$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft File: fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft (raw, json) Hash identifier: B+VEust52ZId2WybgbluYlar4pvLvziQaC9zfOwCsb8= Subject key identifier: D1:5B:AB:33:49:7F:BD:9C:4F:DA:0D:17:97:4E:DE:84:98:CB:46:A4 Authority key identifier: 7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 Certificate issuer: /CN=A91C6BF0/serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Certificate serial: 01AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft Manifest number: 0FBD Signing time: Wed 02 Jul 2025 18:03:11 +0000 Manifest this update: Wed 02 Jul 2025 18:03:10 +0000 Manifest next update: Wed 09 Jul 2025 18:03:10 +0000 Files and hashes: 1: fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl (hash: JZdrqAn1XoX7EjhL9Ye8xCy7bbuYcZL84x22KC8vtQI=) 2: 329274C4D31611EEA7F0475FC4F9AE02.roa (hash: pr44aMdjUjF3qJ5V59OemeYMLJZAouFtZX25Dx2aXA8=) 3: B4A14106974911EEBAFA257BC4F9AE02.roa (hash: Fb7LVlJG+JVdijAn+Ys69+wkABJKfcULX5Fgfk+/L5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BF0, serialNumber=7D23E75C10DF6571BEAC17F3555E1B9983814225 Validity Not Before: Jul 2 18:03:10 2025 GMT Not After : Jul 9 18:03:10 2025 GMT Subject: CN=6865745e-b724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:25:93:6c:ca:be:3e:21:e5:a7:d5:f7:c7: ba:44:51:c1:91:3b:48:79:57:41:46:6c:4b:cf:cc: 94:3a:ea:33:70:0b:5d:15:20:f1:a3:8b:fe:59:73: 98:d7:fc:a7:e5:bd:e4:78:59:5b:ab:d7:49:bb:81: 10:ed:1a:06:48:16:ba:e7:31:44:b0:7a:af:67:e2: bc:92:89:a4:8c:f4:75:72:e5:3f:b7:2b:10:bc:fc: 6a:ba:cc:2e:9a:02:ed:97:30:b1:ad:2d:63:8d:0a: 6a:0c:49:28:59:d4:78:6d:f2:8f:1e:de:d0:82:06: ba:32:43:6a:3f:d8:a1:c2:0c:3b:5b:51:64:a6:63: a5:20:a9:98:1f:d1:c5:92:41:1d:29:78:7f:25:b6: fa:d5:15:68:50:b5:00:5a:52:de:b2:69:39:ee:a8: eb:89:1c:ae:ca:6b:d5:c4:99:10:6d:eb:f2:cf:96: bc:68:f4:1b:43:e2:66:16:63:d0:52:b1:f0:95:0f: c0:b5:38:c2:3a:a3:8d:d2:98:03:0f:e5:52:6f:cd: 12:03:d3:e3:3d:d8:bc:bb:54:49:33:a1:27:7a:4f: b1:1a:b4:69:c4:4b:7f:9d:cb:62:d7:92:e9:dc:50: c5:a3:bd:6e:eb:70:e1:30:f9:77:05:ec:2f:b5:22: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5B:AB:33:49:7F:BD:9C:4F:DA:0D:17:97:4E:DE:84:98:CB:46:A4 X509v3 Authority Key Identifier: keyid:7D:23:E7:5C:10:DF:65:71:BE:AC:17:F3:55:5E:1B:99:83:81:42:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSPnXBDfZXG-rBfzVV4bmYOBQiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BF0/1491974AAEBB11E98A390B59C4F9AE02/fSPnXBDfZXG-rBfzVV4bmYOBQiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:58:0a:06:5e:8b:64:32:79:df:5c:5f:57:93:30:ff:26:6e: