$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft File: FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft (raw, json) Hash identifier: q/SSCrRbzy+PxihUMfamu5Y6Bce2WSGPr/rKe3usKV4= Subject key identifier: 5C:19:32:88:B5:43:2F:76:11:2A:F2:2C:1D:47:7C:E8:09:82:2F:44 Authority key identifier: 15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 Certificate issuer: /CN=A91A5EBA/serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft Manifest number: CC Signing time: Sat 19 Jul 2025 05:52:57 +0000 Manifest this update: Sat 19 Jul 2025 05:52:57 +0000 Manifest next update: Sat 26 Jul 2025 05:52:57 +0000 Files and hashes: 1: FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl (hash: jvNq2Zlj40Ap8Emsa6EThHb0VpJ6VsTLerNUCEOtOvg=) 2: 80F32E7C2C5511EF83ECC535C4F9AE02.roa (hash: AqGZytLz79ZmCSne/bhw4dD+/PQ46qKOd6q10ehPEX0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5EBA, serialNumber=156D4A9C6F15EB2B4B3F367D69FAA25101280788 Validity Not Before: Jul 19 05:52:57 2025 GMT Not After : Jul 26 05:52:57 2025 GMT Subject: CN=687b32b9-cc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:28:5f:5f:ac:0f:f1:e1:b8:16:aa:7b:88: f5:69:d2:b3:7e:e3:b0:8b:67:fc:9d:40:b1:60:c2: 15:d4:41:d0:b4:1e:88:97:b6:da:3f:ce:ad:c6:03: 3f:30:38:bb:73:32:cc:c8:91:86:0c:44:c3:4c:92: cf:fb:bd:ff:11:39:bd:42:99:48:b0:42:b6:f0:ec: 72:41:82:19:5b:ce:ff:f1:53:8b:06:39:f1:30:1a: 85:f8:83:03:78:9f:0f:16:e4:fe:b2:96:2b:ef:6e: fb:a1:1d:44:75:24:17:5f:73:59:ff:18:80:6e:72: f4:1c:42:37:14:94:7a:df:07:94:91:3f:41:f9:35: ec:24:c8:0a:fd:31:60:b8:9d:47:8b:e3:59:25:bf: ed:ec:ed:0c:07:93:8c:8c:fc:33:d6:03:dc:a4:94: f1:08:97:eb:67:52:90:a8:9c:49:87:d7:30:8e:e2: 2a:7d:94:6f:69:80:49:60:d2:a4:86:96:9b:97:6a: 59:4b:52:7b:b7:5d:13:e1:4b:cc:e4:19:9b:69:ad: 5c:4b:b1:b4:69:51:c6:92:53:ed:52:7d:92:e2:34: e9:22:f9:e4:5c:f2:45:ff:04:22:b0:7d:46:eb:2a: 4c:9c:54:9f:aa:f2:2c:0e:23:65:be:3c:4c:74:76: 42:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:19:32:88:B5:43:2F:76:11:2A:F2:2C:1D:47:7C:E8:09:82:2F:44 X509v3 Authority Key Identifier: keyid:15:6D:4A:9C:6F:15:EB:2B:4B:3F:36:7D:69:FA:A2:51:01:28:07:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW1KnG8V6ytLPzZ9afqiUQEoB4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5EBA/72E54CFE2C5311EF91BF7C30C4F9AE02/FW1KnG8V6ytLPzZ9afqiUQEoB4g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:8b:da:c4:f9:7b:b1:29:df:7b:bc:90:79:65:2a:47:8b:c6: