$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: hhCgX5x6OugrBwHFKeeJFVQKg1OFHj0FZ1K3s/wHKCE= Subject key identifier: CB:90:28:BF:FE:0E:B4:F8:0B:8E:2E:7F:40:FA:C1:55:F2:AE:6B:DB Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: 7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: 7C Signing time: Sat 19 Jul 2025 06:57:11 +0000 Manifest this update: Sat 19 Jul 2025 06:57:10 +0000 Manifest next update: Sat 26 Jul 2025 06:57:10 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: XIN905yq9rH0O7LOSOWsEA702+rpRVBFcNigDbWH8Cs=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Jul 19 06:57:10 2025 GMT Not After : Jul 26 06:57:10 2025 GMT Subject: CN=687b41c7-6787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:e0:fd:53:f6:99:c1:4d:34:c0:83:e7:f5: 25:ef:d6:9c:8d:3e:02:82:1f:d0:85:8f:af:11:6e: ef:11:31:d8:9b:55:a7:11:5f:65:e3:24:fb:aa:eb: bd:cc:5f:ec:c0:56:28:40:0e:62:a4:f4:8b:69:3d: 11:0f:c7:46:f6:78:c2:ea:ae:70:08:cb:1d:b4:95: e2:a1:8c:19:cf:99:52:3a:51:1f:29:d9:67:64:9a: f4:a9:c1:b8:00:ca:e5:b0:ea:0d:6d:a2:4c:fc:e5: d6:b8:1b:e1:36:eb:27:3f:33:2d:ff:9a:c2:ca:fc: b1:8c:d4:16:6e:12:ba:b0:0b:18:8e:e5:9d:1e:2a: 5b:c3:56:31:27:6e:18:3b:e9:87:99:69:c1:5a:ae: ab:07:ff:0f:a6:f0:30:d6:78:8b:59:8c:aa:0a:5d: c3:3f:a5:79:a4:e0:31:a6:bf:fe:ab:ae:80:d8:65: d9:24:4b:08:b9:a8:e2:2e:34:25:b2:52:5d:af:a6: 99:8d:99:0b:96:e5:85:de:76:19:c4:56:8b:4f:7b: a3:ac:1b:26:d5:cd:bf:0e:fd:44:6e:b1:d1:b3:63: aa:53:be:57:91:d3:6b:fd:a7:f2:8e:6d:c2:38:b1: 18:2e:43:3b:75:cf:46:e5:00:04:3a:25:02:d3:66: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:90:28:BF:FE:0E:B4:F8:0B:8E:2E:7F:40:FA:C1:55:F2:AE:6B:DB X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:32:6e:a1:ce:7c:bc:f9:02:3b:3f:71:a9:7d:c8:56:12:eb: 96:48:e3:17:5c:66:c1:84:14:09:6f:4e:b8:4e:0b:2d:91:87: c5:a6:aa:b8:4c:01:2e:f6:64:0d:9c:bf:d3:f8:a0:20:52:b6: 9d:ae:da:97:c3:f0:3e:5c:56:17:e2:4f:5b:ea:1a:b6:ce:75: ba:85:e2:96:6b:0d:29:58:2a:80:de:0a:82:3d:ca:c0:e2:54: a8:a2:f4:5b:1e:f0:6c:18:98:5e:72:f9:42:da:1c:7d:d6:28: 84:44:8f:93:92:b2:75:7d:42:3c:ef:f5:65:50:14:b3:16:ab: ac:32:aa:6a:c3:73:97:9a:81:b7:37:f3:45:c2:2a:e4:98:a9: 9a:6b:fb:dd:3c:53:f9:97:13:75:40:55:be:af:00:a8:f2:da: 7d:a3:ee:fc:f6:99:31:25:2b:f1:2c:5d:ee:4d:59:b2:7c:cc: d0:da:2a:33:f0:82:1b:a6:42:e6:4a:77:45:8d:5b:8f:61:70: d6:6a:f0:d1:96:04:6c:28:2c:c4:e4:e4:44:f1:c4:a1:c3:78: 1b:7c:f9:57:66:5c:ba:a2:b4:6e:05:19:53:5a:c1:50:b9:74: 4e:65:e7:2c:af:fb:7f:2b:33:fe:e0:17:f5:da:a3:a9:e3:b2: ab:8a:6a:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDZFNDExMC8GA1UEBRMoMTc2QkNFMTVDODYyRDQ3QkE3NjBBMUY2NjUzOEY4MUQ1 QzQ5M0I4MTAeFw0yNTA3MTkwNjU3MTBaFw0yNTA3MjYwNjU3MTBaMBgxFjAUBgNV BAMTDTY4N2I0MWM3LTY3ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDV/+D9U/aZwU00wIPn9SXv1pyNPgKCH9CFj68Rbu8RMdibVacRX2XjJPuq673M X+zAVihADmKk9ItpPREPx0b2eMLqrnAIyx20leKhjBnPmVI6UR8p2WdkmvSpwbgA yuWw6g1tokz85da4G+E26yc/My3/msLK/LGM1BZuErqwCxiO5Z0eKlvDVjEnbhg7 6YeZacFarqsH/w+m8DDWeItZjKoKXcM/pXmk4DGmv/6rroDYZdkkSwi5qOIuNCWy Ul2vppmNmQuW5YXedhnEVotPe6OsGybVzb8O/URusdGzY6pTvleR02v9p/KObcI4 sRguQzt1z0blAAQ6JQLTZk+9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy5Aov/4O tPgLji5/QPrBVfKua9swHwYDVR0jBBgwFoAUF2vOFchi1HunYKH2ZTj4HVxJO4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwNkU0LzMyRTk5M0MwQTY4 NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjJ2T0ZjaGkxSHVuWUtIMlpUajRIVnhKTzRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw NkU0LzMyRTk5M0MwQTY4NDExRUY4RjVFRDM3RkM0RjlBRTAyL0Yydk9GY2hpMUh1 bllLSDJaVGo0SFZ4Sk80RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAAybqHOfLz5Ajs/cal9yFYS65ZI4xdcZsGEFAlvTrhOCy2Rh8WmqrhM AS72ZA2cv9P4oCBStp2u2pfD8D5cVhfiT1vqGrbOdbqF4pZrDSlYKoDeCoI9ysDi VKii9Fse8GwYmF5y+ULaHH3WKIREj5OSsnV9Qjzv9WVQFLMWq6wyqmrDc5eagbc3 80XCKuSYqZpr+908U/mXE3VAVb6vAKjy2n2j7vz2mTElK/EsXe5NWbJ8zNDaKjPw ghumQuZKd0WNW49hcNZq8NGWBGwoLMTk5ETxxKHDeBt8+VdmXLqitG4FGVNawVC5 dE5l5yyv+38rM/7gF/Xao6njsquKapk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:23:39 2025 by rpki-client