$ rpki-client -vvf rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft File: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft (raw, json) Hash identifier: YF1aTQbNRlO3OdshpYsITp44ItFngMRQ4WRcse++sP8= Subject key identifier: 0C:72:8B:B9:A1:08:3F:EB:41:9D:F3:DC:40:11:B5:F1:5C:3C:AD:6A Authority key identifier: FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 Certificate issuer: /CN=A91226E9/serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Certificate serial: 0854 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft Manifest number: 0846 Signing time: Fri 18 Jul 2025 20:59:15 +0000 Manifest this update: Fri 18 Jul 2025 20:59:15 +0000 Manifest next update: Fri 25 Jul 2025 20:59:15 +0000 Files and hashes: 1: _I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl (hash: dzkHGXtde13sbrGPlEZPItQIMZhUI9kRTq1RAmELoOA=) 2: 22FDFFE88DF511EFB5AC9269C4F9AE02.roa (hash: aH5SgttT3yBxPoJZcOUIaaeUL8JdCzJhMaUjR/JZqLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2132 (0x854) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91226E9, serialNumber=FC8ED08FC9230174E31190EDAD5852AC45C38503 Validity Not Before: Jul 18 20:59:15 2025 GMT Not After : Jul 25 20:59:15 2025 GMT Subject: CN=687ab5a3-f18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:03:c9:b6:3f:10:07:8e:60:0e:d6:cf:31: 37:58:9e:c4:4b:f4:e8:a5:3f:1b:96:85:81:e2:44: ea:7d:1d:3f:92:66:5b:f5:eb:4e:d7:af:dd:e8:2f: 0d:d5:e5:bd:c9:c3:57:68:f4:35:e9:be:d8:18:3f: 94:32:c3:09:85:68:e6:78:bf:02:73:d2:f0:2e:79: bc:90:f3:0c:9f:c6:dc:1b:a1:c4:8d:c9:30:dd:5d: bf:c4:33:00:ff:95:19:25:b4:97:ee:96:a9:2a:2c: 09:f9:63:58:74:81:1e:93:eb:81:8a:47:6f:bf:40: b6:3f:2a:0f:c8:7c:b8:68:94:0e:74:dc:b9:b3:87: 21:c1:cc:cb:a0:a8:02:cd:d2:5f:87:a2:d2:c7:1c: 2d:23:c6:6c:49:ee:a9:41:cb:e2:a6:3b:e9:35:4b: 7c:a1:db:ff:26:82:e3:e7:2e:ad:0b:aa:6e:e9:a7: 64:3b:ab:4b:13:59:c5:30:77:66:74:34:c5:b3:d1: 18:16:9c:86:7d:10:fc:c3:63:e0:cc:51:0d:6b:ba: 94:c1:4e:6e:39:28:49:d9:04:0d:0b:b2:8b:e0:cd: 03:36:05:7d:fd:bb:94:c2:cb:13:00:bc:6e:0f:15: 4d:67:32:96:ca:6e:2b:09:7b:4a:7b:de:a5:79:3d: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:72:8B:B9:A1:08:3F:EB:41:9D:F3:DC:40:11:B5:F1:5C:3C:AD:6A X509v3 Authority Key Identifier: keyid:FC:8E:D0:8F:C9:23:01:74:E3:11:90:ED:AD:58:52:AC:45:C3:85:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91226E9/83DE6878D1F911EABEF28257C4F9AE02/_I7Qj8kjAXTjEZDtrVhSrEXDhQM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:05:85:c2:7f:92:34:1b:28:7d:6a:5c:6f:20:58:73:67:62: