$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft File: F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft (raw, json) Hash identifier: geBa+iGjef4LXM6Kv9zt+sQBjI3+k+D75c0FfgKz9RM= Subject key identifier: 7F:09:00:DB:D8:9A:D7:28:69:5F:5A:43:64:27:6C:0E:FF:87:F8:BF Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft Manifest number: 05BD Signing time: Mon 30 Jun 2025 23:33:01 +0000 Manifest this update: Mon 30 Jun 2025 23:33:00 +0000 Manifest next update: Mon 07 Jul 2025 23:33:00 +0000 Files and hashes: 1: F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl (hash: 7j8w3xgk6U2KzGnJRQtVCj3OgQJb60232ARBkj37pCk=) 2: 96B7F96CAB3611EFB500860EC4F9AE02.roa (hash: GlPYzm1g1p6UF6TrozrvebOfAek8o1pTtBkEeyLLQjQ=) 3: 73381ABCAB3611EF809A470EC4F9AE02.roa (hash: NusIDt0f4j0NcRF078XLORWazAmsiuO0j1zyJghrWis=) 4: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (hash: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg=) 5: 695C5050C27D11EEB0AE466DC4F9AE02.roa (hash: RdB+XhDvSvaJvXs7BGUe7hQ0J/yDuFEAfzGv0ijmNPc=) 6: 6D24010C300311F0995E874EC4F9AE02.roa (hash: JH/oVs3Jqan8Flty+gkOdXRSGquUVwbS7q7MqJveDFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 23:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1493 (0x5d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Validity Not Before: Jun 30 23:33:00 2025 GMT Not After : Jul 7 23:33:00 2025 GMT Subject: CN=68631ead-aee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:06:23:cb:b0:83:fb:25:ed:4e:6c:8d:3f:63: d0:2a:10:c7:4d:fe:dc:5b:27:32:69:e3:34:34:e9: f1:81:d4:5b:af:42:53:12:08:e2:ff:6a:3a:6a:f6: 32:da:8c:a9:85:90:86:d0:e9:9c:a4:a8:ae:13:e4: af:fa:b3:36:35:57:ee:3c:cc:87:c6:7a:ea:62:00: da:63:b7:ac:5f:c1:86:5b:3f:d9:be:93:6d:0f:e5: ee:46:95:56:94:2b:a1:98:ef:d0:55:ea:44:2e:94: d3:0b:0f:e0:1e:3a:46:e6:78:30:49:fe:67:e4:bc: 70:e3:31:c3:62:0f:2a:ea:c5:1b:a0:08:97:d6:5a: 9c:4f:15:b3:ef:0b:e7:ea:23:c8:af:b0:21:a6:50: e0:e4:a0:fc:03:fc:69:82:55:45:c7:a3:57:48:f9: 42:37:3e:c5:47:a6:70:4b:77:59:2a:59:71:eb:29: de:23:1c:7f:b8:75:20:75:13:80:30:8e:34:c3:77: 79:a1:d3:26:1a:50:76:db:cc:d1:53:da:75:33:d8: 23:39:51:d2:fd:0a:92:90:b4:1a:23:c9:1c:23:d6: a6:a2:f0:3a:03:ec:7c:cd:97:ba:64:69:2c:9c:99: 05:e3:3b:87:3c:81:3b:16:42:bf:5c:20:1a:eb:4e: 07:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:00:DB:D8:9A:D7:28:69:5F:5A:43:64:27:6C:0E:FF:87:F8:BF X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:76:64:cd:dc:8a:93:b7:04:aa:87:1c:8c:d8:25:c1:57:7a: 19:e5:1b:6f:27:d8:45:bd:b5:07:74:10:69:6a:aa:0d:a2:61: 2a:88:7a:9d:db:4b:d5:06:4e:66:ba:ab:ba:cb:33:9e:a3:5e: 6f:d4:0b:d6:64:50:14:24:3c:78:18:06:fd:cf:cb:63:79:de: 69:b9:d2:84:88:d0:84:cf:a0:12:28:0e:a3:ae:af:17:24:ba: 6f:f5:b2:54:a1:cd:8a:fa:23:0a:f4:49:f8:06:66:6b:ff:6c: 31:a9:19:7f:7e:4d:74:58:f9:84:e4:c3:20:85:e6:94:e8:41: 51:ed:39:35:1f:ca:d8:d6:06:a0:47:5f:ad:c6:97:8e:63:ae: f3:6c:65:c0:6f:f2:50:f8:a5:22:07:73:33:39:61:cd:3f:2c: 15:1e:ec:50:e5:07:b7:7a:78:07:d5:91:75:4a:f4:1c:77:02: 21:88:43:6a:7c:42:4a:5e:3f:53:3f:54:44:13:fa:89:27:3b: 5b:13:88:b8:b4:22:3d:30:0c:a8:9f:f6:ca:cf:b8:c9:fc:e9: 26:56:7f:96:9e:9b:cc:3b:9b:4f:9a:5e:23:9e:ae:6e:2e:ca: 85:57:7d:c6:66:2e:a3:76:3d:35:55:ca:13:ae:8a:8b:1f:3d: ab:c6:7e:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNjMwMjMzMzAwWhcNMjUwNzA3MjMzMzAwWjAYMRYwFAYD VQQDEw02ODYzMWVhZC1hZWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3AYjy7CD+yXtTmyNP2PQKhDHTf7cWycyaeM0NOnxgdRbr0JTEgji/2o6avYy 2oyphZCG0OmcpKiuE+Sv+rM2NVfuPMyHxnrqYgDaY7esX8GGWz/ZvpNtD+XuRpVW lCuhmO/QVepELpTTCw/gHjpG5ngwSf5n5Lxw4zHDYg8q6sUboAiX1lqcTxWz7wvn 6iPIr7AhplDg5KD8A/xpglVFx6NXSPlCNz7FR6ZwS3dZKllx6yneIxx/uHUgdROA MI40w3d5odMmGlB228zRU9p1M9gjOVHS/QqSkLQaI8kcI9amovA6A+x8zZe6ZGks nJkF4zuHPIE7FkK/XCAa604HQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8JANvY mtcoaV9aQ2QnbA7/h/i/MB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA5RS80NzExOUQwMEQwMEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnot N251Tlp4RFdOZ1o1bXU5MmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTdmTN3IqTtwSqhxyM2CXBV3oZ5RtvJ9hFvbUHdBBpaqoNomEqiHqd 20vVBk5muqu6yzOeo15v1AvWZFAUJDx4GAb9z8tjed5pudKEiNCEz6ASKA6jrq8X JLpv9bJUoc2K+iMK9En4BmZr/2wxqRl/fk10WPmE5MMgheaU6EFR7Tk1H8rY1gag R1+txpeOY67zbGXAb/JQ+KUiB3MzOWHNPywVHuxQ5Qe3engH1ZF1SvQcdwIhiENq fEJKXj9TP1REE/qJJztbE4i4tCI9MAyon/bKz7jJ/OkmVn+WnpvMO5tPml4jnq5u LsqFV33GZi6jdj01VcoTroqLHz2rxn6b -----END CERTIFICATE-----Generated at Tue Jul 1 08:55:10 2025 by rpki-client