$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: N59bLrX3m4sL3YAe60sM85OWx3ERggPo88rAVfXy0Ao= Subject key identifier: A7:78:DF:44:33:5A:C9:DE:0B:18:30:62:33:1F:31:E1:BA:86:19:40 Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:41:22 +0000 Manifest this update: Sat 23 Aug 2025 06:41:22 +0000 Manifest next update: Sat 30 Aug 2025 06:41:22 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: 2DxK28MtutXJvDqAOB41xCCumhSuwTRjWgAUueWewmk=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:41:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 150 (0x96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Aug 23 06:41:22 2025 GMT Not After : Aug 30 06:41:22 2025 GMT Subject: CN=68a96292-a414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:01:69:02:d7:12:22:6a:d1:af:2c:8c:23: 5f:c1:c7:e0:c0:0c:08:f8:da:cb:0e:c1:64:95:7b: 6f:29:99:33:99:fa:4f:d7:d3:93:b5:45:f8:f0:16: 9f:08:7d:ea:97:8e:28:aa:3e:b2:ca:f9:b5:22:c3: ca:c2:5a:f4:40:5d:75:9e:0c:f1:84:2c:53:68:0f: 02:3c:4b:8e:2d:88:14:d4:f1:ef:e9:a8:38:18:9d: 70:72:bc:01:cc:bd:5b:5c:2f:d5:e3:b5:0d:eb:9d: f2:1f:da:ea:64:9d:dd:03:7e:06:38:a0:1c:30:7d: 12:fb:de:ea:30:f2:ac:99:b7:31:78:b5:5c:c1:b7: c3:38:ed:cd:86:fa:52:71:a7:e7:bd:03:51:5c:e2: 64:7d:7f:6a:35:27:57:68:90:72:ff:01:77:94:a5: 32:68:ee:59:40:9e:9d:1f:80:59:25:3b:65:72:ab: 17:1d:ac:dd:5e:87:be:3d:a2:6c:21:d0:55:9a:a2: 06:f1:b6:7e:47:41:25:f2:12:be:f9:30:c6:5d:a3: a0:29:16:3a:63:9b:b9:ca:32:20:11:b7:12:45:3b: cc:d6:80:c7:fe:ea:fd:20:0a:d9:48:78:d3:12:8e: 50:cb:d1:e1:01:5f:fd:51:8d:7e:ea:d2:21:18:e7: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:78:DF:44:33:5A:C9:DE:0B:18:30:62:33:1F:31:E1:BA:86:19:40 X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:15:0b:ea:0e:fe:4e:ab:48:38:3d:e9:4c:1d:ad:e9:2d:61: f0:f9:5a:66:e2:96:a1:53:e5:3b:6a:88:52:9b:14:5a:5d:6e: 73:64:90:9f:ac:2c:23:36:e0:42:3d:82:0c:8c:97:4f:22:3e: 69:db:9c:cc:c6:01:9b:e6:96:67:d6:92:7c:5d:4f:32:91:3a: 0f:9e:3a:86:06:34:f9:a0:ed:f7:9d:44:d1:4b:f0:f1:bf:8c: ee:ea:00:35:3a:fb:e3:e3:fc:33:e8:14:0c:93:ea:40:e9:b9: de:cc:3d:a3:31:cf:c0:53:52:d4:cf:fe:d6:a3:d0:3f:ca:2d: 83:da:b7:02:af:a2:b6:ae:dd:80:12:46:42:27:64:07:0d:7e: 43:85:3a:e3:a2:73:3c:9f:a5:f0:42:83:dc:6e:43:9c:98:23: a2:0b:df:91:2f:13:bc:cb:0a:e7:05:dd:75:01:ef:b0:59:fc: 67:7d:33:11:1b:01:d0:6a:ba:41:4f:a3:1b:90:fa:08:d3:fc: e7:b6:2a:7b:cd:83:6d:33:94:4a:d9:a0:4a:96:61:8e:80:68: d8:48:f4:4d:7e:1d:3a:72:9d:42:fc:9e:ad:13:5d:6b:c4:c2: 67:b4:b5:2c:bb:bf:86:77:ae:4b:6d:9d:7d:0a:7b:6c:c8:49: 78:1f:63:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyOTkxMTAvBgNVBAUTKDE1NkVENUJGODE0MzdDMUI3MUU3MUNCMDJFRUMyN0FC MThBRjc5QTQwHhcNMjUwODIzMDY0MTIyWhcNMjUwODMwMDY0MTIyWjAYMRYwFAYD VQQDEw02OGE5NjI5Mi1hNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSQBaQLXEiJq0a8sjCNfwcfgwAwI+NrLDsFklXtvKZkzmfpP19OTtUX48Baf CH3ql44oqj6yyvm1IsPKwlr0QF11ngzxhCxTaA8CPEuOLYgU1PHv6ag4GJ1wcrwB zL1bXC/V47UN653yH9rqZJ3dA34GOKAcMH0S+97qMPKsmbcxeLVcwbfDOO3NhvpS cafnvQNRXOJkfX9qNSdXaJBy/wF3lKUyaO5ZQJ6dH4BZJTtlcqsXHazdXoe+PaJs IdBVmqIG8bZ+R0El8hK++TDGXaOgKRY6Y5u5yjIgEbcSRTvM1oDH/ur9IArZSHjT Eo5Qy9HhAV/9UY1+6tIhGOfEKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKd430Qz WsneCxgwYjMfMeG6hhlAMB8GA1UdIwQYMBaAFBVu1b+BQ3wbceccsC7sJ6sYr3mk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI5OS81RUI5M0E3MkEx REExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZCdHg1eHl3THV3bnF4aXZl YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI5OS81RUI5M0E3MkExREExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZC dHg1eHl3THV3bnF4aXZlYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaFQvqDv5Oq0g4PelMHa3pLWHw+Vpm4pahU+U7aohSmxRaXW5zZJCf rCwjNuBCPYIMjJdPIj5p25zMxgGb5pZn1pJ8XU8ykToPnjqGBjT5oO33nUTRS/Dx v4zu6gA1Ovvj4/wz6BQMk+pA6bnezD2jMc/AU1LUz/7Wo9A/yi2D2rcCr6K2rt2A EkZCJ2QHDX5DhTrjonM8n6XwQoPcbkOcmCOiC9+RLxO8ywrnBd11Ae+wWfxnfTMR GwHQarpBT6MbkPoI0/zntip7zYNtM5RK2aBKlmGOgGjYSPRNfh06cp1C/J6tE11r xMJntLUsu7+Gd65LbZ19CntsyEl4H2Pa -----END CERTIFICATE-----Generated at Sat Aug 23 18:59:31 2025 by rpki-client