$ rpki-client -vvf rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft File: AEu7wBxXH6cPIOpEBQBX2dyeutI.mft (raw, json) Hash identifier: Bb1/a0Knt1WAE7xo3S6CRsZkBGUS2JssJ7hlx8F3+XE= Subject key identifier: F2:B2:95:0D:FA:BD:A2:05:7A:E1:EE:4B:AA:0E:A2:E6:FB:59:45:0B Authority key identifier: 00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 Certificate issuer: /CN=A91326B3/serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft Manifest number: F9 Signing time: Sat 19 Jul 2025 05:24:19 +0000 Manifest this update: Sat 19 Jul 2025 05:24:19 +0000 Manifest next update: Sat 26 Jul 2025 05:24:19 +0000 Files and hashes: 1: AEu7wBxXH6cPIOpEBQBX2dyeutI.crl (hash: H9x/NyxlliWVPqG3lKsU1qSKJZH1wtOFyyyf138oBzo=) 2: C4BA1CE6E69211EE99E71B6AC4F9AE02.roa (hash: y3j/TCNZc4+9GUOHxfPGcXJYdNwoHrgSAKMjnwhnAHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326B3, serialNumber=004BBBC01C571FA70F20EA44050057D9DC9EBAD2 Validity Not Before: Jul 19 05:24:19 2025 GMT Not After : Jul 26 05:24:19 2025 GMT Subject: CN=687b2c03-60c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:8b:a9:d5:a4:0f:93:0d:04:b6:c1:06:14: 81:76:f6:cb:c3:df:27:28:f0:81:d0:d1:8f:89:bb: 46:ee:71:b5:8c:90:8a:af:8b:d5:a2:ca:88:ef:17: 96:5d:f9:0e:4d:b9:11:09:5a:ce:31:56:55:49:1f: 75:c7:65:65:84:24:53:ff:7e:09:09:b3:f6:a1:e3: d2:f7:76:eb:6a:8f:1b:49:b9:80:d9:9b:93:a5:78: 5a:d9:14:f5:e4:28:44:3b:64:89:a9:d3:b4:11:59: ef:54:32:2f:d2:84:d9:45:b7:fd:3d:ff:18:35:a8: 61:d4:fa:88:df:05:a5:e3:61:a5:d7:08:5b:4c:0a: 0d:47:51:da:ee:33:4f:bd:f1:02:c2:54:da:aa:46: 4e:11:fe:17:64:7c:65:7f:c4:38:5c:69:8d:6a:cb: 45:e5:92:2e:0c:53:b0:c9:6e:1a:ad:86:1e:6c:0a: a2:b7:df:34:07:ca:c6:94:fd:fc:1b:b3:31:71:4c: 0e:6a:d8:99:3a:19:63:b0:78:a0:7d:67:47:24:3d: 40:a6:85:ea:1d:7b:0a:5b:42:c9:7a:1b:61:5c:fd: 59:59:44:90:e0:92:69:2e:7e:a7:7e:02:96:29:16: 2a:55:d3:de:20:58:6b:50:09:dc:59:7d:db:10:3e: 8a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:95:0D:FA:BD:A2:05:7A:E1:EE:4B:AA:0E:A2:E6:FB:59:45:0B X509v3 Authority Key Identifier: keyid:00:4B:BB:C0:1C:57:1F:A7:0F:20:EA:44:05:00:57:D9:DC:9E:BA:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AEu7wBxXH6cPIOpEBQBX2dyeutI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326B3/CE9F16FEE69111EEBF058932C4F9AE02/AEu7wBxXH6cPIOpEBQBX2dyeutI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:c9:27:b7:4c:44:20:f1:fb:09:18:70:24:c9:de:bf:2c:29: 