$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: vOsjLg2LFeVxnytDgdCmC1dQ44N5HeD9sL+m/E98OEs= Subject key identifier: CC:68:72:D1:A3:F9:11:50:4D:FF:1D:B3:F4:45:53:9F:C0:C7:0C:C8 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 089C Signing time: Fri 18 Jul 2025 20:47:35 +0000 Manifest this update: Fri 18 Jul 2025 20:47:34 +0000 Manifest next update: Fri 25 Jul 2025 20:47:34 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: rPPeJsxXTSpJPKvxy4BaULTK58us019+C6iyimGz8hA=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2216 (0x8a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Jul 18 20:47:34 2025 GMT Not After : Jul 25 20:47:34 2025 GMT Subject: CN=687ab2e6-2f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:15:1c:49:23:fa:ae:6d:50:53:7c:21:59: bc:72:e9:0b:fa:7f:ad:b8:68:74:20:21:14:37:82: f5:d3:d5:ca:2f:97:13:cb:0f:18:a7:74:ae:e2:8b: 3f:62:03:44:5b:45:be:7c:ff:d4:a5:56:61:b9:e0: b2:d6:cd:71:ec:c0:35:c5:44:09:c0:4a:60:e5:40: 65:8e:c7:5a:71:31:45:3d:59:a6:e4:e6:f6:3e:52: 7a:22:c2:01:79:9e:f6:30:99:6c:2c:3b:d7:00:d7: a1:a5:02:87:ea:76:d5:22:6b:b5:6a:38:6d:2e:46: b5:4d:c6:29:5b:8b:ab:c3:df:88:4e:14:74:52:6c: 51:07:f9:1d:b5:ae:d3:fb:79:e0:6d:75:6b:8d:9a: 2a:44:28:2e:3b:36:73:71:d6:02:dc:85:c9:f7:43: 39:65:4f:92:80:cf:72:6b:c1:df:c2:8c:82:d3:f9: 76:01:d8:30:61:26:0d:a0:54:00:b9:60:36:f8:ac: d0:82:b4:97:2d:f8:12:fe:38:c3:ad:d5:de:d4:2e: 6b:7f:da:78:3e:27:92:ff:7c:ac:59:e2:c0:3b:b2: ba:d5:14:8b:29:8e:29:f6:c8:b0:61:cc:30:5d:ef: cf:78:c0:ba:32:89:f7:e2:1a:a0:53:51:ef:13:33: d6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:68:72:D1:A3:F9:11:50:4D:FF:1D:B3:F4:45:53:9F:C0:C7:0C:C8 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:5d:8c:13:71:61:bc:04:21:45:55:aa:7d:e5:5a:6d:98:8f: c9:ec:ad:e6:4e:6a:89:ea:88:be:cd:ed:1f:68:9b:0e:e8:68: e5:3c:58:67:ff:7f:f5:fa:5a:c3:e7:e5:4f:1b:dc:c8:4e:18: 3b:71:07:1a:df:19:43:2c:f9:20:f2:03:f3:77:e2:93:23:ce: c1:af:24:00:20:64:bc:7a:69:9e:aa:a1:c7:be:22:ba:51:91: c0:79:8f:a5:6c:60:d6:e2:51:64:de:09:8a:a2:35:b1:09:79: b4:de:65:3a:81:6a:5f:5d:1f:2a:3d:c0:6d:24:9e:37:70:4e: 83:14:40:f3:52:49:aa:5b:28:ca:c1:3b:94:b9:ea:d5:14:c0: d2:b0:5a:fe:df:c0:10:e3:ca:13:7c:62:f7:f5:e0:2a:7d:97: 88:c0:ad:9c:7b:91:72:5d:c7:35:92:6f:0e:27:05:a6:9d:50: 23:49:aa:8f:b5:04:a3:99:12:4b:f3:cc:30:71:ab:e9:70:d6: 6d:81:12:71:74:d0:70:01:d9:e2:0f:61:9a:92:ec:d8:50:86: d7:26:c0:1a:cd:84:0c:2f:28:7f:d5:16:dd:49:f3:1e:25:22: 92:6e:0d:68:ba:e5:04:28:3d:1a:4b:41:75:57:61:ba:85:18: 13:05:2c:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwNzE4MjA0NzM0WhcNMjUwNzI1MjA0NzM0WjAYMRYwFAYD VQQDEw02ODdhYjJlNi0yZjRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7wVHEkj+q5tUFN8IVm8cukL+n+tuGh0ICEUN4L109XKL5cTyw8Yp3Su4os/ YgNEW0W+fP/UpVZhueCy1s1x7MA1xUQJwEpg5UBljsdacTFFPVmm5Ob2PlJ6IsIB eZ72MJlsLDvXANehpQKH6nbVImu1ajhtLka1TcYpW4urw9+IThR0UmxRB/kdta7T +3ngbXVrjZoqRCguOzZzcdYC3IXJ90M5ZU+SgM9ya8HfwoyC0/l2AdgwYSYNoFQA uWA2+KzQgrSXLfgS/jjDrdXe1C5rf9p4PieS/3ysWeLAO7K61RSLKY4p9siwYcww Xe/PeMC6Mon34hqgU1HvEzPW4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxoctGj +RFQTf8ds/RFU5/AxwzIMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkXYwTcWG8BCFFVap95VptmI/J7K3mTmqJ6oi+ze0faJsO6GjlPFhn /3/1+lrD5+VPG9zIThg7cQca3xlDLPkg8gPzd+KTI87BryQAIGS8emmeqqHHviK6 UZHAeY+lbGDW4lFk3gmKojWxCXm03mU6gWpfXR8qPcBtJJ43cE6DFEDzUkmqWyjK wTuUuerVFMDSsFr+38AQ48oTfGL39eAqfZeIwK2ce5FyXcc1km8OJwWmnVAjSaqP tQSjmRJL88wwcavpcNZtgRJxdNBwAdniD2GakuzYUIbXJsAazYQMLyh/1RbdSfMe JSKSbg1ouuUEKD0aS0F1V2G6hRgTBSzv -----END CERTIFICATE-----Generated at Sun Jul 20 03:27:51 2025 by rpki-client