a2:29:d4:3b:b1:28:0c:5b:23:59:4d:fa:b3:66:40:da:ad:09: da:3b:45:52:ea:43:e0:67:db:68:28:8c:ee:0f:46:5e:a5:ea: 2e:46:f6:35:65:a2:e7:e9:3f:07:43:fb:57:b0:e5:ec:9d:8e: 14:23:5d:45:62:8b:35:4f:3e:96:5f:4b:f0:e4:dd:ca:49:8e: 25:a6:10:8d:4c:57:01:c6:b6:3d:47:4e:3d:84:41:38:a7:36: 63:03:3d:9b:c8:cb:69:25:c4:51:47:87:4e:75:a8:1e:9b:92: d1:a0:c5:b4:cf:fc:8b:6d:16:9c:11:61:a5:82:26:82:30:0f: 6f:71:e6:b1:73:79:8f:d5:c2:ae:fe:cf:63:ac:5d:d0:0a:91: 92:7a:ea:89:72:a9:c2:d0:26:bc:27:ed:4a:ac:40:3b:5a:e9: a3:64:b6:25:7a:89:3b:39:52:2d:1c:db:29:fa:2c:f1:0e:25: 83:39:f0:34:ab:9a:14:27:15:62:5d:6c:94:06:de:c6:a7:4e: 9d:1e:4b:b6:c7:85:01:9d:e3:22:80:df:34:bd:e1:1e:2e:56: 27:50:5a:39:93:9e:b1:b2:ca:94:ab:5c:91:a9:01:c8:2d:4c: 8f:86:37:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCRjAxMTAvBgNVBAUTKDdEMjNFNzVDMTBERjY1NzFCRUFDMTdGMzU1NUUxQjk5 ODM4MTQyMjUwHhcNMjUwNzAyMTgwMzEwWhcNMjUwNzA5MTgwMzEwWjAYMRYwFAYD VQQDEw02ODY1NzQ1ZS1iNzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy8glk2zKvj4h5afV98e6RFHBkTtIeVdBRmxLz8yUOuozcAtdFSDxo4v+WXOY 1/yn5b3keFlbq9dJu4EQ7RoGSBa65zFEsHqvZ+K8komkjPR1cuU/tysQvPxquswu mgLtlzCxrS1jjQpqDEkoWdR4bfKPHt7Qgga6MkNqP9ihwgw7W1FkpmOlIKmYH9HF kkEdKXh/Jbb61RVoULUAWlLesmk57qjriRyuymvVxJkQbevyz5a8aPQbQ+JmFmPQ UrHwlQ/AtTjCOqON0pgDD+VSb80SA9PjPdi8u1RJM6Enek+xGrRpxEt/ncti15Lp 3FDFo71u63DhMPl3BewvtSIuvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFbqzNJ f72cT9oNF5dO3oSYy0akMB8GA1UdIwQYMBaAFH0j51wQ32VxvqwX81VeG5mDgUIl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJGMC8xNDkxOTc0QUFF QkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpYRy1yQmZ6VlY0Ym1ZT0JR aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZTUG5YQkRmWlhHLXJCZnpWVjRibVlPQlFpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJGMC8xNDkxOTc0QUFFQkIxMUU5OEEzOTBCNTlDNEY5QUUwMi9mU1BuWEJEZlpY Ry1yQmZ6VlY0Ym1ZT0JRaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUWAoGXotkMnnfXF9XkzD/Jm6iKdQ7sSgMWyNZTfqzZkDarQnaO0VS 6kPgZ9toKIzuD0ZepeouRvY1ZaLn6T8HQ/tXsOXsnY4UI11FYos1Tz6WX0vw5N3K SY4lphCNTFcBxrY9R049hEE4pzZjAz2byMtpJcRRR4dOdagem5LRoMW0z/yLbRac EWGlgiaCMA9vceaxc3mP1cKu/s9jrF3QCpGSeuqJcqnC0Ca8J+1KrEA7WumjZLYl eok7OVItHNsp+izxDiWDOfA0q5oUJxViXWyUBt7Gp06dHku2x4UBneMigN80veEe LlYnUFo5k56xssqUq1yRqQHILUyPhjdY -----END CERTIFICATE-----Generated at Fri Jul 4 08:16:30 2025 by rpki-client