$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: pmIUywm2d7XdDlSUWmN+J1AJmnheknLvuBI0PsWTkPw= Subject key identifier: 26:61:BB:73:66:32:10:BC:3C:77:D4:88:5D:EA:FA:19:AE:84:91:92 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CC6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CC0 Signing time: Fri 22 Aug 2025 18:15:21 +0000 Manifest this update: Fri 22 Aug 2025 18:15:21 +0000 Manifest next update: Fri 29 Aug 2025 18:15:21 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: Iz4za/RBy3PmZbewKJ19SXLxWl6st1qSifx1CTCRRv4=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3270 (0xcc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Aug 22 18:15:21 2025 GMT Not After : Aug 29 18:15:21 2025 GMT Subject: CN=68a8b3b9-1202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0e:21:c4:74:e3:05:25:d9:5e:2c:ad:46:29: 21:72:12:bf:30:d8:a7:85:fa:85:27:28:a1:c6:50: e7:fa:04:b7:57:7e:59:f0:8e:72:7a:e4:e8:ed:99: 49:32:64:64:96:6e:b0:94:c3:92:6d:d3:0d:28:ee: 93:f5:31:9e:44:e5:6d:82:99:65:a8:9b:2f:1a:49: 95:18:20:1a:e1:0f:74:d3:7f:c3:af:4d:03:68:a9: 76:d1:37:c2:3d:7a:15:58:9b:5e:50:af:79:11:1f: 7e:4c:af:31:0b:78:9b:b4:67:a0:08:cb:fa:57:61: 2a:8f:8d:76:a0:60:56:f5:e7:a2:3b:dc:9b:14:00: 40:82:53:51:17:0a:a8:e0:8f:a6:48:ef:10:70:af: dd:3c:63:27:76:e3:78:e8:4b:0e:09:bc:cf:02:e9: da:69:9e:b7:f8:8a:e4:78:6f:df:62:a6:3e:4c:a9: f0:b8:15:f3:5b:4e:03:f3:0b:c0:75:49:c3:29:90: 2a:6c:4e:f4:63:da:86:0a:0b:a6:69:14:77:53:29: af:5a:59:60:f0:f5:c6:28:ad:c8:c3:ce:e1:45:9d: 69:27:b9:38:9d:ee:a0:b3:ed:07:03:dc:85:4c:a7: 68:18:53:12:0b:a6:33:12:df:34:90:a0:4b:32:1a: c0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:61:BB:73:66:32:10:BC:3C:77:D4:88:5D:EA:FA:19:AE:84:91:92 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:8a:1e:8b:b1:1d:fd:e3:b1:52:ed:0d:5b:f4:af:c0:2e:32: de:44:21:c2:f9:c7:f8:13:7b:51:cc:82:5f:ed:b6:a3:3a:6b: f7:98:1f:eb:f4:12:d2:7e:18:7b:6b:8d:85:22:5b:fc:31:8f: 05:58:29:a3:55:09:09:e2:86:d0:56:af:37:a8:36:22:98:f1: cd:91:be:91:69:19:d0:2e:e8:06:62:56:2c:2b:41:87:dc:f2: 03:bb:c6:8c:41:a4:01:89:28:45:bf:65:00:ae:a1:b9:32:6b: e4:54:13:70:b6:cd:4f:3e:aa:43:db:a2:51:83:75:bb:ae:8a: c7:dd:04:2d:88:fa:44:2f:eb:0e:92:f7:8b:8c:9a:ab:f9:a3: 3d:08:52:c3:9b:1d:94:a4:41:98:b8:03:99:1d:4e:e7:2a:1f: b5:1c:92:13:41:f4:e3:e1:04:97:ec:cb:f4:e6:2b:ec:dd:b5: 79:81:a2:24:95:b7:f5:36:45:cb:58:e2:7c:d0:4a:3e:dd:4c: 78:63:79:9a:e5:bd:a1:0a:18:c9:bc:c3:41:40:80:2d:b7:02: 71:02:63:d6:09:ee:7c:c0:19:ac:7d:29:53:46:b1:50:11:09: 35:62:c7:2b:8a:d6:86:b4:7f:a8:ff:58:74:03:9c:2c:e3:b3: 31:93:26:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwODIyMTgxNTIxWhcNMjUwODI5MTgxNTIxWjAYMRYwFAYD VQQDEw02OGE4YjNiOS0xMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAng4hxHTjBSXZXiytRikhchK/MNinhfqFJyihxlDn+gS3V35Z8I5yeuTo7ZlJ MmRklm6wlMOSbdMNKO6T9TGeROVtgpllqJsvGkmVGCAa4Q9003/Dr00DaKl20TfC PXoVWJteUK95ER9+TK8xC3ibtGegCMv6V2Eqj412oGBW9eeiO9ybFABAglNRFwqo 4I+mSO8QcK/dPGMnduN46EsOCbzPAunaaZ63+IrkeG/fYqY+TKnwuBXzW04D8wvA dUnDKZAqbE70Y9qGCgumaRR3UymvWllg8PXGKK3Iw87hRZ1pJ7k4ne6gs+0HA9yF TKdoGFMSC6YzEt80kKBLMhrABQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCZhu3Nm MhC8PHfUiF3q+hmuhJGSMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiih6LsR3947FS7Q1b9K/ALjLeRCHC+cf4E3tRzIJf7bajOmv3mB/r 9BLSfhh7a42FIlv8MY8FWCmjVQkJ4obQVq83qDYimPHNkb6RaRnQLugGYlYsK0GH 3PIDu8aMQaQBiShFv2UArqG5MmvkVBNwts1PPqpD26JRg3W7rorH3QQtiPpEL+sO kveLjJqr+aM9CFLDmx2UpEGYuAOZHU7nKh+1HJITQfTj4QSX7Mv05ivs3bV5gaIk lbf1NkXLWOJ80Eo+3Ux4Y3ma5b2hChjJvMNBQIAttwJxAmPWCe58wBmsfSlTRrFQ EQk1YscritaGtH+o/1h0A5ws47MxkybK -----END CERTIFICATE-----Generated at Sat Aug 23 18:41:06 2025 by rpki-client