$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: rzeOUtdQ0pISU8T7V7CJgRiVZmDZ9nKfJthX+eEvtYE= Subject key identifier: 2D:6F:15:E8:19:EF:7C:5D:79:FB:2E:E1:C5:9E:86:67:B9:EA:8A:FA Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 0B Signing time: Sat 05 Jul 2025 08:29:58 +0000 Manifest this update: Sat 05 Jul 2025 08:29:58 +0000 Manifest next update: Sat 12 Jul 2025 08:29:58 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: 62yGuxN/GVDu98i8TxF5guizMPzj0Yg1LiYV1NRf+mU=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: aNXBkCTSnj9L9YAKLhVVj1WRcZCzQq19CJAT5ztk+BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Jul 2025 08:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Jul 5 08:29:58 2025 GMT Not After : Jul 12 08:29:58 2025 GMT Subject: CN=6868e286-de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:14:48:8e:3d:ee:02:46:f7:2f:83:34:80: 86:cf:ed:3b:d4:c3:59:e7:8d:05:b5:5f:75:b8:a0: cb:57:35:f5:f7:c2:50:da:1c:23:ef:b5:eb:ea:11: 1f:fa:17:1c:e9:e4:9a:f1:d7:20:d0:f3:e5:f7:7e: 8e:bb:38:b0:3d:bf:2e:38:69:a1:37:08:e4:96:5f: 14:98:ab:9b:87:80:68:47:74:d2:43:2b:e1:c2:50: e2:36:50:4a:a6:e8:d3:aa:c7:6d:ce:33:e4:d5:5d: ca:04:c4:9c:bc:c4:32:fa:0b:f7:90:56:fb:40:1a: d7:31:42:39:55:6e:05:c7:f3:85:f9:3a:7f:43:b6: 15:af:4a:3d:15:c6:4c:60:35:07:1e:24:71:fc:6b: 24:97:74:c9:dd:bf:f8:2c:33:01:db:90:d1:23:e4: e2:42:9d:18:a1:ec:73:ca:24:ad:e3:ef:63:bf:f0: c4:4f:ff:fb:fb:26:54:bf:ce:fe:c8:b3:fb:51:0a: db:8a:65:ed:d3:70:4a:36:71:6e:13:db:2d:ce:34: bb:b0:3c:2b:d2:58:24:d5:08:5d:c4:d5:90:7d:40: 04:2f:66:b1:83:e0:a0:3b:92:7e:f1:2a:69:b7:bc: e9:59:b0:77:29:e9:c3:2f:78:ac:6d:30:00:bc:a1: 14:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6F:15:E8:19:EF:7C:5D:79:FB:2E:E1:C5:9E:86:67:B9:EA:8A:FA X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:26:61:5c:7a:23:45:fd:1f:3c:41:98:28:41:66:0d:ba:80: 32:01:e0:63:d1:ba:bb:6f:f9:5f:e7:6b:17:bd:94:6d:97:f2: 30:c3:67:3b:3d:61:e5:ec:44:bf:6a:4a:58:03:e7:2b:4b:75: 94:b2:6d:70:b0:92:b6:0e:f8:d4:95:79:32:e0:ff:6c:11:18: 58:ec:8e:39:0e:60:44:66:25:fc:76:02:d9:2d:05:28:68:cf: 84:30:a8:2f:c7:6a:46:7b:c6:af:5d:6b:7a:2b:f1:7d:3a:59: e6:be:ec:54:ea:6e:d8:16:07:7e:15:4a:20:ca:a7:0b:03:ac: 72:72:77:5c:c6:99:98:85:c4:a5:1b:e9:64:a1:c1:48:38:a0: 05:52:e2:58:94:55:15:15:d5:7c:27:b3:bd:d4:c4:f5:c0:d8: 58:64:c2:30:d0:d3:aa:5d:f3:0f:db:a5:db:78:49:41:12:a1: 4c:aa:7d:28:97:1a:ed:91:09:8c:09:ca:f7:ab:58:9a:47:97: 43:30:f8:13:39:4c:23:dc:e9:06:90:8b:90:2e:07:ee:df:ab: 7d:db:e9:fe:1f:f4:27:d6:e5:1c:6c:63:a5:74:11:f6:e4:94: c4:76:f6:28:4d:9e:c9:9f:73:f6:1e:56:c9:07:a5:c5:d3:da: 40:02:5f:70 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTA3MDUwODI5NThaFw0yNTA3MTIwODI5NThaMBgxFjAUBgNV BAMTDTY4NjhlMjg2LWRlOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQgRRIjj3uAkb3L4M0gIbP7TvUw1nnjQW1X3W4oMtXNfX3wlDaHCPvtevqER/6 Fxzp5Jrx1yDQ8+X3fo67OLA9vy44aaE3COSWXxSYq5uHgGhHdNJDK+HCUOI2UEqm 6NOqx23OM+TVXcoExJy8xDL6C/eQVvtAGtcxQjlVbgXH84X5On9DthWvSj0Vxkxg NQceJHH8aySXdMndv/gsMwHbkNEj5OJCnRih7HPKJK3j72O/8MRP//v7JlS/zv7I s/tRCtuKZe3TcEo2cW4T2y3ONLuwPCvSWCTVCF3E1ZB9QAQvZrGD4KA7kn7xKmm3 vOlZsHcp6cMveKxtMAC8oRT1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULW8V6Bnv fF15+y7hxZ6GZ7nqivowHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJkmYVx6I0X9HzxBmChBZg26gDIB4GPRurtv+V/naxe9lG2X8jDDZzs9 YeXsRL9qSlgD5ytLdZSybXCwkrYO+NSVeTLg/2wRGFjsjjkOYERmJfx2AtktBSho z4QwqC/HakZ7xq9da3or8X06Wea+7FTqbtgWB34VSiDKpwsDrHJyd1zGmZiFxKUb 6WShwUg4oAVS4liUVRUV1Xwns73UxPXA2FhkwjDQ06pd8w/bpdt4SUESoUyqfSiX Gu2RCYwJyverWJpHl0Mw+BM5TCPc6QaQi5AuB+7fq33b6f4f9CfW5RxsY6V0Efbk lMR29ihNnsmfc/YeVskHpcXT2kACX3A= -----END CERTIFICATE-----Generated at Mon Jul 7 09:29:22 2025 by rpki-client