$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft File: fSkuhkI7U8Czc7eZZYghkTSp5hA.mft (raw, json) Hash identifier: M8enyW8+2D3ceAudgzLVX0/D8evIAiEbZfjCFy3FQ9E= Subject key identifier: 84:5F:E0:9E:39:38:49:DB:69:4E:8F:73:63:66:37:21:66:28:72:71 Authority key identifier: 7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 Certificate issuer: /CN=A91A3430/serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Certificate serial: 0CF2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft Manifest number: 0CE9 Signing time: Wed 02 Jul 2025 18:19:17 +0000 Manifest this update: Wed 02 Jul 2025 18:19:17 +0000 Manifest next update: Wed 09 Jul 2025 18:19:17 +0000 Files and hashes: 1: fSkuhkI7U8Czc7eZZYghkTSp5hA.crl (hash: HBys3tjzITXnWV2dFxrN+wf/BU2Iw958qYPCySej4ts=) 2: 7B3163F0072A11EA9E314D4CC4F9AE02.roa (hash: 8KRCIYlWeIU1RFVFOTA+MnkOIQ/xaefXlo2pRQaFi20=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3314 (0xcf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3430, serialNumber=7D292E86423B53C0B373B7996588219134A9E610 Validity Not Before: Jul 2 18:19:17 2025 GMT Not After : Jul 9 18:19:17 2025 GMT Subject: CN=68657825-5fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:29:4e:76:93:d2:b5:d8:8d:66:e4:6e:8c:86: c9:18:88:10:b0:d9:26:25:e7:69:35:39:d6:75:0c: 8b:b0:ee:56:e4:00:b6:76:38:d2:ee:b8:08:00:7d: dd:6e:e1:e0:3f:1a:97:ee:d1:f9:9f:34:eb:aa:72: f4:75:6e:0a:78:ba:f0:a7:7d:b1:04:36:da:17:71: 69:22:02:96:a8:05:de:69:40:55:49:0d:54:e7:cb: ec:ab:54:7b:59:f1:b4:d6:bd:31:2d:6b:9a:2f:ac: d1:97:62:68:6b:78:26:01:09:94:52:17:a0:ef:bf: 32:3c:45:1d:1c:36:36:0d:f3:91:0b:aa:c9:f0:79: cd:fc:80:db:a2:6b:7d:f3:34:44:55:6b:67:99:36: f3:f4:96:69:f9:12:ec:0d:1c:10:29:26:66:c2:dd: ac:db:e6:ad:b3:5b:b6:df:4c:cf:bd:6b:01:c0:5c: f0:03:81:05:e3:4c:48:1d:52:b2:a5:7d:8a:fc:aa: 9b:25:cd:8e:51:2e:8b:18:7c:f9:6d:c6:d4:3c:aa: d3:10:c0:f3:fa:6a:3d:3e:13:9f:dc:c3:88:32:70: bb:46:2b:99:16:d6:a4:f5:75:d6:e5:c1:6e:60:b3: 52:42:91:54:4a:da:c8:64:37:60:49:8f:09:0b:56: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5F:E0:9E:39:38:49:DB:69:4E:8F:73:63:66:37:21:66:28:72:71 X509v3 Authority Key Identifier: keyid:7D:29:2E:86:42:3B:53:C0:B3:73:B7:99:65:88:21:91:34:A9:E6:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSkuhkI7U8Czc7eZZYghkTSp5hA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3430/86AC89D0E87B11E9A1ED5B47C4F9AE02/fSkuhkI7U8Czc7eZZYghkTSp5hA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8b:cc:96:bc:83:4e:e0:56:04:7b:88:b0:16:bb:6d:6f:7a: 