$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: H7EV3DDd+EdfRtKWaDBXbdJM2+sixedoOSEmLP6piu0= Subject key identifier: 65:CF:2F:D9:E4:3F:E2:A0:0A:C9:03:87:F1:37:6C:9A:81:F5:17:C2 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0EE8 Signing time: Fri 18 Jul 2025 17:48:50 +0000 Manifest this update: Fri 18 Jul 2025 17:48:49 +0000 Manifest next update: Fri 25 Jul 2025 17:48:49 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: 0/+HDKoI9m76bTpOQD520TjLt2EBxd0V6bZ0KJGaDoU=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:48:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3840 (0xf00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Jul 18 17:48:49 2025 GMT Not After : Jul 25 17:48:49 2025 GMT Subject: CN=687a8902-a627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:9f:e7:07:22:3b:26:1b:2d:83:a2:95:fe: 8b:6d:e2:1e:3b:60:b3:8a:c1:d9:e7:d1:0b:bb:6f: de:3a:fc:d7:2b:a1:88:95:f6:8e:d5:be:20:4d:3d: b7:2b:62:17:ca:53:bc:4c:a1:f4:fd:b6:f5:fe:02: e8:af:e5:af:bd:8b:47:08:c1:96:d6:6f:d9:35:71: f7:58:1d:ae:da:d5:c2:1b:e7:00:fe:8a:0a:c6:90: 38:83:7e:71:8a:8e:14:84:45:30:60:5e:00:63:7f: 47:ef:1e:7a:3a:7f:cf:22:ad:25:72:2f:16:73:c0: ab:14:e5:87:fa:dc:16:06:3f:7e:87:60:99:d2:8e: a6:3d:26:52:8d:36:ac:cb:dd:a9:dd:c8:90:14:c5: a7:34:30:09:a4:b5:ad:fc:b2:2c:8c:92:3d:be:40: 16:6d:ca:d0:d5:88:01:26:64:76:87:bd:76:13:06: e8:f1:8c:77:de:50:c2:26:28:b5:fc:df:f9:88:54: ee:61:d8:64:69:4d:6a:9d:24:11:42:83:b9:a1:d8: cd:e5:4d:03:12:33:2c:8f:1d:9a:20:90:65:03:98: 5f:4d:ac:f9:d3:ce:0c:4c:18:59:ad:a4:22:9f:45: 46:04:23:99:a5:ba:68:44:98:57:bb:aa:cc:39:8b: 91:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CF:2F:D9:E4:3F:E2:A0:0A:C9:03:87:F1:37:6C:9A:81:F5:17:C2 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:19:06:96:97:3a:36:f4:95:9d:e4:0e:d0:aa:eb:e7:30:d5: a9:a6:7a:99:c2:1c:f5:3f:20:b1:27:5e:c5:97:02:ad:aa:56: 80:be:9a:50:5a:89:24:96:9c:4d:a3:b3:be:f5:29:ee:a1:21: 91:3b:4c:6b:92:4e:4b:ef:63:3c:ab:9b:c7:05:75:61:7d:b4: 0e:c6:e6:ab:2e:e7:7d:c1:bd:26:ea:5f:a9:c2:5a:fd:5d:66: 2c:df:6d:d2:e1:3a:87:2e:cc:b4:42:22:5a:5b:f8:65:d2:5b: f1:0e:d9:91:db:77:03:88:56:1c:a3:11:9e:fb:6c:95:c7:f7: b9:a1:13:d5:89:39:3c:8c:8c:42:03:6b:73:2c:e0:29:6d:00: 5a:46:74:79:57:69:33:3f:72:53:41:29:6a:72:da:e1:02:d6: 9a:61:5e:cc:f5:d4:28:62:4a:5e:32:8d:5c:5a:cc:dd:05:74: e0:d1:a8:5c:6c:d6:c1:44:59:74:9e:2a:f5:7e:44:6c:0b:bb: f3:04:de:f7:d1:66:46:4a:d1:cb:1b:a6:9f:3f:ea:a6:01:95: ff:c7:83:f2:14:96:23:c3:73:dd:80:28:65:04:05:03:cd:88: 48:df:0d:b0:37:93:6a:c8:9d:8a:2c:58:0e:ab:17:32:20:71: 35:29:09:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUwNzE4MTc0ODQ5WhcNMjUwNzI1MTc0ODQ5WjAYMRYwFAYD VQQDEw02ODdhODkwMi1hNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmaf5wciOyYbLYOilf6LbeIeO2CzisHZ59ELu2/eOvzXK6GIlfaO1b4gTT23 K2IXylO8TKH0/bb1/gLor+WvvYtHCMGW1m/ZNXH3WB2u2tXCG+cA/ooKxpA4g35x io4UhEUwYF4AY39H7x56On/PIq0lci8Wc8CrFOWH+twWBj9+h2CZ0o6mPSZSjTas y92p3ciQFMWnNDAJpLWt/LIsjJI9vkAWbcrQ1YgBJmR2h712Ewbo8Yx33lDCJii1 /N/5iFTuYdhkaU1qnSQRQoO5odjN5U0DEjMsjx2aIJBlA5hfTaz5084MTBhZraQi n0VGBCOZpbpoRJhXu6rMOYuR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXPL9nk P+KgCskDh/E3bJqB9RfCMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1GQaWlzo29JWd5A7QquvnMNWppnqZwhz1PyCxJ17FlwKtqlaAvppQ WokklpxNo7O+9SnuoSGRO0xrkk5L72M8q5vHBXVhfbQOxuarLud9wb0m6l+pwlr9 XWYs323S4TqHLsy0QiJaW/hl0lvxDtmR23cDiFYcoxGe+2yVx/e5oRPViTk8jIxC A2tzLOApbQBaRnR5V2kzP3JTQSlqctrhAtaaYV7M9dQoYkpeMo1cWszdBXTg0ahc bNbBRFl0nir1fkRsC7vzBN730WZGStHLG6afP+qmAZX/x4PyFJYjw3PdgChlBAUD zYhI3w2wN5NqyJ2KLFgOqxcyIHE1KQmm -----END CERTIFICATE-----Generated at Sun Jul 20 06:11:17 2025 by rpki-client