$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: S+c8zWb8o9xgw1eH38wpWAH6SDALdvjLCK/HDoKGQAE= Subject key identifier: 73:7E:ED:C6:0D:02:C4:40:B2:A6:4D:12:09:0E:2A:BE:52:7A:E9:46 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05E0 Signing time: Sat 06 Sep 2025 23:22:32 +0000 Manifest this update: Sat 06 Sep 2025 23:22:31 +0000 Manifest next update: Sat 13 Sep 2025 23:22:31 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: LZqibSocgw2tTwTGokQDuHkMdENM8wdTXNDJQgE42J0=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1528 (0x5f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Sep 6 23:22:31 2025 GMT Not After : Sep 13 23:22:31 2025 GMT Subject: CN=68bcc237-8654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:39:74:f3:46:28:91:0d:df:92:79:fc:57: 48:98:78:9d:67:90:f0:56:fd:ba:a3:a5:6b:f6:3d: 86:93:aa:03:f4:1a:ef:cf:36:b0:e7:a8:f2:b9:71: 45:c0:b1:d3:9f:51:74:dc:66:2b:8c:b3:59:0c:10: 92:ef:ef:0c:10:cb:b7:6a:0e:70:ed:71:66:25:db: 34:c7:75:ed:a3:f8:2e:dd:ec:01:32:a5:ca:53:be: 28:5d:f0:be:87:4e:dc:c9:ac:1c:d0:a7:c3:27:dc: 8a:df:44:78:e2:83:3c:d0:bd:6f:13:96:75:66:45: a7:1d:32:61:f6:f4:eb:fa:d6:07:80:34:fc:40:d9: 42:69:ea:e4:31:1a:73:2e:fe:a1:47:6c:a5:5c:43: 52:54:39:77:60:19:42:34:06:28:be:99:80:2c:14: 46:1b:9f:68:3e:e0:5d:cf:be:fc:b7:53:e8:72:6b: 2a:27:f2:dc:78:25:9b:41:5b:8e:50:21:62:92:ca: a5:a6:7e:47:03:69:33:88:aa:93:b0:6c:3b:bb:f2: db:3b:02:7c:c3:30:d2:a4:3d:e8:53:c4:0d:71:5b: 91:b3:40:a8:41:24:11:18:3a:b8:eb:ff:a4:ca:c6: d4:f5:85:2f:da:86:ae:ec:4c:c4:20:3d:10:01:32: 4d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7E:ED:C6:0D:02:C4:40:B2:A6:4D:12:09:0E:2A:BE:52:7A:E9:46 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1a:83:49:36:ce:17:35:84:6f:9a:b3:6e:06:6b:a9:52:d3: 61:40:f2:36:39:ed:06:27:8c:e5:dc:49:91:0b:26:57:3a:90: 11:a2:ac:d4:3a:44:2f:2d:1e:5b:f0:24:3a:83:e3:5b:06:c1: 84:ff:75:31:1e:3e:50:e2:b6:40:bb:63:0c:45:6f:b4:7d:1f: c4:0f:85:01:61:24:3c:99:6d:d8:3c:41:e7:be:ab:d4:86:f9: fd:c2:c0:55:d8:88:20:6e:f5:ac:6f:0c:dd:e6:59:41:de:da: 61:52:90:1c:17:5f:68:b6:8a:f4:f7:d4:91:4f:ac:4a:aa:d2: 30:4c:88:dc:1f:bf:0a:eb:f6:61:56:a1:52:5e:e4:8c:d5:06: 04:1f:54:b3:5b:f4:14:92:ad:7d:1f:fe:7a:02:89:ee:5c:e3: 07:90:24:7f:74:cd:43:df:f9:51:fd:80:f7:dd:d1:8c:80:be: 63:fc:06:5b:6a:08:af:79:2e:40:91:76:87:07:cb:68:79:fe: 34:ad:75:e4:f6:2d:ea:0f:6c:5b:72:bf:e2:f6:44:e1:79:50: 96:1c:d7:eb:e1:1b:77:77:2b:99:d0:e3:ff:eb:11:1d:bb:26: ed:b3:86:7d:c0:d5:8f:c9:d9:2b:0f:dc:0b:f8:af:65:11:cd: 1b:8f:5b:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwOTA2MjMyMjMxWhcNMjUwOTEzMjMyMjMxWjAYMRYwFAYD VQQDEw02OGJjYzIzNy04NjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEM5dPNGKJEN35J5/FdImHidZ5DwVv26o6Vr9j2Gk6oD9Brvzzaw56jyuXFF wLHTn1F03GYrjLNZDBCS7+8MEMu3ag5w7XFmJds0x3Xto/gu3ewBMqXKU74oXfC+ h07cyawc0KfDJ9yK30R44oM80L1vE5Z1ZkWnHTJh9vTr+tYHgDT8QNlCaerkMRpz Lv6hR2ylXENSVDl3YBlCNAYovpmALBRGG59oPuBdz778t1PocmsqJ/LceCWbQVuO UCFiksqlpn5HA2kziKqTsGw7u/LbOwJ8wzDSpD3oU8QNcVuRs0CoQSQRGDq46/+k ysbU9YUv2oau7EzEID0QATJNgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHN+7cYN AsRAsqZNEgkOKr5SeulGMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKGoNJNs4XNYRvmrNuBmupUtNhQPI2Oe0GJ4zl3EmRCyZXOpARoqzU OkQvLR5b8CQ6g+NbBsGE/3UxHj5Q4rZAu2MMRW+0fR/ED4UBYSQ8mW3YPEHnvqvU hvn9wsBV2IggbvWsbwzd5llB3tphUpAcF19otor099SRT6xKqtIwTIjcH78K6/Zh VqFSXuSM1QYEH1SzW/QUkq19H/56AonuXOMHkCR/dM1D3/lR/YD33dGMgL5j/AZb agiveS5AkXaHB8toef40rXXk9i3qD2xbcr/i9kTheVCWHNfr4Rt3dyuZ0OP/6xEd uybts4Z9wNWPydkrD9wL+K9lEc0bj1uQ -----END CERTIFICATE-----Generated at Sun Sep 7 14:20:03 2025 by rpki-client