$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft File: ficJop5GIOVCf3NfN8A0c-NrWXo.mft (raw, json) Hash identifier: +3xGDluu9gbGYXnkre8aEpEzCEjAui2/CjUdEW4DuqI= Subject key identifier: 78:FD:CE:9F:8C:D5:57:B5:6E:8E:24:AD:EA:94:52:32:5A:39:CD:8C Authority key identifier: 7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A Certificate issuer: /CN=A91DD0A4/serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Certificate serial: 0924 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft Manifest number: 091B Signing time: Fri 18 Jul 2025 20:32:46 +0000 Manifest this update: Fri 18 Jul 2025 20:32:45 +0000 Manifest next update: Fri 25 Jul 2025 20:32:45 +0000 Files and hashes: 1: ficJop5GIOVCf3NfN8A0c-NrWXo.crl (hash: fgUOSSwyYAgiF1C6c7Tby5XloNyRcfoyzZFvm2x6stM=) 2: C8CCE2CCAA7411EA9DF2E685C4F9AE02.roa (hash: EY5IebdCRceAV1N2Sno2htu2PUjjGh0mWkvzE1zUnnE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2340 (0x924) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD0A4, serialNumber=7E2709A29E4620E5427F735F37C03473E36B597A Validity Not Before: Jul 18 20:32:45 2025 GMT Not After : Jul 25 20:32:45 2025 GMT Subject: CN=687aaf6e-07af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:97:4d:88:62:6b:ac:e9:2e:11:2f:92:2b: 33:39:66:4b:fc:85:ea:83:b0:4e:0b:8b:cc:78:30: 6b:3a:45:10:4a:20:6c:b3:f7:d7:ac:fe:09:e0:2e: 69:86:f7:2a:a9:7b:0e:72:e2:e9:95:ca:57:b9:ee: c6:b6:1e:ab:db:95:c7:d4:f6:19:70:0f:39:89:f2: d6:88:4f:8c:f0:df:e4:5c:db:08:5a:0d:03:44:62: a9:08:57:2b:7b:79:0b:af:0c:f6:aa:f8:bd:e5:e8: dc:c3:8c:70:0c:10:ca:83:49:0a:60:64:61:a3:4b: 1a:79:f1:57:7a:89:a9:ba:d8:11:3c:2d:73:64:d2: 79:bf:46:dc:fe:8d:52:be:1a:f9:7c:8e:e7:21:d8: dd:45:3f:da:65:10:e4:22:60:41:cd:0f:b6:ba:f5: f0:45:fc:65:6b:25:3e:ff:b0:25:fb:27:2b:c2:b8: bd:06:aa:81:29:b4:a4:59:01:aa:5a:74:b4:95:6c: 43:a0:3e:e6:1c:32:54:0f:70:f4:08:6c:0b:c9:43: 83:00:c8:bb:66:96:f3:97:95:08:44:ac:9f:55:ce: e3:bc:79:83:72:08:09:56:99:7e:24:c1:44:46:5c: aa:46:e1:64:d0:59:45:ef:6b:cf:eb:52:b5:e4:fc: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FD:CE:9F:8C:D5:57:B5:6E:8E:24:AD:EA:94:52:32:5A:39:CD:8C X509v3 Authority Key Identifier: keyid:7E:27:09:A2:9E:46:20:E5:42:7F:73:5F:37:C0:34:73:E3:6B:59:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ficJop5GIOVCf3NfN8A0c-NrWXo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD0A4/95D5E392AA7311EAA10ACC84C4F9AE02/ficJop5GIOVCf3NfN8A0c-NrWXo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:97:ce:87:b8:b6:e1:bd:94:be:a2:2f:88:ac:c8:ab:fd: 