$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft File: mK6VbUJuFgLO2LtyWI9io9oSqVU.mft (raw, json) Hash identifier: kYMF74Q2nWeCezL+CbEt31su1wwvIJhJCMxor1dmVw8= Subject key identifier: D9:ED:CC:A2:F1:CB:7F:5F:61:F3:D5:97:0D:17:3B:5A:31:6A:33:35 Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 Certificate issuer: /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft Manifest number: 2D Signing time: Sat 19 Jul 2025 07:57:27 +0000 Manifest this update: Sat 19 Jul 2025 07:57:26 +0000 Manifest next update: Sat 26 Jul 2025 07:57:26 +0000 Files and hashes: 1: mK6VbUJuFgLO2LtyWI9io9oSqVU.crl (hash: Kz8pSUAssdOKfA819BahSZYOEniFmANmxCVt55hBauc=) 2: 943B92961E6011F0B81D3A54C4F9AE02.roa (hash: OpKLsw9gUBvgDq3xLq9YboZIcPYYkBwvYdkkqKU3FB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:57:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955 Validity Not Before: Jul 19 07:57:26 2025 GMT Not After : Jul 26 07:57:26 2025 GMT Subject: CN=687b4fe7-3d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ea:00:25:2c:50:c6:26:55:43:29:d9:2b:1f: b9:94:d8:57:0a:75:9e:70:0d:2f:35:5d:11:2d:da: bf:8a:37:75:f0:19:e0:48:f1:08:c8:0c:27:95:48: 51:53:10:78:e5:b4:ca:e7:19:8d:18:81:e8:03:10: 07:23:5b:8a:e9:09:6f:18:cb:ee:8b:37:81:d9:6c: 24:73:66:03:b3:4e:25:46:53:e3:d3:fa:fe:5c:0f: b0:33:ae:d4:10:9a:1f:24:82:ae:d8:83:93:df:e1: d7:01:5f:ec:44:7e:3b:24:44:e6:f3:ff:23:bf:7a: b7:0c:23:54:0f:b3:47:a2:a8:73:25:a3:d6:48:50: d4:d7:43:06:fa:6e:c9:d1:3a:3c:e9:ef:81:c3:8c: b7:e3:7b:30:06:ce:68:ba:60:d5:10:b0:0d:1f:2a: 4f:76:a6:90:28:f8:af:51:0a:fa:a3:58:5c:e9:fa: e9:e7:6d:42:49:22:df:77:e6:4f:f2:d7:e6:c1:f2: 03:1e:21:0f:f1:d6:85:f4:c6:6c:b2:da:b2:86:ec: 32:13:de:fb:c9:6e:ac:69:a0:60:95:c2:8c:8c:23: bb:13:78:78:39:4d:60:3d:cd:ce:c2:bb:d0:10:f3: d6:1e:9f:21:36:6e:7d:c4:be:70:6b:c6:32:7f:f7: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:CC:A2:F1:CB:7F:5F:61:F3:D5:97:0D:17:3B:5A:31:6A:33:35 X509v3 Authority Key Identifier: keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:31:f9:61:8d:d4:74:bf:67:e2:a2:07:66:e1:eb:22:b4:13: 5a:b8:a6:d6:7a:64:6a:73:2f:b9:2d:43:c4:fa:da:3e:a0:55: 3b:e6:c4:95:fe:da:ba:14:8a:7d:54:00:ba:41:e2:bb:ba:49: 69:ab:14:f9:b3:6d:b8:01:84:76:2e:2d:bb:ed:83:59:7d:61: 1f:fa:fd:55:b5:2e:11:81:03:f7:c5:2a:71:43:73:4c:42:c4: d0:d9:b5:58:ce:3b:0e:31:de:c7:c1:5c:bf:db:5b:d1:a6:c3: 70:a1:c4:30:af:7a:c3:53:8a:4d:ff:8e:19:6a:09:1e:d9:cb: 8c:dc:6c:f8:9c:c4:6d:64:57:a1:76:b1:4a:b6:0e:55:e5:b0: 34:97:32:5f:f2:84:e1:49:95:9f:5c:29:5d:11:20:f2:05:08: 79:b6:f3:a7:c4:4b:e5:01:e5:cb:8b:95:71:23:79:d5:26:cd: 66:e3:83:33:60:b2:ea:9a:77:85:a5:05:67:83:66:90:a9:b2: 9a:c8:5a:99:a9:b1:4a:84:aa:91:2d:52:5a:73:43:7c:a6:5a: 1b:c4:32:c5:40:4c:b2:50:ef:28:85:0b:d0:07:ff:e2:5d:27: d7:9a:bd:c7:02:f7:d7:98:56:f1:c9:d9:bd:a7:9f:60:05:96: fd:af:fe:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NUZDRjExMC8GA1UEBRMoOThBRTk1NkQ0MjZFMTYwMkNFRDhCQjcyNTg4RjYyQTNE QTEyQTk1NTAeFw0yNTA3MTkwNzU3MjZaFw0yNTA3MjYwNzU3MjZaMBgxFjAUBgNV BAMTDTY4N2I0ZmU3LTNkNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu6gAlLFDGJlVDKdkrH7mU2FcKdZ5wDS81XREt2r+KN3XwGeBI8QjIDCeVSFFT EHjltMrnGY0YgegDEAcjW4rpCW8Yy+6LN4HZbCRzZgOzTiVGU+PT+v5cD7AzrtQQ mh8kgq7Yg5Pf4dcBX+xEfjskRObz/yO/ercMI1QPs0eiqHMlo9ZIUNTXQwb6bsnR Ojzp74HDjLfjezAGzmi6YNUQsA0fKk92ppAo+K9RCvqjWFzp+unnbUJJIt935k/y 1+bB8gMeIQ/x1oX0xmyy2rKG7DIT3vvJbqxpoGCVwoyMI7sTeHg5TWA9zc7Cu9AQ 89YenyE2bn3EvnBrxjJ/92pTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2e3MovHL f19h89WXDRc7WjFqMzUwHwYDVR0jBBgwFoAUmK6VbUJuFgLO2LtyWI9io9oSqVUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1RkNGL0I4NEM2MDNBMUU1 RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdMTzJMdHlXSTlpbzlvU3FW VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUs2VmJVSnVGZ0xPMkx0eVdJOWlvOW9TcVZVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE1 RkNGL0I4NEM2MDNBMUU1RjExRjA5RTZBNkI0RkM0RjlBRTAyL21LNlZiVUp1RmdM TzJMdHlXSTlpbzlvU3FWVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADkx+WGN1HS/Z+KiB2bh6yK0E1q4ptZ6ZGpzL7ktQ8T62j6gVTvmxJX+ 2roUin1UALpB4ru6SWmrFPmzbbgBhHYuLbvtg1l9YR/6/VW1LhGBA/fFKnFDc0xC xNDZtVjOOw4x3sfBXL/bW9Gmw3ChxDCvesNTik3/jhlqCR7Zy4zcbPicxG1kV6F2 sUq2DlXlsDSXMl/yhOFJlZ9cKV0RIPIFCHm286fES+UB5cuLlXEjedUmzWbjgzNg suqad4WlBWeDZpCpsprIWpmpsUqEqpEtUlpzQ3ymWhvEMsVATLJQ7yiFC9AH/+Jd J9eavccC99eYVvHJ2b2nn2AFlv2v/v0= -----END CERTIFICATE-----Generated at Sun Jul 20 16:28:18 2025 by rpki-client