$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft File: fPkomAMwIeA7O5PA7riCE8f7XsU.mft (raw, json) Hash identifier: wZi588y/Z8FZzJdJmxUaVYRbN6Z2p8etUH9qZFwOFO8= Subject key identifier: 0E:B1:45:BB:82:E9:25:2E:A4:2E:01:D9:32:A3:7B:C9:63:3A:96:76 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft Manifest number: 0F4E Signing time: Thu 24 Jul 2025 17:44:27 +0000 Manifest this update: Thu 24 Jul 2025 17:44:27 +0000 Manifest next update: Thu 31 Jul 2025 17:44:27 +0000 Files and hashes: 1: fPkomAMwIeA7O5PA7riCE8f7XsU.crl (hash: f+x5Sgsu33u0fMkvjm5aFZsABs4pv+KkN0XaHeh3OqY=) 2: DCE5E9CA713611E9A71D3311C4F9AE02.roa (hash: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3925 (0xf55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Jul 24 17:44:27 2025 GMT Not After : Jul 31 17:44:27 2025 GMT Subject: CN=688270fb-bc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:14:3d:6b:01:8c:97:e7:41:c1:c0:c2:62: dc:24:7a:4d:bd:d4:8c:fc:95:c8:8c:d4:ab:36:52: 7b:9e:94:ac:3a:5c:8f:18:f9:96:63:1e:c4:bc:1b: 92:70:32:07:2f:4e:0c:67:95:10:aa:55:31:da:90: 88:ba:94:ad:76:a0:90:d4:8c:77:de:ce:ce:35:e0: 36:26:53:6c:f2:cc:85:d3:8b:09:60:86:f4:cb:64: 52:d7:a5:2c:1b:a9:29:34:98:62:4a:74:c2:6b:95: 95:b1:8e:14:51:27:69:b6:17:c3:5a:f2:9a:fd:88: 77:f3:26:ae:fa:45:33:e9:b9:f4:d4:47:4f:fb:02: 0a:19:34:64:67:d1:02:b2:60:ab:84:2e:6f:1b:03: 4b:ab:fa:17:33:6f:9c:12:84:fd:f4:12:99:4f:4a: 9b:5b:00:a4:8f:17:7b:66:72:fc:a3:99:db:5b:be: 69:eb:61:c4:e7:d7:b2:44:36:92:5d:d4:e5:26:b0: d1:74:33:68:ec:56:c0:9f:fd:c6:69:1c:0f:fa:04: 80:42:71:39:33:32:2e:49:85:88:24:10:ef:2e:98: 0d:cd:b7:c1:a6:8e:28:2a:46:49:ce:ca:2c:58:6e: 28:64:34:92:12:27:12:ed:7c:30:e2:fd:9c:20:2b: bc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B1:45:BB:82:E9:25:2E:A4:2E:01:D9:32:A3:7B:C9:63:3A:96:76 X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:3c:bc:b3:fc:a3:a1:4f:d0:20:1f:3f:cc:51:3d:e1:32:34: a6:17:11:69:4e:12:f8:5f:73:26:01:4e:a4:d4:14:7f:51:fb: 86:5c:2d:e3:ce:a3:b4:84:aa:28:b7:b8:fa:08:79:b5:bd:ff: 4f:44:1c:58:05:40:09:61:ef:93:28:c5:70:86:ae:c5:b9:5a: b0:96:e0:12:4c:d4:0c:cc:d6:42:8a:6f:79:71:bc:76:61:ff: 16:0d:bf:07:23:ee:4e:4f:45:ed:87:5a:19:3e:76:69:e7:43: b2:8f:65:fa:0a:49:90:59:2c:f9:e2:5d:94:b7:3d:7d:16:36: 4c:19:2a:fe:01:08:c5:86:25:24:af:3d:20:53:2a:57:46:86: 03:ad:39:b5:8d:e8:6b:4a:2d:86:38:ea:80:4a:44:ee:ac:83: ed:ed:1f:9a:fa:13:48:6e:e8:ba:eb:6f:d6:e6:83:e1:1b:fb: f1:39:5c:e5:e9:cd:dd:80:b5:d2:49:f8:83:e5:4a:94:01:37: 23:de:3d:3f:70:d4:62:bf:1b:df:fb:bc:a3:e7:8d:ac:b3:bf: f9:a1:13:56:f5:e1:8e:e2:ff:2d:38:c1:4a:3b:2c:a8:db:f4: 96:62:da:2a:21:0a:39:b9:66:51:60:f6:e9:79:71:24:ed:cb: 26:91:f2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwNzI0MTc0NDI3WhcNMjUwNzMxMTc0NDI3WjAYMRYwFAYD VQQDEw02ODgyNzBmYi1iYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoMUPWsBjJfnQcHAwmLcJHpNvdSM/JXIjNSrNlJ7npSsOlyPGPmWYx7EvBuS cDIHL04MZ5UQqlUx2pCIupStdqCQ1Ix33s7ONeA2JlNs8syF04sJYIb0y2RS16Us G6kpNJhiSnTCa5WVsY4UUSdpthfDWvKa/Yh38yau+kUz6bn01EdP+wIKGTRkZ9EC smCrhC5vGwNLq/oXM2+cEoT99BKZT0qbWwCkjxd7ZnL8o5nbW75p62HE59eyRDaS XdTlJrDRdDNo7FbAn/3GaRwP+gSAQnE5MzIuSYWIJBDvLpgNzbfBpo4oKkZJzsos WG4oZDSSEicS7Xww4v2cICu8nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6xRbuC 6SUupC4B2TKje8ljOpZ2MB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REEwNi8yQkZDODk0ODcxMzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0ll QTdPNVBBN3JpQ0U4ZjdYc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8PLyz/KOhT9AgHz/MUT3hMjSmFxFpThL4X3MmAU6k1BR/UfuGXC3j zqO0hKoot7j6CHm1vf9PRBxYBUAJYe+TKMVwhq7FuVqwluASTNQMzNZCim95cbx2 Yf8WDb8HI+5OT0Xth1oZPnZp50Oyj2X6CkmQWSz54l2Utz19FjZMGSr+AQjFhiUk rz0gUypXRoYDrTm1jehrSi2GOOqASkTurIPt7R+a+hNIbui662/W5oPhG/vxOVzl 6c3dgLXSSfiD5UqUATcj3j0/cNRivxvf+7yj542ss7/5oRNW9eGO4v8tOMFKOyyo 2/SWYtoqIQo5uWZRYPbpeXEk7csmkfIG -----END CERTIFICATE-----Generated at Fri Jul 25 17:02:36 2025 by rpki-client