$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: Sn+brlG7Ua6dz8+A4IyHo2VyE0hqb7dZUcfVI4Jq3bY= Subject key identifier: D7:89:15:CD:93:F3:82:0F:2D:6F:76:02:D5:8E:AE:AA:97:E9:92:25 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 09 Signing time: Tue 01 Jul 2025 08:59:23 +0000 Manifest this update: Tue 01 Jul 2025 08:59:23 +0000 Manifest next update: Tue 08 Jul 2025 08:59:23 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: 4AeoOdTWL1y1GsBX9wNy6YIPPiYTC5h5MotHwFYvyes=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: aNXBkCTSnj9L9YAKLhVVj1WRcZCzQq19CJAT5ztk+BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Jul 1 08:59:23 2025 GMT Not After : Jul 8 08:59:23 2025 GMT Subject: CN=6863a36b-4f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:af:0d:a9:18:35:de:41:a9:53:a7:a1:7b: cb:d5:2a:fb:3d:e0:06:d1:a0:cc:fa:d4:df:c5:fb: 22:4e:f2:de:bd:a2:84:03:e8:df:96:d9:f5:bc:19: 07:49:5d:1f:8d:eb:5c:5e:ad:03:3e:b8:f0:68:7f: 57:0e:8b:ca:ca:fe:35:7d:d3:be:18:dc:98:85:ca: ad:c6:8f:ef:e8:64:44:d9:1b:60:e1:4f:df:a4:40: 2f:c4:f9:7a:e4:e1:46:bb:3a:ef:d9:1d:55:1d:35: cb:1d:30:dd:e1:45:ec:f2:d7:00:c5:2c:87:0d:89: 41:d5:17:a0:2f:7f:ce:0a:ea:a2:b4:50:ed:9b:26: d6:ce:8c:b8:d4:df:73:2d:60:7c:8d:ce:49:cb:f6: 75:3e:d0:56:57:a0:9a:75:9d:48:ca:6a:cd:3b:f1: ce:f3:f2:43:63:ce:3c:6e:c8:a8:be:08:ed:dc:ef: 42:40:5e:7a:94:44:d5:ab:51:f5:14:f2:34:3f:63: df:2a:de:6d:e1:5c:5d:91:28:77:23:4e:63:74:16: 45:56:07:ba:6f:12:5b:4f:f0:d5:6b:7f:d9:a6:33: 6b:25:55:1d:bf:cd:ed:cb:7e:9f:15:02:23:5c:4b: a7:8a:80:fc:b1:c3:19:19:d6:25:4b:4c:f9:e6:4a: 04:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:15:CD:93:F3:82:0F:2D:6F:76:02:D5:8E:AE:AA:97:E9:92:25 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:09:ad:0f:ff:e4:3e:93:ec:2d:e2:7b:cd:a1:3a:99:8c:f6: 47:9e:86:95:b3:4b:4f:76:8b:08:eb:6c:16:a6:85:2c:b6:c3: ba:f7:5c:bc:98:4b:06:e9:0e:56:7c:f7:60:6c:24:1c:f3:56: e1:17:b0:af:d3:25:27:43:e2:2b:7d:c1:b8:71:f0:9f:7f:a6: bf:39:1d:4e:51:f8:cf:8d:58:38:77:37:46:b4:58:ed:7a:eb: 3e:d0:a5:f7:89:98:0c:7e:e0:9b:a6:c1:f4:e4:95:c3:4b:47: 31:98:50:8c:36:6c:32:ee:ce:89:1f:d4:1e:23:b3:4f:ed:76: b4:69:25:2a:ca:aa:17:87:94:10:07:4b:4f:53:ac:16:9c:c2: 62:e2:00:81:d2:c2:71:66:7f:0c:68:46:4d:d0:70:8f:d2:0e: 27:ee:63:86:6e:26:e8:2e:aa:70:40:43:80:ea:be:d8:62:40: b2:5e:ee:f4:3d:62:74:c7:4d:3e:4c:88:2d:d0:3b:6c:de:f8: fb:6f:4d:7c:57:e8:bf:7a:8e:85:b7:3b:b0:65:be:1e:cb:2a: 33:22:1a:9e:8a:1a:5a:5a:2b:86:b3:46:f0:88:ef:d7:01:ec: 60:22:96:ff:99:8d:19:40:75:60:45:6f:d1:3e:29:68:64:bb: c8:4b:98:31 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTA3MDEwODU5MjNaFw0yNTA3MDgwODU5MjNaMBgxFjAUBgNV BAMTDTY4NjNhMzZiLTRmNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBi68NqRg13kGpU6ehe8vVKvs94AbRoMz61N/F+yJO8t69ooQD6N+W2fW8GQdJ XR+N61xerQM+uPBof1cOi8rK/jV9074Y3JiFyq3Gj+/oZETZG2DhT9+kQC/E+Xrk 4Ua7Ou/ZHVUdNcsdMN3hRezy1wDFLIcNiUHVF6Avf84K6qK0UO2bJtbOjLjU33Mt YHyNzknL9nU+0FZXoJp1nUjKas078c7z8kNjzjxuyKi+CO3c70JAXnqURNWrUfUU 8jQ/Y98q3m3hXF2RKHcjTmN0FkVWB7pvEltP8NVrf9mmM2slVR2/ze3Lfp8VAiNc S6eKgPyxwxkZ1iVLTPnmSgTXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU14kVzZPz gg8tb3YC1Y6uqpfpkiUwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABMJrQ//5D6T7C3ie82hOpmM9keehpWzS092iwjrbBamhSy2w7r3XLyY SwbpDlZ892BsJBzzVuEXsK/TJSdD4it9wbhx8J9/pr85HU5R+M+NWDh3N0a0WO16 6z7QpfeJmAx+4JumwfTklcNLRzGYUIw2bDLuzokf1B4js0/tdrRpJSrKqheHlBAH S09TrBacwmLiAIHSwnFmfwxoRk3QcI/SDifuY4ZuJuguqnBAQ4DqvthiQLJe7vQ9 YnTHTT5MiC3QO2ze+PtvTXxX6L96joW3O7Blvh7LKjMiGp6KGlpaK4azRvCI79cB 7GAilv+ZjRlAdWBFb9E+KWhku8hLmDE= -----END CERTIFICATE-----Generated at Thu Jul 3 08:06:58 2025 by rpki-client