$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft File: -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json) Hash identifier: J84E1pvsNR6ImdpXtAGpVeTVy56LPhws+IjhcXWGbGQ= Subject key identifier: 26:4A:DA:14:DB:1A:E3:13:71:98:A5:09:B9:A2:65:D0:AC:16:D3:B1 Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 Certificate issuer: /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft Manifest number: 34BC Signing time: Fri 18 Jul 2025 14:16:17 +0000 Manifest this update: Fri 18 Jul 2025 14:16:17 +0000 Manifest next update: Fri 25 Jul 2025 14:16:17 +0000 Files and hashes: 1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: /Tr7pQO0n0zLbDNmCzUFbrLwqzllGpn3+FxWyXNyGQA=) 2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: zbmIG6CT7ypIn3HcTtsDFC7ihfXsVyZlUb242ctePDw=) 3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: V6xVQh9iUu5NDnwtI8z/zA2tAozAKTEZViih6UdSdQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5 Validity Not Before: Jul 18 14:16:17 2025 GMT Not After : Jul 25 14:16:17 2025 GMT Subject: CN=687a5731-0b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:10:a5:49:1f:4f:49:ec:0c:63:04:ce:b6:62: 71:fd:fa:a8:5e:91:22:80:22:31:4f:0b:06:98:b9: 8b:e0:5f:76:d3:4d:c6:78:6c:98:5d:cd:dd:4a:2e: d3:c9:5b:27:13:87:f6:c1:61:c3:e0:c1:1d:e4:5a: fc:ce:b6:43:33:c8:3f:60:7e:43:2a:da:be:ea:ec: 49:49:7c:1b:78:da:7a:8e:1f:fc:55:51:26:e0:37: ed:0f:04:f6:93:d4:ca:85:69:97:6d:97:2a:d2:c7: 67:52:94:b3:da:14:49:d4:4e:71:36:a8:56:f3:44: cf:f1:42:05:5a:d2:63:4c:51:17:6d:cd:5b:63:3f: 84:89:98:ca:46:88:93:c4:af:78:d7:df:09:3a:42: ac:19:d3:70:fb:9e:9f:eb:54:cb:69:04:b8:2d:eb: e8:64:b1:4f:e2:aa:ea:c3:11:fd:81:76:1f:2b:cf: 7c:c0:28:eb:e5:06:4e:58:5e:7c:79:85:4d:f6:ed: a2:db:01:bc:6c:53:db:ca:73:19:b9:54:81:a9:fc: c3:4f:eb:4a:ed:24:92:7f:b8:e8:06:5b:84:01:52: 06:25:d6:5a:55:38:a4:81:13:fd:c2:c5:70:6c:9c: 86:70:69:56:4e:ac:18:27:6a:0f:3a:6b:d0:18:17: e3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4A:DA:14:DB:1A:E3:13:71:98:A5:09:B9:A2:65:D0:AC:16:D3:B1 X509v3 Authority Key Identifier: keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:dd:bd:04:e2:b6:0e:57:fb:2e:50:ce:6f:a5:c6:3a:02:f5: 2f:bf:a0:a3:c4:a2:04:32:87:7f:e1:c4:8d:67:79:83:49:e6: 0f:c3:d7:6c:8b:af:c4:3a:41:d1:33:24:3d:e3:23:24:58:4c: 5c:9e:5f:86:63:e6:79:ad:86:59:c8:53:21:c6:3b:ee:1e:d6: dd:a0:ca:e7:de:4f:47:ce:af:e9:dc:30:a4:09:e1:9a:5d:c0: 7d:2c:97:55:40:38:16:14:88:4a:c9:dc:99:0e:12:27:62:d7: 0e:0c:40:dd:b2:af:ac:17:a5:cb:63:bb:8f:b2:e8:a3:8c:ed: 60:0d:28:3a:05:f8:24:91:56:72:63:1d:cd:a2:91:ed:2a:d0: 63:d8:cc:d6:0d:9d:09:df:ac:ed:97:97:75:28:30:52:f0:f4: d9:94:ab:15:13:8e:75:46:48:e5:2d:8a:c8:fb:bc:cb:fd:32: 8d:55:07:34:1e:b5:1e:15:93:0a:34:b7:3c:48:30:ec:05:00: ba:10:a4:cb:57:3b:75:f2:c8:58:80:3b:64:ab:bb:9c:09:73: 6c:fb:45:dc:09:b9:a8:6c:6f:9d:de:0b:11:49:1c:49:1a:aa: 09:93:0d:ea:70:0b:25:e0:02:05:ae:6e:ea:3e:e3:00:46:bc: 79:5c:3b:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEZBNDE3OTYyN0Y1QjI2NTk0RTU2MzAzNTNBMEI3Nzg1 RTBENjkyQzUwHhcNMjUwNzE4MTQxNjE3WhcNMjUwNzI1MTQxNjE3WjAYMRYwFAYD VQQDEw02ODdhNTczMS0wYjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxBClSR9PSewMYwTOtmJx/fqoXpEigCIxTwsGmLmL4F92003GeGyYXc3dSi7T yVsnE4f2wWHD4MEd5Fr8zrZDM8g/YH5DKtq+6uxJSXwbeNp6jh/8VVEm4DftDwT2 k9TKhWmXbZcq0sdnUpSz2hRJ1E5xNqhW80TP8UIFWtJjTFEXbc1bYz+EiZjKRoiT xK94198JOkKsGdNw+56f61TLaQS4LevoZLFP4qrqwxH9gXYfK898wCjr5QZOWF58 eYVN9u2i2wG8bFPbynMZuVSBqfzDT+tK7SSSf7joBluEAVIGJdZaVTikgRP9wsVw bJyGcGlWTqwYJ2oPOmvQGBfjvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZK2hTb GuMTcZilCbmiZdCsFtOxMB8GA1UdIwQYMBaAFPpBeWJ/WyZZTlYwNToLd4Xg1pLF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS85OUQ2OERDRTFE NjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45YkpsbE9WakExT2d0M2hlRFdr c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1rRjVZbjliSmxsT1ZqQTFPZ3QzaGVEV2tzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTYyMS85OUQ2OERDRTFENjkxMUUyQTQ2NDBEQTcwOEIwMkNEMi8ta0Y1WW45Ykps bE9WakExT2d0M2hlRFdrc1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCS3b0E4rYOV/suUM5vpcY6AvUvv6CjxKIEMod/4cSNZ3mDSeYPw9ds i6/EOkHRMyQ94yMkWExcnl+GY+Z5rYZZyFMhxjvuHtbdoMrn3k9Hzq/p3DCkCeGa XcB9LJdVQDgWFIhKydyZDhInYtcODEDdsq+sF6XLY7uPsuijjO1gDSg6BfgkkVZy Yx3NopHtKtBj2MzWDZ0J36ztl5d1KDBS8PTZlKsVE451RkjlLYrI+7zL/TKNVQc0 HrUeFZMKNLc8SDDsBQC6EKTLVzt18shYgDtkq7ucCXNs+0XcCbmobG+d3gsRSRxJ GqoJkw3qcAsl4AIFrm7qPuMARrx5XDuu -----END CERTIFICATE-----Generated at Sun Jul 20 14:32:05 2025 by rpki-client