$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft File: FPn_SiOnILc7r-YDNT8R65c5Jxk.mft (raw, json) Hash identifier: 6Ls7AhupxGVYult6AxEhwfOhJH8vT3ZzOaInfs/1Ccw= Subject key identifier: F7:54:1A:D2:76:95:E0:77:28:BB:CE:14:24:D6:D6:0F:94:0C:D9:BE Authority key identifier: 14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 Certificate issuer: /CN=A91BF8F4/serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Certificate serial: 022C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft Manifest number: 0227 Signing time: Mon 21 Jul 2025 02:14:31 +0000 Manifest this update: Mon 21 Jul 2025 02:14:30 +0000 Manifest next update: Mon 28 Jul 2025 02:14:30 +0000 Files and hashes: 1: FPn_SiOnILc7r-YDNT8R65c5Jxk.crl (hash: T0BhXOrbufjmkwnhf5zNBPeT7OZpleWzBWJCrLL5lYk=) 2: 9B3244E038A411EDB5C86A28C4F9AE02.roa (hash: z3vMrh+MfifC7nf/d8HWXEmLlkM4nBll9m3BXQVcSyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 556 (0x22c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8F4, serialNumber=14F9FF4A23A720B73BAFE603353F11EB97392719 Validity Not Before: Jul 21 02:14:30 2025 GMT Not After : Jul 28 02:14:30 2025 GMT Subject: CN=687da286-0177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:1b:27:01:a7:44:13:c4:11:6a:6b:45:65: 53:eb:78:b1:48:2a:f8:7e:60:2a:bb:54:8f:b6:42: 84:f9:4e:14:6c:6f:2e:9d:b9:11:62:b6:85:1a:0a: ea:45:8e:a6:3d:a9:92:5c:e9:39:2c:ed:1e:19:9f: 71:0c:7c:0e:84:bf:f3:fb:9d:49:99:a9:4d:9d:ac: 0c:5a:a3:ef:a0:db:4b:b2:b0:f2:e1:75:67:b2:ce: 63:69:65:1a:5b:1d:57:2a:7e:a9:0e:82:5b:fd:2c: 5a:76:87:89:44:ea:f6:f8:8f:d0:98:ca:31:38:b5: ef:2a:e1:2e:f0:b0:2a:c3:39:80:17:3b:0a:66:35: a5:b4:a7:f5:02:a2:9d:67:9a:76:81:55:0a:7c:23: f5:d2:d8:2d:fc:cb:c2:b7:61:00:7c:03:28:87:57: 48:3f:98:48:3e:63:7d:9d:6f:14:7d:72:bc:5f:14: 1e:af:59:24:1a:83:c8:0a:3f:48:56:ae:5a:a3:ec: 6b:fe:db:eb:9f:14:21:c9:41:60:7f:94:54:56:6d: 84:41:1c:34:e5:d3:2b:bd:f7:cf:b5:df:b5:73:45: 86:6d:1b:a2:d9:6b:f5:ba:17:69:28:67:44:fa:ef: 11:5d:3a:85:4f:2d:fb:d8:b2:2a:72:7f:33:d4:bf: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:54:1A:D2:76:95:E0:77:28:BB:CE:14:24:D6:D6:0F:94:0C:D9:BE X509v3 Authority Key Identifier: keyid:14:F9:FF:4A:23:A7:20:B7:3B:AF:E6:03:35:3F:11:EB:97:39:27:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FPn_SiOnILc7r-YDNT8R65c5Jxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8F4/707765A838A111ED9F3C0C82C4F9AE02/FPn_SiOnILc7r-YDNT8R65c5Jxk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:b2:bb:3d:61:f4:5a:0c:dd:49:a1:6b:f7:4a:9b:80:02:be: 