$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: k0GEhJh+8ARGTNwTT6Mgatb0TiQabDWrdwp+jCHzYOg= Subject key identifier: 7A:69:57:A1:5A:92:65:7A:CC:06:21:22:48:B7:A9:FE:D2:AF:D2:75 Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 096D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 0906 Signing time: Wed 02 Jul 2025 20:51:15 +0000 Manifest this update: Wed 02 Jul 2025 20:51:15 +0000 Manifest next update: Wed 09 Jul 2025 20:51:15 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: ScXbNXzO2Ql5Jm8TYLgfC9g/hjdmuKx0qOs2k88Ob3U=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: FcRac2o84caHLtMjvHJ0PmKpdtxd6KVZGVT4UtbkmWg=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2413 (0x96d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Jul 2 20:51:15 2025 GMT Not After : Jul 9 20:51:15 2025 GMT Subject: CN=68659bc3-a749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d9:90:2b:8b:31:e7:4f:6c:4e:6d:5b:4a:ae: f8:5c:dc:87:1a:2f:af:e2:52:61:a5:4a:8b:3d:87: 5a:fe:2e:44:c0:20:4f:16:9c:3a:d8:df:96:1e:76: f8:d1:49:26:f6:ec:29:45:25:40:b7:2d:54:65:3b: ca:90:90:6a:cc:dc:17:bf:d5:ec:f0:a4:00:f4:8f: fc:a6:04:b5:b3:02:5d:8a:c3:62:69:99:d5:1e:fe: 77:f5:2a:04:52:c0:56:6f:67:68:6b:e3:05:31:82: a4:25:37:d6:6c:e0:bc:fc:c2:e4:81:79:0a:c6:13: a7:e0:7c:d9:bf:b1:c6:dd:22:4f:22:25:d5:f7:6a: 9e:7c:27:58:07:89:e8:42:f2:90:a0:54:02:83:a2: a4:f0:38:c3:31:1d:ee:ed:0f:a1:4f:52:92:b2:b2: 04:fc:83:69:18:23:9c:07:c5:e4:41:82:92:99:63: 67:6a:fc:55:a6:5b:ab:19:e6:ec:06:e2:2c:f3:21: a9:ac:d0:17:75:e0:8f:aa:d4:c8:69:b4:01:b0:93: d9:7c:04:fb:26:88:bc:a1:86:f7:c8:f8:2e:36:e1: 93:80:d0:fc:03:e7:17:3b:b4:6f:20:36:ff:fb:c6: 4d:67:a4:11:95:a6:fd:16:70:5c:fc:d3:b0:ee:ca: 27:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:69:57:A1:5A:92:65:7A:CC:06:21:22:48:B7:A9:FE:D2:AF:D2:75 X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:34:9d:47:c3:86:a6:ef:f7:6a:f7:78:95:5d:a1:1e:44:e4: da:ba:32:58:60:b0:91:aa:66:15:32:3f:a3:32:35:3f:6d:a0: eb:12:fa:58:82:0c:ab:e6:2c:2c:22:74:8a:63:26:ee:43:5a: 99:9b:a1:f5:96:24:9a:88:12:6b:54:3f:85:6a:9d:62:36:f3: ae:aa:ed:ad:67:ba:75:b1:29:44:4a:ad:52:68:f0:06:de:9f: 2f:5e:b0:86:fb:1d:8d:60:b1:26:8f:e8:a1:be:c2:56:e3:bf: de:7d:9e:f0:bb:d3:9b:60:3c:61:ad:45:a6:67:30:3c:77:09: c4:90:14:a9:fe:bc:74:e8:7a:99:e2:96:56:4a:48:f2:7e:d6: 49:3e:a7:32:3e:1e:fe:f8:f2:bd:52:9c:8e:5e:72:b2:0e:ac: 27:0c:c2:a4:ab:60:86:60:eb:7e:20:ae:64:9f:26:44:ae:71: fd:71:90:25:4a:d7:47:27:1c:39:3b:18:72:ca:04:34:8a:54: a8:dc:99:53:28:7a:e9:97:82:dd:63:e3:46:da:a7:51:aa:75: fb:7a:fb:29:c9:65:73:34:44:f0:1a:ea:5c:74:95:80:18:10: a5:cc:99:ed:dd:8e:ea:91:5a:37:e4:92:7e:83:9a:1d:f1:b0: c8:1f:55:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNzAyMjA1MTE1WhcNMjUwNzA5MjA1MTE1WjAYMRYwFAYD VQQDEw02ODY1OWJjMy1hNzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7NmQK4sx509sTm1bSq74XNyHGi+v4lJhpUqLPYda/i5EwCBPFpw62N+WHnb4 0Ukm9uwpRSVAty1UZTvKkJBqzNwXv9Xs8KQA9I/8pgS1swJdisNiaZnVHv539SoE UsBWb2doa+MFMYKkJTfWbOC8/MLkgXkKxhOn4HzZv7HG3SJPIiXV92qefCdYB4no QvKQoFQCg6Kk8DjDMR3u7Q+hT1KSsrIE/INpGCOcB8XkQYKSmWNnavxVplurGebs BuIs8yGprNAXdeCPqtTIabQBsJPZfAT7Joi8oYb3yPguNuGTgND8A+cXO7RvIDb/ +8ZNZ6QRlab9FnBc/NOw7son9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHppV6Fa kmV6zAYhIki3qf7Sr9J1MB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdNJ1Hw4am7/dq93iVXaEeROTaujJYYLCRqmYVMj+jMjU/baDrEvpY ggyr5iwsInSKYybuQ1qZm6H1liSaiBJrVD+Fap1iNvOuqu2tZ7p1sSlESq1SaPAG 3p8vXrCG+x2NYLEmj+ihvsJW47/efZ7wu9ObYDxhrUWmZzA8dwnEkBSp/rx06HqZ 4pZWSkjyftZJPqcyPh7++PK9UpyOXnKyDqwnDMKkq2CGYOt+IK5knyZErnH9cZAl StdHJxw5OxhyygQ0ilSo3JlTKHrpl4LdY+NG2qdRqnX7evspyWVzNETwGupcdJWA GBClzJnt3Y7qkVo35JJ+g5od8bDIH1Xd -----END CERTIFICATE-----Generated at Thu Jul 3 01:12:49 2025 by rpki-client