$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: bzX2IeY4G5pXD/dfCJ4I19yYH9ARuG5uCCd8N30Dogs= Subject key identifier: 86:E1:17:F7:6D:EA:71:37:01:53:DB:D1:1E:CA:7C:59:08:8E:EA:6C Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 0121 Signing time: Sat 19 Jul 2025 04:58:37 +0000 Manifest this update: Sat 19 Jul 2025 04:58:37 +0000 Manifest next update: Sat 26 Jul 2025 04:58:37 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: Ez/lo5vY9USBWkwM5CFsBSgj7OCGXXFbR9L68qF+peo=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: 8zPxRe7MaH+hS0FNXaje7YOQ+Hnyx7RIa4mbg2ZFLUE=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Oms7A+5CbFEtaIgmT8kB8Ycz88DQ95dp9Wjdw3xeV+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Jul 19 04:58:37 2025 GMT Not After : Jul 26 04:58:37 2025 GMT Subject: CN=687b25fd-45b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2f:8e:eb:b9:8c:3a:08:d5:91:0d:94:12:5b: 46:fc:5c:9c:a4:50:41:8c:f2:43:a2:c9:f1:0a:d9: e4:fc:57:6d:34:69:b1:4c:37:02:95:7f:0a:56:f3: 27:80:1c:ff:05:16:37:75:74:ed:0e:f9:6e:d5:b6: 81:df:7e:06:90:45:5a:70:3e:0f:3f:50:cb:1f:03: 30:5e:5a:6e:16:4a:36:71:1c:18:d2:b0:e6:73:16: 4b:a1:d0:99:56:ae:7b:90:bd:ba:29:dd:e2:34:48: 07:3d:cd:00:8a:17:20:86:f1:22:7f:cb:4c:2a:11: bd:82:d3:81:41:81:4e:50:a5:c3:a2:90:79:73:e2: 19:3e:9c:78:b0:83:dd:1f:75:76:58:93:bb:72:67: 8a:57:62:85:51:6e:56:2f:45:24:ed:76:1d:ed:61: ea:6e:22:a4:64:00:66:bd:9b:36:91:65:75:81:27: b9:ee:c0:e1:f1:7c:83:5a:cf:2e:a5:7d:6a:62:fe: 70:5b:6b:9d:27:84:ad:eb:22:4f:7f:b5:96:67:54: 61:dd:0c:85:57:73:4a:cd:f6:86:6b:ca:5a:66:cb: 34:a4:9e:32:8d:63:33:76:56:2d:52:0c:5c:7b:1d: 42:8a:a7:32:53:9d:2d:20:24:41:96:f7:f7:0a:6a: b9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E1:17:F7:6D:EA:71:37:01:53:DB:D1:1E:CA:7C:59:08:8E:EA:6C X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:fa:46:92:51:91:44:4d:2b:c4:3e:dd:3e:7b:84:6d:ae:bd: 70:58:bd:f0:df:a8:0f:9a:8f:c9:b1:14:40:8a:98:6d:70:4f: 49:5a:da:79:dc:05:21:c1:7f:39:4f:6a:96:19:fb:d6:17:5d: 58:d4:b8:30:1e:bb:07:9b:b8:58:1b:0a:7a:4f:e4:df:aa:4c: e1:e8:21:79:03:39:0f:06:01:32:41:b0:e4:5c:53:6d:ef:7c: 2a:2c:a7:89:ea:85:a0:8d:05:7a:b3:5e:f5:c1:89:cf:60:8f: 74:65:99:45:9e:2d:db:78:2f:f3:89:a2:32:e6:08:39:3e:39: c1:d0:2d:2c:19:60:d9:9a:51:98:af:26:ae:35:c5:75:35:43: ef:d5:63:3a:b7:46:c4:c9:de:b8:41:a7:74:69:4d:02:a1:c0: e7:19:b0:19:8a:71:3f:e6:75:12:ad:70:65:63:ca:f4:40:93: 42:4f:49:05:5f:a7:7c:06:ab:0e:31:59:6f:d8:03:de:f6:ae: ae:e9:2f:cc:e8:d8:77:db:c7:5d:95:97:e3:d1:fe:14:fc:d1: 7d:fe:25:2d:00:72:42:b4:58:a0:e0:2c:60:37:06:de:0f:a0: 03:8a:b1:25:3f:0e:b5:89:e1:07:70:11:a2:66:9a:3e:7b:30: a2:2b:3c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwNzE5MDQ1ODM3WhcNMjUwNzI2MDQ1ODM3WjAYMRYwFAYD VQQDEw02ODdiMjVmZC00NWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxC+O67mMOgjVkQ2UEltG/FycpFBBjPJDosnxCtnk/FdtNGmxTDcClX8KVvMn gBz/BRY3dXTtDvlu1baB334GkEVacD4PP1DLHwMwXlpuFko2cRwY0rDmcxZLodCZ Vq57kL26Kd3iNEgHPc0AihcghvEif8tMKhG9gtOBQYFOUKXDopB5c+IZPpx4sIPd H3V2WJO7cmeKV2KFUW5WL0Uk7XYd7WHqbiKkZABmvZs2kWV1gSe57sDh8XyDWs8u pX1qYv5wW2udJ4St6yJPf7WWZ1Rh3QyFV3NKzfaGa8paZss0pJ4yjWMzdlYtUgxc ex1CiqcyU50tICRBlvf3Cmq5zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbhF/dt 6nE3AVPb0R7KfFkIjupsMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBT+kaSUZFETSvEPt0+e4Rtrr1wWL3w36gPmo/JsRRAiphtcE9JWtp5 3AUhwX85T2qWGfvWF11Y1LgwHrsHm7hYGwp6T+Tfqkzh6CF5AzkPBgEyQbDkXFNt 73wqLKeJ6oWgjQV6s171wYnPYI90ZZlFni3beC/ziaIy5gg5PjnB0C0sGWDZmlGY ryauNcV1NUPv1WM6t0bEyd64Qad0aU0CocDnGbAZinE/5nUSrXBlY8r0QJNCT0kF X6d8BqsOMVlv2APe9q6u6S/M6Nh328ddlZfj0f4U/NF9/iUtAHJCtFig4CxgNwbe D6ADirElPw61ieEHcBGiZpo+ezCiKzwl -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:22 2025 by rpki-client