0e:f7:18:c4:35:c0:31:9a:91:14:4d:f0:67:ae:8c:2c:ae:53: 77:4f:6e:e2:7a:fd:c6:26:c9:8a:27:7f:79:1b:01:e6:fe:b2: 91:e7:6e:d2:7d:6f:05:19:45:f1:8a:63:cd:62:01:2b:42:d2: 87:25:82:12:c7:a0:01:4f:84:a9:0e:02:6d:cd:05:13:b8:1c: 21:2b:6d:8e:c6:8e:de:21:ae:53:4c:d6:53:6b:c3:e7:d3:85: 1d:32:0f:28:84:05:89:89:51:1e:2d:b7:19:da:3d:c6:f9:a7: 2c:f0:a8:e1:c2:43:78:f4:af:24:7d:e0:ab:c6:12:57:04:73: a1:8b:92:f2:76:b7:57:9f:d4:83:98:ac:b8:bb:9c:bd:c0:3c: 38:49:4a:68:a6:ce:db:37:6c:72:a0:cd:d1:a9:fe:11:01:73: 3f:80:a6:a0:40:54:63:55:6a:0a:3c:89:67:1c:cb:9e:ef:9b: e4:af:45:a4:84:58:c6:0e:1f:c8:e1:1a:b7:14:4e:15:ce:3b: 38:ac:eb:2d:ab:41:0c:4b:21:ce:7b:e4:3e:c1:2c:71:15:ad: 88:28:91:c1:7d:a0:da:56:4c:75:5c:e9:3d:4e:e6:e9:bc:a4: da:25:7b:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RjQxMTAvBgNVBAUTKDE0RjlGRjRBMjNBNzIwQjczQkFGRTYwMzM1M0YxMUVC OTczOTI3MTkwHhcNMjUwNzIxMDIxNDMwWhcNMjUwNzI4MDIxNDMwWjAYMRYwFAYD VQQDEw02ODdkYTI4Ni0wMTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxUbJwGnRBPEEWprRWVT63ixSCr4fmAqu1SPtkKE+U4UbG8unbkRYraFGgrq RY6mPamSXOk5LO0eGZ9xDHwOhL/z+51JmalNnawMWqPvoNtLsrDy4XVnss5jaWUa Wx1XKn6pDoJb/SxadoeJROr2+I/QmMoxOLXvKuEu8LAqwzmAFzsKZjWltKf1AqKd Z5p2gVUKfCP10tgt/MvCt2EAfAMoh1dIP5hIPmN9nW8UfXK8XxQer1kkGoPICj9I Vq5ao+xr/tvrnxQhyUFgf5RUVm2EQRw05dMrvffPtd+1c0WGbRui2Wv1uhdpKGdE +u8RXTqFTy372LIqcn8z1L+HnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdUGtJ2 leB3KLvOFCTW1g+UDNm+MB8GA1UdIwQYMBaAFBT5/0ojpyC3O6/mAzU/EeuXOScZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhGNC83MDc3NjVBODM4 QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklMYzdyLVlETlQ4UjY1YzVK eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZQbl9TaU9uSUxjN3ItWUROVDhSNjVjNUp4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhGNC83MDc3NjVBODM4QTExMUVEOUYzQzBDODJDNEY5QUUwMi9GUG5fU2lPbklM YzdyLVlETlQ4UjY1YzVKeGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2srs9YfRaDN1JoWv3SpuAAr4O9xjENcAxmpEUTfBnrowsrlN3T27i ev3GJsmKJ395GwHm/rKR527SfW8FGUXximPNYgErQtKHJYISx6ABT4SpDgJtzQUT uBwhK22Oxo7eIa5TTNZTa8Pn04UdMg8ohAWJiVEeLbcZ2j3G+acs8KjhwkN49K8k feCrxhJXBHOhi5LydrdXn9SDmKy4u5y9wDw4SUpops7bN2xyoM3Rqf4RAXM/gKag QFRjVWoKPIlnHMue75vkr0WkhFjGDh/I4Rq3FE4Vzjs4rOstq0EMSyHOe+Q+wSxx Fa2IKJHBfaDaVkx1XOk9TubpvKTaJXsq -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:47 2025 by rpki-client