$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json) Hash identifier: t/OzOl8Yn20vEyThSBu2SD4HQEs1MCHP6Sc+Lm4w4wg= Subject key identifier: EC:93:C5:BD:91:69:98:99:37:F4:B2:D1:26:08:43:9B:F4:AB:93:7C Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft Manifest number: 067F Signing time: Fri 04 Jul 2025 22:43:22 +0000 Manifest this update: Fri 04 Jul 2025 22:43:21 +0000 Manifest next update: Fri 11 Jul 2025 22:43:21 +0000 Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: R9oV0EH7V7fk9AbcjJUQ/qgCBrKZytASlMF1Ob5xm3Q=) 2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Validity Not Before: Jul 4 22:43:21 2025 GMT Not After : Jul 11 22:43:21 2025 GMT Subject: CN=68685909-60cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:2a:f0:02:e0:11:4e:e9:55:76:3e:d2:51: 3f:e0:f2:d1:38:8d:38:48:d8:11:66:bb:d6:82:f1: 9a:cd:e9:a8:6e:e6:57:f9:ff:07:4b:82:c5:d5:32: 10:7f:8a:c5:a9:ce:9d:4f:23:09:2f:38:d1:5e:9e: b6:ba:d9:f9:9a:48:4f:ad:28:6e:c6:e3:ee:6d:a2: 6b:3f:a6:0b:12:3e:88:5c:90:ba:37:bb:77:c5:c3: 35:80:86:42:3d:5e:8f:ba:2e:1c:b5:b1:f1:b2:71: 6e:cb:b4:9e:e3:47:70:6a:c3:98:b3:de:ce:c4:0b: 24:24:8f:e2:ac:a5:87:ca:4f:de:3a:a1:3a:ab:18: be:2b:6a:06:f2:99:60:22:63:6f:52:17:75:28:af: 3d:4f:f4:ce:89:68:98:4f:e5:2c:d1:3f:43:5d:6b: 9b:a7:29:bd:8d:6e:09:4d:70:4e:75:ea:de:8c:ef: 3d:f4:bf:62:40:aa:82:0f:34:2d:ed:86:57:cb:e2: ed:44:16:3f:16:86:c2:a5:de:ef:c2:95:fb:77:4d: ca:6b:7a:3b:c3:76:ba:d1:4d:6b:21:d2:93:60:77: d7:15:35:84:40:31:e1:f7:40:14:61:10:10:07:66: 8c:bc:aa:aa:2e:3f:50:97:e2:e0:76:ed:9e:6e:7f: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:93:C5:BD:91:69:98:99:37:F4:B2:D1:26:08:43:9B:F4:AB:93:7C X509v3 Authority Key Identifier: keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:d9:ce:d0:07:8e:97:31:17:f1:30:ef:65:71:66:b0:65:03: 94:1a:35:ed:e1:42:a6:50:cd:1d:20:6c:4c:87:c4:11:2b:4b: 2d:63:0c:bf:21:2d:8d:65:17:26:33:ce:52:44:7d:5b:ce:8a: 48:69:92:4a:af:4f:b8:b8:d9:0e:51:43:f4:95:b3:68:76:f6: da:ea:99:dc:f6:a1:0c:c0:fa:0a:45:bf:bc:55:c1:12:28:b0: bf:d4:79:4a:e4:3e:e6:a9:f1:b5:79:9c:82:5f:53:cf:17:11: 66:21:bc:b2:d7:8c:be:f0:6e:b2:da:06:c8:d0:dc:0e:8c:fa: ed:3e:59:c8:23:3e:40:61:a4:1a:dd:af:bb:ac:bc:35:a4:90: d4:ed:a6:78:09:a2:6e:10:55:78:5e:ed:f6:13:3d:09:79:a0: 2b:83:2e:6c:5a:b2:db:58:36:e6:37:f0:5f:a1:c0:27:98:a3: f0:bf:be:18:28:e0:3e:c0:b3:14:b9:6b:22:87:6e:2e:b2:36: 4a:1a:c2:4c:b8:0b:3c:79:5d:b7:89:ce:65:0a:7d:67:37:19: a6:03:32:f8:ca:65:11:f8:4f:43:9b:14:38:ea:c3:b7:94:71: c3:89:c0:ce:8e:93:bc:6b:5b:50:46:eb:bc:8e:85:28:7c:6e: 4d:61:b0:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3 NUE5QzIzRjEwHhcNMjUwNzA0MjI0MzIxWhcNMjUwNzExMjI0MzIxWjAYMRYwFAYD VQQDEw02ODY4NTkwOS02MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtYq8ALgEU7pVXY+0lE/4PLROI04SNgRZrvWgvGazemobuZX+f8HS4LF1TIQ f4rFqc6dTyMJLzjRXp62utn5mkhPrShuxuPubaJrP6YLEj6IXJC6N7t3xcM1gIZC PV6Pui4ctbHxsnFuy7Se40dwasOYs97OxAskJI/irKWHyk/eOqE6qxi+K2oG8plg ImNvUhd1KK89T/TOiWiYT+Us0T9DXWubpym9jW4JTXBOderejO899L9iQKqCDzQt 7YZXy+LtRBY/FobCpd7vwpX7d03Ka3o7w3a60U1rIdKTYHfXFTWEQDHh90AUYRAQ B2aMvKqqLj9Ql+Lgdu2ebn+tiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyTxb2R aZiZN/Sy0SYIQ5v0q5N8MB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjEzMS9CRTRBNkNEMDdENzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZp UloyRHc2NjBpTWwxcWNJX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw2c7QB46XMRfxMO9lcWawZQOUGjXt4UKmUM0dIGxMh8QRK0stYwy/ IS2NZRcmM85SRH1bzopIaZJKr0+4uNkOUUP0lbNodvba6pnc9qEMwPoKRb+8VcES KLC/1HlK5D7mqfG1eZyCX1PPFxFmIbyy14y+8G6y2gbI0NwOjPrtPlnIIz5AYaQa 3a+7rLw1pJDU7aZ4CaJuEFV4Xu32Ez0JeaArgy5sWrLbWDbmN/BfocAnmKPwv74Y KOA+wLMUuWsih24usjZKGsJMuAs8eV23ic5lCn1nNxmmAzL4ymUR+E9DmxQ46sO3 lHHDicDOjpO8a1tQRuu8joUofG5NYbDh -----END CERTIFICATE-----Generated at Sat Jul 5 21:28:02 2025 by rpki-client