7e:13:f8:3d:1b:ec:99:fb:02:fb:2a:da:a6:83:a9:fa:63:58: c6:5a:a8:72:58:f3:26:bb:4d:ba:26:41:5b:90:f7:4a:64:00: 89:c1:d8:cf:59:79:aa:6e:54:69:aa:26:38:1d:28:56:02:7e: ac:bb:5e:e4:af:ca:77:56:08:a6:fb:a7:b5:08:af:14:79:eb: 3c:08:97:56:c0:16:22:36:e0:99:97:9f:2e:8b:7e:ad:1c:17: df:64:e7:18:1f:b2:14:74:54:0d:14:08:7e:64:0e:f2:91:05: 1d:ef:89:76:e6:1a:1a:ab:29:c7:2f:5f:31:ab:18:05:6a:0d: fb:86:ec:65:c5:2f:22:03:9e:5b:50:e1:b7:0e:68:c2:e8:ad: b1:7f:42:3f:af:33:02:47:86:fd:5d:be:6b:19:26:f3:e6:64: ea:08:03:63:4a:63:fa:41:6c:6e:37:d6:41:a2:f1:6c:a5:d4: c7:ba:56:3e:5f:d3:e8:50:92:d4:93:f6:c7:e8:f5:66:b0:95: 7f:c5:79:8e:64:a6:1b:e9:52:92:04:6e:ee:15:f4:4c:46:dd: af:05:bc:bf:f3:92:78:eb:18:bf:ca:ae:e2:0c:fe:84:6d:2a: 11:36:64:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQwQTQxMTAvBgNVBAUTKDdFMjcwOUEyOUU0NjIwRTU0MjdGNzM1RjM3QzAzNDcz RTM2QjU5N0EwHhcNMjUwNzE4MjAzMjQ1WhcNMjUwNzI1MjAzMjQ1WjAYMRYwFAYD VQQDEw02ODdhYWY2ZS0wN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkWXTYhia6zpLhEvkiszOWZL/IXqg7BOC4vMeDBrOkUQSiBss/fXrP4J4C5p hvcqqXsOcuLplcpXue7Gth6r25XH1PYZcA85ifLWiE+M8N/kXNsIWg0DRGKpCFcr e3kLrwz2qvi95ejcw4xwDBDKg0kKYGRho0saefFXeomputgRPC1zZNJ5v0bc/o1S vhr5fI7nIdjdRT/aZRDkImBBzQ+2uvXwRfxlayU+/7Al+ycrwri9BqqBKbSkWQGq WnS0lWxDoD7mHDJUD3D0CGwLyUODAMi7Zpbzl5UIRKyfVc7jvHmDcggJVpl+JMFE RlyqRuFk0FlF72vP61K15PwfcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHj9zp+M 1Ve1bo4kreqUUjJaOc2MMB8GA1UdIwQYMBaAFH4nCaKeRiDlQn9zXzfANHPja1l6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDBBNC85NUQ1RTM5MkFB NzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lPVkNmM05mTjhBMGMtTnJX WG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZpY0pvcDVHSU9WQ2YzTmZOOEEwYy1OcldYby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDBBNC85NUQ1RTM5MkFBNzMxMUVBQTEwQUNDODRDNEY5QUUwMi9maWNKb3A1R0lP VkNmM05mTjhBMGMtTnJXWG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCN5fOh7i24b2UvqIviKzIq/1+E/g9G+yZ+wL7Ktqmg6n6Y1jGWqhy WPMmu026JkFbkPdKZACJwdjPWXmqblRpqiY4HShWAn6su17kr8p3Vgim+6e1CK8U ees8CJdWwBYiNuCZl58ui36tHBffZOcYH7IUdFQNFAh+ZA7ykQUd74l25hoaqynH L18xqxgFag37huxlxS8iA55bUOG3DmjC6K2xf0I/rzMCR4b9Xb5rGSbz5mTqCANj SmP6QWxuN9ZBovFspdTHulY+X9PoUJLUk/bH6PVmsJV/xXmOZKYb6VKSBG7uFfRM Rt2vBby/85J46xi/yq7iDP6EbSoRNmQq -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:16 2025 by rpki-client