$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: nQUKwcAhYOs+oKM0lCaRknGZa+GOBLFwlMdtU674qrc= Subject key identifier: A4:3D:7C:90:7F:7B:5F:BA:D3:72:4C:5A:DD:37:D7:62:E0:26:FC:AB Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 0409 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 03F1 Signing time: Sat 19 Jul 2025 00:58:53 +0000 Manifest this update: Sat 19 Jul 2025 00:58:53 +0000 Manifest next update: Sat 26 Jul 2025 00:58:53 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: wKQlGRBo4nT4P7LVXbGn6mAUI5jba1MGtC+ftw3eFtY=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) 3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4=) 4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs=) 5: DC32812203E911F099ED6083C4F9AE02.roa (hash: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1033 (0x409) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: Jul 19 00:58:53 2025 GMT Not After : Jul 26 00:58:53 2025 GMT Subject: CN=687aedcd-a205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:a3:4e:8f:d5:13:e7:01:fa:a3:09:06:3e: 60:4e:0b:59:b6:00:48:ab:3e:9f:8f:2e:01:b8:b1: f1:11:b6:0b:21:0c:f6:d7:03:ef:07:4d:29:55:bd: c4:6f:69:f5:ce:ca:cc:d7:84:ff:70:68:eb:b6:60: 16:d4:37:10:85:f7:08:e6:27:a9:71:25:af:dd:bb: f1:92:03:46:7a:ba:f0:31:7e:3b:66:cd:43:e1:52: fb:80:a0:80:25:cd:95:23:b5:3e:76:c9:bc:b8:0d: cf:bc:6a:8b:36:e2:80:13:f0:a5:08:ce:90:4d:b8: 5d:55:9a:6b:af:c0:87:df:a5:f8:66:b2:1a:59:2a: 3d:59:a7:23:48:af:08:5c:52:d4:c1:e3:07:e8:30: 63:94:4f:6c:f6:59:ec:79:09:e5:f3:d3:5c:06:6d: 46:58:0d:64:10:f1:3e:29:26:dd:53:16:09:95:3d: 60:10:8f:b9:7b:75:80:0d:ba:74:b5:e6:28:6c:ea: 6d:b3:15:eb:ad:ca:d0:20:69:dd:dc:92:cb:26:b0: 06:ca:13:45:0b:ed:a1:54:0b:ff:4d:13:81:27:1b: cc:62:a0:ae:ac:b3:9b:8e:26:87:cd:f4:79:89:2a: 26:b2:f6:f4:b6:87:a6:dd:37:af:0f:15:25:5a:26: 41:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3D:7C:90:7F:7B:5F:BA:D3:72:4C:5A:DD:37:D7:62:E0:26:FC:AB X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:d6:bc:0c:7c:a5:d3:e8:1a:c4:59:2f:d9:6c:77:f5:80:31: 78:1e:8a:4e:82:85:81:f0:a4:db:4b:34:8f:b2:53:4c:8b:fe: 0d:8f:86:8c:b0:3a:a0:e3:71:ff:10:e7:d9:fd:a6:63:26:8d: 49:45:0f:0f:78:15:69:e0:2d:1c:8f:8b:b4:3b:98:a2:25:c8: 1c:29:13:a3:93:7d:96:14:3b:4d:50:0d:e1:b3:b4:19:93:e8: 62:db:02:c1:a1:06:65:ff:3b:4b:7b:73:04:85:a1:5b:43:e5: 0a:23:be:b7:c7:20:22:ef:d9:50:59:4f:c6:8e:99:4d:48:e9: d3:60:05:b5:f8:b7:d1:0f:7a:14:43:09:1b:6d:6d:42:20:4d: 4b:d1:b5:5f:2c:62:17:8a:a5:c3:b6:ea:0a:62:18:a2:4a:81: 0d:83:77:9f:12:43:1a:43:90:68:95:ea:d0:95:44:c3:83:e8: a5:5b:8f:02:02:23:fe:59:41:94:54:eb:3c:80:b1:29:d3:a8: 8d:cd:8a:54:03:80:79:2f:d5:d9:3d:8f:6e:f7:75:47:81:17: cf:60:6a:38:14:8b:15:81:f5:92:e1:ef:95:d1:0c:3e:e7:60: a2:59:09:18:35:09:91:8f:6f:94:f3:a5:d6:e9:f1:ed:82:99: b4:a9:e9:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwNzE5MDA1ODUzWhcNMjUwNzI2MDA1ODUzWjAYMRYwFAYD VQQDEw02ODdhZWRjZC1hMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyqjTo/VE+cB+qMJBj5gTgtZtgBIqz6fjy4BuLHxEbYLIQz21wPvB00pVb3E b2n1zsrM14T/cGjrtmAW1DcQhfcI5iepcSWv3bvxkgNGerrwMX47Zs1D4VL7gKCA Jc2VI7U+dsm8uA3PvGqLNuKAE/ClCM6QTbhdVZprr8CH36X4ZrIaWSo9WacjSK8I XFLUweMH6DBjlE9s9lnseQnl89NcBm1GWA1kEPE+KSbdUxYJlT1gEI+5e3WADbp0 teYobOptsxXrrcrQIGnd3JLLJrAGyhNFC+2hVAv/TROBJxvMYqCurLObjiaHzfR5 iSomsvb0toem3TevDxUlWiZBBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQ9fJB/ e1+603JMWt0312LgJvyrMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA1rwMfKXT6BrEWS/ZbHf1gDF4HopOgoWB8KTbSzSPslNMi/4Nj4aM sDqg43H/EOfZ/aZjJo1JRQ8PeBVp4C0cj4u0O5iiJcgcKROjk32WFDtNUA3hs7QZ k+hi2wLBoQZl/ztLe3MEhaFbQ+UKI763xyAi79lQWU/GjplNSOnTYAW1+LfRD3oU QwkbbW1CIE1L0bVfLGIXiqXDtuoKYhiiSoENg3efEkMaQ5BolerQlUTDg+ilW48C AiP+WUGUVOs8gLEp06iNzYpUA4B5L9XZPY9u93VHgRfPYGo4FIsVgfWS4e+V0Qw+ 52CiWQkYNQmRj2+U86XW6fHtgpm0qek1 -----END CERTIFICATE-----Generated at Sun Jul 20 20:10:57 2025 by rpki-client