$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json) Hash identifier: 6eGwe98I5p4C58sTG/1GQcMT6VLuDhby69tFodi5Rzw= Subject key identifier: CE:62:4F:0E:58:B7:F1:3F:66:49:5D:AA:11:F7:0C:F2:F6:E5:72:65 Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0BD3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft Manifest number: 0BCC Signing time: Tue 22 Jul 2025 19:07:43 +0000 Manifest this update: Tue 22 Jul 2025 19:07:43 +0000 Manifest next update: Tue 29 Jul 2025 19:07:43 +0000 Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: L30c6ZDRzDfkRG/4t1GuSES3z8NH/ZTeDEHIoBjo17g=) 2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3027 (0xbd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: Jul 22 19:07:43 2025 GMT Not After : Jul 29 19:07:43 2025 GMT Subject: CN=687fe17f-384a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c8:de:bd:fb:f9:fa:7e:6a:ff:e9:dc:a1:25: 0f:49:ca:c8:25:d3:dd:ec:fe:99:41:28:c7:20:08: 2d:f6:35:53:11:6f:f0:47:52:04:96:3b:a9:66:e1: e1:2f:fa:9e:88:d3:1e:a1:41:23:54:69:39:e7:77: 41:18:30:64:61:c9:f2:35:4d:c9:b7:f8:74:df:af: 7c:64:7f:e0:4a:79:b3:08:80:d8:0b:f9:39:4e:fe: 54:79:11:64:5d:24:28:b5:77:67:e1:bd:6a:2f:1c: 05:e9:21:48:c8:b3:d3:e4:f5:7d:c1:ba:99:f9:51: 22:ce:42:c3:0c:77:67:06:07:15:06:d4:13:5a:e0: 0f:ea:21:4f:ab:c3:69:72:05:0b:a2:5d:7f:bc:b2: 05:40:7c:91:3b:a7:1b:a6:a9:7c:a6:c7:6f:3c:05: dc:55:27:9c:e7:76:a1:c9:50:92:5e:f6:b6:89:83: 00:2f:7a:1e:0d:4e:b0:a1:0b:71:d1:dd:9c:53:d1: eb:05:6a:a6:ff:67:88:5a:fc:b5:19:c7:2d:2a:d8: 6a:27:d1:89:5d:04:dd:cd:4e:17:49:f0:71:fc:e8: fd:e4:1a:ed:c5:84:f8:76:6c:28:1d:6e:2f:dc:60: 4c:d5:a5:8b:bc:ef:fc:3a:e0:92:5b:88:1b:6f:6b: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:62:4F:0E:58:B7:F1:3F:66:49:5D:AA:11:F7:0C:F2:F6:E5:72:65 X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c0:5a:9c:70:82:c2:37:04:8d:20:f0:71:2b:c8:db:a7:c3: 0d:0c:72:a5:41:2f:93:8c:a1:ff:5b:2e:8c:dd:da:6c:52:ca: 9f:69:d1:a2:75:1d:3c:56:14:41:65:dc:1b:7f:a1:25:49:a2: 86:16:9c:86:93:b5:0f:ac:a3:69:6e:a8:e6:f3:f8:6e:da:8b: 10:48:f2:be:6c:22:4b:8f:6d:52:44:d4:4c:12:dc:a8:3b:6d: a0:d6:1d:6d:5b:25:48:c3:fd:31:8a:1b:a4:cc:32:5e:fa:e6: ba:94:fb:6b:47:6f:55:74:57:83:ac:62:ff:14:be:cf:70:f9: 8f:23:af:fb:d3:0e:9e:7f:4a:5a:a6:c9:6e:04:a6:87:98:81: ee:9b:0c:36:30:fe:d9:93:53:29:17:54:83:0f:09:18:23:64: 9a:d8:6c:45:ae:19:35:01:e7:c5:42:1d:58:ba:62:a1:e2:17: e6:a3:74:27:4e:47:5c:cd:19:71:73:fe:18:b8:ab:85:b0:1a: f8:d2:e8:af:4c:fe:b6:9c:4d:a3:46:7b:97:d5:bb:b6:49:0f: 0b:15:a9:f9:a8:4d:69:1c:fc:44:fa:45:83:b2:af:9d:9a:f5: 2b:b0:b1:06:73:c6:c0:3c:c8:6c:8c:22:ad:be:c6:9b:21:c9: 8c:77:89:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUwNzIyMTkwNzQzWhcNMjUwNzI5MTkwNzQzWjAYMRYwFAYD VQQDEw02ODdmZTE3Zi0zODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsjevfv5+n5q/+ncoSUPScrIJdPd7P6ZQSjHIAgt9jVTEW/wR1IEljupZuHh L/qeiNMeoUEjVGk553dBGDBkYcnyNU3Jt/h03698ZH/gSnmzCIDYC/k5Tv5UeRFk XSQotXdn4b1qLxwF6SFIyLPT5PV9wbqZ+VEizkLDDHdnBgcVBtQTWuAP6iFPq8Np cgULol1/vLIFQHyRO6cbpql8psdvPAXcVSec53ahyVCSXva2iYMAL3oeDU6woQtx 0d2cU9HrBWqm/2eIWvy1GcctKthqJ9GJXQTdzU4XSfBx/Oj95BrtxYT4dmwoHW4v 3GBM1aWLvO/8OuCSW4gbb2tsdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM5iTw5Y t/E/ZkldqhH3DPL25XJlMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFwFqccILCNwSNIPBxK8jbp8MNDHKlQS+TjKH/Wy6M3dpsUsqfadGi dR08VhRBZdwbf6ElSaKGFpyGk7UPrKNpbqjm8/hu2osQSPK+bCJLj21SRNRMEtyo O22g1h1tWyVIw/0xihukzDJe+ua6lPtrR29VdFeDrGL/FL7PcPmPI6/70w6ef0pa psluBKaHmIHumww2MP7Zk1MpF1SDDwkYI2Sa2GxFrhk1AefFQh1YumKh4hfmo3Qn TkdczRlxc/4YuKuFsBr40uivTP62nE2jRnuX1bu2SQ8LFan5qE1pHPxE+kWDsq+d mvUrsLEGc8bAPMhsjCKtvsabIcmMd4mx -----END CERTIFICATE-----Generated at Thu Jul 24 05:02:49 2025 by rpki-client