$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft File: RxDk3mQVxI6LUxtZzUekHNeTRV4.mft (raw, json) Hash identifier: F1tQBbYuSgsaCISllNmU9KHkrMpzpneu7HxMO+JNDtY= Subject key identifier: E8:51:5B:53:F3:FB:04:5B:A3:0C:22:A7:F4:14:93:3E:CD:5E:18:51 Authority key identifier: 47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E Certificate issuer: /CN=A91D9A24/serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft Manifest number: FB Signing time: Mon 21 Jul 2025 05:18:40 +0000 Manifest this update: Mon 21 Jul 2025 05:18:40 +0000 Manifest next update: Mon 28 Jul 2025 05:18:40 +0000 Files and hashes: 1: RxDk3mQVxI6LUxtZzUekHNeTRV4.crl (hash: twY128MZKBmkKz4sY9R2VYIWKNd9EUBY7WbrUWq1LAM=) 2: A18158C6E64611EE95C0CE78C4F9AE02.roa (hash: RkusyxzR0xrFJ6VFvMv+nvMkxMfB3sdBezjBg1WbNLo=) 3: FE2FF9B0E64611EEA8AE7979C4F9AE02.roa (hash: vTspr7D2Mh9Ado1Qi+7w7sbqMv4hKB0CPd1WNZ4I3co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A24, serialNumber=4710E4DE6415C48E8B531B59CD47A41CD793455E Validity Not Before: Jul 21 05:18:40 2025 GMT Not After : Jul 28 05:18:40 2025 GMT Subject: CN=687dcdb0-5fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:aa:1b:04:a0:b7:59:44:fc:69:7d:4e:7d: 70:f7:f0:c9:21:24:2e:9c:36:08:b8:4b:1a:4d:8f: 13:77:30:0c:6e:65:72:c9:e6:1d:0f:e8:ba:6b:f2: 81:a5:42:45:3b:e7:ef:9e:87:90:8d:ed:cb:96:e3: 7f:a6:db:0f:24:8f:92:b0:80:5a:e1:b1:d4:f0:16: 14:90:4c:c7:11:0a:e0:cc:37:33:d7:f0:13:fa:7a: 0c:ab:f3:84:74:c6:25:c5:a8:19:9a:03:f0:7f:1e: e5:2a:4a:5e:52:7b:6d:1d:fd:95:77:1a:7e:b3:6a: e1:d1:f3:14:70:e3:0b:c7:f5:eb:d6:8a:d3:3c:1d: e2:45:24:4b:07:b3:51:84:88:9d:8f:68:25:35:27: 04:11:66:d6:eb:c5:da:17:05:c3:4e:b4:72:36:a2: 4b:97:38:f1:88:ec:6f:e9:45:97:22:9f:e7:f4:f5: b8:91:61:79:40:f3:db:01:5e:1c:10:2c:67:ac:f3: 51:41:3d:18:63:21:87:da:38:9f:de:56:aa:51:9e: 33:28:74:03:51:45:07:9d:ae:ac:d0:c9:f8:72:08: 0f:71:a4:c1:7c:d2:98:d9:27:2b:95:4e:52:8e:f6: 78:9a:bb:50:c5:a2:9e:c3:8e:ca:64:10:ac:85:f4: cf:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:51:5B:53:F3:FB:04:5B:A3:0C:22:A7:F4:14:93:3E:CD:5E:18:51 X509v3 Authority Key Identifier: keyid:47:10:E4:DE:64:15:C4:8E:8B:53:1B:59:CD:47:A4:1C:D7:93:45:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxDk3mQVxI6LUxtZzUekHNeTRV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A24/93984CF2E64511EEB5A73577C4F9AE02/RxDk3mQVxI6LUxtZzUekHNeTRV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c9:0e:52:9b:02:bb:5e:3c:39:5f:b4:9b:0f:b4:c7:fe:d5: 