$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: sV6Sf7hs1l9+CmKrg9O10GWmnWI3s795dyeiJaj0WW8= Subject key identifier: 74:C4:F9:17:B5:78:85:7F:09:2D:CA:20:4C:75:5D:C6:87:8B:CC:82 Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 082B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 0823 Signing time: Sun 20 Jul 2025 20:56:58 +0000 Manifest this update: Sun 20 Jul 2025 20:56:58 +0000 Manifest next update: Sun 27 Jul 2025 20:56:58 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: IeyLvz9P1AIbf5HaQGpPiLkVzJ+VJ1Ycsrlv91INtj4=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2091 (0x82b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Jul 20 20:56:58 2025 GMT Not After : Jul 27 20:56:58 2025 GMT Subject: CN=687d581a-b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e5:a9:57:f1:e9:9a:4c:a0:b7:a6:f6:14:ea: 42:22:c4:83:49:46:0e:85:ed:2c:ab:72:0c:b6:be: e0:c9:4a:71:36:3f:8f:07:47:ff:db:b1:5a:20:18: 90:a3:64:35:6f:7d:b5:72:f4:1b:1e:ab:8b:23:5a: e0:72:92:ab:6d:f5:25:97:c2:63:14:cc:11:f8:2e: 86:18:cc:e6:25:94:cb:b5:2c:d3:49:a0:bd:a8:e2: 9f:fe:b6:47:4d:c0:f5:52:67:29:85:05:ed:0c:24: cb:a1:ed:81:8d:c4:21:5a:44:56:07:86:55:39:b9: f8:4c:3e:0b:80:22:ee:ba:ec:c8:bd:f9:82:c0:96: 82:b1:89:d7:3f:1f:f3:d1:6d:02:3b:37:00:08:84: f0:c8:d2:0e:60:af:42:89:8c:a5:bd:bd:0c:a6:59: 08:e2:7e:c2:78:f6:a2:84:d7:44:39:f2:93:17:c7: f8:1f:37:e7:7e:48:72:f2:29:7f:ad:7b:df:1f:84: c4:c5:4a:9d:59:58:d4:97:b5:92:eb:f5:33:48:be: 11:d1:c2:1a:ca:96:c2:ac:81:cf:6e:c8:86:2d:ed: 32:45:ea:c2:4f:7a:7b:11:84:ea:e1:f2:28:41:e0: f2:b8:71:ba:65:11:d6:04:4f:fc:22:43:4e:b9:67: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:F9:17:B5:78:85:7F:09:2D:CA:20:4C:75:5D:C6:87:8B:CC:82 X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:8e:6b:0d:df:dc:31:19:b6:09:3d:57:82:dc:d4:98:8c:fa: 2e:ae:da:2b:89:4b:1c:70:7c:73:68:d7:7f:32:26:49:05:88: 91:0a:2e:a4:ab:61:a3:14:e4:54:d5:f1:2c:34:de:8a:15:42: ff:be:87:cf:fa:64:00:0d:89:cf:04:84:64:71:04:b4:5b:b1: f3:87:e4:56:1b:0a:2d:d4:93:0c:c2:78:0e:d3:15:99:96:db: 31:0d:94:5a:30:f2:78:ca:8d:fd:17:eb:b5:b9:d4:ad:27:7e: 3f:0f:14:92:3c:33:37:8b:6c:4e:4b:45:1d:29:16:cf:ef:a1: 1a:6a:bf:29:8a:6f:02:1a:ec:69:51:66:b8:cc:2c:7c:e8:5f: f1:48:22:b2:6b:04:0f:b5:26:f4:57:45:3d:a5:2a:a6:b3:41: 3a:85:92:96:af:6e:6e:7d:42:08:ab:9f:f6:9c:19:53:55:4b: e0:dc:e8:d9:b0:90:40:ec:91:1a:ba:33:68:75:be:90:72:8e: a9:06:96:00:19:ec:e2:5f:a5:75:fd:27:c7:b3:64:d4:38:67: 3a:6e:9f:94:b8:99:c6:65:42:6e:23:15:84:1e:9e:9f:6b:97: d3:8b:a7:a0:26:99:a5:81:1e:46:62:81:8a:ab:e6:90:7a:f4: 5b:78:17:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwNzIwMjA1NjU4WhcNMjUwNzI3MjA1NjU4WjAYMRYwFAYD VQQDEw02ODdkNTgxYS1iMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApeWpV/Hpmkygt6b2FOpCIsSDSUYOhe0sq3IMtr7gyUpxNj+PB0f/27FaIBiQ o2Q1b321cvQbHquLI1rgcpKrbfUll8JjFMwR+C6GGMzmJZTLtSzTSaC9qOKf/rZH TcD1UmcphQXtDCTLoe2BjcQhWkRWB4ZVObn4TD4LgCLuuuzIvfmCwJaCsYnXPx/z 0W0COzcACITwyNIOYK9CiYylvb0MplkI4n7CePaihNdEOfKTF8f4Hzfnfkhy8il/ rXvfH4TExUqdWVjUl7WS6/UzSL4R0cIaypbCrIHPbsiGLe0yRerCT3p7EYTq4fIo QeDyuHG6ZRHWBE/8IkNOuWfogQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTE+Re1 eIV/CS3KIEx1XcaHi8yCMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTjmsN39wxGbYJPVeC3NSYjPourtoriUsccHxzaNd/MiZJBYiRCi6k q2GjFORU1fEsNN6KFUL/vofP+mQADYnPBIRkcQS0W7Hzh+RWGwot1JMMwngO0xWZ ltsxDZRaMPJ4yo39F+u1udStJ34/DxSSPDM3i2xOS0UdKRbP76Eaar8pim8CGuxp UWa4zCx86F/xSCKyawQPtSb0V0U9pSqms0E6hZKWr25ufUIIq5/2nBlTVUvg3OjZ sJBA7JEaujNodb6Qco6pBpYAGeziX6V1/SfHs2TUOGc6bp+UuJnGZUJuIxWEHp6f a5fTi6egJpmlgR5GYoGKq+aQevRbeBcx -----END CERTIFICATE-----Generated at Mon Jul 21 08:10:43 2025 by rpki-client