$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft File: fmfojMQDeKlwRj3y0LBgiOZdubA.mft (raw, json) Hash identifier: s6G4BNKRZX7kepElTxq/+dsTOr/LiI2VXv5TFANufG0= Subject key identifier: 63:29:1C:59:E2:1E:7D:70:D7:FB:CA:C0:7C:C7:30:24:AA:33:C5:38 Authority key identifier: 7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 Certificate issuer: /CN=A91C9D04/serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Certificate serial: 0942 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft Manifest number: 1F39 Signing time: Fri 22 Aug 2025 16:52:07 +0000 Manifest this update: Fri 22 Aug 2025 16:52:07 +0000 Manifest next update: Fri 29 Aug 2025 16:52:07 +0000 Files and hashes: 1: fmfojMQDeKlwRj3y0LBgiOZdubA.crl (hash: hYRBMMmpPbVf9NFQuk2voROEhxpZ3rV1ihzOmdj0BfQ=) 2: A1DFD796A65511EABDAED713C4F9AE02.roa (hash: vKmmh6WIOEqHjc9HRB9xmdHJEo2LxIyyZG3CXzn2ZyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2370 (0x942) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9D04, serialNumber=7E67E88CC40378A970463DF2D0B06088E65DB9B0 Validity Not Before: Aug 22 16:52:07 2025 GMT Not After : Aug 29 16:52:07 2025 GMT Subject: CN=68a8a037-80ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c0:42:a7:10:84:4e:3d:b1:38:47:da:32:c3: d9:c6:7e:9b:ec:ef:3c:f1:be:5c:32:c6:27:21:fa: 0e:6a:cd:36:cd:df:5f:b4:bf:7a:3e:67:96:29:f4: 0f:91:65:7c:28:e5:59:da:8f:e0:6d:b0:ac:4b:e2: 05:57:cd:61:ff:31:c5:eb:ec:da:2a:a8:51:dd:bd: e7:a0:11:5c:e4:87:f7:a5:d8:03:73:e5:14:50:ce: dc:69:c6:8d:d0:a4:99:92:30:14:6c:05:da:1a:54: 15:e7:d2:1e:ac:43:c2:04:98:d3:92:55:4c:2a:d2: 48:75:75:25:1e:e4:af:53:a2:76:ce:70:2b:11:1e: 00:a5:ce:7a:0d:b0:10:34:03:d0:40:63:03:72:38: e1:fc:02:0a:96:a6:bd:6f:6d:f5:83:f6:ac:9b:98: af:ff:04:5a:b1:ef:35:ce:05:98:3f:b9:a4:34:93: ec:9e:af:bb:9c:f1:7b:6c:95:3c:48:9e:ae:b7:99: 7e:f3:ae:65:25:da:cf:7c:f7:77:da:2e:ed:a4:5a: 84:37:bd:91:cc:f5:2c:b9:8b:a7:c6:89:23:f8:4d: aa:f2:58:ef:7f:0f:5d:26:64:ba:68:37:e6:57:a2: d2:1a:c3:8f:35:a8:e4:e4:cb:08:91:05:3b:8f:aa: 86:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:1C:59:E2:1E:7D:70:D7:FB:CA:C0:7C:C7:30:24:AA:33:C5:38 X509v3 Authority Key Identifier: keyid:7E:67:E8:8C:C4:03:78:A9:70:46:3D:F2:D0:B0:60:88:E6:5D:B9:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmfojMQDeKlwRj3y0LBgiOZdubA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D04/7166F38E235C11E88812923FC4F9AE02/fmfojMQDeKlwRj3y0LBgiOZdubA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:b7:49:24:f8:c0:8c:4a:ef:53:e9:74:5a:ef:78:6e:f6:8c: 