$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft File: cB88FPCtfu9l000APNwZJGSM3jc.mft (raw, json) Hash identifier: 0WdP40LqQ0RHJF+q26/9zltFKS/cx/kRpFuK31gEsZI= Subject key identifier: FB:34:31:EF:FC:1D:7C:2A:22:66:B6:F4:3C:F8:1B:EA:82:9E:BC:BB Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Certificate serial: 03DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft Manifest number: 03C1 Signing time: Sat 19 Jul 2025 01:06:01 +0000 Manifest this update: Sat 19 Jul 2025 01:06:00 +0000 Manifest next update: Sat 26 Jul 2025 01:06:00 +0000 Files and hashes: 1: cB88FPCtfu9l000APNwZJGSM3jc.crl (hash: JK4AllXe5x6YE+MjG5K99ErtA7b8Ceax2zaa+bhBuoI=) 2: 7E16D3240B5011EE9A518C7BC4F9AE02.roa (hash: U0JaFB8CVVgKbLBmTTRMW+oeZZCXLA9kdsldXtwigwA=) 3: CDDEC562011711EEB15FDD2AC4F9AE02.roa (hash: PgsogDDZQkDovTqfqAZnCJjtewKfx64pNU23F3h3LOI=) 4: 2BF1D5F07E3511EE8CB63458C4F9AE02.roa (hash: xABbFnxjesSqqxHb5Z3LU/MaNyiAYDrCsWPlJjK46gQ=) 5: DF49B4400B4B11EEBAD3047AC4F9AE02.roa (hash: 5EplJ/qwJeqGMd35PNuR9x2zdZw/zJYIhHM0ma+2rK4=) 6: 513415BC400011EE88B66B4FC4F9AE02.roa (hash: La9bIBXUn7Pcc0HHfxEl2RzNwtBMPkoEmLR0KZnlaWs=) 7: 86550F680B4311EE8ABEE820C4F9AE02.roa (hash: yWfAEaYcbh5fjpOL87NsV9hi8Cg9epFjV+c+Su0AUew=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 01:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 988 (0x3dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C63A6, serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37 Validity Not Before: Jul 19 01:06:00 2025 GMT Not After : Jul 26 01:06:00 2025 GMT Subject: CN=687aef79-e2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d9:3a:bf:0f:42:d2:ca:27:2d:b5:7b:62:3b: 13:2e:66:d8:01:bb:7d:8c:24:b3:da:3c:da:12:04: e2:c8:63:b4:db:cb:9f:6e:a0:0b:57:cb:0b:1b:3e: 1b:8a:09:9e:2a:9f:5e:b0:6e:a7:9d:42:6f:f0:2e: 12:3f:b8:a6:ba:da:88:18:7e:c0:5a:9b:75:af:b1: ca:76:f2:28:37:b3:d8:c1:5b:12:ff:b2:d4:fa:f1: ec:58:05:7c:cb:06:b4:5e:7f:41:41:23:a3:65:6b: a0:e7:79:c6:64:75:14:13:51:0b:27:3a:6c:ac:48: 22:95:8a:57:91:71:11:2d:3e:ef:e6:16:b9:48:33: ec:52:85:f7:83:c4:a5:08:3c:1a:53:96:1f:74:23: fb:51:84:7e:8d:12:c5:7c:04:0b:ef:66:72:50:4c: 20:49:55:f2:a8:1d:aa:42:a5:c7:50:c5:79:dd:57: 5c:a8:7f:b1:8f:3d:0e:ff:60:1e:c5:c7:b5:9d:51: 2b:f3:8b:95:30:1e:ca:fa:02:02:54:cc:1d:44:4f: d5:1b:b5:25:ff:d0:71:dd:19:f9:81:fa:2d:09:f8: 