c1:82:07:9c:27:b5:52:a4:4c:80:5e:ff:76:a1:44:1f:be:f9: 57:b7:50:38:8d:3d:21:6e:55:4f:86:25:b4:73:33:6c:64:aa: 21:09:9e:37:fc:d5:e0:23:7f:21:a5:e2:3f:4c:bf:28:52:aa: 19:dd:e0:90:a8:61:19:9c:00:29:28:4b:92:d2:ea:9c:a1:aa: b6:44:ec:10:3f:b5:c9:53:6d:2d:db:7c:aa:ff:ad:3e:d9:c5: 74:b5:01:b7:39:44:81:43:e1:c9:71:ad:7f:53:60:05:a8:7f: 02:37:fc:a8:a2:79:82:9b:d1:38:e6:89:4e:e1:34:5a:37:3c: d8:37:44:eb:87:76:72:e1:7e:a1:5b:4c:58:88:9b:dd:66:7f: 3c:8b:a4:ea:6e:b4:94:ed:58:90:d3:f4:c4:7e:17:62:6d:a9: 8d:93:87:1a:9d:d0:82:da:d4:a6:33:5f:ac:a4:b2:16:46:2b: b2:67:3b:28:94:e4:7e:4f:e1:d8:5d:b4:96:6c:1d:46:11:1a: 3f:7b:9a:30:64:ac:e7:1d:0c:1a:44:ae:0d:ea:f9:d2:f2:92: bc:ce:c6:09:bb:a9:8e:cd:0a:72:43:b9:17:c6:96:77:a9:e4: d3:33:68:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVFQkExMTAvBgNVBAUTKDE1NkQ0QTlDNkYxNUVCMkI0QjNGMzY3RDY5RkFBMjUx MDEyODA3ODgwHhcNMjUwNzE5MDU1MjU3WhcNMjUwNzI2MDU1MjU3WjAYMRYwFAYD VQQDEw02ODdiMzJiOS1jYzRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwW0oX1+sD/HhuBaqe4j1adKzfuOwi2f8nUCxYMIV1EHQtB6Il7baP86txgM/ MDi7czLMyJGGDETDTJLP+73/ETm9QplIsEK28OxyQYIZW87/8VOLBjnxMBqF+IMD eJ8PFuT+spYr7277oR1EdSQXX3NZ/xiAbnL0HEI3FJR63weUkT9B+TXsJMgK/TFg uJ1Hi+NZJb/t7O0MB5OMjPwz1gPcpJTxCJfrZ1KQqJxJh9cwjuIqfZRvaYBJYNKk hpabl2pZS1J7t10T4UvM5Bmbaa1cS7G0aVHGklPtUn2S4jTpIvnkXPJF/wQisH1G 6ypMnFSfqvIsDiNlvjxMdHZCkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwZMoi1 Qy92ESryLB1HfOgJgi9EMB8GA1UdIwQYMBaAFBVtSpxvFesrSz82fWn6olEBKAeI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUVCQS83MkU1NENGRTJD NTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5dExQelo5YWZxaVVRRW9C NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXMUtuRzhWNnl0TFB6WjlhZnFpVVFFb0I0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUVCQS83MkU1NENGRTJDNTMxMUVGOTFCRjdDMzBDNEY5QUUwMi9GVzFLbkc4VjZ5 dExQelo5YWZxaVVRRW9CNGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBji9rE+XuxKd97vJB5ZSpHi8bBggecJ7VSpEyAXv92oUQfvvlXt1A4 jT0hblVPhiW0czNsZKohCZ43/NXgI38hpeI/TL8oUqoZ3eCQqGEZnAApKEuS0uqc oaq2ROwQP7XJU20t23yq/60+2cV0tQG3OUSBQ+HJca1/U2AFqH8CN/yoonmCm9E4 5olO4TRaNzzYN0Trh3Zy4X6hW0xYiJvdZn88i6TqbrSU7ViQ0/TEfhdibamNk4ca ndCC2tSmM1+spLIWRiuyZzsolOR+T+HYXbSWbB1GERo/e5owZKznHQwaRK4N6vnS 8pK8zsYJu6mOzQpyQ7kXxpZ3qeTTM2hW -----END CERTIFICATE-----Generated at Mon Jul 21 07:11:01 2025 by rpki-client