$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: mTPsxGMCxbpmi86D7qasp90q0+hAx8h63oIZEo7We+w= Subject key identifier: 7A:15:9D:BA:CA:5F:F7:2A:79:CE:CA:A8:35:E4:BA:65:43:56:60:C1 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0AE1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AD4 Signing time: Tue 22 Jul 2025 19:42:46 +0000 Manifest this update: Tue 22 Jul 2025 19:42:45 +0000 Manifest next update: Tue 29 Jul 2025 19:42:45 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: Mt8Fzp+xko4b27Qsk9bLJgXXDU31WAKRL31JPPEzW3E=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: xe07Bh/37lddOkgu4nWtJeTBqHbyu/j2lK7PTJ6ZiCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 19:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2785 (0xae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Jul 22 19:42:45 2025 GMT Not After : Jul 29 19:42:45 2025 GMT Subject: CN=687fe9b5-9397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ce:7c:d0:4c:2e:42:b8:f9:26:fc:34:fc:b4: 0e:85:07:b2:9e:12:21:96:87:d6:20:70:aa:0d:19: bf:fe:61:24:b9:a1:5d:92:38:ba:0f:b6:8e:f2:9e: 7c:1d:aa:0f:31:02:0f:8a:c1:ec:90:e9:51:f7:32: 79:31:61:db:bc:b7:3e:a6:e3:cf:5c:78:ef:f8:80: fa:9c:df:3e:a5:ef:9b:01:08:d8:ad:97:d2:45:18: 78:d3:e6:3a:f8:06:73:bc:b6:7d:b6:ff:74:f0:a0: c3:d4:52:61:83:d0:49:02:f1:b4:da:fc:5c:08:18: cf:db:fe:b2:c9:37:bc:ac:a1:11:3a:63:dc:cb:7a: 51:15:41:1f:df:f0:ae:8a:43:4f:f2:99:09:7d:41: 63:30:9a:f5:ef:ab:85:3a:2f:58:e6:3a:b4:18:58: 51:07:37:81:b0:d2:ce:ff:13:fb:26:8e:47:62:e7: f8:a1:6b:4f:e0:20:44:96:b3:39:e6:7d:55:66:54: d6:5d:d9:7c:d4:ce:9a:73:3b:14:1a:f8:05:98:21: 07:2e:dc:8d:ef:75:cd:f4:05:5f:54:c4:9a:d2:34: af:34:53:6f:11:73:7b:31:0c:28:a2:96:e5:fd:cd: 43:fc:1d:9a:fa:ce:53:ce:1c:fb:28:8e:25:0a:8a: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:15:9D:BA:CA:5F:F7:2A:79:CE:CA:A8:35:E4:BA:65:43:56:60:C1 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d6:38:4e:a2:a1:56:f3:da:44:88:96:79:0e:07:f8:54:91: 89:8a:8a:a6:7f:2a:02:a5:ce:2a:fd:ef:0f:90:c7:04:77:72: 91:83:a5:6e:b0:4a:55:bc:c6:8b:eb:20:a0:81:dc:0c:05:93: eb:38:82:6c:05:6f:b7:f5:ca:5a:b8:92:90:89:9e:32:d0:57: a4:14:9e:d8:e1:c6:c7:71:0e:df:08:df:d4:67:cf:d4:5b:50: 60:99:04:a8:64:5f:34:51:56:07:7a:05:44:3e:58:1a:30:f0: 87:02:d8:46:ed:46:42:5a:94:1c:f3:78:54:32:9a:3f:d5:31: f8:1f:ed:41:b4:67:b9:ff:2d:f0:2a:e2:ad:38:06:ec:63:bc: f5:71:53:67:8a:23:0f:31:16:82:2d:30:99:0f:07:74:90:55: be:2e:fa:39:ae:a2:a7:a6:42:63:ae:cf:4a:ce:8a:00:7e:41: 74:66:31:34:70:7b:d0:58:38:26:f9:3c:0d:28:a1:ff:f3:66: 7c:8b:d2:d5:a9:c8:69:43:5e:a4:2e:86:e5:ca:f4:eb:f6:31: a5:73:37:f5:2f:17:63:cc:c1:95:79:d8:2e:ea:c0:63:4c:d8: ac:59:7f:c5:e3:c6:6c:3d:3f:5d:0e:83:64:b0:98:c9:1a:bb: a6:73:27:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwNzIyMTk0MjQ1WhcNMjUwNzI5MTk0MjQ1WjAYMRYwFAYD VQQDEw02ODdmZTliNS05Mzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9c580EwuQrj5Jvw0/LQOhQeynhIhlofWIHCqDRm//mEkuaFdkji6D7aO8p58 HaoPMQIPisHskOlR9zJ5MWHbvLc+puPPXHjv+ID6nN8+pe+bAQjYrZfSRRh40+Y6 +AZzvLZ9tv908KDD1FJhg9BJAvG02vxcCBjP2/6yyTe8rKEROmPcy3pRFUEf3/Cu ikNP8pkJfUFjMJr176uFOi9Y5jq0GFhRBzeBsNLO/xP7Jo5HYuf4oWtP4CBElrM5 5n1VZlTWXdl81M6aczsUGvgFmCEHLtyN73XN9AVfVMSa0jSvNFNvEXN7MQwoopbl /c1D/B2a+s5Tzhz7KI4lCooHWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHoVnbrK X/cqec7KqDXkumVDVmDBMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt1jhOoqFW89pEiJZ5Dgf4VJGJioqmfyoCpc4q/e8PkMcEd3KRg6Vu sEpVvMaL6yCggdwMBZPrOIJsBW+39cpauJKQiZ4y0FekFJ7Y4cbHcQ7fCN/UZ8/U W1BgmQSoZF80UVYHegVEPlgaMPCHAthG7UZCWpQc83hUMpo/1TH4H+1BtGe5/y3w KuKtOAbsY7z1cVNniiMPMRaCLTCZDwd0kFW+Lvo5rqKnpkJjrs9KzooAfkF0ZjE0 cHvQWDgm+TwNKKH/82Z8i9LVqchpQ16kLoblyvTr9jGlczf1LxdjzMGVedgu6sBj TNisWX/F48ZsPT9dDoNksJjJGrumcydB -----END CERTIFICATE-----Generated at Wed Jul 23 02:23:46 2025 by rpki-client