65:cb:32:ad:e4:13:1c:cd:61:cb:b2:cc:c7:f2:08:96:54:46: 31:e5:12:8f:63:c6:66:2b:dd:5a:3a:73:fb:64:24:f0:b3:8d: 6c:58:f4:4f:f7:50:95:83:86:c2:ae:39:6e:3c:5e:30:82:f6: e6:82:a9:43:d0:ae:fd:6f:74:05:ca:fa:e5:e8:9c:92:5a:e4: 25:38:35:d1:2b:2e:a8:37:b8:8a:47:a6:77:c4:97:bd:92:21: 6f:ee:c7:94:14:82:25:9f:81:e9:7e:6d:d7:f2:ba:64:f3:9a: b4:13:58:cc:8f:28:13:33:fb:01:37:66:33:ea:c2:22:4d:19: 61:fa:0e:79:21:9b:46:e5:20:60:db:b0:df:40:76:99:67:d3: 55:b5:67:79:4d:f5:7e:1d:c2:7e:4f:89:42:02:f5:f7:3b:48: c0:5a:62:96:9e:f1:b1:2b:88:90:97:35:95:7c:bb:66:82:88: 23:5c:37:49:3a:a3:82:3e:8e:b8:d8:25:c9:51:07:4b:54:28: d1:8a:70:0f:a3:ea:3a:da:2a:14:3b:cb:df:0a:4d:5e:15:d6: 4d:61:54:cf:1b:2d:57:94:47:22:bc:93:48:f9:77:ba:a0:b0: fc:6f:9f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTM0MzAxMTAvBgNVBAUTKDdEMjkyRTg2NDIzQjUzQzBCMzczQjc5OTY1ODgyMTkx MzRBOUU2MTAwHhcNMjUwNzAyMTgxOTE3WhcNMjUwNzA5MTgxOTE3WjAYMRYwFAYD VQQDEw02ODY1NzgyNS01ZmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ilOdpPStdiNZuRujIbJGIgQsNkmJedpNTnWdQyLsO5W5AC2djjS7rgIAH3d buHgPxqX7tH5nzTrqnL0dW4KeLrwp32xBDbaF3FpIgKWqAXeaUBVSQ1U58vsq1R7 WfG01r0xLWuaL6zRl2Joa3gmAQmUUheg778yPEUdHDY2DfORC6rJ8HnN/IDbomt9 8zREVWtnmTbz9JZp+RLsDRwQKSZmwt2s2+ats1u230zPvWsBwFzwA4EF40xIHVKy pX2K/KqbJc2OUS6LGHz5bcbUPKrTEMDz+mo9PhOf3MOIMnC7RiuZFtak9XXW5cFu YLNSQpFUStrIZDdgSY8JC1YW+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRf4J45 OEnbaU6Pc2NmNyFmKHJxMB8GA1UdIwQYMBaAFH0pLoZCO1PAs3O3mWWIIZE0qeYQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzQzMC84NkFDODlEMEU4 N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4Q3pjN2VaWllnaGtUU3A1 aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTa3Voa0k3VThDemM3ZVpaWWdoa1RTcDVoQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MzQzMC84NkFDODlEMEU4N0IxMUU5QTFFRDVCNDdDNEY5QUUwMi9mU2t1aGtJN1U4 Q3pjN2VaWllnaGtUU3A1aEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOi8yWvINO4FYEe4iwFrttb3plyzKt5BMczWHLsszH8giWVEYx5RKP Y8ZmK91aOnP7ZCTws41sWPRP91CVg4bCrjluPF4wgvbmgqlD0K79b3QFyvrl6JyS WuQlODXRKy6oN7iKR6Z3xJe9kiFv7seUFIIln4Hpfm3X8rpk85q0E1jMjygTM/sB N2Yz6sIiTRlh+g55IZtG5SBg27DfQHaZZ9NVtWd5TfV+HcJ+T4lCAvX3O0jAWmKW nvGxK4iQlzWVfLtmgogjXDdJOqOCPo642CXJUQdLVCjRinAPo+o62ioUO8vfCk1e FdZNYVTPGy1XlEcivJNI+Xe6oLD8b5// -----END CERTIFICATE-----Generated at Thu Jul 3 10:04:06 2025 by rpki-client