$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: uIgW0Rbng23w95KM0E/924XW/AzrBAoF6XQjVoKqV9o= Subject key identifier: C7:91:DE:7A:B8:BC:6B:34:DA:B8:5A:05:FA:7C:97:94:EB:31:92:95 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 011F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 0118 Signing time: Tue 01 Jul 2025 05:21:52 +0000 Manifest this update: Tue 01 Jul 2025 05:21:52 +0000 Manifest next update: Tue 08 Jul 2025 05:21:52 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: A20uLT4q88ej9uJEdOw+91cdb9uovZwCn7/QxEXcBqw=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: 8zPxRe7MaH+hS0FNXaje7YOQ+Hnyx7RIa4mbg2ZFLUE=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Oms7A+5CbFEtaIgmT8kB8Ycz88DQ95dp9Wjdw3xeV+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 287 (0x11f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Jul 1 05:21:52 2025 GMT Not After : Jul 8 05:21:52 2025 GMT Subject: CN=68637070-c403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:17:d7:62:57:b1:de:69:48:6b:dd:1e:ac: 55:d4:d3:93:a0:25:c8:0b:2f:64:c7:f4:70:59:6b: 27:9e:df:2c:5e:55:4f:45:3d:0b:6f:b7:da:8e:4f: ec:db:50:f5:91:22:14:3c:6e:a1:3b:4b:e7:a1:b9: 8d:e1:d8:e8:88:40:eb:54:ec:f3:e1:98:9f:08:b3: 50:f8:3f:59:32:03:9d:8c:8b:11:66:30:09:e9:4e: 47:a2:00:7f:03:71:d8:ee:48:60:a0:bc:52:7a:a3: ee:43:b9:28:6a:c3:ac:c8:d5:ca:50:2c:df:41:14: 77:ce:4d:73:c0:b2:32:b1:ff:f5:6c:9c:e2:2d:da: f6:33:17:f2:29:64:90:aa:c6:7b:0b:d0:0e:e9:c2: 17:52:1e:21:28:52:cf:1f:19:fa:26:93:7c:8f:98: 6a:3a:dc:e4:dc:0a:58:15:b8:0d:d9:9b:ce:aa:1e: 18:81:b5:ae:c5:db:9c:0e:eb:81:d9:9c:ef:87:67: 28:89:5a:3d:90:e9:10:e0:7b:e0:2c:f7:16:82:14: 8c:21:ac:ce:29:90:43:f6:77:74:23:16:63:9a:8a: 8c:40:9d:05:d4:ca:bb:a4:00:f3:44:90:f4:9b:8b: f9:f5:68:e2:92:b0:6d:cc:e4:4d:36:02:f5:04:36: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:91:DE:7A:B8:BC:6B:34:DA:B8:5A:05:FA:7C:97:94:EB:31:92:95 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6b:25:48:df:3f:64:49:d4:26:46:83:1b:11:8f:c9:c2:9f: ed:f1:c4:88:ec:9e:80:05:7d:7c:1a:a9:b2:a8:39:02:45:20: 0a:61:a2:02:1c:48:cc:d1:1e:20:f0:7f:b1:a2:f8:28:09:8a: 3d:78:3a:10:ab:a0:0c:86:a4:50:73:f6:d4:2a:6d:44:99:98: 73:0c:ef:23:31:52:75:68:1e:32:7f:ff:60:7a:9a:6e:d2:21: 04:a2:c1:8b:ea:7c:63:1d:d6:2e:93:77:a6:40:fb:8e:6e:3f: e2:dc:e8:00:a5:e6:84:60:4a:92:97:54:f6:3e:9d:65:c8:17: 57:e5:a9:a7:8a:8d:d7:fe:31:f6:a4:dc:a2:fc:df:92:20:81: b7:4f:38:7f:4c:03:57:dd:57:4b:b6:cd:f8:8e:cf:7f:ef:25: d5:90:5d:ac:2c:c7:1f:d8:66:df:44:3e:5e:dc:f6:c9:07:fb: 30:f6:15:ee:dc:13:3f:48:bf:af:fa:23:47:6c:54:d3:07:d6: b8:ab:99:fb:a0:af:30:69:b2:60:dd:ae:d3:95:31:47:b2:13: b7:46:23:81:44:b8:d2:46:a4:7d:36:1c:6c:ff:2d:7a:a1:29: a9:e3:24:f0:01:be:ba:b7:8b:b8:49:3d:4d:ee:fa:5d:ee:03: 35:84:58:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwNzAxMDUyMTUyWhcNMjUwNzA4MDUyMTUyWjAYMRYwFAYD VQQDEw02ODYzNzA3MC1jNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsacX12JXsd5pSGvdHqxV1NOToCXICy9kx/RwWWsnnt8sXlVPRT0Lb7fajk/s 21D1kSIUPG6hO0vnobmN4djoiEDrVOzz4ZifCLNQ+D9ZMgOdjIsRZjAJ6U5HogB/ A3HY7khgoLxSeqPuQ7koasOsyNXKUCzfQRR3zk1zwLIysf/1bJziLdr2MxfyKWSQ qsZ7C9AO6cIXUh4hKFLPHxn6JpN8j5hqOtzk3ApYFbgN2ZvOqh4YgbWuxducDuuB 2Zzvh2coiVo9kOkQ4HvgLPcWghSMIazOKZBD9nd0IxZjmoqMQJ0F1Mq7pADzRJD0 m4v59WjikrBtzORNNgL1BDYv7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMeR3nq4 vGs02rhaBfp8l5TrMZKVMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaayVI3z9kSdQmRoMbEY/Jwp/t8cSI7J6ABX18GqmyqDkCRSAKYaIC HEjM0R4g8H+xovgoCYo9eDoQq6AMhqRQc/bUKm1EmZhzDO8jMVJ1aB4yf/9geppu 0iEEosGL6nxjHdYuk3emQPuObj/i3OgApeaEYEqSl1T2Pp1lyBdX5amnio3X/jH2 pNyi/N+SIIG3Tzh/TANX3VdLts34js9/7yXVkF2sLMcf2GbfRD5e3PbJB/sw9hXu 3BM/SL+v+iNHbFTTB9a4q5n7oK8wabJg3a7TlTFHshO3RiOBRLjSRqR9Nhxs/y16 oSmp4yTwAb66t4u4ST1N7vpd7gM1hFjq -----END CERTIFICATE-----Generated at Wed Jul 2 01:26:11 2025 by rpki-client