$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft File: m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft (raw, json) Hash identifier: ekkR1AfVKDl93u+GE1sFIqhg3TPvjff6uzL0+N/qAcM= Subject key identifier: D4:E3:D8:68:CD:33:EA:AD:D0:4C:E6:06:18:1C:9D:05:9F:1A:0F:F6 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 17FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft Manifest number: 17F7 Signing time: Sun 20 Jul 2025 16:34:40 +0000 Manifest this update: Sun 20 Jul 2025 16:34:40 +0000 Manifest next update: Sun 27 Jul 2025 16:34:40 +0000 Files and hashes: 1: m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl (hash: EXC0dKvodY6wQxyXgaZg9CnMbKCBHhOaJi0LctFxbb8=) 2: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (hash: g6s+BNZQJQ8eLNLhvPLgACbzK2XG9M1Q2Nm7UCMcOkM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6143 (0x17ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jul 20 16:34:40 2025 GMT Not After : Jul 27 16:34:40 2025 GMT Subject: CN=687d1aa0-64dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:0e:8c:7f:7d:c1:e1:4a:28:da:6d:8e:83: 61:b6:b5:10:32:a6:5f:b0:ca:02:b0:98:44:87:e3: 18:23:fb:72:33:c9:dd:b8:35:3c:9c:a0:86:87:c1: 7e:0b:b8:4c:c7:2a:59:04:6d:e1:6e:82:80:4a:44: 5d:5e:e1:b4:fc:37:36:60:78:0c:95:31:07:2e:19: d6:92:df:88:fb:af:f6:51:fb:c0:db:1e:11:1d:aa: 97:27:74:74:6b:cb:ab:c9:76:9e:0a:d3:3e:df:a5: 79:69:bf:e8:9a:98:9f:aa:f9:7a:04:4f:96:46:ea: b6:89:7b:07:ad:20:6a:a4:64:a3:77:ce:4f:c7:18: 5a:b4:a7:18:b0:2b:cc:e6:c8:71:49:6c:45:57:d4: ea:73:c9:79:94:6e:bf:69:d0:a0:48:41:90:cc:6f: 1b:5b:54:31:cf:47:de:6c:a9:3a:2b:e3:6c:68:fe: 91:51:61:72:cc:31:91:c2:49:79:3b:41:16:44:ca: 32:87:8f:d8:24:b1:b5:dd:ea:7a:9e:c6:55:b0:52: 02:71:0b:e3:83:0a:fe:e1:08:15:56:c7:7a:1a:31: c3:0c:2c:b7:8e:76:d4:8d:3e:da:17:34:ba:3c:24: 07:65:e9:93:e6:85:ae:e4:51:6c:d5:46:c0:a1:ce: ed:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E3:D8:68:CD:33:EA:AD:D0:4C:E6:06:18:1C:9D:05:9F:1A:0F:F6 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e7:4b:47:2c:60:1c:06:cd:fc:2d:89:b5:f2:96:3c:3b:ce: fa:b5:1a:dc:f6:6d:b9:7f:e0:80:e2:e2:81:5c:c6:f3:2a:66: 7b:13:f8:74:38:7c:12:29:d2:b4:66:bb:b6:e8:52:6a:d3:d2: 96:52:9c:ec:25:b4:52:d2:63:8f:0f:44:85:d1:fa:15:d6:82: 5e:3a:90:89:ba:89:a3:a1:9f:9a:7a:66:02:d5:cf:db:bf:e5: 69:f7:02:41:23:e4:bc:11:c9:96:8a:4e:bb:49:9b:16:c3:1a: 89:21:ed:65:bf:ca:ba:55:a5:b4:b6:84:d8:f7:29:03:c9:4c: 00:c9:83:a1:f6:d0:4e:86:9a:b8:00:31:3c:12:f2:12:d8:ea: 18:5e:b2:49:32:8e:09:f2:3b:20:6d:09:6e:62:86:8c:26:7d: 0f:f1:31:0f:79:71:93:5e:f6:6a:a1:47:3c:fe:05:9b:8f:99: 1a:c4:d8:32:26:dc:6f:89:8b:69:c3:d8:8b:54:15:fb:f0:01: d7:b0:c9:76:61:88:27:10:3f:aa:3f:d1:1a:73:1c:05:fa:75: 41:19:56:ae:20:0a:6b:af:d3:0f:a3:2a:64:4f:2b:e9:cb:44: cd:e5:53:59:1d:2d:b8:7c:2e:ed:bc:7f:88:ca:db:b2:9f:2c: 67:ed:2f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNzIwMTYzNDQwWhcNMjUwNzI3MTYzNDQwWjAYMRYwFAYD VQQDEw02ODdkMWFhMC02NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxLAOjH99weFKKNptjoNhtrUQMqZfsMoCsJhEh+MYI/tyM8nduDU8nKCGh8F+ C7hMxypZBG3hboKASkRdXuG0/Dc2YHgMlTEHLhnWkt+I+6/2UfvA2x4RHaqXJ3R0 a8uryXaeCtM+36V5ab/ompifqvl6BE+WRuq2iXsHrSBqpGSjd85PxxhatKcYsCvM 5shxSWxFV9Tqc8l5lG6/adCgSEGQzG8bW1Qxz0febKk6K+NsaP6RUWFyzDGRwkl5 O0EWRMoyh4/YJLG13ep6nsZVsFICcQvjgwr+4QgVVsd6GjHDDCy3jnbUjT7aFzS6 PCQHZemT5oWu5FFs1UbAoc7t0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTj2GjN M+qt0EzmBhgcnQWfGg/2MB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODlFNy9FRkE0NzY3MEJERkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pR TFFYVmVFaTVfeFpNQWtJSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq50tHLGAcBs38LYm18pY8O876tRrc9m25f+CA4uKBXMbzKmZ7E/h0 OHwSKdK0Zru26FJq09KWUpzsJbRS0mOPD0SF0foV1oJeOpCJuomjoZ+aemYC1c/b v+Vp9wJBI+S8EcmWik67SZsWwxqJIe1lv8q6VaW0toTY9ykDyUwAyYOh9tBOhpq4 ADE8EvIS2OoYXrJJMo4J8jsgbQluYoaMJn0P8TEPeXGTXvZqoUc8/gWbj5kaxNgy JtxviYtpw9iLVBX78AHXsMl2YYgnED+qP9EacxwF+nVBGVauIAprr9MPoypkTyvp y0TN5VNZHS24fC7tvH+Iytuynyxn7S8k -----END CERTIFICATE-----Generated at Sun Jul 20 22:39:05 2025 by rpki-client