$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft File: fqwMLLJ6MKE47kdbB_6X6Okz_co.mft (raw, json) Hash identifier: CPx3BLT2cWL74nqNS1VA0Vw60UFnw2kVZnd8cK6tgdM= Subject key identifier: 01:5A:C7:51:8B:C5:57:4A:EC:04:B6:94:C6:BD:77:67:F1:B0:40:6C Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft Manifest number: 2856 Signing time: Sun 20 Jul 2025 15:37:52 +0000 Manifest this update: Sun 20 Jul 2025 15:37:52 +0000 Manifest next update: Sun 27 Jul 2025 15:37:52 +0000 Files and hashes: 1: fqwMLLJ6MKE47kdbB_6X6Okz_co.crl (hash: S33bWmW9HkLVlSxKEeO+FPtgyVX3JgeuqlzsqjArHpY=) 2: BF9C655E7A4711EF9C7A0E5AC4F9AE02.roa (hash: 3b/+EfJ1p5yKcSM+K7504gjRkoUg1csZXTQnr7kAeRc=) 3: F9B7A3BEB0A911EF8706BE26C4F9AE02.roa (hash: qjrZgvPz0JrFG9Wn1XQqIINgClH8kerS1ZkagSq1RJI=) 4: BF6664C04C1211F0949D8B25C4F9AE02.roa (hash: SYVpgpgSK/nXZhDHIbtXA4pZD4YgNxbTaK5KwHSB1Fo=) 5: 83CECDE2F37711EFB7DF5759C4F9AE02.roa (hash: 0KaVGkZL/0Y7KpNtGIJZTIpqNjGhGiAxIqFaPkT8PBU=) 6: 9E60B12451BF11F08496463FC4F9AE02.roa (hash: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8=) 7: 46E91B3AB31211EFA6BAAF1EC4F9AE02.roa (hash: b6/17IHmfruCEiR6p/M2eZlPFy6KYLkqGlsr9DlXeXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:37:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10445 (0x28cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jul 20 15:37:52 2025 GMT Not After : Jul 27 15:37:52 2025 GMT Subject: CN=687d0d50-e85a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a8:2e:1d:07:6b:be:07:66:67:0a:07:ed:61: 56:a2:ee:94:a4:9a:b7:b2:ca:99:61:62:bc:2e:d3: 74:fe:0e:b2:a9:40:be:24:d9:90:2d:be:57:3d:65: f5:1e:20:50:16:0d:82:53:f9:f8:e7:6c:5e:e8:e2: 63:ab:df:67:dd:58:97:d4:d0:ba:9d:c7:b1:6a:61: 6c:30:21:08:b6:0e:35:a6:e3:07:60:5b:4d:c2:6f: 92:a3:b9:f8:18:0d:5f:20:8f:9b:08:3e:58:0a:7e: 06:a4:c3:07:17:25:ef:96:e2:77:12:5d:5c:02:4d: c1:af:57:db:12:be:8c:0f:80:99:c6:e0:d9:d6:e0: 91:12:6c:5c:dd:4b:af:72:5c:c8:e9:cb:91:d5:6b: b7:9e:27:30:26:ed:fa:06:a9:35:b6:45:f9:38:fb: 9a:8e:f3:02:62:8a:10:0a:88:1b:f5:89:99:24:d4: 97:bd:f7:1a:d3:56:b3:57:19:89:2e:ff:8c:bd:d5: 9e:9c:78:ba:9b:44:36:2c:54:a8:99:99:ec:fa:62: 5a:b9:60:66:4f:99:81:81:6e:96:b8:73:d1:34:65: dc:1d:8a:f8:e7:7f:c6:e3:14:44:b8:7b:0f:a5:9e: b6:35:08:83:03:84:5b:f2:d0:b3:17:29:34:22:c0: 54:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:C7:51:8B:C5:57:4A:EC:04:B6:94:C6:BD:77:67:F1:B0:40:6C X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:0c:7c:e9:7d:6a:24:53:52:37:60:0b:c8:41:04:3d:48:82: b6:bb:33:df:e5:0a:5c:d4:31:36:8a:72:ec:36:68:31:13:45: 7e:b2:52:27:f9:ef:0a:80:f0:13:56:75:6a:ac:e4:c5:30:0b: dd:02:47:85:eb:e1:6e:3f:59:a3:81:4b:dc:d1:f2:37:a7:09: 62:bd:82:f8:59:5d:fb:ee:b4:79:4c:c6:71:10:ff:33:58:2b: 7c:7a:b3:06:3a:0f:1a:a4:8b:78:bf:52:44:df:2e:10:a2:c0: 4b:9e:ec:3c:d1:87:be:ab:7e:46:90:48:82:fa:d7:76:c7:a2: c9:ae:37:e9:18:46:b7:09:5a:51:27:43:a6:c1:85:5e:9e:f5: 66:57:eb:52:a2:57:48:f2:f7:f2:38:3e:3d:1e:45:35:4e:44: 31:b8:db:46:3c:fa:ce:01:81:a1:2e:c4:7e:66:42:d4:b7:fc: 5c:4f:b9:02:66:a0:fb:34:83:e0:cd:6b:40:77:86:58:a5:29: d6:17:c4:90:f5:fc:22:f2:9b:8a:56:73:6d:da:90:c7:97:34: 1d:51:c4:87:79:f7:c0:8a:3e:45:84:b3:d3:c2:44:87:83:bd: d6:bd:6b:ea:dc:24:70:d5:db:73:5a:ec:16:f5:15:e6:9a:33: cc:96:9d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNzIwMTUzNzUyWhcNMjUwNzI3MTUzNzUyWjAYMRYwFAYD VQQDEw02ODdkMGQ1MC1lODVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46guHQdrvgdmZwoH7WFWou6UpJq3ssqZYWK8LtN0/g6yqUC+JNmQLb5XPWX1 HiBQFg2CU/n452xe6OJjq99n3ViX1NC6ncexamFsMCEItg41puMHYFtNwm+So7n4 GA1fII+bCD5YCn4GpMMHFyXvluJ3El1cAk3Br1fbEr6MD4CZxuDZ1uCREmxc3Uuv clzI6cuR1Wu3nicwJu36Bqk1tkX5OPuajvMCYooQCogb9YmZJNSXvfca01azVxmJ Lv+MvdWenHi6m0Q2LFSomZns+mJauWBmT5mBgW6WuHPRNGXcHYr453/G4xREuHsP pZ62NQiDA4Rb8tCzFyk0IsBUfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFax1GL xVdK7AS2lMa9d2fxsEBsMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTNCOS8xODk3QjI1MjlGOUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1L RTQ3a2RiQl82WDZPa3pfY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzDHzpfWokU1I3YAvIQQQ9SIK2uzPf5Qpc1DE2inLsNmgxE0V+slIn +e8KgPATVnVqrOTFMAvdAkeF6+FuP1mjgUvc0fI3pwlivYL4WV377rR5TMZxEP8z WCt8erMGOg8apIt4v1JE3y4QosBLnuw80Ye+q35GkEiC+td2x6LJrjfpGEa3CVpR J0OmwYVenvVmV+tSoldI8vfyOD49HkU1TkQxuNtGPPrOAYGhLsR+ZkLUt/xcT7kC ZqD7NIPgzWtAd4ZYpSnWF8SQ9fwi8puKVnNt2pDHlzQdUcSHeffAij5FhLPTwkSH g73WvWvq3CRw1dtzWuwW9RXmmjPMlp2L -----END CERTIFICATE-----Generated at Tue Jul 22 11:56:24 2025 by rpki-client