ba:05:21:68: ca:27:85:2d:e4:1c:d0:ff:ca:05:90:93:8f:99:a5:c1:cd:d4: 5e:e9:1c:89:e8:e8:fb:6b:0d:65:e8:f8:33:2a:62:cd:34:18: 69:32:d7:39:86:7c:b2:eb:bc:13:25:78:35:91:57:9a:10:1e: d2:a1:d7:2d:29:cd:5e:82:cb:e5:8e:ca:3d:9c:4a:d1:35:50: 3b:a3:e8:10:07:1e:ad:cc:6d:4f:60:61:d6:0e:89:04:01:da: c8:2e:6f:14:24:25:cd:aa:8b:e7:ae:4b:15:f0:be:55:e6:73: 25:ed:43:88:d2:80:eb:c6:6f:5d:95:a1:47:70:6f:55:fb:5b: 76:5a:ff:61:4c:14:63:ab:f5:b0:8e:fd:2c:ad:5d:8f:30:9e: 53:cf:28:3b:29:b4:f1:ac:4b:6b:59:c0:db:5c:ba:72:93:9e: d8:bf:63:19:8e:02:36:3f:23:c6:b9:b9:57:c6:99:92:62:93: 2e:d1:d8:33:08:d0:db:f3:2c:c5:55:12:2b:a8:2a:2f:72:19: c9:2a:93:2e:23:54:de:d0:44:9f:3b:a4:bd:6a:d7:17:54:f0: 56:a6:b9:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QUUxMTAvBgNVBAUTKDdFM0I5QkREQTUwRThEQTdENTBGRjNBN0MzMzI5Q0Y0 ODNENTE3RTkwHhcNMjUwNzE5MDMzMTI4WhcNMjUwNzI2MDMzMTI4WjAYMRYwFAYD VQQDEw02ODdiMTE5MC00YzljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3RAP18pEe15gqieCAgEeRPZDr3crJMZHv+w+SetNzfZmNXSc8CDFAHBNTV0R 9cNnOKm+Zqbyqnyv7b9GZnwbvyPGorFIVkCnj9WFfbJCM0l40+rbA8IUkz1dCkoG isrNNfynz8FgZLo6WlFjMc3200Eg9v2uzozLCGnuliuhtCMP9/Rvzixy1EY+9ssY OCIIb/nVN7xIsfDzG5H3f2fQpf6XM9FKyTS6VSk0EeZkPtKaqYQsy4zSVmaFzBGv i/u+lbb5Wz94BKkLAN8+N52CTzvBm5342ptJ6ypdHOTyXls7+pvl7XKGcI5Qb+uC 7JUTHw4ffGnrCum7V792b5xrCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAkmAnE8 ltj5AheYc++Xgp7EqKhqMB8GA1UdIwQYMBaAFH47m92lDo2n1Q/zp8MynPSD1Rfp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhBRS81M0VFMzE4RUVE QUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2phZlZEX09ud3pLYzlJUFZG LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZqdWIzYVVPamFmVkRfT253ektjOUlQVkYtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhBRS81M0VFMzE4RUVEQUQxMUVEOTE2NkZBNTNDNEY5QUUwMi9manViM2FVT2ph ZlZEX09ud3pLYzlJUFZGLWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCK29A7WE4NIguoAtv/qdIuovylrNmgiKW3mj9JOPHsKboFIWjKJ4Ut 5BzQ/8oFkJOPmaXBzdRe6RyJ6Oj7aw1l6PgzKmLNNBhpMtc5hnyy67wTJXg1kVea EB7SodctKc1egsvljso9nErRNVA7o+gQBx6tzG1PYGHWDokEAdrILm8UJCXNqovn rksV8L5V5nMl7UOI0oDrxm9dlaFHcG9V+1t2Wv9hTBRjq/Wwjv0srV2PMJ5Tzyg7 KbTxrEtrWcDbXLpyk57Yv2MZjgI2PyPGublXxpmSYpMu0dgzCNDb8yzFVRIrqCov chnJKpMuI1Te0ESfO6S9atcXVPBWprnT -----END CERTIFICATE-----Generated at Sun Jul 20 22:30:26 2025 by rpki-client