$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: SJHEDigVcXD0VzdnKzRzAkj/AKblvyodweDEoRJxbls= Subject key identifier: 86:E2:7D:8C:2E:ED:27:D0:03:C2:B7:0D:EC:65:BE:B9:53:ED:BC:AA Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0C8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C75 Signing time: Wed 02 Jul 2025 18:34:00 +0000 Manifest this update: Wed 02 Jul 2025 18:34:00 +0000 Manifest next update: Wed 09 Jul 2025 18:34:00 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: 4/kDft0P+ptpa3AlC4Kqa4LQL8EpAvsRiIA6a96zjlM=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3212 (0xc8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Jul 2 18:34:00 2025 GMT Not After : Jul 9 18:34:00 2025 GMT Subject: CN=68657b98-3586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:66:68:a5:2c:9a:da:98:fa:98:1f:84:78: 68:16:b7:d1:20:dd:c7:43:71:65:50:66:6c:65:b6: 03:90:a0:2c:80:41:8f:75:ca:73:75:24:9a:53:cb: 96:4a:5d:67:c0:2e:59:88:d8:b1:a8:6e:9c:69:19: 2e:6c:15:32:17:d9:cc:ee:8d:79:da:83:62:a5:39: 7c:ab:6e:a2:2f:33:17:2e:f2:08:4d:1e:83:5b:67: 1d:2f:5b:75:2d:b3:21:ba:cf:9e:8b:ef:da:e3:8e: 13:e6:98:de:19:88:1a:a5:c7:51:54:f3:12:d1:ba: 42:ba:7c:47:25:6f:cf:8b:9c:5e:f1:ae:82:86:05: 6d:aa:8d:7e:87:08:db:c6:3e:94:1a:11:b7:3a:38: 07:27:fb:09:66:79:25:c2:c0:98:2b:ec:74:99:05: 4f:24:67:66:4c:01:8f:6d:ce:2f:07:90:fc:fa:bb: 66:91:44:4b:0c:34:a9:fc:41:b4:2d:70:da:00:c1: c5:64:7f:fa:6c:fe:f6:a3:df:3e:4b:29:76:69:10: 94:63:f8:51:87:a0:ba:1a:61:1a:72:5b:ad:7d:6a: 1b:81:33:4b:d7:06:f8:60:87:52:88:92:be:07:b2: c8:2f:6e:8e:70:0d:5c:24:94:e0:16:94:96:8e:d5: 98:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E2:7D:8C:2E:ED:27:D0:03:C2:B7:0D:EC:65:BE:B9:53:ED:BC:AA X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:1a:a4:8f:aa:3c:b3:fb:58:2e:19:91:60:e7:28:36:8e:1a: a3:a9:ff:f7:96:f1:96:92:9c:a7:ca:aa:a8:27:ba:83:c7:f5: 2e:2a:2f:cd:e2:7c:74:74:03:43:e9:75:3b:73:78:a2:0a:d6: 60:76:15:77:e7:1a:31:83:9f:7c:c8:16:a4:11:ff:1c:e3:e2: 78:83:5c:f8:b5:34:2d:e8:9e:6e:14:f8:59:ac:5e:ac:21:f3: a2:d9:72:5b:e4:98:64:bb:3f:9e:36:48:2e:f4:f3:4e:6d:bd: 8e:fa:6f:0f:0b:02:ed:a5:50:8d:82:f3:8b:d3:72:87:91:23: e3:54:db:76:4c:e6:ad:44:c5:1a:4d:88:a7:a4:28:b5:eb:fa: 8e:e5:35:d0:45:95:65:51:b1:e3:aa:5f:42:a7:2f:8c:97:56: a7:52:47:8a:6c:7e:18:18:ca:38:d1:a7:f8:b5:82:ac:b2:d5: ce:e3:29:31:0e:27:b1:b1:6c:ce:8a:a5:34:a1:29:f9:c6:d6: 28:fa:90:0e:7f:78:b1:b7:5c:65:9a:75:04:55:a7:ef:e6:dc: 82:93:7e:6a:ac:bb:58:ba:ff:fe:6f:64:9d:74:fa:76:a0:cb: da:d4:d2:f8:6c:9e:e9:44:09:65:da:b3:fa:b2:79:71:37:26: 5e:fc:51:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwNzAyMTgzNDAwWhcNMjUwNzA5MTgzNDAwWjAYMRYwFAYD VQQDEw02ODY1N2I5OC0zNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vZmaKUsmtqY+pgfhHhoFrfRIN3HQ3FlUGZsZbYDkKAsgEGPdcpzdSSaU8uW Sl1nwC5ZiNixqG6caRkubBUyF9nM7o152oNipTl8q26iLzMXLvIITR6DW2cdL1t1 LbMhus+ei+/a444T5pjeGYgapcdRVPMS0bpCunxHJW/Pi5xe8a6ChgVtqo1+hwjb xj6UGhG3OjgHJ/sJZnklwsCYK+x0mQVPJGdmTAGPbc4vB5D8+rtmkURLDDSp/EG0 LXDaAMHFZH/6bP72o98+Syl2aRCUY/hRh6C6GmEaclutfWobgTNL1wb4YIdSiJK+ B7LIL26OcA1cJJTgFpSWjtWYUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbifYwu 7SfQA8K3DexlvrlT7byqMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfGqSPqjyz+1guGZFg5yg2jhqjqf/3lvGWkpynyqqoJ7qDx/UuKi/N 4nx0dAND6XU7c3iiCtZgdhV35xoxg598yBakEf8c4+J4g1z4tTQt6J5uFPhZrF6s IfOi2XJb5Jhkuz+eNkgu9PNObb2O+m8PCwLtpVCNgvOL03KHkSPjVNt2TOatRMUa TYinpCi16/qO5TXQRZVlUbHjql9Cpy+Ml1anUkeKbH4YGMo40af4tYKsstXO4ykx DiexsWzOiqU0oSn5xtYo+pAOf3ixt1xlmnUEVafv5tyCk35qrLtYuv/+b2SddPp2 oMva1NL4bJ7pRAll2rP6snlxNyZe/FGW -----END CERTIFICATE-----Generated at Thu Jul 3 02:57:48 2025 by rpki-client