$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft File: _k_aOWcBbBE6yAe4STQKxlIPCAI.mft (raw, json) Hash identifier: zPibWh5I199t9k6mdYgKyf76xjUqkXbkSj5wtZmHrUI= Subject key identifier: DD:FD:8B:D9:ED:46:8F:0E:48:79:01:85:15:10:BA:8A:D8:91:97:41 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft Manifest number: 09F1 Signing time: Fri 18 Jul 2025 20:07:36 +0000 Manifest this update: Fri 18 Jul 2025 20:07:36 +0000 Manifest next update: Fri 25 Jul 2025 20:07:36 +0000 Files and hashes: 1: _k_aOWcBbBE6yAe4STQKxlIPCAI.crl (hash: FySqz1pdT2uKQovLB2ey2S01x6lMhjlq/h5YhFlP0TU=) 2: 699CD772C2B911EBBB4C8928C4F9AE02.roa (hash: yfdf5Mv/GJ9tUDZNlDnmM6hHiINUq2OvlkNbS0rVles=) 3: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (hash: qU5SgxuYfj9EbloGsgp5NlU+LGZow7QsAYGZSye/EIM=) 4: 91F5867070B811EDB6E1F81BC4F9AE02.roa (hash: PgZPVHxtNUmnyrhnnwVcg3kijll4dZA2GpurrS7x078=) 5: 1E9514207F9311EA8177A82DC4F9AE02.roa (hash: mCrr4AsBoN0UqBzrLZ/+kB+0BpCUxnU7wJAUdq4LZdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2580 (0xa14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Jul 18 20:07:36 2025 GMT Not After : Jul 25 20:07:36 2025 GMT Subject: CN=687aa988-1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cd:7b:dd:54:65:21:53:4f:89:cf:2e:59:4b: 7e:ab:a5:88:10:95:6b:26:63:d5:4d:f6:e4:ad:8e: 73:1e:65:bf:67:08:34:fd:78:31:20:02:52:7d:80: f2:97:0e:a4:55:88:b3:f9:32:9c:1d:a3:49:fc:60: fe:ee:24:cb:e3:38:85:80:0a:94:26:f4:9c:a4:97: a2:a1:eb:5f:a4:f7:7b:2f:47:e2:70:2d:22:0f:12: f2:c0:ce:79:28:6b:25:e9:a6:50:ff:f3:ca:54:73: 19:50:28:ab:3b:fa:d0:b2:12:05:45:1d:cc:22:da: 97:b6:60:af:33:02:f1:90:20:3a:14:e0:e8:0d:a4: 42:65:a7:06:c1:53:3b:3a:ee:d4:a5:1d:db:44:49: 24:79:5f:63:46:b3:c8:ca:5d:cd:a7:c5:94:b9:ad: a7:7a:f9:fe:ed:24:b7:16:ed:a2:43:18:e4:1b:c4: 2d:5f:9c:d4:22:d6:b0:4b:11:0a:a8:98:c9:58:b1: 5a:d3:4f:52:00:20:0c:9d:43:7f:b0:7b:dc:d8:ad: 8a:1b:56:74:5f:a6:a2:d0:b2:dc:b6:53:97:10:4f: 27:fd:3b:a5:ff:f2:b5:84:f2:15:1b:26:0d:08:42: c0:5c:a7:fe:ef:42:49:96:07:87:af:71:6d:44:fb: be:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:8B:D9:ED:46:8F:0E:48:79:01:85:15:10:BA:8A:D8:91:97:41 X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:06:a9:59:85:64:d0:ee:d4:25:6d:ba:be:41:c6:ba:71:59: 70:89:ed:98:36:1f:1b:f8:bf:dc:fe:f0:1f:d7:a6:48:0e:c9: 77:13:c0:27:7c:9f:fb:f6:dc:99:3c:49:c2:e7:84:2e:33:0d: 12:ac:09:ad:7a:28:f9:17:3a:45:39:a6:e3:1b:9f:1f:e9:a0: b2:3b:a4:ef:85:14:06:e7:f7:a1:6e:c9:0d:f4:b3:c9:50:14: c7:43:bd:ee:73:75:34:86:ca:bd:88:a3:34:13:fb:6f:c7:2e: dc:12:0e:b3:09:da:95:c8:40:65:0c:dc:e3:c8:bd:35:ff:7e: 65:95:6c:1d:3b:e5:31:58:5f:93:2b:37:54:52:ca:25:73:d1: 9a:c4:98:29:d6:ce:73:5a:86:77:3f:0d:07:85:1b:02:bd:9d: 69:cc:ac:12:f9:bf:2f:ce:c5:ae:aa:66:ee:0f:ad:68:1c:73: 7a:61:5e:e3:75:d4:02:ec:62:ab:81:7a:a3:14:0b:79:48:a4: 5f:64:7f:95:f8:ed:28:32:3d:58:b1:80:49:be:d8:21:fb:42: d1:e6:ba:90:6c:6e:60:28:e7:a5:77:8f:df:c1:0d:3b:16:3f: 4e:ed:59:df:69:e6:b1:04:8b:06:54:9e:82:c2:e3:cb:ab:13: a6:95:72:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjUwNzE4MjAwNzM2WhcNMjUwNzI1MjAwNzM2WjAYMRYwFAYD VQQDEw02ODdhYTk4OC0xNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8M173VRlIVNPic8uWUt+q6WIEJVrJmPVTfbkrY5zHmW/Zwg0/XgxIAJSfYDy lw6kVYiz+TKcHaNJ/GD+7iTL4ziFgAqUJvScpJeioetfpPd7L0ficC0iDxLywM55 KGsl6aZQ//PKVHMZUCirO/rQshIFRR3MItqXtmCvMwLxkCA6FODoDaRCZacGwVM7 Ou7UpR3bREkkeV9jRrPIyl3Np8WUua2nevn+7SS3Fu2iQxjkG8QtX5zUItawSxEK qJjJWLFa009SACAMnUN/sHvc2K2KG1Z0X6ai0LLctlOXEE8n/Tul//K1hPIVGyYN CELAXKf+70JJlgeHr3FtRPu+5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN39i9nt Ro8OSHkBhRUQuorYkZdBMB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTU4MC9DN0NFMkUxMDdGOEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJC RTZ5QWU0U1RRS3hsSVBDQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfBqlZhWTQ7tQlbbq+Qca6cVlwie2YNh8b+L/c/vAf16ZIDsl3E8An fJ/79tyZPEnC54QuMw0SrAmteij5FzpFOabjG58f6aCyO6TvhRQG5/ehbskN9LPJ UBTHQ73uc3U0hsq9iKM0E/tvxy7cEg6zCdqVyEBlDNzjyL01/35llWwdO+UxWF+T KzdUUsolc9GaxJgp1s5zWoZ3Pw0HhRsCvZ1pzKwS+b8vzsWuqmbuD61oHHN6YV7j ddQC7GKrgXqjFAt5SKRfZH+V+O0oMj1YsYBJvtgh+0LR5rqQbG5gKOeld4/fwQ07 Fj9O7VnfaeaxBIsGVJ6CwuPLqxOmlXKk -----END CERTIFICATE-----Generated at Sun Jul 20 06:10:13 2025 by rpki-client