$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft File: fzUqdpVtdwL8d69g_MEp5h_b6jI.mft (raw, json) Hash identifier: /dDqXEqJI4JjdcnH+QHD/sLqO0HlJ5ieDOMuI9w6quU= Subject key identifier: 06:DF:04:48:C4:F6:F2:F8:43:B9:AE:64:17:35:44:7D:3F:12:2A:1F Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft Manifest number: 013A Signing time: Tue 01 Jul 2025 04:58:30 +0000 Manifest this update: Tue 01 Jul 2025 04:58:30 +0000 Manifest next update: Tue 08 Jul 2025 04:58:30 +0000 Files and hashes: 1: fzUqdpVtdwL8d69g_MEp5h_b6jI.crl (hash: vttIeup3qVr33PR8fELMJwMAnqIDsi4dvhfs16/Ilo8=) 2: 3C2B0A98259911EFB9393E2EC4F9AE02.roa (hash: GUAKLioCiwQM0sEveusi3ixaoMT6G47CkUGC3S4J4Kc=) 3: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (hash: kLwQ9PBIqCKII7G0saaqu2rGr7qnQzEy5QYjy0dvRGs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: Jul 1 04:58:30 2025 GMT Not After : Jul 8 04:58:30 2025 GMT Subject: CN=68636af6-9360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:35:70:2c:2c:60:bb:dc:e4:a8:3f:58:bb: df:de:cb:bf:59:31:c9:ea:1c:1f:2a:c3:84:eb:3e: 9b:26:60:90:9b:53:01:0d:86:a3:eb:4a:5d:4b:38: 75:f5:1b:d7:83:61:38:6f:dd:ed:b7:ec:54:e5:ac: 57:88:d1:71:6c:76:98:1a:5c:ee:29:3c:9b:1c:6a: be:00:30:24:19:6f:4f:83:f8:6a:e9:cc:94:8a:10: 6b:00:a2:82:22:8d:a5:d1:71:2b:a9:24:6f:00:71: e1:12:57:c5:0f:ca:d7:f0:7f:b5:4e:2e:2c:ee:26: b5:6b:fd:70:03:3c:91:3c:59:e1:25:3a:93:3d:fb: 94:22:5e:0d:47:e0:ae:7a:ed:c1:fd:b2:fb:0b:e3: 8e:18:e0:94:8d:c4:c9:91:f6:ea:28:8a:50:b2:cc: 4b:2c:ad:65:7c:d9:02:94:fb:de:98:ea:16:5a:bf: 77:c8:02:ee:6a:e3:9e:b9:93:08:43:2e:6f:80:72: f8:0f:ec:bb:df:dc:61:35:eb:ec:65:0d:04:55:35: 47:67:c6:16:7c:4c:05:a7:05:fa:b2:54:62:41:7e: 47:6e:89:58:21:2c:3c:81:81:97:bb:13:f3:a2:75: 31:bb:77:59:4a:11:85:dd:bf:67:f6:bc:2a:eb:29: 69:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DF:04:48:C4:F6:F2:F8:43:B9:AE:64:17:35:44:7D:3F:12:2A:1F X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:9c:13:ae:19:7a:64:27:cd:98:a6:b4:06:b1:5f:43:05:7f: 3b:cc:d9:64:62:42:cb:ab:65:08:b0:74:2b:e8:3b:b6:b4:40: 2f:7e:a2:b1:72:92:8f:16:0e:6b:7f:b3:7c:2e:6d:14:ac:4f: 93:e3:6f:8f:ec:17:a8:38:49:67:56:3e:82:a2:d9:2e:1d:06: 1a:fa:fd:47:c9:06:b1:ff:ec:ea:ea:bc:d7:74:76:25:4d:8a: 6b:56:fd:f0:6d:91:69:12:21:28:fa:e2:fd:a4:a2:af:67:ab: 11:2b:63:f5:0f:8a:66:36:14:6a:57:3f:dc:79:2b:02:54:7b: 30:1b:32:76:a2:15:ce:a3:56:2f:d0:35:b4:cf:3a:aa:b6:b8: 3d:f6:e5:65:91:c7:99:ce:b4:53:e4:4f:f6:09:6b:87:af:83: c0:53:f6:95:43:33:2e:01:9f:1d:34:36:6d:70:13:92:ef:23: cc:46:aa:62:20:dc:d7:d0:50:5e:77:35:ba:15:5a:1c:5b:a8: 5b:bf:95:42:d0:0e:f6:45:be:2c:b4:84:9e:c8:38:8f:7e:2c: dc:c9:9c:33:46:41:29:6d:d0:0c:26:0b:ec:0c:8d:72:7c:27: 26:ff:1c:44:b0:ec:06:04:cc:6c:41:a7:dd:f3:aa:4b:df:8e: 75:16:d4:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUwNzAxMDQ1ODMwWhcNMjUwNzA4MDQ1ODMwWjAYMRYwFAYD VQQDEw02ODYzNmFmNi05MzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyts1cCwsYLvc5Kg/WLvf3su/WTHJ6hwfKsOE6z6bJmCQm1MBDYaj60pdSzh1 9RvXg2E4b93tt+xU5axXiNFxbHaYGlzuKTybHGq+ADAkGW9Pg/hq6cyUihBrAKKC Io2l0XErqSRvAHHhElfFD8rX8H+1Ti4s7ia1a/1wAzyRPFnhJTqTPfuUIl4NR+Cu eu3B/bL7C+OOGOCUjcTJkfbqKIpQssxLLK1lfNkClPvemOoWWr93yALuauOeuZMI Qy5vgHL4D+y739xhNevsZQ0EVTVHZ8YWfEwFpwX6slRiQX5HbolYISw8gYGXuxPz onUxu3dZShGF3b9n9rwq6ylpkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbfBEjE 9vL4Q7muZBc1RH0/EiofMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTVBRC9COEI5MUM0NjdFMTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3 TDhkNjlnX01FcDVoX2I2akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHnBOuGXpkJ82YprQGsV9DBX87zNlkYkLLq2UIsHQr6Du2tEAvfqKx cpKPFg5rf7N8Lm0UrE+T42+P7BeoOElnVj6CotkuHQYa+v1HyQax/+zq6rzXdHYl TYprVv3wbZFpEiEo+uL9pKKvZ6sRK2P1D4pmNhRqVz/ceSsCVHswGzJ2ohXOo1Yv 0DW0zzqqtrg99uVlkceZzrRT5E/2CWuHr4PAU/aVQzMuAZ8dNDZtcBOS7yPMRqpi INzX0FBedzW6FVocW6hbv5VC0A72Rb4stISeyDiPfizcyZwzRkEpbdAMJgvsDI1y fCcm/xxEsOwGBMxsQafd86pL3451FtRd -----END CERTIFICATE-----Generated at Wed Jul 2 16:18:59 2025 by rpki-client