$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: 6eEUso5RM0okG4bhWpwAsVenZbVu9P2/gBVGTBwZrTU= Subject key identifier: 0C:B8:F9:22:21:BD:25:48:29:47:94:E3:93:5B:C4:D7:D5:81:82:16 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: AC Signing time: Sat 19 Jul 2025 06:18:45 +0000 Manifest this update: Sat 19 Jul 2025 06:18:44 +0000 Manifest next update: Sat 26 Jul 2025 06:18:44 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: xfPVOLvjDp73uyTRj0VkgR4yAGqhweUvx4k675vTULM=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Jul 19 06:18:44 2025 GMT Not After : Jul 26 06:18:44 2025 GMT Subject: CN=687b38c4-2814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:3a:4b:13:6c:b8:b6:9f:36:0f:85:8f:d4:87: 7b:47:d6:26:e7:58:c6:92:83:04:84:d9:bb:c3:d3: b3:be:4a:23:ab:47:81:c8:fd:1f:9c:f6:68:2d:80: c1:6c:e5:09:87:0f:ee:36:8c:63:26:70:15:8e:7f: 2f:bc:6a:c9:55:0e:4f:3a:b6:64:70:1e:dc:4c:0f: a6:19:a7:a2:c7:1e:24:f8:0f:8a:77:8e:32:2e:53: 68:f1:b9:54:e7:03:25:1f:ad:6c:c0:81:1a:75:c6: 19:25:97:9d:13:94:53:ac:47:c4:97:5f:a7:5b:73: b2:2f:ad:7f:06:ad:76:4f:b9:28:40:51:d4:17:42: 10:4f:04:9c:17:7a:12:71:fa:da:da:01:b0:cd:19: d2:c3:43:14:35:38:a8:bc:0e:ec:0a:79:30:8e:18: 60:3d:60:27:5f:57:88:d6:fc:cc:3b:84:b0:f0:c8: a7:be:a9:39:cf:b6:cf:d3:dc:64:63:5f:ef:79:0b: 8f:0b:76:67:30:78:bb:b3:0e:5d:35:47:69:dc:8f: 25:1a:b6:9f:ae:86:fa:ae:6a:be:93:f2:38:7d:d6: fe:02:b7:ca:55:47:9f:f7:f0:8a:7a:71:38:5b:ea: 5c:f8:d2:a0:1a:4a:25:5d:d5:9f:ed:f1:e0:0a:69: 1f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B8:F9:22:21:BD:25:48:29:47:94:E3:93:5B:C4:D7:D5:81:82:16 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c7:08:35:df:03:bb:c5:c8:c7:bb:a4:ed:2e:6b:30:c4:6c: de:20:d1:d9:c2:8b:e9:03:e8:72:0f:f4:24:40:89:57:e3:a8: 52:1d:8b:f5:3e:f3:08:ba:09:24:8d:e5:7b:15:51:7b:67:29: 47:38:66:96:2c:85:47:a8:14:c3:37:cb:fd:9b:3e:45:d5:db: 1b:2b:a4:49:19:9d:1e:49:af:6d:6d:b3:ed:de:d6:44:c1:44: 2c:49:79:2c:46:55:ef:ab:ef:e3:72:49:fc:16:95:88:e6:7a: 78:99:87:b6:e0:da:ec:44:e0:00:3d:ec:0e:00:13:c8:ac:a4: e6:1d:c8:f7:a1:08:3b:64:30:c5:59:fb:f3:f6:fa:08:15:d0: 67:c1:f5:bd:1f:32:a5:18:08:e6:d3:0b:e7:e0:6b:21:47:f0: 2c:a9:86:a2:ab:81:4a:74:22:15:98:26:97:c0:db:44:db:32: 87:b9:de:21:89:bc:7b:d5:18:e7:ce:d3:39:ac:0a:25:6b:55: df:08:4b:8f:8e:64:88:5f:f4:6b:11:55:54:dd:cf:a2:35:c1: 19:5a:25:a9:ca:b3:97:fa:a8:12:0b:6b:59:49:66:f4:43:f9: 4f:6a:09:b8:4b:81:bb:56:28:8d:40:5b:d5:40:95:76:3b:e0: d4:cd:b6:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwNzE5MDYxODQ0WhcNMjUwNzI2MDYxODQ0WjAYMRYwFAYD VQQDEw02ODdiMzhjNC0yODE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5zpLE2y4tp82D4WP1Id7R9Ym51jGkoMEhNm7w9Ozvkojq0eByP0fnPZoLYDB bOUJhw/uNoxjJnAVjn8vvGrJVQ5POrZkcB7cTA+mGaeixx4k+A+Kd44yLlNo8blU 5wMlH61swIEadcYZJZedE5RTrEfEl1+nW3OyL61/Bq12T7koQFHUF0IQTwScF3oS cfra2gGwzRnSw0MUNTiovA7sCnkwjhhgPWAnX1eI1vzMO4Sw8Minvqk5z7bP09xk Y1/veQuPC3ZnMHi7sw5dNUdp3I8lGrafrob6rmq+k/I4fdb+ArfKVUef9/CKenE4 W+pc+NKgGkolXdWf7fHgCmkfowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy4+SIh vSVIKUeU45NbxNfVgYIWMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaxwg13wO7xcjHu6TtLmswxGzeINHZwovpA+hyD/QkQIlX46hSHYv1 PvMIugkkjeV7FVF7ZylHOGaWLIVHqBTDN8v9mz5F1dsbK6RJGZ0eSa9tbbPt3tZE wUQsSXksRlXvq+/jckn8FpWI5np4mYe24NrsROAAPewOABPIrKTmHcj3oQg7ZDDF Wfvz9voIFdBnwfW9HzKlGAjm0wvn4GshR/AsqYaiq4FKdCIVmCaXwNtE2zKHud4h ibx71RjnztM5rAola1XfCEuPjmSIX/RrEVVU3c+iNcEZWiWpyrOX+qgSC2tZSWb0 Q/lPagm4S4G7ViiNQFvVQJV2O+DUzbbY -----END CERTIFICATE-----Generated at Mon Jul 21 05:54:37 2025 by rpki-client