$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft File: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft (raw, json) Hash identifier: V7kEIJ984AHXP85PaTkqlrWueWX7on8cvncUKhfcHhg= Subject key identifier: D6:67:E3:65:92:80:B0:39:AE:A3:01:71:3B:F6:0E:63:7B:E6:60:57 Authority key identifier: 72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 Certificate issuer: /CN=A91CC1E9/serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Certificate serial: 01B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft Manifest number: 01AD Signing time: Tue 29 Jul 2025 03:44:15 +0000 Manifest this update: Tue 29 Jul 2025 03:44:15 +0000 Manifest next update: Tue 05 Aug 2025 03:44:15 +0000 Files and hashes: 1: ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl (hash: F0Q4p58T90xMBWpQHt6J/uZAVlI4A+xWnnjto263TpY=) 2: 2AB990CAF0A911ED80D2CB35C4F9AE02.roa (hash: jWM3qF3q7kpRiSXeFFNjIBgWbV7okecU61rSD6G1V5E=) 3: 1333404E5A0D11EF8810E217C4F9AE02.roa (hash: LSSqPw0m9vdH2z02yt+UwvMOawigT/2JykBCEQ4iiVM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 05 Aug 2025 03:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 441 (0x1b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC1E9, serialNumber=72D15743F59C83A5C195A5E6DB1EA4647634BEF7 Validity Not Before: Jul 29 03:44:15 2025 GMT Not After : Aug 5 03:44:15 2025 GMT Subject: CN=6888438f-709c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:dc:24:c3:7d:12:67:41:af:2b:c2:38:2f: bf:14:c4:c1:3b:48:9e:60:5f:25:99:e6:4b:ca:49: 1f:c4:03:67:ea:c5:62:7a:fa:2c:bb:fd:08:ab:99: a8:56:96:0c:86:c3:ad:3b:e8:ee:30:71:e9:98:33: 9b:4d:17:9e:fd:15:39:67:9d:30:ae:45:a4:74:97: a2:99:6e:b1:19:c6:e3:0f:69:92:20:b9:a1:07:7c: c0:6c:3b:03:88:2b:07:5b:66:15:b1:7b:d2:0c:fa: ec:dc:4b:c5:0d:c2:49:f4:20:48:34:dd:62:6b:7e: 35:fb:7c:9e:05:7a:07:60:30:e2:72:f8:ee:25:db: b2:2e:31:18:d3:1b:65:23:d2:d7:77:8c:cd:a1:c7: 56:33:7d:85:82:bb:93:9e:80:4a:93:a5:5e:a8:7c: 6a:ad:43:95:41:42:b2:43:db:f8:66:be:aa:14:e6: 26:1d:3a:e3:bf:b1:fd:73:0f:6f:82:1d:7e:ef:87: 67:e0:6d:ee:a7:da:31:c7:d0:ba:bc:52:3b:93:4b: 56:b8:04:a2:89:e3:b2:ec:f7:8c:a7:1b:8f:6f:41: b8:2c:e6:5f:f3:bf:ba:69:14:0e:84:1a:aa:4a:a2: 4f:82:3b:7b:f9:6d:b8:90:8d:7c:ba:ef:6e:bf:4a: 11:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:E3:65:92:80:B0:39:AE:A3:01:71:3B:F6:0E:63:7B:E6:60:57 X509v3 Authority Key Identifier: