$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: a1inK2bKVr4vV8e7QEO7Kosj+i7WN0IDPkh9pmWbImY= Subject key identifier: 0D:17:3D:E4:C6:2B:8F:B5:E1:1A:BF:A0:7B:88:11:D7:F0:80:03:AF Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05D8 Signing time: Fri 22 Aug 2025 23:15:45 +0000 Manifest this update: Fri 22 Aug 2025 23:15:45 +0000 Manifest next update: Fri 29 Aug 2025 23:15:45 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: pNpefy3ZIPfnJAwMx2MvoR6+r8UvOcWlWNpT7Xparbc=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1520 (0x5f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Aug 22 23:15:45 2025 GMT Not After : Aug 29 23:15:45 2025 GMT Subject: CN=68a8fa21-4161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e2:96:cf:cd:90:1f:df:b2:76:b2:54:b7:cb: c1:b7:ae:6e:45:f8:9e:ef:57:50:90:6b:d9:82:0d: b7:af:9c:0d:e0:81:a7:80:84:32:89:3d:5b:fc:61: 82:c3:b7:b2:df:c9:93:56:1d:ef:c8:5d:65:04:6f: 0f:13:17:e8:24:ec:e1:0e:af:a2:55:a1:07:50:54: 7d:f1:8b:63:3f:03:ec:5b:ea:a0:2b:a3:62:a1:93: d3:95:70:95:a3:7e:35:b3:c8:8c:db:03:24:ba:7e: 60:8f:46:45:6e:6c:4c:46:94:28:ce:2f:ce:2d:1c: 11:48:ed:68:78:53:35:6b:e3:02:62:0c:94:af:60: f4:bd:db:10:ff:4f:92:39:77:9b:62:74:2f:95:71: 63:cf:bd:4b:9f:03:93:c8:5a:ac:78:92:e2:95:a7: 04:cd:42:c6:28:9b:18:dd:07:98:13:a9:25:4b:ef: 9e:ff:ef:58:2d:4f:17:d5:d8:5a:56:06:8c:0d:58: 45:5e:96:cd:73:9e:37:05:96:a4:85:e2:aa:3b:fc: b4:aa:b4:6f:87:c0:2e:c4:ef:ea:31:c6:1e:32:f9: 4b:8d:ac:70:14:31:d6:4f:1f:6d:46:49:d0:ae:a1: 72:c8:5b:93:e5:9a:46:6e:16:b7:fa:a1:5a:65:1a: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:3D:E4:C6:2B:8F:B5:E1:1A:BF:A0:7B:88:11:D7:F0:80:03:AF X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ba:6b:85:fa:09:01:ed:02:da:4e:e9:aa:69:aa:bb:b3:b2: 8a:cd:ac:0f:7d:9c:43:ec:3c:e9:25:19:03:02:e2:51:e5:d6: 70:db:47:b8:02:a5:53:79:ba:3b:97:c4:c2:90:74:82:35:91: 2a:8b:c5:d4:1e:c6:1f:c9:c4:2d:08:45:45:85:c0:df:84:e5: 86:55:ce:cc:88:4d:7d:20:9f:0a:6e:07:27:16:3f:9d:80:37: 11:2b:bd:59:d3:d4:41:e9:af:51:30:f2:ff:2d:04:fd:2c:ed: ec:15:d8:93:cd:92:ea:69:4f:9d:c9:41:40:22:6b:92:0a:ba: e4:fb:b2:c1:83:0c:c8:53:b4:9f:3a:5c:3e:2c:ea:91:83:ab: 11:af:f7:61:77:65:03:ca:5b:23:34:d8:49:fe:59:6a:66:6b: 30:2d:6f:a7:94:9c:1a:18:b2:30:7f:f6:1b:b6:35:b1:af:cc: c5:fc:6e:2d:d7:87:bf:21:b3:2c:a9:ba:7a:9c:bb:2e:49:39: 28:c7:80:ef:d7:76:51:2a:49:5a:d4:31:bc:c9:a9:8d:06:eb: bd:b5:e1:2d:23:d2:1f:04:4f:72:36:e5:64:39:4f:7f:ab:1b: cf:d7:47:52:13:aa:bf:b2:8c:cb:12:d8:f8:22:98:a2:71:7e: c8:be:c4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwODIyMjMxNTQ1WhcNMjUwODI5MjMxNTQ1WjAYMRYwFAYD VQQDEw02OGE4ZmEyMS00MTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0+KWz82QH9+ydrJUt8vBt65uRfie71dQkGvZgg23r5wN4IGngIQyiT1b/GGC w7ey38mTVh3vyF1lBG8PExfoJOzhDq+iVaEHUFR98YtjPwPsW+qgK6NioZPTlXCV o341s8iM2wMkun5gj0ZFbmxMRpQozi/OLRwRSO1oeFM1a+MCYgyUr2D0vdsQ/0+S OXebYnQvlXFjz71LnwOTyFqseJLilacEzULGKJsY3QeYE6klS++e/+9YLU8X1dha VgaMDVhFXpbNc543BZakheKqO/y0qrRvh8AuxO/qMcYeMvlLjaxwFDHWTx9tRknQ rqFyyFuT5ZpGbha3+qFaZRogRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0XPeTG K4+14Rq/oHuIEdfwgAOvMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPumuF+gkB7QLaTumqaaq7s7KKzawPfZxD7DzpJRkDAuJR5dZw20e4 AqVTebo7l8TCkHSCNZEqi8XUHsYfycQtCEVFhcDfhOWGVc7MiE19IJ8KbgcnFj+d gDcRK71Z09RB6a9RMPL/LQT9LO3sFdiTzZLqaU+dyUFAImuSCrrk+7LBgwzIU7Sf Olw+LOqRg6sRr/dhd2UDylsjNNhJ/llqZmswLW+nlJwaGLIwf/YbtjWxr8zF/G4t 14e/IbMsqbp6nLsuSTkox4Dv13ZRKkla1DG8yamNBuu9teEtI9IfBE9yNuVkOU9/ qxvP10dSE6q/sozLEtj4IpiicX7IvsSH -----END CERTIFICATE-----Generated at Sat Aug 23 20:10:22 2025 by rpki-client