$ rpki-client -vvf rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft File: fBoPSOpDIx-jND1ZKCHvKejSsxs.mft (raw, json) Hash identifier: 3mNLP2clWmWUvpD0snLAK1g5bP01Q4rwc2HXHecVALI= Subject key identifier: 36:FD:B8:F6:FA:38:63:4E:5E:CB:AA:2C:9A:92:B9:39:A2:11:F5:1E Authority key identifier: 7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B Certificate issuer: /CN=A91798AD/serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Certificate serial: 1C78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft Manifest number: 1C27 Signing time: Sun 20 Jul 2025 16:16:36 +0000 Manifest this update: Sun 20 Jul 2025 16:16:35 +0000 Manifest next update: Sun 27 Jul 2025 16:16:35 +0000 Files and hashes: 1: fBoPSOpDIx-jND1ZKCHvKejSsxs.crl (hash: NAgz+RNL3ApEN1qTF4bDwITdr4WWqxEbxrsi/VUQnCY=) 2: AD3B2582EF9A11EDA4E50366C4F9AE02.roa (hash: VAwS5Uo7Cqi7lzXCRRZhfVVXN11Han/DThkDiW77C6s=) 3: 98E30C12DCE411EDB446D65DC4F9AE02.roa (hash: 5LMPCnmgpvXAYsKyuhBhkB3oiO6C+fnzS1hbGMCTiQQ=) 4: 398B3186FE5111E6BCEC6E72C4F9AE02.roa (hash: Lee0UxrUp18WPeigcCSZbHFswfN4jnUwW80ZCAROV3g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7288 (0x1c78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91798AD, serialNumber=7C1A0F48EA43231FA3343D592821EF29E8D2B31B Validity Not Before: Jul 20 16:16:35 2025 GMT Not After : Jul 27 16:16:35 2025 GMT Subject: CN=687d1663-7de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:ae:4b:4a:a8:c7:34:70:24:06:e1:2e:c5: 41:2f:79:9e:f5:73:7f:d2:19:80:48:44:75:99:e3: 54:4d:ef:34:05:05:b9:49:8f:8c:6f:55:42:91:c9: 13:0b:f7:33:35:55:99:93:f1:40:c0:d8:2f:2f:9a: bd:5a:8f:b8:27:4f:bc:54:d0:97:38:40:c1:c8:0a: c7:e6:a0:ef:ba:7e:21:2a:23:e6:2d:70:fb:a3:ea: 73:8c:26:ea:44:39:a1:e8:7a:8f:58:93:6c:0a:b6: 0a:2f:93:7e:03:88:0e:9d:e5:ff:9a:0e:ff:81:23: 60:c8:a5:67:3c:87:e4:87:8b:61:0a:93:b5:3d:62: 62:10:a7:16:06:d1:b1:a2:b9:a6:16:7b:71:eb:ca: 23:48:89:fd:1d:af:76:59:25:4d:01:61:89:b4:c6: 31:ce:b4:1c:fd:7c:7c:80:2f:ea:fe:73:f3:03:6c: 74:30:c3:63:f5:86:c6:33:d3:89:6e:ef:d9:f9:7f: 79:59:f7:5d:3e:1d:b1:6d:75:3d:57:ed:ed:a8:54: ec:53:c7:d5:d8:e5:32:d8:12:5f:37:13:97:33:19: a5:1a:4b:17:01:a0:e6:3d:b7:bd:6d:d7:ae:45:2b: b7:ab:b3:c7:fd:b4:8f:f9:97:00:70:80:fc:dd:79: 6d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FD:B8:F6:FA:38:63:4E:5E:CB:AA:2C:9A:92:B9:39:A2:11:F5:1E X509v3 Authority Key Identifier: