$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: lIQAW3l8RD3+Gp2t+pL03Y222svh4qj1RC1C8lQ1UyQ= Subject key identifier: 0C:F5:AE:B4:2E:9B:B6:1A:9F:98:25:39:47:A0:B2:90:74:22:E1:8F Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 24 Signing time: Sat 23 Aug 2025 08:05:27 +0000 Manifest this update: Sat 23 Aug 2025 08:05:26 +0000 Manifest next update: Sat 30 Aug 2025 08:05:26 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: FhB8yt93jjS+ilQfpr/Ojf3xK6MbvVd+oOjVXV1PI+Q=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: aNXBkCTSnj9L9YAKLhVVj1WRcZCzQq19CJAT5ztk+BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Aug 23 08:05:26 2025 GMT Not After : Aug 30 08:05:26 2025 GMT Subject: CN=68a97646-4a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c3:61:28:82:a7:32:1a:c9:86:ed:85:ef:72: a6:a8:24:d9:90:dd:55:fc:75:8a:8a:75:ec:91:ff: 5f:f5:f1:c3:82:be:79:ec:f8:70:98:3a:6b:27:ad: 75:84:1a:9e:2d:f1:66:7c:46:f1:d3:c8:68:ee:39: dc:e9:46:9c:4a:05:9c:97:55:a3:a2:80:09:ad:68: 55:2d:34:55:4c:da:2b:96:45:fe:99:17:e1:ab:1f: 69:bf:57:97:f4:b1:6b:cb:ed:4c:74:d2:af:1f:32: dc:5d:a2:67:9f:58:59:fa:ac:ff:7e:d9:f2:27:95: 55:aa:b4:02:07:fe:d6:4a:38:12:cd:09:1f:3e:55: 8d:8d:2b:09:79:90:79:05:b9:f9:68:cb:f1:f7:f8: 34:28:1a:13:08:bd:39:d0:a2:8d:7f:20:07:a8:f1: 2d:af:ec:d7:62:af:b7:60:fc:41:b5:8a:0a:2e:da: 11:72:08:93:44:42:3c:40:9e:f5:54:f0:ac:df:9e: 85:b5:ac:f3:1c:5a:38:5f:92:c2:f8:dc:97:2d:28: be:8a:2e:8d:48:28:45:8c:b9:d4:c2:39:48:5f:86: 8d:00:cc:d7:36:65:4e:24:a7:c2:5c:8b:65:2e:a6: aa:24:cd:e5:2a:5b:a2:73:16:66:5a:18:ec:38:91: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F5:AE:B4:2E:9B:B6:1A:9F:98:25:39:47:A0:B2:90:74:22:E1:8F X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:eb:f6:65:03:fc:b7:b3:ce:2e:c8:a8:b9:2b:6c:98:23:fc: 31:69:b5:e5:12:0a:c0:63:d2:d7:4a:e2:3f:be:ac:fa:7b:6e: 3d:c8:72:63:51:ec:b0:96:7b:8b:89:a7:60:40:1a:30:44:24: 72:cf:18:62:2b:49:2d:dc:8f:c4:0f:5e:06:9d:09:2d:e1:ec: ea:69:78:56:ed:79:ac:7c:81:71:9e:57:09:bd:92:6e:2b:24: c3:4f:d9:66:a4:d8:d6:aa:02:3f:29:f4:c3:26:c7:39:74:7e: ff:44:05:fe:82:76:57:f7:83:c2:9e:04:ca:04:9a:e3:6b:98: a1:49:67:64:c6:5c:5a:de:7b:7a:0b:a2:aa:a3:67:1e:7a:a9: 81:db:94:58:1f:de:b2:19:4c:19:ab:a0:fd:06:db:f0:8a:32: 35:0b:1a:c8:cf:72:8f:ba:cc:12:a2:82:ef:95:67:a9:01:69: 60:9f:b2:0c:c4:6a:b1:fa:4a:0a:d2:b8:25:71:1b:d6:51:c9: c0:c6:80:d4:af:94:a9:aa:8f:7d:26:a1:d7:51:a5:c1:b9:88: e7:2a:45:07:59:14:dc:43:e5:10:aa:bc:c5:b0:8e:c0:39:c7: 6b:13:ad:4b:53:fe:99:ec:8c:3f:79:89:4b:c0:d7:6d:b5:f6: c5:4f:84:aa -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTA4MjMwODA1MjZaFw0yNTA4MzAwODA1MjZaMBgxFjAUBgNV BAMTDTY4YTk3NjQ2LTRhMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRw2EogqcyGsmG7YXvcqaoJNmQ3VX8dYqKdeyR/1/18cOCvnns+HCYOmsnrXWE Gp4t8WZ8RvHTyGjuOdzpRpxKBZyXVaOigAmtaFUtNFVM2iuWRf6ZF+GrH2m/V5f0 sWvL7Ux00q8fMtxdomefWFn6rP9+2fInlVWqtAIH/tZKOBLNCR8+VY2NKwl5kHkF ufloy/H3+DQoGhMIvTnQoo1/IAeo8S2v7Ndir7dg/EG1igou2hFyCJNEQjxAnvVU 8KzfnoW1rPMcWjhfksL43JctKL6KLo1IKEWMudTCOUhfho0AzNc2ZU4kp8Jci2Uu pqokzeUqW6JzFmZaGOw4kfchAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDPWutC6b thqfmCU5R6CykHQi4Y8wHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAETr9mUD/Lezzi7IqLkrbJgj/DFpteUSCsBj0tdK4j++rPp7bj3IcmNR 7LCWe4uJp2BAGjBEJHLPGGIrSS3cj8QPXgadCS3h7OppeFbteax8gXGeVwm9km4r JMNP2Wak2NaqAj8p9MMmxzl0fv9EBf6Cdlf3g8KeBMoEmuNrmKFJZ2TGXFree3oL oqqjZx56qYHblFgf3rIZTBmroP0G2/CKMjULGsjPco+6zBKigu+VZ6kBaWCfsgzE arH6SgrSuCVxG9ZRycDGgNSvlKmqj30moddRpcG5iOcqRQdZFNxD5RCqvMWwjsA5 x2sTrUtT/pnsjD95iUvA12219sVPhKo= -----END CERTIFICATE-----Generated at Sun Aug 24 00:18:07 2025 by rpki-client