keyid:72:D1:57:43:F5:9C:83:A5:C1:95:A5:E6:DB:1E:A4:64:76:34:BE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC1E9/BBCD5D2CEFCC11EDB29BB06CC4F9AE02/ctFXQ_Wcg6XBlaXm2x6kZHY0vvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4a:e7:1f:54:25:40:de:da:42:6e:e7:4a:3d:65:d5:93:c5: ea:0d:25:0e:cc:88:f3:f7:a3:21:dc:73:d0:2a:0c:2c:e0:dc: bc:72:67:31:ef:82:28:a7:26:1a:8e:d8:a7:77:cc:52:6c:56: f0:04:40:fd:0d:e4:42:10:ed:ea:26:c4:9a:46:c5:0f:b2:ca: 0e:31:6f:5a:b1:ff:57:da:90:fb:da:08:e6:41:2a:bc:ba:34: 5f:ca:3b:83:8e:9c:54:31:eb:3b:dd:13:27:f7:a5:27:34:a1: 19:67:3b:60:ba:1d:5b:19:8f:21:7f:33:9e:77:99:af:e1:ce: ed:5b:98:ee:43:c2:be:8b:74:f1:90:81:3d:7b:53:48:87:dc: 91:0d:9b:c7:93:59:76:d9:e8:43:41:13:5a:cc:49:3f:3e:fc: 9c:c2:9e:bb:0b:4b:6a:81:dc:9c:63:98:85:9a:a0:ce:d3:3c: 0a:48:3f:89:29:d8:5d:14:79:33:db:35:6b:0c:49:41:2a:54: 97:35:ec:33:b4:0a:92:83:f4:88:21:a0:4c:a1:fb:e5:c6:e0: 1b:21:1c:ed:ed:20:3d:3f:8e:36:87:26:17:a3:01:5c:ab:60: 83:e5:2a:a5:ab:cc:72:6b:fc:5c:05:d4:4a:09:08:8e:80:cc: 19:eb:fd:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0MxRTkxMTAvBgNVBAUTKDcyRDE1NzQzRjU5QzgzQTVDMTk1QTVFNkRCMUVBNDY0 NzYzNEJFRjcwHhcNMjUwNzI5MDM0NDE1WhcNMjUwODA1MDM0NDE1WjAYMRYwFAYD VQQDEw02ODg4NDM4Zi03MDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrvcJMN9EmdBryvCOC+/FMTBO0ieYF8lmeZLykkfxANn6sVievosu/0Iq5mo VpYMhsOtO+juMHHpmDObTRee/RU5Z50wrkWkdJeimW6xGcbjD2mSILmhB3zAbDsD iCsHW2YVsXvSDPrs3EvFDcJJ9CBINN1ia341+3yeBXoHYDDicvjuJduyLjEY0xtl I9LXd4zNocdWM32FgruTnoBKk6VeqHxqrUOVQUKyQ9v4Zr6qFOYmHTrjv7H9cw9v gh1+74dn4G3up9oxx9C6vFI7k0tWuASiieOy7PeMpxuPb0G4LOZf87+6aRQOhBqq SqJPgjt7+W24kI18uu9uv0oRXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZn42WS gLA5rqMBcTv2DmN75mBXMB8GA1UdIwQYMBaAFHLRV0P1nIOlwZWl5tsepGR2NL73 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzFFOS9CQkNENUQyQ0VG Q0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2WEJsYVhtMng2a1pIWTB2 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N0RlhRX1djZzZYQmxhWG0yeDZrWkhZMHZ2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzFFOS9CQkNENUQyQ0VGQ0MxMUVEQjI5QkIwNkNDNEY5QUUwMi9jdEZYUV9XY2c2 WEJsYVhtMng2a1pIWTB2dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNSucfVCVA3tpCbudKPWXVk8XqDSUOzIjz96Mh3HPQKgws4Ny8cmcx 74IopyYajtind8xSbFbwBED9DeRCEO3qJsSaRsUPssoOMW9asf9X2pD72gjmQSq8 ujRfyjuDjpxUMes73RMn96UnNKEZZztguh1bGY8hfzOed5mv4c7tW5juQ8K+i3Tx kIE9e1NIh9yRDZvHk1l22ehDQRNazEk/Pvycwp67C0tqgdycY5iFmqDO0zwKSD+J KdhdFHkz2zVrDElBKlSXNewztAqSg/SIIaBMofvlxuAbIRzt7SA9P442hyYXowFc q2CD5Sqlq8xya/xcBdRKCQiOgMwZ6/1O -----END CERTIFICATE-----Generated at Tue Jul 29 07:51:38 2025 by rpki-client