$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: fsG/6CdIDn6NtDFZdbRdkqZYeOvjEjE87mW3HLSVpQg= Subject key identifier: CC:D4:1B:A9:E4:84:22:9A:98:BE:D5:2E:42:F4:C4:4F:6A:4B:EF:E5 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CAE Signing time: Fri 18 Jul 2025 18:19:32 +0000 Manifest this update: Fri 18 Jul 2025 18:19:32 +0000 Manifest next update: Fri 25 Jul 2025 18:19:32 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: XV8HzbpZEdp4NcWos0thYxh04XVgPoKzehzidc8iU6Y=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3252 (0xcb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Jul 18 18:19:32 2025 GMT Not After : Jul 25 18:19:32 2025 GMT Subject: CN=687a9034-42a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:1b:ab:52:d2:38:d9:92:a5:33:e9:a7:38: 60:cb:b5:71:b3:26:45:ee:3b:fa:53:4b:da:72:a5: b4:7d:08:7e:53:11:a3:a5:e6:ca:ab:d0:df:d3:33: 60:7b:0f:b3:cc:57:b2:59:26:19:a3:c9:69:55:72: 6f:39:7a:ec:03:ac:10:64:cf:4c:9f:9f:e0:d8:13: f1:25:86:34:c8:ec:9f:b1:c3:83:32:df:b5:9c:08: 55:4f:62:1f:ae:3c:eb:b3:27:07:4b:1f:5b:bd:64: b5:1b:06:9c:16:63:e4:b2:56:21:07:ea:8e:9f:f4: c7:d3:fe:56:b0:e7:9f:a2:1c:2b:5a:f0:6c:69:c6: 7f:c1:bc:13:db:c9:ed:cb:e3:ed:67:85:91:b6:d7: 91:9f:91:11:3e:e5:ed:97:73:a1:83:b5:b6:32:e3: d0:09:a2:4f:3d:7d:01:1f:39:55:51:0f:8b:ef:f9: d1:a9:ab:29:82:04:d0:34:6b:47:74:4e:b0:80:bb: 25:d4:15:fe:3c:7e:05:c7:60:6e:9d:43:dd:de:1d: 26:0d:b4:d7:50:8b:ac:14:90:f1:8b:f7:e7:bf:7f: b9:a3:ab:06:ea:66:16:32:e1:f4:86:97:3e:73:b4: a1:af:a8:3b:8f:93:f6:03:5e:38:7d:09:1f:e3:9e: 2c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D4:1B:A9:E4:84:22:9A:98:BE:D5:2E:42:F4:C4:4F:6A:4B:EF:E5 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:86:a9:6d:7d:2c:d1:e5:f6:80:0e:84:00:4e:d4:01:14:01: d7:24:43:11:1f:3d:c8:e9:b7:c3:0c:46:3a:fd:fc:a4:69:d9: af:21:15:1b:87:ae:2a:1f:b5:fe:5d:d2:5b:ca:66:3a:64:d2: 8c:86:d5:33:95:ab:63:ad:7e:48:67:74:fb:dc:06:be:7b:eb: 81:2e:ce:a1:a0:6d:b2:08:96:76:0b:12:5e:3c:ca:95:97:7c: dd:14:31:61:80:92:52:82:37:21:40:0b:a0:30:fc:ad:cb:c7: fe:f1:68:e8:c6:98:2b:9c:a4:ef:f3:65:5b:30:43:8f:5f:2c: 91:7a:d2:c5:71:7b:9a:a6:1f:ad:6d:81:9f:8d:7f:a1:ca:04: 55:25:44:cd:e5:6b:2f:05:ee:ae:bd:54:76:28:6e:10:05:eb: c9:34:d2:e7:bb:cf:1d:7c:ca:8f:08:c5:96:06:1d:9f:b4:fc: 08:57:37:df:d3:23:d4:b2:ee:da:ae:eb:1a:35:64:9e:7b:b3: ee:b2:4b:e4:08:bf:25:bb:9a:aa:10:51:5e:db:e1:cb:24:6c: f1:39:24:f8:e3:dd:7b:33:88:e3:f3:94:93:85:06:a5:67:33: 46:46:9e:cd:0d:81:45:84:55:b1:62:e5:49:00:28:73:dc:a3: 71:e7:c4:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwNzE4MTgxOTMyWhcNMjUwNzI1MTgxOTMyWjAYMRYwFAYD VQQDEw02ODdhOTAzNC00MmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveIbq1LSONmSpTPppzhgy7VxsyZF7jv6U0vacqW0fQh+UxGjpebKq9Df0zNg ew+zzFeyWSYZo8lpVXJvOXrsA6wQZM9Mn5/g2BPxJYY0yOyfscODMt+1nAhVT2If rjzrsycHSx9bvWS1GwacFmPkslYhB+qOn/TH0/5WsOefohwrWvBsacZ/wbwT28nt y+PtZ4WRtteRn5ERPuXtl3Ohg7W2MuPQCaJPPX0BHzlVUQ+L7/nRqaspggTQNGtH dE6wgLsl1BX+PH4Fx2BunUPd3h0mDbTXUIusFJDxi/fnv3+5o6sG6mYWMuH0hpc+ c7Shr6g7j5P2A144fQkf454sZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzUG6nk hCKamL7VLkL0xE9qS+/lMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7hqltfSzR5faADoQATtQBFAHXJEMRHz3I6bfDDEY6/fykadmvIRUb h64qH7X+XdJbymY6ZNKMhtUzlatjrX5IZ3T73Aa+e+uBLs6hoG2yCJZ2CxJePMqV l3zdFDFhgJJSgjchQAugMPyty8f+8WjoxpgrnKTv82VbMEOPXyyRetLFcXuaph+t bYGfjX+hygRVJUTN5WsvBe6uvVR2KG4QBevJNNLnu88dfMqPCMWWBh2ftPwIVzff 0yPUsu7arusaNWSee7PuskvkCL8lu5qqEFFe2+HLJGzxOST44917M4jj85SThQal ZzNGRp7NDYFFhFWxYuVJAChz3KNx58T9 -----END CERTIFICATE-----Generated at Sun Jul 20 07:31:16 2025 by rpki-client