$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: uLhP+90lkQHJ5oNozaRpvDJVJFPyqXYJgAp7CLvxBwA= Subject key identifier: 6A:84:FD:11:BB:26:B2:57:3C:F2:54:6C:BA:97:C4:76:73:D4:C9:A4 Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CA5 Signing time: Mon 30 Jun 2025 18:21:51 +0000 Manifest this update: Mon 30 Jun 2025 18:21:51 +0000 Manifest next update: Mon 07 Jul 2025 18:21:51 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: k7DDWNYaW7jZJBufv8Vcb/pY4hguXVt3krS00KVK9ps=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Jun 30 18:21:51 2025 GMT Not After : Jul 7 18:21:51 2025 GMT Subject: CN=6862d5bf-1480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fe:77:34:a2:6c:8c:b8:4a:72:ce:b9:0d:50: e0:bd:3d:df:08:d0:f4:4a:e1:24:84:8c:07:0e:07: b6:1d:8a:d6:66:95:e5:18:d7:27:61:b3:c9:e3:54: 9d:44:3d:50:4f:b4:75:8f:41:b6:2b:0f:95:c8:e2: 2b:e9:d9:19:07:82:de:d7:6e:08:b6:9c:f8:f7:dc: d7:a4:bf:2b:e5:29:f2:1f:95:1a:1f:a1:73:3f:10: 3e:65:3e:9e:a2:25:c7:c2:93:10:81:27:59:b6:e3: 40:90:a2:a3:3a:e4:2d:16:63:df:87:bf:22:71:02: 4b:8a:15:45:3a:0a:56:a7:a3:00:2f:de:95:00:14: f7:42:cd:30:d6:65:96:b1:1b:51:f8:e2:57:69:10: d3:77:2e:d9:25:19:49:c1:44:05:c1:91:c3:af:4b: ca:98:1a:b7:11:62:5b:54:27:7d:7a:5f:03:9d:02: 27:48:0f:1b:ee:2e:7c:0e:a8:c9:cc:3d:e0:77:ba: 48:3d:3c:02:bb:ba:07:63:aa:56:06:0a:2b:e5:01: 3b:ba:47:ca:88:6c:6d:ef:93:76:10:49:10:0c:5d: 8e:7a:fd:39:73:2f:0d:28:84:e2:f5:13:1d:9c:8d: 1e:09:a9:7a:70:0f:e2:29:1e:25:60:95:3f:2a:ff: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:84:FD:11:BB:26:B2:57:3C:F2:54:6C:BA:97:C4:76:73:D4:C9:A4 X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:04:ca:ed:02:12:f4:1e:2b:68:cb:4b:cf:73:09:ad:74:40: fc:a2:e8:6a:b0:d3:c6:13:1b:cf:a2:54:43:ea:c0:b9:86:6e: 35:31:05:16:fe:49:19:43:fc:54:3e:1a:95:86:b6:67:50:3b: 17:b1:ce:a0:71:5c:77:73:f8:6e:b9:35:17:a8:84:a1:0e:86: 1c:04:e7:47:02:66:33:2b:d6:b6:55:3f:cf:61:c3:ce:31:42: 08:8b:4e:22:01:a8:2f:f9:8d:a2:0c:c3:49:81:75:f7:dc:31: c5:50:98:e6:48:82:19:1f:27:85:6c:f0:7f:56:4d:b5:58:ca: 4d:36:55:d4:71:fa:03:ae:52:af:f1:43:73:c3:79:b7:35:cc: 0b:9f:c4:3f:5b:27:d3:58:78:3f:89:0e:02:40:01:38:f1:7f: 5d:01:10:b9:89:68:2e:ac:fe:8a:75:a9:95:eb:28:46:90:2e: f7:0f:e0:6f:5b:b5:0f:51:95:1d:47:29:58:f0:a6:58:e6:57: 21:74:b5:aa:86:75:0b:83:17:a2:27:64:f5:09:f6:c8:2b:d5: 25:50:a5:52:9e:90:a5:32:4a:54:1d:d7:5d:97:65:c4:2f:bf: f9:3c:63:ca:fa:a2:8c:12:60:16:d8:76:6f:3c:6f:96:a8:1d: 4d:0a:c4:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwNjMwMTgyMTUxWhcNMjUwNzA3MTgyMTUxWjAYMRYwFAYD VQQDEw02ODYyZDViZi0xNDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwf53NKJsjLhKcs65DVDgvT3fCND0SuEkhIwHDge2HYrWZpXlGNcnYbPJ41Sd RD1QT7R1j0G2Kw+VyOIr6dkZB4Le124Itpz499zXpL8r5SnyH5UaH6FzPxA+ZT6e oiXHwpMQgSdZtuNAkKKjOuQtFmPfh78icQJLihVFOgpWp6MAL96VABT3Qs0w1mWW sRtR+OJXaRDTdy7ZJRlJwUQFwZHDr0vKmBq3EWJbVCd9el8DnQInSA8b7i58DqjJ zD3gd7pIPTwCu7oHY6pWBgor5QE7ukfKiGxt75N2EEkQDF2Oev05cy8NKITi9RMd nI0eCal6cA/iKR4lYJU/Kv/A0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGqE/RG7 JrJXPPJUbLqXxHZz1MmkMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMBMrtAhL0Hitoy0vPcwmtdED8ouhqsNPGExvPolRD6sC5hm41MQUW /kkZQ/xUPhqVhrZnUDsXsc6gcVx3c/huuTUXqIShDoYcBOdHAmYzK9a2VT/PYcPO MUIIi04iAagv+Y2iDMNJgXX33DHFUJjmSIIZHyeFbPB/Vk21WMpNNlXUcfoDrlKv 8UNzw3m3NcwLn8Q/WyfTWHg/iQ4CQAE48X9dARC5iWgurP6KdamV6yhGkC73D+Bv W7UPUZUdRylY8KZY5lchdLWqhnULgxeiJ2T1CfbIK9UlUKVSnpClMkpUHdddl2XE L7/5PGPK+qKMEmAW2HZvPG+WqB1NCsQ/ -----END CERTIFICATE-----Generated at Mon Jun 30 20:29:51 2025 by rpki-client