keyid:7C:1A:0F:48:EA:43:23:1F:A3:34:3D:59:28:21:EF:29:E8:D2:B3:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fBoPSOpDIx-jND1ZKCHvKejSsxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91798AD/70EFB4ACFE2A11E68F2C5A13C4F9AE02/fBoPSOpDIx-jND1ZKCHvKejSsxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:37:fd:85:6b:29:81:f0:8d:ac:06:cf:5f:29:01:9d:59:30: 25:01:03:ff:8e:ea:96:3b:29:5b:4c:7c:0b:c4:11:a3:0e:b6: be:12:8e:02:ca:30:16:c7:9b:4e:e8:ff:cc:69:6a:f8:58:3a: 3f:7c:59:55:49:ce:b1:c0:2b:71:32:50:9a:68:d7:fd:37:56: 72:8c:4c:28:b4:b7:e6:7e:80:76:b0:e1:0d:70:e0:ca:64:52: 96:5f:64:b6:62:2c:d2:e3:51:13:c0:fc:d0:84:58:70:b4:fe: 51:b6:28:96:71:32:83:be:37:a8:23:95:4c:15:37:ed:b8:bd: ac:3c:1a:0f:db:e5:43:b1:a0:32:7a:3f:d3:75:1b:a8:45:0b: e2:a2:8a:f7:be:7c:5f:72:b2:23:89:1c:b1:c4:d6:57:dc:ad: 04:ed:32:9d:8d:72:9a:7c:2d:2b:f4:fe:03:47:4c:c9:74:63: ff:30:73:61:a1:e9:31:0a:c8:8e:5a:89:be:49:56:74:9e:01: c0:f9:eb:a5:51:82:ae:e2:2f:c2:e4:ab:2e:0b:e1:6e:56:29: cf:60:6c:36:57:20:34:ee:80:f7:8f:74:14:80:90:b8:2c:c7: 86:03:e9:c7:20:f0:1a:e2:1d:54:b8:67:56:b7:cd:05:74:ca: 1e:6c:cf:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk4QUQxMTAvBgNVBAUTKDdDMUEwRjQ4RUE0MzIzMUZBMzM0M0Q1OTI4MjFFRjI5 RThEMkIzMUIwHhcNMjUwNzIwMTYxNjM1WhcNMjUwNzI3MTYxNjM1WjAYMRYwFAYD VQQDEw02ODdkMTY2My03ZGU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzbGuS0qoxzRwJAbhLsVBL3me9XN/0hmASER1meNUTe80BQW5SY+Mb1VCkckT C/czNVWZk/FAwNgvL5q9Wo+4J0+8VNCXOEDByArH5qDvun4hKiPmLXD7o+pzjCbq RDmh6HqPWJNsCrYKL5N+A4gOneX/mg7/gSNgyKVnPIfkh4thCpO1PWJiEKcWBtGx ormmFntx68ojSIn9Ha92WSVNAWGJtMYxzrQc/Xx8gC/q/nPzA2x0MMNj9YbGM9OJ bu/Z+X95WfddPh2xbXU9V+3tqFTsU8fV2OUy2BJfNxOXMxmlGksXAaDmPbe9bdeu RSu3q7PH/bSP+ZcAcID83XltQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDb9uPb6 OGNOXsuqLJqSuTmiEfUeMB8GA1UdIwQYMBaAFHwaD0jqQyMfozQ9WSgh7yno0rMb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OThBRC83MEVGQjRBQ0ZF MkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4LWpORDFaS0NIdktlalNz eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZCb1BTT3BESXgtak5EMVpLQ0h2S2VqU3N4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OThBRC83MEVGQjRBQ0ZFMkExMUU2OEYyQzVBMTNDNEY5QUUwMi9mQm9QU09wREl4 LWpORDFaS0NIdktlalNzeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1N/2FaymB8I2sBs9fKQGdWTAlAQP/juqWOylbTHwLxBGjDra+Eo4C yjAWx5tO6P/MaWr4WDo/fFlVSc6xwCtxMlCaaNf9N1ZyjEwotLfmfoB2sOENcODK ZFKWX2S2YizS41ETwPzQhFhwtP5RtiiWcTKDvjeoI5VMFTftuL2sPBoP2+VDsaAy ej/TdRuoRQvioor3vnxfcrIjiRyxxNZX3K0E7TKdjXKafC0r9P4DR0zJdGP/MHNh oekxCsiOWom+SVZ0ngHA+eulUYKu4i/C5KsuC+FuVinPYGw2VyA07oD3j3QUgJC4 LMeGA+nHIPAa4h1UuGdWt80FdMoebM83 -----END CERTIFICATE-----Generated at Mon Jul 21 13:22:04 2025 by rpki-client