$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft File: FjMWdiEa7mdzSFtlIzxiw6RYev0.mft (raw, json) Hash identifier: eRFDdPau+rO9KWjme1xSlpRorrxLKUdl00FVrPi87QI= Subject key identifier: 5F:9A:B4:2C:69:AC:EC:58:9A:3F:3D:1B:4E:69:4D:0D:7F:8A:BA:08 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0C4A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft Manifest number: 0C3D Signing time: Fri 18 Jul 2025 17:44:41 +0000 Manifest this update: Fri 18 Jul 2025 17:44:40 +0000 Manifest next update: Fri 25 Jul 2025 17:44:40 +0000 Files and hashes: 1: FjMWdiEa7mdzSFtlIzxiw6RYev0.crl (hash: pM+nTHPUntdYzmkwIxZmyr18lYDBz2A6EsTJQVNt2Po=) 2: CDD0C38ECCE111EB90AF2C7AC4F9AE02.roa (hash: e16SVTPpwjEg2RE9Hpi4GSSEsMxTTKPyjdQEKVYgs6Q=) 3: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (hash: ZahlDvvl4xqyMO4InfL5NLuVKGcItekitU1WQ9tGmBk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3146 (0xc4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Jul 18 17:44:40 2025 GMT Not After : Jul 25 17:44:40 2025 GMT Subject: CN=687a8809-e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a8:06:b5:ca:38:64:d2:46:64:20:d8:a0:d4: d6:93:ce:9c:fe:e9:5b:b0:2f:30:24:e9:2c:d1:12: 81:86:75:44:39:15:db:8a:97:0c:36:45:d2:f4:2a: 7b:43:9b:da:7f:ab:59:e3:04:64:fc:dc:a1:9e:1a: 24:34:b1:39:6a:e4:4b:4f:7a:2f:ca:a8:ab:07:9a: 90:fc:88:a8:66:20:b7:b5:7f:cb:48:42:d4:1a:78: f2:7a:5d:7f:7b:8d:5d:fc:39:ef:df:45:7b:de:7f: ac:d9:9b:42:e9:6b:c7:11:66:3c:ef:10:1d:86:ce: 3e:a9:7d:d8:9c:35:08:3d:e7:90:8e:b3:aa:c2:11: f6:93:ac:25:ce:49:a4:63:eb:0c:1f:f5:ac:a6:f3: 35:79:cc:1e:e6:c4:d1:11:59:59:01:de:89:08:24: 34:87:89:5d:74:0f:8f:50:fc:46:93:fc:7e:ba:3d: d2:37:92:74:47:fa:e8:a6:f1:b1:8d:36:5c:60:6b: 67:ad:0c:62:ea:f6:ab:3c:8b:1c:5a:a2:80:c7:b6: a2:30:db:1f:d7:d3:20:dd:bd:a1:7a:db:46:8f:83: 52:9f:7c:0b:d1:d4:7f:0a:f3:33:4f:eb:c1:71:86: b8:84:fc:44:a0:0e:f3:f2:a1:4f:e0:65:b5:2e:fb: 2d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:9A:B4:2C:69:AC:EC:58:9A:3F:3D:1B:4E:69:4D:0D:7F:8A:BA:08 X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:b6:72:a3:4d:3a:01:7f:a6:da:6e:e9:36:c9:37:8f:1b:a4: 5f:27:77:05:92:27:8d:e9:b6:8d:e3:e4:f3:61:05:30:bf:c8: 72:ec:10:cd:12:2c:00:7c:fd:6e:16:aa:ab:d3:9d:2d:b3:e9: 59:20:d9:c3:9d:11:24:35:42:e6:5f:27:23:4b:ab:c3:79:84: d9:c9:e4:07:29:e5:f8:01:f9:5f:df:b3:7c:ab:5c:34:97:ff: 1e:14:f0:7b:e3:2a:28:ac:0f:ba:c9:bb:d0:20:3c:9d:41:7b: d4:11:dc:91:a8:d2:ac:36:53:63:01:23:1e:c2:47:52:c0:f9: a6:21:72:32:8b:a9:ac:97:ab:d4:e2:47:d6:18:b6:54:58:f7: 7b:71:f6:38:fb:74:c8:fa:79:62:b0:4f:38:05:20:59:78:6b: 05:42:cd:71:27:08:ba:85:5e:02:f1:cc:3a:e8:ac:36:5d:6a: 25:7a:85:94:29:77:36:88:2f:c2:cd:5b:52:b1:76:62:3a:4a: 1a:46:64:a1:1f:60:32:91:f7:1e:b4:6c:15:91:37:92:8c:00: 8f:f7:70:3f:25:b1:eb:2e:5e:f5:31:dd:43:9a:79:fa:7a:b9: 59:f5:8c:18:4d:fd:71:44:84:b4:aa:e6:0e:d9:69:2a:ce:dc: 2d:e4:b3:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUwNzE4MTc0NDQwWhcNMjUwNzI1MTc0NDQwWjAYMRYwFAYD VQQDEw02ODdhODgwOS1lMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6gGtco4ZNJGZCDYoNTWk86c/ulbsC8wJOks0RKBhnVEORXbipcMNkXS9Cp7 Q5vaf6tZ4wRk/NyhnhokNLE5auRLT3ovyqirB5qQ/IioZiC3tX/LSELUGnjyel1/ e41d/Dnv30V73n+s2ZtC6WvHEWY87xAdhs4+qX3YnDUIPeeQjrOqwhH2k6wlzkmk Y+sMH/WspvM1ecwe5sTREVlZAd6JCCQ0h4lddA+PUPxGk/x+uj3SN5J0R/ropvGx jTZcYGtnrQxi6varPIscWqKAx7aiMNsf19Mg3b2hettGj4NSn3wL0dR/CvMzT+vB cYa4hPxEoA7z8qFP4GW1LvstuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+atCxp rOxYmj89G05pTQ1/iroIMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODZEMC84RDhGMEFCRTBCNUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdt ZHpTRnRsSXp4aXc2UllldjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0tnKjTToBf6babuk2yTePG6RfJ3cFkieN6baN4+TzYQUwv8hy7BDN EiwAfP1uFqqr050ts+lZINnDnREkNULmXycjS6vDeYTZyeQHKeX4Aflf37N8q1w0 l/8eFPB74yoorA+6ybvQIDydQXvUEdyRqNKsNlNjASMewkdSwPmmIXIyi6msl6vU 4kfWGLZUWPd7cfY4+3TI+nlisE84BSBZeGsFQs1xJwi6hV4C8cw66Kw2XWoleoWU KXc2iC/CzVtSsXZiOkoaRmShH2AykfcetGwVkTeSjACP93A/JbHrLl71Md1Dmnn6 erlZ9YwYTf1xRIS0quYO2Wkqztwt5LOX -----END CERTIFICATE-----Generated at Sun Jul 20 15:05:24 2025 by rpki-client