$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: A7GL1n2aTKpwPIpxWooMhA6DdkX/KlgZ4JDC4O9M4fw= Subject key identifier: E8:1F:15:A7:58:C8:48:E1:3E:DE:EC:9B:ED:02:F4:9D:74:AD:AD:A8 Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0929 Signing time: Wed 02 Jul 2025 20:30:42 +0000 Manifest this update: Wed 02 Jul 2025 20:30:42 +0000 Manifest next update: Wed 09 Jul 2025 20:30:42 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: TNJXqTyiTVy6M4HBmnQqe31ZIRjMZ1fnIEoN83zTd8k=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Jul 2 20:30:42 2025 GMT Not After : Jul 9 20:30:42 2025 GMT Subject: CN=686596f2-dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7a:45:e6:19:be:cd:eb:c9:11:5e:2c:a0:bf: 1e:2c:1b:7c:34:3c:1d:ad:20:1c:63:3f:01:29:cd: 56:01:89:45:1d:1a:cf:13:92:28:e9:90:1c:85:ba: 62:9e:d8:82:8b:b8:91:e2:2d:e3:de:15:92:69:c0: e5:07:4c:15:e7:63:7b:e1:8f:6b:9c:59:3c:2f:c2: 84:f5:d2:d7:70:01:39:30:95:d1:f4:eb:ef:1a:b0: 33:5f:75:14:4f:01:cd:bc:d2:4f:65:5e:74:7a:13: e8:28:5f:82:19:6e:50:63:c4:0f:bf:07:96:63:3f: d0:bb:df:f0:00:e3:fd:8c:27:45:ac:9e:eb:1f:b7: 19:ce:8a:86:51:ba:76:21:98:0b:ec:b7:a1:e9:48: 8a:f6:c4:ab:51:ee:be:54:a2:e5:b7:2f:c5:af:65: f5:e6:39:92:b7:30:c2:be:5d:6d:77:d0:6b:da:b2: f6:25:a5:39:78:5b:2b:02:d7:b2:e3:25:25:27:7b: 01:76:1c:d5:ac:f4:9b:0f:db:40:84:01:c5:ce:4c: 38:9c:6b:b8:ae:27:d2:68:35:56:75:2a:4b:ed:57: f1:84:95:78:e8:1f:e6:41:b6:6f:0b:13:74:70:9f: 37:57:3c:c5:b0:2c:bd:00:19:70:8c:6f:d2:57:ae: cb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:1F:15:A7:58:C8:48:E1:3E:DE:EC:9B:ED:02:F4:9D:74:AD:AD:A8 X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:ea:2f:49:c0:5a:a6:39:bc:44:b5:fa:87:3b:9d:8a:c6:bc: 38:c6:60:a3:9d:75:86:ce:99:ff:d6:e3:51:20:48:c6:1e:d9: 2c:42:d4:00:6d:df:01:18:c9:c1:66:61:4d:21:0c:db:75:58: fe:3b:f9:ed:a5:ce:8d:57:f0:df:c9:8c:3d:58:a3:be:97:35: 9a:dd:ca:fb:9c:76:5c:ec:06:08:70:a8:b9:43:00:3e:32:34: 0d:f1:39:87:55:39:df:ca:87:e3:38:18:70:e5:ad:f6:2f:ff: 5a:67:5b:3c:bd:74:75:c4:c1:b8:23:2a:f7:d2:33:69:57:18: 2a:3d:9b:41:1d:f6:bc:b0:21:7e:26:c6:a5:28:e8:7c:2b:0c: 8b:71:66:34:ea:e8:b5:62:70:0e:4a:24:6e:3c:d9:fb:9e:e1: ff:02:f0:fd:91:aa:3b:41:ab:cf:2b:05:3d:aa:a4:90:94:38: 4e:5c:36:2a:75:cf:4a:4a:a1:35:1a:fa:76:b8:26:12:7b:40: e4:b0:9f:60:d9:48:fb:42:4c:6d:ea:5b:1d:1e:5f:83:69:14: 21:24:9b:40:ed:81:0e:11:df:0f:70:f9:d3:81:31:0c:98:5f: eb:7c:1f:a7:7b:ce:3c:89:03:e3:95:e5:9b:cf:0f:4f:8a:14: c7:d1:56:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUwNzAyMjAzMDQyWhcNMjUwNzA5MjAzMDQyWjAYMRYwFAYD VQQDEw02ODY1OTZmMi1kYWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHpF5hm+zevJEV4soL8eLBt8NDwdrSAcYz8BKc1WAYlFHRrPE5Io6ZAchbpi ntiCi7iR4i3j3hWSacDlB0wV52N74Y9rnFk8L8KE9dLXcAE5MJXR9OvvGrAzX3UU TwHNvNJPZV50ehPoKF+CGW5QY8QPvweWYz/Qu9/wAOP9jCdFrJ7rH7cZzoqGUbp2 IZgL7Leh6UiK9sSrUe6+VKLlty/Fr2X15jmStzDCvl1td9Br2rL2JaU5eFsrAtey 4yUlJ3sBdhzVrPSbD9tAhAHFzkw4nGu4rifSaDVWdSpL7VfxhJV46B/mQbZvCxN0 cJ83VzzFsCy9ABlwjG/SV67LIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgfFadY yEjhPt7sm+0C9J10ra2oMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP6i9JwFqmObxEtfqHO52Kxrw4xmCjnXWGzpn/1uNRIEjGHtksQtQA bd8BGMnBZmFNIQzbdVj+O/ntpc6NV/DfyYw9WKO+lzWa3cr7nHZc7AYIcKi5QwA+ MjQN8TmHVTnfyofjOBhw5a32L/9aZ1s8vXR1xMG4Iyr30jNpVxgqPZtBHfa8sCF+ JsalKOh8KwyLcWY06ui1YnAOSiRuPNn7nuH/AvD9kao7QavPKwU9qqSQlDhOXDYq dc9KSqE1Gvp2uCYSe0DksJ9g2Uj7Qkxt6lsdHl+DaRQhJJtA7YEOEd8PcPnTgTEM mF/rfB+ne848iQPjleWbzw9PihTH0Vbl -----END CERTIFICATE-----Generated at Thu Jul 3 07:20:37 2025 by rpki-client