83:f8:e2:b0:5d:00:15:ba:43:f8:46:0d:70:6e:63:b7:43:37: c3:7b:07:ca:bc:a5:73:fc:15:60:83:15:c0:b4:ee:01:8e:7a: 91:69:8b:78:97:fb:96:27:d7:92:71:46:e9:c1:18:03:2c:0f: 35:0d:8b:d7:50:fb:e5:b5:d7:44:97:4e:17:e0:8d:62:d4:d3: 23:9a:1d:e4:ad:31:fe:da:7c:7c:10:3b:42:e1:57:88:65:3f: c0:de:51:04:45:4f:5a:53:93:4d:d0:52:87:11:c7:0c:1b:62: 91:56:3a:e2:00:5e:5a:4a:ef:25:f8:21:20:1c:e6:d0:21:ed: 3c:5f:d2:12:2f:9c:33:61:94:53:98:79:55:29:3d:75:9e:dc: ff:07:70:0b:8f:72:f8:c4:37:82:3b:ec:27:4b:87:88:0f:83: 27:23:df:79:49:4b:4d:65:45:73:c1:48:14:59:1f:b0:48:8f: 9f:3d:33:bd:bb:3b:57:d5:34:ed:bb:c8:46:b0:1c:9a:f5:b6: fa:a8:5c:30:c9:35:0f:22:ec:6c:7e:23:c6:e6:d7:3f:34:c8: 1a:23:d4:79:ae:9c:a9:4c:b6:9c:51:de:fb:15:92:b5:1c:ee: 21:81:a4:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBMjQxMTAvBgNVBAUTKDQ3MTBFNERFNjQxNUM0OEU4QjUzMUI1OUNENDdBNDFD RDc5MzQ1NUUwHhcNMjUwNzIxMDUxODQwWhcNMjUwNzI4MDUxODQwWjAYMRYwFAYD VQQDEw02ODdkY2RiMC01ZmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyCCqGwSgt1lE/Gl9Tn1w9/DJISQunDYIuEsaTY8TdzAMbmVyyeYdD+i6a/KB pUJFO+fvnoeQje3LluN/ptsPJI+SsIBa4bHU8BYUkEzHEQrgzDcz1/AT+noMq/OE dMYlxagZmgPwfx7lKkpeUnttHf2Vdxp+s2rh0fMUcOMLx/Xr1orTPB3iRSRLB7NR hIidj2glNScEEWbW68XaFwXDTrRyNqJLlzjxiOxv6UWXIp/n9PW4kWF5QPPbAV4c ECxnrPNRQT0YYyGH2jif3laqUZ4zKHQDUUUHna6s0Mn4cggPcaTBfNKY2ScrlU5S jvZ4mrtQxaKew47KZBCshfTPaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhRW1Pz +wRbowwip/QUkz7NXhhRMB8GA1UdIwQYMBaAFEcQ5N5kFcSOi1MbWc1HpBzXk0Ve MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUEyNC85Mzk4NENGMkU2 NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJNkxVeHRaelVla0hOZVRS VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4RGszbVFWeEk2TFV4dFp6VWVrSE5lVFJWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUEyNC85Mzk4NENGMkU2NDUxMUVFQjVBNzM1NzdDNEY5QUUwMi9SeERrM21RVnhJ NkxVeHRaelVla0hOZVRSVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHyQ5SmwK7Xjw5X7SbD7TH/tWD+OKwXQAVukP4Rg1wbmO3QzfDewfK vKVz/BVggxXAtO4BjnqRaYt4l/uWJ9eScUbpwRgDLA81DYvXUPvltddEl04X4I1i 1NMjmh3krTH+2nx8EDtC4VeIZT/A3lEERU9aU5NN0FKHEccMG2KRVjriAF5aSu8l +CEgHObQIe08X9ISL5wzYZRTmHlVKT11ntz/B3ALj3L4xDeCO+wnS4eID4MnI995 SUtNZUVzwUgUWR+wSI+fPTO9uztX1TTtu8hGsBya9bb6qFwwyTUPIuxsfiPG5tc/ NMgaI9R5rpypTLacUd77FZK1HO4hgaS/ -----END CERTIFICATE-----Generated at Mon Jul 21 23:23:29 2025 by rpki-client