$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: Z1Bvv7mDOnsJ3kddcriznJSktizRueewtzyCrm11QpU= Subject key identifier: 4A:DA:3D:79:DC:F6:B3:C4:33:77:AC:C2:93:90:B7:08:64:EA:9E:2E Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05C6 Signing time: Fri 18 Jul 2025 23:27:47 +0000 Manifest this update: Fri 18 Jul 2025 23:27:47 +0000 Manifest next update: Fri 25 Jul 2025 23:27:47 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: q+vYd3fo5zXlmAm41MfBLInVKa42JvoyqutD4RcY01Y=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1502 (0x5de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Jul 18 23:27:47 2025 GMT Not After : Jul 25 23:27:47 2025 GMT Subject: CN=687ad873-bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cf:84:32:0e:bc:a8:f5:d5:c3:74:02:05:cd: 7f:36:5a:67:43:df:f5:0c:6a:4e:04:8f:0f:4d:51: 94:e1:f5:d3:be:a4:8c:07:87:fe:86:ba:1f:c5:5f: ce:c1:41:e2:4b:d3:72:e6:e5:8d:e6:ec:d0:99:53: d6:27:40:d0:06:af:5c:21:73:bb:c4:8e:21:9f:c9: 55:9d:d0:a4:c9:85:dc:14:7f:71:7b:3f:9e:32:09: d0:a2:53:9e:33:47:55:95:f3:ca:5c:bc:0e:2f:37: 79:2d:74:7b:18:05:e8:d0:34:f8:0c:8a:a2:29:13: 27:a9:53:0d:c3:fb:c5:d4:9e:0f:b0:6b:99:37:94: 75:b9:80:44:af:a8:b8:e4:d9:92:c1:45:f8:51:fe: 48:7e:b5:20:84:35:93:4c:d5:73:68:2b:38:a0:85: c9:2a:74:7d:d6:56:a5:45:2e:87:ff:43:bd:05:13: 68:18:6c:28:91:0f:67:14:51:41:ae:91:76:30:d1: fb:c4:ee:b1:07:d6:69:6d:5f:42:1f:cd:7e:bf:67: 64:6f:f8:35:62:2e:20:f9:c1:bc:8f:ac:7f:92:be: f7:55:d9:20:bb:e0:25:5f:1b:a1:e5:5b:bc:a6:e0: 2e:0b:08:b8:46:69:78:a1:8a:a8:3a:f8:ff:43:60: 50:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DA:3D:79:DC:F6:B3:C4:33:77:AC:C2:93:90:B7:08:64:EA:9E:2E X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:b8:d1:f4:9b:81:f9:d0:9d:d9:b4:db:3a:14:46:42:d7:5a: c7:28:ae:a6:f2:47:30:11:56:91:5e:1c:56:03:f5:a5:22:b4: 23:33:35:e1:58:93:83:95:42:ab:0f:18:81:5a:11:ce:e8:b2: 5f:31:7c:87:e4:27:b9:06:54:f4:69:de:de:d6:3e:ad:be:b3: b9:6d:ff:ec:f3:61:69:87:58:5c:bb:00:34:6f:b7:b9:49:89: c8:1e:cb:a8:1f:45:e4:4f:56:4f:d4:b3:2c:53:32:5f:9d:ee: 47:29:e4:1f:28:92:27:8f:08:be:aa:8b:2a:9d:53:f1:06:10: 5c:39:c9:95:d6:a5:aa:dd:0f:8a:eb:4a:24:d0:34:a0:80:9f: 49:ee:57:26:40:1c:d8:28:7a:d3:09:0a:70:10:ed:72:cc:df: 1b:fe:94:07:47:a5:8e:53:15:67:da:27:0c:5f:da:a0:7f:4d: 73:b5:fe:55:02:26:fa:dd:06:25:8e:48:01:8f:59:ca:97:6c: 6b:3a:e9:c6:31:70:cd:d8:c0:f2:26:ad:a9:5c:4b:56:74:43: f6:1a:a1:69:5d:9b:16:48:2b:77:c0:03:b4:4f:74:d5:64:5b: 1e:0e:91:55:12:9d:e6:cb:6e:59:e2:78:56:75:a2:2c:76:13: 42:46:04:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNzE4MjMyNzQ3WhcNMjUwNzI1MjMyNzQ3WjAYMRYwFAYD VQQDEw02ODdhZDg3My1iZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtc+EMg68qPXVw3QCBc1/NlpnQ9/1DGpOBI8PTVGU4fXTvqSMB4f+hrofxV/O wUHiS9Ny5uWN5uzQmVPWJ0DQBq9cIXO7xI4hn8lVndCkyYXcFH9xez+eMgnQolOe M0dVlfPKXLwOLzd5LXR7GAXo0DT4DIqiKRMnqVMNw/vF1J4PsGuZN5R1uYBEr6i4 5NmSwUX4Uf5IfrUghDWTTNVzaCs4oIXJKnR91lalRS6H/0O9BRNoGGwokQ9nFFFB rpF2MNH7xO6xB9ZpbV9CH81+v2dkb/g1Yi4g+cG8j6x/kr73Vdkgu+AlXxuh5Vu8 puAuCwi4Rml4oYqoOvj/Q2BQjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEraPXnc 9rPEM3eswpOQtwhk6p4uMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVuNH0m4H50J3ZtNs6FEZC11rHKK6m8kcwEVaRXhxWA/WlIrQjMzXh WJODlUKrDxiBWhHO6LJfMXyH5Ce5BlT0ad7e1j6tvrO5bf/s82Fph1hcuwA0b7e5 SYnIHsuoH0XkT1ZP1LMsUzJfne5HKeQfKJInjwi+qosqnVPxBhBcOcmV1qWq3Q+K 60ok0DSggJ9J7lcmQBzYKHrTCQpwEO1yzN8b/pQHR6WOUxVn2icMX9qgf01ztf5V Aib63QYljkgBj1nKl2xrOunGMXDN2MDyJq2pXEtWdEP2GqFpXZsWSCt3wAO0T3TV ZFseDpFVEp3my25Z4nhWdaIsdhNCRgTf -----END CERTIFICATE-----Generated at Sun Jul 20 14:40:49 2025 by rpki-client