$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: wBbuNEodWdQj64TjGMG6KvHX8BEygetwJKrQmS0I0CM= Subject key identifier: D4:8D:F1:FD:9D:91:FD:0C:7B:C5:18:C0:A7:14:1D:88:00:A7:86:3E Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 07B6 Signing time: Fri 22 Aug 2025 21:24:37 +0000 Manifest this update: Fri 22 Aug 2025 21:24:36 +0000 Manifest next update: Fri 29 Aug 2025 21:24:36 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: id/iWRMnWFLnvWeE09ER+e91WakrBnLltXuX2bp7Okk=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Aug 22 21:24:36 2025 GMT Not After : Aug 29 21:24:36 2025 GMT Subject: CN=68a8e014-3aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:18:af:e1:ee:85:6f:dc:70:11:67:84:2a: 59:a6:d8:62:d3:c9:a5:b7:d9:d2:bb:5d:12:64:a2: 96:81:93:fa:5d:6f:21:b3:01:4e:4f:0d:74:66:6c: 31:b6:08:31:7a:8f:8b:0d:e5:5a:3a:4d:88:4d:64: cc:18:dd:b8:67:02:c4:9f:af:66:79:f5:cd:88:99: 18:7e:c8:d6:09:91:65:d9:ac:8d:88:6c:65:a7:88: dd:a1:07:46:38:3d:0f:33:ec:0a:01:4e:d4:0a:94: df:74:9d:bd:a8:89:06:c9:70:72:28:f5:04:62:55: 2e:eb:d8:64:92:f9:91:28:66:ff:b5:8f:23:15:b0: be:32:07:69:70:64:3c:9d:60:0e:be:4f:31:33:39: 2c:af:93:87:52:d6:8e:87:7f:5f:5e:07:d7:9e:50: cc:0f:23:4b:44:d4:7a:52:4a:99:e5:32:9e:7c:f8: d8:4b:05:51:ef:56:d7:e8:cb:a3:d7:7c:b0:e9:a3: 29:cb:08:d9:61:60:b8:87:7c:d1:f8:a3:ef:5f:5a: 5f:db:57:d3:86:59:cd:d0:ba:91:d6:99:71:44:a5: 67:26:9c:6b:e0:cb:e3:37:8a:34:49:60:51:21:31: ac:55:4f:b1:b4:80:47:ed:5a:0f:09:05:bc:bd:68: 04:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:F1:FD:9D:91:FD:0C:7B:C5:18:C0:A7:14:1D:88:00:A7:86:3E X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:88:ab:83:46:8b:37:71:70:17:d8:69:7d:02:18:b9:65:ba: 3f:35:8f:66:2d:9a:7e:1e:78:87:c3:77:6e:cc:f7:56:1b:bc: 47:b8:d4:76:e2:e7:cc:b4:58:63:e7:10:62:03:47:98:56:42: 92:cc:73:1a:31:ff:0a:a2:cf:8a:ef:b8:a3:e0:e9:0a:20:3f: a8:63:38:6f:68:7c:8f:59:92:42:73:4b:b4:f9:1d:90:08:e2: 79:a0:f3:ed:39:38:c0:8d:30:9b:eb:1f:8e:4e:2e:0c:56:a8: fd:87:9d:34:31:f0:f4:ce:b7:db:21:9e:24:29:ce:9b:f7:8a: 76:c4:17:04:ba:f3:ab:75:1e:a1:72:13:43:84:64:f3:df:53: c0:1a:66:6f:bd:08:e5:b9:57:b7:a6:78:9f:69:71:d5:bc:d9: ca:ca:c8:d8:e0:c4:3a:a0:b9:4f:76:06:20:fc:eb:a7:e1:90: 2a:dd:5a:55:a7:a0:7b:a3:2d:b3:0a:e8:cf:cb:f9:76:4a:89: 04:b9:13:10:0d:ff:15:2c:20:d5:d6:0d:89:ab:e3:24:ee:f9: 62:1d:f2:f0:ee:b6:ed:c3:09:51:6f:51:52:f0:c3:ff:a1:5d: d5:95:72:5c:0c:2a:bf:af:d4:1a:97:05:05:b8:c4:e5:85:ba: 80:5b:5f:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUwODIyMjEyNDM2WhcNMjUwODI5MjEyNDM2WjAYMRYwFAYD VQQDEw02OGE4ZTAxNC0zYWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+wYr+HuhW/ccBFnhCpZpthi08mlt9nSu10SZKKWgZP6XW8hswFOTw10Zmwx tggxeo+LDeVaOk2ITWTMGN24ZwLEn69mefXNiJkYfsjWCZFl2ayNiGxlp4jdoQdG OD0PM+wKAU7UCpTfdJ29qIkGyXByKPUEYlUu69hkkvmRKGb/tY8jFbC+MgdpcGQ8 nWAOvk8xMzksr5OHUtaOh39fXgfXnlDMDyNLRNR6UkqZ5TKefPjYSwVR71bX6Muj 13yw6aMpywjZYWC4h3zR+KPvX1pf21fThlnN0LqR1plxRKVnJpxr4MvjN4o0SWBR ITGsVU+xtIBH7VoPCQW8vWgEbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSN8f2d kf0Me8UYwKcUHYgAp4Y+MB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIiKuDRos3cXAX2Gl9Ahi5Zbo/NY9mLZp+HniHw3duzPdWG7xHuNR2 4ufMtFhj5xBiA0eYVkKSzHMaMf8Kos+K77ij4OkKID+oYzhvaHyPWZJCc0u0+R2Q COJ5oPPtOTjAjTCb6x+OTi4MVqj9h500MfD0zrfbIZ4kKc6b94p2xBcEuvOrdR6h chNDhGTz31PAGmZvvQjluVe3pnifaXHVvNnKysjY4MQ6oLlPdgYg/Oun4ZAq3VpV p6B7oy2zCujPy/l2SokEuRMQDf8VLCDV1g2Jq+Mk7vliHfLw7rbtwwlRb1FS8MP/ oV3VlXJcDCq/r9QalwUFuMTlhbqAW1/Z -----END CERTIFICATE-----Generated at Sun Aug 24 03:34:53 2025 by rpki-client