1d:c4:51:de:ba:5e:c9:57:7a:26:0a:41:cc:ea:b8: c5:2d:91:aa:fc:6b:df:fa:8e:56:57:7b:68:a9:d1: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:34:31:EF:FC:1D:7C:2A:22:66:B6:F4:3C:F8:1B:EA:82:9E:BC:BB X509v3 Authority Key Identifier: keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:24:1a:21:f6:32:95:17:ed:b1:6e:53:68:11:ad:8e:b4:1b: ba:ed:ed:07:8a:70:aa:03:13:a6:e7:7a:6d:40:b3:71:f9:3a: ed:a7:56:6f:ed:5d:a4:1f:d7:34:1e:f1:e4:c0:3d:fe:b3:ee: 14:0d:7c:3d:21:6e:76:f3:a3:84:a0:07:74:63:a3:bc:1c:fb: a3:ab:4f:a2:9e:5a:3f:71:59:31:3a:ca:0d:9e:a6:3e:59:6c: 3c:35:f7:1c:3c:8e:ad:93:09:79:a8:d0:ab:0d:66:2e:4a:d5: 9b:00:f9:08:33:0b:ae:9b:e0:74:e3:ab:01:c7:c6:e7:c0:d8: dd:d3:43:31:13:46:fe:89:6b:e4:00:b4:d6:3c:f4:8b:1d:b5: c6:3b:a1:e6:d7:5c:8a:26:bf:4b:c0:c1:8f:c2:14:14:25:42: 00:5d:0f:c3:6d:74:5e:cf:25:b0:28:43:cd:1c:13:a0:a1:20: c6:2c:50:ff:e6:03:ed:2e:06:37:6f:1f:24:dd:28:b1:c8:65: 07:b5:c0:25:08:c2:cd:27:77:65:3d:83:61:1e:7e:66:1e:6d: 59:05:6d:12:12:39:6c:6a:a1:2b:cf:03:25:38:7e:6b:bf:4f: 57:28:b8:69:ed:49:7e:c2:80:3e:9f:8c:c4:54:c3:26:bd:85: 98:15:96:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0 NjQ4Q0RFMzcwHhcNMjUwNzE5MDEwNjAwWhcNMjUwNzI2MDEwNjAwWjAYMRYwFAYD VQQDEw02ODdhZWY3OS1lMmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNk6vw9C0sonLbV7YjsTLmbYAbt9jCSz2jzaEgTiyGO028ufbqALV8sLGz4b igmeKp9esG6nnUJv8C4SP7imutqIGH7AWpt1r7HKdvIoN7PYwVsS/7LU+vHsWAV8 ywa0Xn9BQSOjZWug53nGZHUUE1ELJzpsrEgilYpXkXERLT7v5ha5SDPsUoX3g8Sl CDwaU5YfdCP7UYR+jRLFfAQL72ZyUEwgSVXyqB2qQqXHUMV53VdcqH+xjz0O/2Ae xce1nVEr84uVMB7K+gICVMwdRE/VG7Ul/9Bx3Rn5gfotCfgdxFHeul7JV3omCkHM 6rjFLZGq/Gvf+o5WV3toqdFl9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPs0Me/8 HXwqIma29Dz4G+qCnry7MB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjNBNi8wRDM5QzRFNDlBOUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1 OWwwMDBBUE53WkpHU00zamMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7JBoh9jKVF+2xblNoEa2OtBu67e0HinCqAxOm53ptQLNx+Trtp1Zv 7V2kH9c0HvHkwD3+s+4UDXw9IW5286OEoAd0Y6O8HPujq0+inlo/cVkxOsoNnqY+ WWw8NfccPI6tkwl5qNCrDWYuStWbAPkIMwuum+B046sBx8bnwNjd00MxE0b+iWvk ALTWPPSLHbXGO6Hm11yKJr9LwMGPwhQUJUIAXQ/DbXRezyWwKEPNHBOgoSDGLFD/ 5gPtLgY3bx8k3SixyGUHtcAlCMLNJ3dlPYNhHn5mHm1ZBW0SEjlsaqErzwMlOH5r v09XKLhp7Ul+woA+n4zEVMMmvYWYFZbo -----END CERTIFICATE-----Generated at Sun Jul 20 18:47:05 2025 by rpki-client