$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: Tk7Wc7+ws3X2WpIlZbBC8837eEq6H+GXyYEbs/DJsr8= Subject key identifier: 37:21:98:0A:8C:BE:74:FF:79:6E:AA:95:C9:F1:7A:02:02:65:52:E0 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 23 Signing time: Sat 19 Jul 2025 08:06:35 +0000 Manifest this update: Sat 19 Jul 2025 08:06:34 +0000 Manifest next update: Sat 26 Jul 2025 08:06:34 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: OaPNe122CRNcqkiw9vEs+J1xGtDoVDlKQs8jtG20SdI=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Jul 19 08:06:34 2025 GMT Not After : Jul 26 08:06:34 2025 GMT Subject: CN=687b520b-3dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:70:5d:d5:0b:01:93:a7:2c:a3:da:e1:02:8e: 43:df:04:a1:ea:83:71:db:6a:52:3b:3c:fc:ba:ff: b2:5c:a2:33:d8:fd:18:2e:fb:12:ff:41:2e:64:0d: 22:d7:9a:7d:46:af:ef:2c:fb:18:18:42:bb:4e:ac: ce:c6:85:c5:8f:00:4f:d9:01:0f:5c:d0:16:0c:71: 0d:e1:f0:8f:4f:8a:0a:ef:d5:bf:db:10:b0:16:72: 72:1f:43:fc:86:63:8e:03:09:06:62:61:0c:f1:f0: c5:f8:e6:12:d1:a5:44:77:74:ad:ed:e2:69:9a:56: 0a:73:63:98:99:a1:03:7b:9e:3a:b3:9b:1d:71:db: e5:34:1c:93:96:56:ab:89:b9:15:03:4e:df:36:e5: bf:fc:4d:7f:31:2b:1b:79:f9:79:d1:25:12:b6:17: 0f:a7:18:f2:9d:eb:d4:36:44:cb:ac:af:4b:8d:5b: a7:0e:70:d8:14:2b:8c:e5:e1:c6:ea:d8:72:a0:ba: c5:db:92:0a:bf:6a:78:13:4e:94:f7:35:a5:f8:8b: f7:b6:03:9e:b4:32:08:9a:3e:bb:68:a1:42:af:25: 11:2f:58:3a:e4:78:0c:7a:40:31:90:a1:14:00:8b: fe:e2:63:0f:99:ab:00:9a:2e:4b:c5:d3:d9:3d:dc: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:21:98:0A:8C:BE:74:FF:79:6E:AA:95:C9:F1:7A:02:02:65:52:E0 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bb:d0:81:d7:24:f2:33:12:23:b3:12:3a:fe:ce:8a:18:aa: 3b:76:27:01:81:36:ee:3f:72:4e:f0:3b:73:4d:2e:9c:eb:0c: 19:4f:59:64:8d:26:0a:39:59:05:1a:71:ab:64:f0:98:f7:55: 0d:75:76:36:ca:30:75:21:f0:27:b8:e3:31:d8:91:81:4c:52: 71:7e:e4:d7:9f:9b:90:4b:3b:c1:81:47:38:e1:0f:5f:a0:15: 9c:3f:37:60:7d:fe:7f:78:5d:c2:75:12:cb:8e:d9:05:1a:4a: 53:30:40:b2:96:71:6d:f7:60:25:ef:f1:f9:e5:ea:cd:13:17: a1:d3:31:7e:e4:a1:37:c9:21:75:40:51:52:46:8e:4f:7d:d0: 3b:38:0c:b3:41:43:c2:11:2b:f0:fd:3e:a4:d2:f2:f3:e6:73: 67:d6:6b:45:b7:ba:99:8d:9e:06:bb:1d:ca:6a:4d:c2:b3:81: 98:02:db:53:54:fc:6b:27:67:c7:23:c3:63:98:e4:9b:c2:f8: b9:9a:d5:90:ae:a8:e1:58:00:0c:83:61:9b:2e:b9:cc:c6:51: 77:c5:6a:bb:60:ad:74:47:47:da:39:93:8b:f0:63:bd:ba:d9: 49:99:82:87:3c:73:84:37:6e:4a:f0:e0:40:52:e1:e4:75:52: f5:82:13:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA3MTkwODA2MzRaFw0yNTA3MjYwODA2MzRaMBgxFjAUBgNV BAMTDTY4N2I1MjBiLTNkYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHcF3VCwGTpyyj2uECjkPfBKHqg3HbalI7PPy6/7JcojPY/Rgu+xL/QS5kDSLX mn1Gr+8s+xgYQrtOrM7GhcWPAE/ZAQ9c0BYMcQ3h8I9Pigrv1b/bELAWcnIfQ/yG Y44DCQZiYQzx8MX45hLRpUR3dK3t4mmaVgpzY5iZoQN7njqzmx1x2+U0HJOWVquJ uRUDTt825b/8TX8xKxt5+XnRJRK2Fw+nGPKd69Q2RMusr0uNW6cOcNgUK4zl4cbq 2HKgusXbkgq/angTTpT3NaX4i/e2A560MgiaPrtooUKvJREvWDrkeAx6QDGQoRQA i/7iYw+ZqwCaLkvF09k93DV9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNyGYCoy+ dP95bqqVyfF6AgJlUuAwHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIq70IHXJPIzEiOzEjr+zooYqjt2JwGBNu4/ck7wO3NNLpzrDBlPWWSN Jgo5WQUacatk8Jj3VQ11djbKMHUh8Ce44zHYkYFMUnF+5Nefm5BLO8GBRzjhD1+g FZw/N2B9/n94XcJ1EsuO2QUaSlMwQLKWcW33YCXv8fnl6s0TF6HTMX7koTfJIXVA UVJGjk990Ds4DLNBQ8IRK/D9PqTS8vPmc2fWa0W3upmNnga7HcpqTcKzgZgC21NU /GsnZ8cjw2OY5JvC+Lma1ZCuqOFYAAyDYZsuuczGUXfFartgrXRHR9o5k4vwY726 2UmZgoc8c4Q3bkrw4EBS4eR1UvWCE4s= -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:21 2025 by rpki-client