$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: 9Uzf2qbvtcZpJCBMtO7gfXYvsBkC1IZ/05C/4jNbMXo= Subject key identifier: C8:0E:7F:13:27:98:38:14:6B:14:78:4B:B0:91:0C:2F:31:A3:79:08 Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1A14 Signing time: Fri 18 Jul 2025 16:29:48 +0000 Manifest this update: Fri 18 Jul 2025 16:29:48 +0000 Manifest next update: Fri 25 Jul 2025 16:29:48 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: 8JY7h++zijH1g6Qvs04pHan6hzBH3cOBr4VRVUy1rEg=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6697 (0x1a29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Jul 18 16:29:48 2025 GMT Not After : Jul 25 16:29:48 2025 GMT Subject: CN=687a767c-b0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:16:e4:0a:72:d1:53:da:a1:43:48:1c:93: e2:7c:ac:c8:2b:41:b2:6c:bf:9a:3a:90:38:64:e1: e8:02:45:62:d0:ad:ed:b7:02:47:16:18:47:bf:18: 05:28:5a:d5:2d:01:a2:c4:c2:da:5f:32:ef:9e:01: 01:10:2b:90:65:ff:dd:68:4e:01:42:7e:05:50:3a: 7f:02:15:ed:ba:20:72:24:16:37:ec:15:03:ea:46: 38:a3:f0:69:80:c6:ec:2a:e5:2e:5b:fe:d8:4e:3e: 91:ca:9e:b3:b8:84:d9:3c:20:6f:ab:ab:31:56:c7: 3c:9e:0e:b9:4d:b0:fc:5b:51:ba:d6:3c:9a:27:71: 19:72:db:af:f6:e0:f5:ab:98:3e:de:4a:36:e1:4d: 96:14:f2:80:bc:f1:38:c6:3f:30:c8:1f:6b:73:3a: 6b:6c:61:75:d6:67:ba:83:5f:ac:c6:57:78:c6:1d: 08:d3:02:b9:90:bc:bc:04:8b:ce:5f:74:1b:de:59: 40:30:5f:0a:70:3c:d0:8d:47:5c:e0:d0:5b:3f:72: 8a:75:1f:63:b7:47:58:7d:9a:3c:51:05:03:c6:c2: e0:89:fe:89:a5:56:17:0a:3c:e1:2f:36:1b:b6:0b: ee:d1:c9:d4:fa:9a:87:ee:e4:b8:e3:5a:ab:15:4c: d3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:0E:7F:13:27:98:38:14:6B:14:78:4B:B0:91:0C:2F:31:A3:79:08 X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:20:0d:f5:44:b8:4a:39:52:49:b9:93:9f:8f:b1:99:80:8c: 35:c4:c4:2d:30:4b:30:a7:a3:e5:39:9c:7f:65:f8:05:ba:39: 2a:10:fc:b0:33:f1:68:e6:9b:53:80:3d:e8:58:28:51:53:f3: bc:eb:d0:9e:a7:72:93:66:a5:a9:1a:d7:44:ae:43:3c:66:5f: 3b:a0:5b:86:e5:cf:50:39:e8:b9:fe:bc:fc:11:28:1d:5c:dc: 91:e7:7d:67:81:d1:3b:8e:de:e1:86:4a:39:c9:07:9d:6b:60: 27:fe:87:1d:9b:66:e8:04:00:be:4a:2e:69:17:3a:e8:9d:a5: 94:34:68:fc:99:07:08:2c:20:7d:94:5f:e2:38:aa:a1:6d:01: e0:52:74:a3:35:14:8e:67:4f:2e:cf:4e:15:51:e0:7f:38:69: b4:58:04:32:d1:c0:1a:11:98:0a:af:75:cd:ad:e2:b6:69:63: d3:bb:56:c9:a1:ca:3a:75:af:1e:b5:8f:48:0e:5d:1f:65:24: ba:3c:f8:5c:00:33:ff:6c:96:1b:38:ea:a1:e3:04:8b:99:3e: 1c:76:43:c8:a1:80:cd:1a:71:55:b4:bd:d6:8d:4a:7b:f8:da: f6:51:ee:d9:7f:c4:45:db:b9:34:22:c2:d6:69:7a:dc:0b:75: 81:ba:53:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUwNzE4MTYyOTQ4WhcNMjUwNzI1MTYyOTQ4WjAYMRYwFAYD VQQDEw02ODdhNzY3Yy1iMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzScW5Apy0VPaoUNIHJPifKzIK0GybL+aOpA4ZOHoAkVi0K3ttwJHFhhHvxgF KFrVLQGixMLaXzLvngEBECuQZf/daE4BQn4FUDp/AhXtuiByJBY37BUD6kY4o/Bp gMbsKuUuW/7YTj6Ryp6zuITZPCBvq6sxVsc8ng65TbD8W1G61jyaJ3EZctuv9uD1 q5g+3ko24U2WFPKAvPE4xj8wyB9rczprbGF11me6g1+sxld4xh0I0wK5kLy8BIvO X3Qb3llAMF8KcDzQjUdc4NBbP3KKdR9jt0dYfZo8UQUDxsLgif6JpVYXCjzhLzYb tgvu0cnU+pqH7uS441qrFUzT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgOfxMn mDgUaxR4S7CRDC8xo3kIMB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUIA31RLhKOVJJuZOfj7GZgIw1xMQtMEswp6PlOZx/ZfgFujkqEPyw M/Fo5ptTgD3oWChRU/O869Cep3KTZqWpGtdErkM8Zl87oFuG5c9QOei5/rz8ESgd XNyR531ngdE7jt7hhko5yQeda2An/ocdm2boBAC+Si5pFzronaWUNGj8mQcILCB9 lF/iOKqhbQHgUnSjNRSOZ08uz04VUeB/OGm0WAQy0cAaEZgKr3XNreK2aWPTu1bJ oco6da8etY9IDl0fZSS6PPhcADP/bJYbOOqh4wSLmT4cdkPIoYDNGnFVtL3WjUp7 +Nr2Ue7Zf8RF27k0IsLWaXrcC3WBulPY -----END CERTIFICATE-----Generated at Sun Jul 20 03:16:43 2025 by rpki-client