$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: NY3PhHoqYNQy+Mly+imdF9PnZ2S8SAsqwZCPg6yN71U= Subject key identifier: AB:5B:EC:39:54:B2:D4:E4:28:FB:39:E1:C9:34:EE:BF:DF:89:F3:AE Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14D8 Signing time: Sun 20 Jul 2025 15:34:06 +0000 Manifest this update: Sun 20 Jul 2025 15:34:05 +0000 Manifest next update: Sun 27 Jul 2025 15:34:05 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: 24EvJQdUsDvL+XGNdo/QbQrwojIYLejnbA2JAF83tDY=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5353 (0x14e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Jul 20 15:34:05 2025 GMT Not After : Jul 27 15:34:05 2025 GMT Subject: CN=687d0c6d-bfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:d0:c9:c4:08:b4:1d:ea:b6:c8:87:98:5a: 25:78:1f:60:ab:1f:ec:a6:c5:ba:e8:83:15:ca:f3: c5:d3:61:e8:60:5e:21:6e:26:08:b0:d7:e8:8c:ce: 52:32:80:39:39:42:fe:5c:97:50:5f:6f:9c:75:2a: b6:2d:e6:7d:72:98:a0:4a:b8:6f:3d:ec:ea:98:df: 09:95:f3:f8:50:fa:7e:a1:f8:16:f2:bc:cf:a5:78: cd:84:14:c9:cc:fa:a4:17:1b:07:6b:24:d5:51:06: 51:90:48:a6:41:2e:ae:7f:42:ac:e4:4d:90:8c:20: 32:7b:f5:a6:ba:28:79:d0:70:4e:a9:88:12:e5:38: f6:8a:a3:29:f3:05:c5:19:1b:87:0e:d6:92:8d:4f: 4f:9c:5a:c0:9f:92:dc:2a:5f:82:41:87:be:ae:9a: 13:22:e8:10:96:1c:e1:70:7d:a4:10:72:9a:0c:90: b9:3f:2c:e9:4e:81:89:46:b7:96:8e:9c:39:b1:a3: 25:7e:ac:20:18:a4:35:cf:4d:f8:81:7d:04:cf:49: 0b:1b:71:75:97:eb:54:4d:b3:a8:b5:6a:6e:19:bd: 1a:b7:ce:3b:8c:e2:02:88:da:bc:b1:af:0d:ca:9f: 53:d3:29:79:1d:32:3c:f3:66:af:ba:c4:66:ec:96: 2d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5B:EC:39:54:B2:D4:E4:28:FB:39:E1:C9:34:EE:BF:DF:89:F3:AE X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:df:3c:d8:7d:ff:ac:6c:44:31:29:52:aa:15:f4:71:87:2b: 90:12:35:95:59:c9:92:02:28:ac:30:94:e5:22:0a:42:76:6c: 59:0c:12:4f:a4:05:aa:08:da:d1:71:a1:de:63:1b:c0:48:e9: 8d:7b:dd:6d:6b:85:b7:d1:ce:fa:a5:e3:8c:66:2b:67:c8:c9: ab:9c:bc:89:2c:0d:11:43:1a:60:cd:41:c8:30:9f:ea:ec:60: b7:3e:40:0a:73:b9:65:34:16:53:dd:5c:27:cd:e3:c9:9a:4f: af:ae:ff:3e:86:c1:13:bd:30:4a:0a:b8:be:ab:95:10:80:fd: d0:e7:a9:65:79:07:af:af:6c:49:18:15:66:58:0f:af:43:04: fd:8e:b3:97:1e:d7:29:bf:42:5b:74:3a:3f:06:2f:3e:d7:ea: d7:66:14:26:a6:2d:0d:f5:df:96:46:1a:15:19:fd:7a:9f:dc: 6d:04:c7:43:6b:6f:eb:63:f2:38:89:3f:ca:8a:5c:7a:b1:e0: c4:56:15:35:e2:38:a9:3d:70:34:e9:d9:37:d7:d2:a6:03:4a: d4:bb:2e:6c:ff:e9:4e:1e:7f:d7:6a:4d:fd:c1:b6:46:d3:8c: b6:5a:71:99:1b:1f:42:38:39:7b:86:ab:3f:23:ba:f9:1c:c2: 86:53:28:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwNzIwMTUzNDA1WhcNMjUwNzI3MTUzNDA1WjAYMRYwFAYD VQQDEw02ODdkMGM2ZC1iZmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqVfQycQItB3qtsiHmFoleB9gqx/spsW66IMVyvPF02HoYF4hbiYIsNfojM5S MoA5OUL+XJdQX2+cdSq2LeZ9cpigSrhvPezqmN8JlfP4UPp+ofgW8rzPpXjNhBTJ zPqkFxsHayTVUQZRkEimQS6uf0Ks5E2QjCAye/Wmuih50HBOqYgS5Tj2iqMp8wXF GRuHDtaSjU9PnFrAn5LcKl+CQYe+rpoTIugQlhzhcH2kEHKaDJC5PyzpToGJRreW jpw5saMlfqwgGKQ1z034gX0Ez0kLG3F1l+tUTbOotWpuGb0at847jOICiNq8sa8N yp9T0yl5HTI882avusRm7JYtSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtb7DlU stTkKPs54ck07r/fifOuMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq3zzYff+sbEQxKVKqFfRxhyuQEjWVWcmSAiisMJTlIgpCdmxZDBJP pAWqCNrRcaHeYxvASOmNe91ta4W30c76peOMZitnyMmrnLyJLA0RQxpgzUHIMJ/q 7GC3PkAKc7llNBZT3VwnzePJmk+vrv8+hsETvTBKCri+q5UQgP3Q56lleQevr2xJ GBVmWA+vQwT9jrOXHtcpv0JbdDo/Bi8+1+rXZhQmpi0N9d+WRhoVGf16n9xtBMdD a2/rY/I4iT/Kilx6seDEVhU14jipPXA06dk319KmA0rUuy5s/+lOHn/Xak39wbZG 04y2WnGZGx9CODl7hqs/I7r5HMKGUyja -----END CERTIFICATE-----Generated at Mon Jul 21 00:32:13 2025 by rpki-client