d6:22:ab:fe:74:a5:53:d3:b4:b4:26:b7:28:b3:d2:35:d9:f4: 6a:16:83:77:d4:24:35:da:b9:03:d9:5b:12:02:b5:1a:0f:62: bf:83:a0:b2:e5:0b:33:c7:d3:ec:85:d7:57:98:77:e2:bd:24: 5b:6b:aa:ce:39:d2:6a:9d:8a:d8:f2:04:5b:36:ba:93:31:f2: 14:6a:e5:58:14:d8:50:7a:5f:ed:99:3f:7d:e3:a4:2f:0a:72: ba:f0:b7:a0:c1:7e:f1:bd:50:a7:a0:7f:39:00:63:5f:cf:91: e9:83:74:69:2b:42:27:2d:4f:5e:84:b4:1c:c7:3e:cf:94:8a: 9b:e1:19:f7:aa:33:bd:09:4d:80:c2:20:9d:c3:0e:0f:09:4a: 3e:d6:f1:ac:52:5c:07:ed:3a:f4:00:99:f7:df:40:e7:15:10: f3:88:11:e9:3e:87:c2:39:54:f6:3f:dd:a7:ba:e0:b9:54:97: c2:c7:54:bb:f3:b7:05:2a:28:d7:66:47:f2:47:90:40:c5:61: 7c:54:ce:64:73:2d:0f:a2:9b:cb:77:14:e4:10:73:09:b5:77: 91:a1:a2:fa:f8:14:3a:d1:b5:b8:a1:56:5c:49:4d:b5:db:79: f1:24:b9:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI2RTkxMTAvBgNVBAUTKEZDOEVEMDhGQzkyMzAxNzRFMzExOTBFREFENTg1MkFD NDVDMzg1MDMwHhcNMjUwNzE4MjA1OTE1WhcNMjUwNzI1MjA1OTE1WjAYMRYwFAYD VQQDEw02ODdhYjVhMy1mMThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQ8DybY/EAeOYA7WzzE3WJ7ES/TopT8bloWB4kTqfR0/kmZb9etO16/d6C8N 1eW9ycNXaPQ16b7YGD+UMsMJhWjmeL8Cc9LwLnm8kPMMn8bcG6HEjckw3V2/xDMA /5UZJbSX7papKiwJ+WNYdIEek+uBikdvv0C2PyoPyHy4aJQOdNy5s4chwczLoKgC zdJfh6LSxxwtI8ZsSe6pQcvipjvpNUt8odv/JoLj5y6tC6pu6adkO6tLE1nFMHdm dDTFs9EYFpyGfRD8w2PgzFENa7qUwU5uOShJ2QQNC7KL4M0DNgV9/buUwssTALxu DxVNZzKWym4rCXtKe96leT0m4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxyi7mh CD/rQZ3z3EARtfFcPK1qMB8GA1UdIwQYMBaAFPyO0I/JIwF04xGQ7a1YUqxFw4UD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjZFOS84M0RFNjg3OEQx RjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFYVGpFWkR0clZoU3JFWERo UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19JN1FqOGtqQVhUakVaRHRyVmhTckVYRGhRTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjZFOS84M0RFNjg3OEQxRjkxMUVBQkVGMjgyNTdDNEY5QUUwMi9fSTdRajhrakFY VGpFWkR0clZoU3JFWERoUU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMBYXCf5I0Gyh9alxvIFhzZ2LWIqv+dKVT07S0Jrcos9I12fRqFoN3 1CQ12rkD2VsSArUaD2K/g6Cy5Qszx9PshddXmHfivSRba6rOOdJqnYrY8gRbNrqT MfIUauVYFNhQel/tmT9946QvCnK68LegwX7xvVCnoH85AGNfz5Hpg3RpK0InLU9e hLQcxz7PlIqb4Rn3qjO9CU2AwiCdww4PCUo+1vGsUlwH7Tr0AJn330DnFRDziBHp PofCOVT2P92nuuC5VJfCx1S787cFKijXZkfyR5BAxWF8VM5kcy0PopvLdxTkEHMJ tXeRoaL6+BQ60bW4oVZcSU2123nxJLkK -----END CERTIFICATE-----Generated at Sun Jul 20 16:35:56 2025 by rpki-client