53:4d:1a:f9:34:df:af:8d:be:f7:c8:f1:fe:35:ef:bd:f4:1c: 75:8d:11:93:60:79:83:fc:58:14:11:4f:8e:b2:16:1c:1c:69: 4e:c7:a7:24:cf:59:42:d0:ac:32:fb:1e:c0:11:19:bb:b0:2d: ab:ed:ed:35:d3:11:e4:69:f7:d6:ad:e2:65:1e:87:4a:be:b6: e9:7e:6d:02:f9:ae:06:0a:e3:fa:f5:10:69:7e:92:c4:74:1b: f5:32:0e:ba:07:fd:d6:a7:ab:04:63:77:b9:95:bb:f8:46:c5: ae:e4:34:84:78:8b:64:bd:a9:44:b2:51:5c:35:b2:45:2c:9a: 77:7f:6c:30:36:26:71:d2:a4:53:09:ae:72:fc:b9:e5:bb:0e: 8a:0f:9f:cb:7a:b6:10:d6:8c:48:d5:d9:64:69:3a:90:5d:b4: 38:ac:34:3c:c8:60:d1:b4:34:46:a2:6b:ae:68:88:9b:38:bc: 92:7c:6a:59:fe:ce:fb:a9:02:67:b8:2f:67:6c:05:df:20:63: af:9e:f7:a5:cf:df:21:0d:1d:80:f3:41:1b:cb:0e:50:45:de: 04:07:2f:d9:c8:75:46:23:12:ff:4b:09:85:83:26:18:1a:1c: 4f:57:77:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2QjMxMTAvBgNVBAUTKDAwNEJCQkMwMUM1NzFGQTcwRjIwRUE0NDA1MDA1N0Q5 REM5RUJBRDIwHhcNMjUwNzE5MDUyNDE5WhcNMjUwNzI2MDUyNDE5WjAYMRYwFAYD VQQDEw02ODdiMmMwMy02MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8vWLqdWkD5MNBLbBBhSBdvbLw98nKPCB0NGPibtG7nG1jJCKr4vVosqI7xeW XfkOTbkRCVrOMVZVSR91x2VlhCRT/34JCbP2oePS93brao8bSbmA2ZuTpXha2RT1 5ChEO2SJqdO0EVnvVDIv0oTZRbf9Pf8YNahh1PqI3wWl42Gl1whbTAoNR1Ha7jNP vfECwlTaqkZOEf4XZHxlf8Q4XGmNastF5ZIuDFOwyW4arYYebAqit980B8rGlP38 G7MxcUwOatiZOhljsHigfWdHJD1ApoXqHXsKW0LJehthXP1ZWUSQ4JJpLn6nfgKW KRYqVdPeIFhrUAncWX3bED6KQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKylQ36 vaIFeuHuS6oOoub7WUULMB8GA1UdIwQYMBaAFABLu8AcVx+nDyDqRAUAV9ncnrrS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZCMy9DRTlGMTZGRUU2 OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2Y1BJT3BFQlFCWDJkeWV1 dEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FFdTd3QnhYSDZjUElPcEVCUUJYMmR5ZXV0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjZCMy9DRTlGMTZGRUU2OTExMUVFQkYwNTg5MzJDNEY5QUUwMi9BRXU3d0J4WEg2 Y1BJT3BFQlFCWDJkeWV1dEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6ySe3TEQg8fsJGHAkyd6/LClTTRr5NN+vjb73yPH+Ne+99Bx1jRGT YHmD/FgUEU+OshYcHGlOx6ckz1lC0Kwy+x7AERm7sC2r7e010xHkaffWreJlHodK vrbpfm0C+a4GCuP69RBpfpLEdBv1Mg66B/3Wp6sEY3e5lbv4RsWu5DSEeItkvalE slFcNbJFLJp3f2wwNiZx0qRTCa5y/Lnluw6KD5/LerYQ1oxI1dlkaTqQXbQ4rDQ8 yGDRtDRGomuuaIibOLySfGpZ/s77qQJnuC9nbAXfIGOvnvelz98hDR2A80Ebyw5Q Rd4EBy/ZyHVGIxL/SwmFgyYYGhxPV3eT -----END CERTIFICATE-----Generated at Sun Jul 20 10:01:42 2025 by rpki-client