02:09:08:64:b8:ee:ea:db:0a:e1:de:2d:3a:23:f0:76:b4:43: 06:4f:07:d5:9f:e6:82:5d:88:8c:28:ed:58:35:07:29:9a:d9: 1a:bf:2c:e9:38:2a:47:43:a4:4a:2f:4e:25:d7:1d:38:e6:8a: 58:ca:7b:df:c0:ca:16:d5:59:8b:e3:fb:25:0b:02:a2:30:aa: fa:e0:ef:4c:aa:64:2b:3b:6e:db:d3:46:b7:da:2d:21:e5:79: 59:09:29:cb:6e:a4:a9:b0:df:d2:37:d7:9c:30:e9:7a:97:b0: b9:f0:6a:ed:db:6f:dd:0a:d1:07:cc:69:fa:ad:5e:8a:e4:aa: 2b:85:f4:a8:82:6b:23:1b:d6:60:0c:13:69:5a:b4:0c:43:cf: 18:c9:fe:da:bc:d9:db:a5:21:f7:ac:b2:11:29:fb:8b:38:2d: e0:8d:7d:2d:f9:8c:44:10:ee:44:18:4d:c4:aa:85:5a:c3:d2: d3:ae:45:e3:a1:8e:08:d6:b2:d7:ae:fb:f4:22:b7:64:2c:72: 99:d7:86:e7:08:9e:da:11:7a:9c:fe:01:07:12:f4:44:17:6c: f5:4f:de:b3:f1:25:0e:36:36:f8:23:25:4c:2c:26:ea:58:37: 3d:93:3f:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlEMDQxMTAvBgNVBAUTKDdFNjdFODhDQzQwMzc4QTk3MDQ2M0RGMkQwQjA2MDg4 RTY1REI5QjAwHhcNMjUwODIyMTY1MjA3WhcNMjUwODI5MTY1MjA3WjAYMRYwFAYD VQQDEw02OGE4YTAzNy04MGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MBCpxCETj2xOEfaMsPZxn6b7O888b5cMsYnIfoOas02zd9ftL96PmeWKfQP kWV8KOVZ2o/gbbCsS+IFV81h/zHF6+zaKqhR3b3noBFc5If3pdgDc+UUUM7cacaN 0KSZkjAUbAXaGlQV59IerEPCBJjTklVMKtJIdXUlHuSvU6J2znArER4Apc56DbAQ NAPQQGMDcjjh/AIKlqa9b231g/asm5iv/wRase81zgWYP7mkNJPsnq+7nPF7bJU8 SJ6ut5l+865lJdrPfPd32i7tpFqEN72RzPUsuYunxokj+E2q8ljvfw9dJmS6aDfm V6LSGsOPNajk5MsIkQU7j6qG0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMpHFni Hn1w1/vKwHzHMCSqM8U4MB8GA1UdIwQYMBaAFH5n6IzEA3ipcEY98tCwYIjmXbmw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQwNC83MTY2RjM4RTIz NUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVLbHdSajN5MExCZ2lPWmR1 YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZtZm9qTVFEZUtsd1JqM3kwTEJnaU9aZHViQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUQwNC83MTY2RjM4RTIzNUMxMUU4ODgxMjkyM0ZDNEY5QUUwMi9mbWZvak1RRGVL bHdSajN5MExCZ2lPWmR1YkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQt0kk+MCMSu9T6XRa73hu9owCCQhkuO7q2wrh3i06I/B2tEMGTwfV n+aCXYiMKO1YNQcpmtkavyzpOCpHQ6RKL04l1x045opYynvfwMoW1VmL4/slCwKi MKr64O9MqmQrO27b00a32i0h5XlZCSnLbqSpsN/SN9ecMOl6l7C58Grt22/dCtEH zGn6rV6K5KorhfSogmsjG9ZgDBNpWrQMQ88Yyf7avNnbpSH3rLIRKfuLOC3gjX0t +YxEEO5EGE3EqoVaw9LTrkXjoY4I1rLXrvv0IrdkLHKZ14bnCJ7aEXqc/gEHEvRE F2z1T96z8SUONjb4IyVMLCbqWDc9kz8e -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:58 2025 by rpki-client