$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: gAIhl2yqyEnQkzqZFZq6bpVWv01WfROm/v3yyRH97Mc= Subject key identifier: A9:19:51:DB:1C:21:C1:79:AF:4D:CD:E0:7A:1F:F5:F5:38:7A:6C:A9 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 0893 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 079F Signing time: Wed 02 Jul 2025 22:44:29 +0000 Manifest this update: Wed 02 Jul 2025 22:44:28 +0000 Manifest next update: Wed 09 Jul 2025 22:44:28 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: lsdwatv2r4+QIMFyMQqYV863gYq+AZOHXiXCSdOLGOA=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2195 (0x893) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Jul 2 22:44:28 2025 GMT Not After : Jul 9 22:44:28 2025 GMT Subject: CN=6865b64c-8cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:7b:4a:99:ae:54:a8:a7:43:e2:4c:0d:4e: 68:82:0d:25:79:88:4b:58:97:03:e1:55:32:8a:87: d5:90:49:fb:cd:43:0d:f1:04:c9:eb:a5:06:2c:d8: 7a:20:f7:bb:cf:8b:c7:ed:9e:18:7d:b1:91:1b:fd: 97:36:a5:9a:51:20:a3:01:c9:bc:6a:93:1e:0a:aa: 5c:1c:54:80:84:46:47:72:72:d0:c4:90:03:db:cd: df:c7:20:8f:39:a6:3c:6e:13:c1:f8:87:ca:45:d4: d9:81:7f:61:76:4c:61:93:28:bf:2e:96:42:cd:1e: c5:10:75:55:36:8d:95:d7:61:64:3d:34:17:04:b7: e5:95:82:6f:63:0e:64:24:0f:92:e2:7c:41:f4:84: 2c:d8:3e:d4:4c:91:1c:f3:2a:8b:c4:6c:5b:60:69: e6:80:7a:f5:32:f6:e1:82:e6:f6:5f:08:73:2f:42: e2:a3:3a:71:d9:68:68:9f:e5:2f:6d:34:2a:fd:47: ad:63:b8:dc:c7:0d:d8:d9:de:ef:8b:b2:0b:d3:ea: 4c:f1:ec:e1:8a:27:ed:37:e2:d8:e8:3b:c8:fd:56: 68:87:70:0d:ce:a2:48:9f:53:19:32:f3:96:7b:2d: f5:f9:55:65:4d:f4:11:66:17:07:2e:ab:36:85:74: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:51:DB:1C:21:C1:79:AF:4D:CD:E0:7A:1F:F5:F5:38:7A:6C:A9 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:cf:8f:e8:5e:06:ec:50:10:a9:19:21:03:79:74:c1:dc:61: 65:ea:8a:bb:b4:ec:17:59:d0:f7:20:9e:7b:b8:24:49:db:e2: 7a:c0:96:e2:0c:25:97:86:ce:b0:72:3f:79:e2:a0:e6:bd:83: 6b:7c:54:cd:9f:d0:f9:1a:70:0a:82:6f:b0:ac:80:9e:19:32: 70:20:2f:ff:7d:20:20:ba:16:79:56:0c:5d:9d:7f:21:56:68: 8f:91:14:d2:d9:17:90:19:9f:0a:70:39:24:80:24:b6:57:49: 10:92:ce:18:93:c9:19:6d:b7:5b:7d:fe:51:37:90:2c:ae:81: 7f:08:12:46:b2:df:ab:35:d3:5f:38:61:5f:54:0a:14:e7:dc: 81:10:a1:2a:48:d8:5c:af:6f:4e:8d:6d:6f:35:21:a7:c5:02: b1:11:8e:8c:c3:38:9e:3b:2c:d5:a9:ff:67:b0:7d:cf:fb:8b: 3f:ec:40:30:2f:6a:b7:be:ec:49:82:3c:6b:f1:91:f9:de:30: 74:3a:12:45:c4:3f:0c:8d:4b:c7:ea:ee:37:36:5b:2b:88:2a: 4b:5e:ec:2a:57:a3:d3:e8:1b:67:a2:d7:97:57:45:96:13:23: 10:3b:86:88:e3:a2:99:8f:ef:7a:7e:02:4e:20:d7:2c:47:05: c1:ec:75:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwNzAyMjI0NDI4WhcNMjUwNzA5MjI0NDI4WjAYMRYwFAYD VQQDEw02ODY1YjY0Yy04Y2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzed7SpmuVKinQ+JMDU5ogg0leYhLWJcD4VUyiofVkEn7zUMN8QTJ66UGLNh6 IPe7z4vH7Z4YfbGRG/2XNqWaUSCjAcm8apMeCqpcHFSAhEZHcnLQxJAD283fxyCP OaY8bhPB+IfKRdTZgX9hdkxhkyi/LpZCzR7FEHVVNo2V12FkPTQXBLfllYJvYw5k JA+S4nxB9IQs2D7UTJEc8yqLxGxbYGnmgHr1Mvbhgub2XwhzL0Liozpx2Whon+Uv bTQq/UetY7jcxw3Y2d7vi7IL0+pM8ezhiiftN+LY6DvI/VZoh3ANzqJIn1MZMvOW ey31+VVlTfQRZhcHLqs2hXQMnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkZUdsc IcF5r03N4Hof9fU4emypMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4z4/oXgbsUBCpGSEDeXTB3GFl6oq7tOwXWdD3IJ57uCRJ2+J6wJbi DCWXhs6wcj954qDmvYNrfFTNn9D5GnAKgm+wrICeGTJwIC//fSAguhZ5VgxdnX8h VmiPkRTS2ReQGZ8KcDkkgCS2V0kQks4Yk8kZbbdbff5RN5AsroF/CBJGst+rNdNf OGFfVAoU59yBEKEqSNhcr29OjW1vNSGnxQKxEY6MwzieOyzVqf9nsH3P+4s/7EAw L2q3vuxJgjxr8ZH53jB0OhJFxD8MjUvH6u43NlsriCpLXuwqV6PT6BtnoteXV0WW EyMQO4aI46KZj+96fgJOINcsRwXB7HWX -----END CERTIFICATE-----Generated at Thu Jul 3 23:36:42 2025 by rpki-client