$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft File: F9X-Mj6_2ajTROd7c3majnViQ1I.mft (raw, json) Hash identifier: 59mQLzP7RKYMDtsLe3YgU2fK6vYwFmhntIVf35dK344= Subject key identifier: C8:AA:09:7B:BF:A4:78:B7:6A:9B:76:EF:27:ED:FE:D3:FA:5B:D0:09 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 026B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft Manifest number: 024F Signing time: Mon 21 Jul 2025 02:12:30 +0000 Manifest this update: Mon 21 Jul 2025 02:12:29 +0000 Manifest next update: Mon 28 Jul 2025 02:12:29 +0000 Files and hashes: 1: F9X-Mj6_2ajTROd7c3majnViQ1I.crl (hash: 71irepvgPlR7LYTt4motiF4K2Zd0eaT1WcN5MRXBtKE=) 2: 014DA14E596F11ED9DE99A66C4F9AE02.roa (hash: EbZ289YqTjjHul9Gc5OsYaqkiIBsHmwVJ9L1aCN8g68=) 3: 4BBA96965CD511EE9A078180C4F9AE02.roa (hash: s8gyc+lMEl4nS7dY6mvX8/vnSbnC7+O4jW7tyoFs1/s=) 4: 66E8964AE4B911EE8EC7426CC4F9AE02.roa (hash: 09gHaKHodm8DnpQuTY9BuW6MFW3h5Zayu3XFpgrbJoc=) 5: 61CC010AE4BA11EE8037FD6DC4F9AE02.roa (hash: lFYxSl2pOGkakLM+J9NHER06FELZm5NAXjqBVUZYCW4=) 6: 50AF1E205CD411EEBADBCF7DC4F9AE02.roa (hash: Jo5fPiYa65aMAoum6b7Ul8L0BSiMHOWrhdixO3zUwaU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Jul 21 02:12:29 2025 GMT Not After : Jul 28 02:12:29 2025 GMT Subject: CN=687da20e-af95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:41:a5:61:9c:6a:d7:08:80:b5:61:f2:c4:ef: b5:90:24:e8:37:d0:ec:c6:8d:c3:bc:7c:ff:81:29: 7e:7f:f2:2d:25:40:82:fb:7c:03:66:00:8c:25:6b: ff:be:26:9d:82:e1:ae:4f:fa:3f:3c:d4:70:c1:5a: 6d:c4:e1:69:16:63:83:53:52:48:2b:9c:26:b6:99: d5:3c:95:2d:5d:7e:ee:db:5e:35:10:0c:6b:0f:8d: ad:47:33:a6:6c:8c:fd:a0:07:41:ee:13:24:04:89: 7e:e0:b5:07:e1:2b:ff:24:0b:72:ce:fa:6b:f4:f7: ef:44:c5:80:b6:38:86:4f:51:6e:17:60:a2:bb:32: eb:9b:91:11:04:95:2c:0d:56:88:ba:b2:d8:e2:23: a8:b6:aa:00:bf:18:2c:8b:43:42:3f:36:7c:3a:ce: 56:c1:ba:6d:d4:4d:d3:83:70:5f:99:5d:02:0d:5e: 46:a8:8b:c1:5d:49:7d:16:4f:e7:aa:93:38:f2:c7: a5:34:f7:4e:fd:24:04:76:af:1d:b2:7b:ba:8b:b6: b7:37:e1:9e:9e:0f:30:7d:e2:e3:5a:76:85:94:60: b1:59:33:a6:19:3e:0c:e9:28:74:9b:5c:65:f0:22: 1a:4a:72:74:dc:3c:c3:fa:e6:ce:04:68:47:0d:4b: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AA:09:7B:BF:A4:78:B7:6A:9B:76:EF:27:ED:FE:D3:FA:5B:D0:09 X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c3:45:87:a4:1d:5c:46:9f:8b:2c:09:a0:e6:78:e6:2a:63: c8:ea:09:0b:be:2f:e5:7f:f0:80:6e:16:ea:2e:ce:09:18:fe: 4d:c5:1c:8a:ea:5b:9a:cb:6d:06:e7:93:a7:5f:91:1e:81:69: 93:d5:d2:cc:48:20:08:e3:2e:81:03:83:24:34:19:7e:fe:97: e9:4f:3c:7f:6e:63:2a:52:d6:16:0a:59:f4:88:99:f3:30:e4: 72:ca:8e:93:36:97:33:cd:0d:7c:83:59:f4:5b:5c:36:8e:92: 3d:08:48:f3:74:f3:69:49:ea:e5:2d:46:80:dd:5d:2b:58:8c: 30:e2:33:87:97:59:fe:c6:34:d0:f8:0d:a0:c0:bd:ef:45:bb: 33:2c:be:ed:40:52:71:f4:27:11:82:e0:33:3b:58:71:d7:32: 70:f1:32:2d:a2:b3:66:86:38:79:bb:46:81:b2:c1:40:63:e4: 69:c9:77:09:40:a1:ca:2d:e8:6a:f7:ee:21:51:31:b0:5f:be: d6:93:6e:e9:21:8f:0b:bd:c0:7b:fd:9f:2d:43:7a:ae:77:26: e5:14:ad:13:7c:f0:fa:e7:c8:89:3a:4f:28:14:1c:62:a3:cf: 60:e5:a7:b5:70:7d:e6:aa:b3:77:c1:2f:00:55:31:0e:15:10: 57:80:33:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjUwNzIxMDIxMjI5WhcNMjUwNzI4MDIxMjI5WjAYMRYwFAYD VQQDEw02ODdkYTIwZS1hZjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kGlYZxq1wiAtWHyxO+1kCToN9Dsxo3DvHz/gSl+f/ItJUCC+3wDZgCMJWv/ viadguGuT/o/PNRwwVptxOFpFmODU1JIK5wmtpnVPJUtXX7u2141EAxrD42tRzOm bIz9oAdB7hMkBIl+4LUH4Sv/JAtyzvpr9PfvRMWAtjiGT1FuF2CiuzLrm5ERBJUs DVaIurLY4iOotqoAvxgsi0NCPzZ8Os5Wwbpt1E3Tg3BfmV0CDV5GqIvBXUl9Fk/n qpM48selNPdO/SQEdq8dsnu6i7a3N+Geng8wfeLjWnaFlGCxWTOmGT4M6Sh0m1xl 8CIaSnJ03DzD+ubOBGhHDUsnSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMiqCXu/ pHi3apt27yft/tP6W9AJMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkI0Ny9FODhFOUM3RTMzQUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJh alRST2Q3YzNtYWpuVmlRMUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChw0WHpB1cRp+LLAmg5njmKmPI6gkLvi/lf/CAbhbqLs4JGP5NxRyK 6luay20G55OnX5EegWmT1dLMSCAI4y6BA4MkNBl+/pfpTzx/bmMqUtYWCln0iJnz MORyyo6TNpczzQ18g1n0W1w2jpI9CEjzdPNpSerlLUaA3V0rWIww4jOHl1n+xjTQ +A2gwL3vRbszLL7tQFJx9CcRguAzO1hx1zJw8TItorNmhjh5u0aBssFAY+RpyXcJ QKHKLehq9+4hUTGwX77Wk27pIY8LvcB7/Z8tQ3qudyblFK0TfPD658iJOk8oFBxi o89g5ae1cH3mqrN3wS8AVTEOFRBXgDPr -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:01 2025 by rpki-client