$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: L5x9WvuGBTCAIuyK85+LfbgQgXSjQ4/KznwAy2uiV3I= Subject key identifier: 57:E2:91:86:32:71:62:8E:DC:09:4C:1B:EE:59:3E:81:D4:D5:1F:B4 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07A7 Signing time: Fri 18 Jul 2025 22:43:08 +0000 Manifest this update: Fri 18 Jul 2025 22:43:07 +0000 Manifest next update: Fri 25 Jul 2025 22:43:07 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: 9YVgXfeIk7I/MRBhaPRQYZnsFcWPZSLv78diHSqv+Gc=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Jul 18 22:43:07 2025 GMT Not After : Jul 25 22:43:07 2025 GMT Subject: CN=687acdfb-a933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:2d:b1:c8:8a:a1:ec:43:a2:cf:bb:14:66: 88:4f:d1:ad:4e:33:a2:22:52:76:58:80:25:b0:53: 43:c3:83:50:8b:ad:55:97:8d:43:b8:7c:34:97:b9: 9a:f2:14:cb:d7:e3:92:2f:43:eb:24:43:ad:8a:15: 2c:b9:51:90:8f:aa:dc:f7:24:ff:7a:4a:0c:d9:47: 53:8d:50:37:78:51:3a:3a:e1:fd:f2:74:a9:fb:fd: 8b:83:60:5f:b9:ac:f6:9a:ad:41:ad:bb:f1:f8:43: a1:83:25:98:69:fb:ce:c4:22:ec:72:04:a1:f2:9e: de:be:c0:d6:7a:a5:3a:79:b4:c1:04:d0:6c:d0:13: b6:1d:51:bb:c5:66:54:4c:bf:23:5d:55:19:14:41: 7a:3e:15:3d:6f:13:3c:74:ed:a6:30:21:74:34:5b: a9:2d:0c:c3:25:9c:77:c2:e8:42:6d:17:15:d5:22: 3a:15:16:dd:84:b4:15:8d:12:46:6c:11:f8:5c:4e: c9:4f:aa:e9:a8:b0:94:65:ea:47:30:5a:69:fc:b2: ad:56:53:69:0a:6d:9c:3d:a0:9f:bc:b7:4f:01:e1: f3:48:50:4b:c1:05:1a:09:91:96:33:fb:5d:3f:f8: a9:bb:18:f7:8f:b7:b6:8b:74:ee:89:78:b4:a4:0f: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E2:91:86:32:71:62:8E:DC:09:4C:1B:EE:59:3E:81:D4:D5:1F:B4 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:74:4b:42:86:fa:6c:53:69:b8:38:ce:4d:0b:b9:93:46:f2: ee:44:bc:6f:a7:2a:e6:f9:c7:4e:52:06:ad:79:1a:b3:dc:3a: 43:e9:cc:60:30:8d:45:cf:39:be:db:1a:b7:c3:8b:21:c3:f1: 6e:99:e5:39:67:69:7b:24:c8:b1:f4:d2:13:3b:cb:cf:75:73: 8c:6c:6c:d3:07:44:76:b5:64:52:d5:04:4b:82:c7:90:56:35: 1f:c7:6b:14:fa:2d:b1:53:b9:7d:3b:3d:4a:3a:70:22:44:8d: 38:44:14:49:2c:5f:d2:45:ee:9c:e7:ed:a7:d8:23:84:a8:6d: 25:f0:0a:0a:7a:ab:78:b2:84:b2:dc:51:6b:a1:88:66:77:5f: 96:f8:ac:bd:c9:48:98:dc:3f:de:8a:1c:eb:de:f6:9a:66:38: 18:b8:7c:49:ba:87:4e:c9:72:90:47:96:af:87:62:64:ee:cc: bc:d8:ee:f4:3b:f8:8f:02:aa:d0:99:3e:be:24:77:f3:79:43: 78:af:22:ee:2c:d5:57:c4:bc:55:77:f0:7b:05:e2:08:43:6a: de:f5:a4:52:f8:2b:bf:f8:62:f1:bc:b9:8b:e1:6c:d0:08:b0: ec:bc:6e:8d:b0:39:af:5f:0d:ca:f8:2a:e6:7e:c4:38:6a:c7: e4:10:fc:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwNzE4MjI0MzA3WhcNMjUwNzI1MjI0MzA3WjAYMRYwFAYD VQQDEw02ODdhY2RmYi1hOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvOUtsciKoexDos+7FGaIT9GtTjOiIlJ2WIAlsFNDw4NQi61Vl41DuHw0l7ma 8hTL1+OSL0PrJEOtihUsuVGQj6rc9yT/ekoM2UdTjVA3eFE6OuH98nSp+/2Lg2Bf uaz2mq1Brbvx+EOhgyWYafvOxCLscgSh8p7evsDWeqU6ebTBBNBs0BO2HVG7xWZU TL8jXVUZFEF6PhU9bxM8dO2mMCF0NFupLQzDJZx3wuhCbRcV1SI6FRbdhLQVjRJG bBH4XE7JT6rpqLCUZepHMFpp/LKtVlNpCm2cPaCfvLdPAeHzSFBLwQUaCZGWM/td P/ipuxj3j7e2i3TuiXi0pA+oxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfikYYy cWKO3AlMG+5ZPoHU1R+0MB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKdEtChvpsU2m4OM5NC7mTRvLuRLxvpyrm+cdOUgateRqz3DpD6cxg MI1Fzzm+2xq3w4shw/FumeU5Z2l7JMix9NITO8vPdXOMbGzTB0R2tWRS1QRLgseQ VjUfx2sU+i2xU7l9Oz1KOnAiRI04RBRJLF/SRe6c5+2n2COEqG0l8AoKeqt4soSy 3FFroYhmd1+W+Ky9yUiY3D/eihzr3vaaZjgYuHxJuodOyXKQR5avh2Jk7sy82O70 O/iPAqrQmT6+JHfzeUN4ryLuLNVXxLxVd/B7BeIIQ2re9aRS+Cu/+GLxvLmL4WzQ CLDsvG6NsDmvXw3K+CrmfsQ4asfkEPy9 -----END CERTIFICATE-----Generated at Sun Jul 20 14:31:01 2025 by rpki-client