$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: b1n4va4QjFpG7sxU7XHtvbd9WSyYTtrDedAhsSo5Ei0= Subject key identifier: 65:17:33:C3:9D:3D:1D:8D:DE:E9:7C:66:53:37:06:C7:9C:E4:4D:33 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0FCD Signing time: Fri 18 Jul 2025 17:59:44 +0000 Manifest this update: Fri 18 Jul 2025 17:59:44 +0000 Manifest next update: Fri 25 Jul 2025 17:59:44 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: jB5hh/OBVL2ac71W8PWfz5yNAHS7IND9AcpnwwnNix4=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Jul 18 17:59:44 2025 GMT Not After : Jul 25 17:59:44 2025 GMT Subject: CN=687a8b90-41ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:69:56:6f:f5:d7:56:0b:ca:a1:21:b0:22: 6c:34:0f:22:1a:a4:d6:64:f4:96:ee:63:1f:50:3b: 43:e1:e8:dc:f1:58:6c:fe:96:1d:e8:35:fd:c4:92: c1:ae:99:0f:a9:d8:68:9b:0a:55:81:5e:bf:6f:1e: ce:0b:54:0c:ff:37:13:a5:65:3a:98:15:d5:91:2a: 19:61:9c:9b:a6:37:a1:52:41:38:cd:9c:bf:c2:cc: b1:6f:1b:d1:d4:dc:46:b3:db:11:51:c8:4a:84:65: 6a:0d:d2:2d:d4:f3:5b:2d:fe:07:24:fd:8a:eb:39: af:72:f1:b0:8e:87:ec:5a:35:b3:83:3d:14:a0:4a: 27:ba:97:9f:1b:e7:5d:33:8b:0d:71:be:57:30:b7: aa:b0:0b:64:97:87:73:ac:9c:87:9d:e5:71:f9:32: c6:c7:4f:10:91:bc:36:12:79:0b:77:3e:8a:19:39: be:34:b3:15:30:a2:cf:34:57:12:0b:5e:cd:d6:e0: f3:40:57:e4:35:72:de:72:2d:b2:d9:b6:09:2b:2e: aa:54:85:ed:48:93:53:fc:49:27:be:bc:20:e9:39: 57:ec:ef:f5:9d:80:97:b2:c3:46:cf:86:df:a6:88: f5:97:ed:4d:bd:25:8b:fa:7b:54:bf:37:d3:22:4d: 6e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:17:33:C3:9D:3D:1D:8D:DE:E9:7C:66:53:37:06:C7:9C:E4:4D:33 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:f1:21:a3:40:a8:8c:51:27:39:37:87:e1:97:e1:12:f2:dd: 05:0c:df:24:3c:94:cb:45:de:11:eb:76:a4:27:66:19:4d:dc: ae:74:0f:9c:a4:b9:1b:3c:b5:e9:4b:62:a5:52:41:e7:37:2b: ec:ef:7b:ef:ba:37:c5:99:d4:93:7d:62:19:55:a9:25:7d:92: a4:ba:7e:fc:f2:a2:b8:de:15:47:e7:38:e3:01:29:43:0b:9c: c7:b2:b6:ad:bc:7c:1f:6a:3f:28:52:65:67:25:47:5c:81:63: 3b:95:4d:a4:ea:0e:f4:5f:1e:f5:7e:46:77:cf:ce:7d:a2:0f: 6c:0b:aa:c2:18:59:87:4e:5b:4e:2f:29:71:40:f6:f6:98:f5: 53:7d:d1:bf:a3:e6:47:6e:92:ce:cb:59:c7:5f:e9:73:a6:e3: 1a:ed:4c:ec:6c:90:9e:3f:37:a2:89:27:0d:fb:ea:65:9b:ec: e3:5c:8a:25:99:0b:74:46:4e:03:b7:3e:84:f8:c3:e1:6d:29: 81:f4:95:14:ef:85:7f:85:2a:1f:b7:7e:84:9b:ea:48:1b:54: 91:0d:6f:0c:a1:65:0c:6e:91:3e:ac:0c:13:b8:06:23:8c:28: 5b:64:26:39:b7:09:00:8e:db:67:d2:b3:87:9b:4d:db:5a:a9: 59:1c:48:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNzE4MTc1OTQ0WhcNMjUwNzI1MTc1OTQ0WjAYMRYwFAYD VQQDEw02ODdhOGI5MC00MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7FpVm/111YLyqEhsCJsNA8iGqTWZPSW7mMfUDtD4ejc8Vhs/pYd6DX9xJLB rpkPqdhomwpVgV6/bx7OC1QM/zcTpWU6mBXVkSoZYZybpjehUkE4zZy/wsyxbxvR 1NxGs9sRUchKhGVqDdIt1PNbLf4HJP2K6zmvcvGwjofsWjWzgz0UoEonupefG+dd M4sNcb5XMLeqsAtkl4dzrJyHneVx+TLGx08Qkbw2EnkLdz6KGTm+NLMVMKLPNFcS C17N1uDzQFfkNXLeci2y2bYJKy6qVIXtSJNT/Eknvrwg6TlX7O/1nYCXssNGz4bf poj1l+1NvSWL+ntUvzfTIk1uHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUXM8Od PR2N3ul8ZlM3Bsec5E0zMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo8SGjQKiMUSc5N4fhl+ES8t0FDN8kPJTLRd4R63akJ2YZTdyudA+c pLkbPLXpS2KlUkHnNyvs73vvujfFmdSTfWIZVaklfZKkun788qK43hVH5zjjASlD C5zHsratvHwfaj8oUmVnJUdcgWM7lU2k6g70Xx71fkZ3z859og9sC6rCGFmHTltO LylxQPb2mPVTfdG/o+ZHbpLOy1nHX+lzpuMa7UzsbJCePzeiiScN++plm+zjXIol mQt0Rk4Dtz6E+MPhbSmB9JUU74V/hSoft36Em+pIG1SRDW8MoWUMbpE+rAwTuAYj jChbZCY5twkAjttn0rOHm03bWqlZHEjb -----END CERTIFICATE-----Generated at Sun Jul 20 16:38:28 2025 by rpki-client