$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft File: cFWB1AyVgaJlHlMlI42zvcs6fQU.mft (raw, json) Hash identifier: 6psCReSp9pBksI1lPloB9Ox+EKUq+o1K3EbMM5WaMhM= Subject key identifier: B6:4B:9F:79:DE:CF:0A:68:60:07:B5:2A:C7:30:11:38:B9:7C:77:5C Authority key identifier: 70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 Certificate issuer: /CN=A91E1D91/serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Certificate serial: 03AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft Manifest number: 03A4 Signing time: Thu 03 Jul 2025 01:09:27 +0000 Manifest this update: Thu 03 Jul 2025 01:09:26 +0000 Manifest next update: Thu 10 Jul 2025 01:09:26 +0000 Files and hashes: 1: cFWB1AyVgaJlHlMlI42zvcs6fQU.crl (hash: KBPM1cNAxoXLuOtVI1tzQxD6aspu6Z7BtkyeFAe3Zl8=) 2: 6CDC639EA04411EC8A7E5E2CC4F9AE02.roa (hash: WktAZLAHSw7QkU+hNH84sEG4OXo+/tq5XSlAqKGLv18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 941 (0x3ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1D91, serialNumber=705581D40C9581A2651E5325238DB3BDCB3A7D05 Validity Not Before: Jul 3 01:09:26 2025 GMT Not After : Jul 10 01:09:26 2025 GMT Subject: CN=6865d846-ed5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:b2:ae:ea:f2:01:c4:8a:64:8f:b0:30:e1: 74:42:d1:b4:f1:10:f7:8a:74:a3:b0:0a:2c:38:ed: 3b:64:9a:39:d5:84:ce:70:ff:ef:7d:fa:8a:f8:7f: 80:02:09:b6:50:85:e4:30:ba:12:44:ed:e2:43:58: e4:a9:83:0f:8c:db:65:f5:4f:ef:58:b3:2f:1d:c8: ef:ed:1b:65:ed:13:79:81:e8:61:07:03:1c:35:fb: ef:24:f6:49:c3:97:66:bf:35:e5:79:3c:1b:06:6d: 5b:fc:6d:de:5f:4a:83:58:8a:31:aa:d3:0b:4d:ab: bf:6b:70:4d:eb:df:15:aa:d4:c5:8c:36:8f:7d:24: b4:ca:e0:f9:b7:43:7a:7b:72:a9:0b:b1:41:fa:74: d6:68:1e:5b:68:77:c2:ca:06:a9:0c:a6:84:8a:1f: 15:a6:37:29:2a:04:30:9d:92:bd:99:87:3c:34:24: 71:70:99:f1:28:75:92:52:fa:1c:b4:05:5a:20:4a: 07:0c:b3:c4:5d:98:2c:9a:8b:c3:b3:3b:b2:c7:3d: e8:40:28:66:d5:30:bd:6e:48:55:de:26:6d:e3:36: 77:a5:74:9c:ae:75:15:e4:e3:67:c2:6c:75:a3:1a: c4:34:60:63:be:e6:30:4e:fa:7c:da:98:a9:e0:8c: fb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:9F:79:DE:CF:0A:68:60:07:B5:2A:C7:30:11:38:B9:7C:77:5C X509v3 Authority Key Identifier: keyid:70:55:81:D4:0C:95:81:A2:65:1E:53:25:23:8D:B3:BD:CB:3A:7D:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFWB1AyVgaJlHlMlI42zvcs6fQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1D91/5D8C1712A04011EC845AE926C4F9AE02/cFWB1AyVgaJlHlMlI42zvcs6fQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:1d:27:8b:e8:48:c8:1e:a1:a5:89:a5:aa:86:af:22:66:5b: c7:4c:2f:0d:e6:f6:80:26:0d:8f:10:8c:26:48:b3:8f:27:bd: 5a:87:37:b4:d8:19:7e:e8:cc:04:03:2a:41:25:f2:72:04:20: b2:c0:9a:71:95:3c:d4:16:67:f0:8a:7a:6d:4a:5c:6f:6c:b9: fa:1d:c0:8e:71:55:eb:e6:1f:f5:69:29:a3:2c:c6:e6:80:1b: fc:6a:c4:2b:d1:ec:17:e2:9e:6b:c3:de:19:a8:34:49:39:7d: ad:d6:7c:d9:56:64:9f:b4:0b:9f:11:57:a7:32:66:ac:62:89: 50:a7:ab:56:d6:59:3f:43:b9:66:ee:5c:3a:96:85:6b:5c:13: f8:d7:1f:b7:83:01:b7:1e:c4:09:7c:86:6a:39:13:ca:61:a2: e8:e9:bb:8f:86:33:14:f2:25:95:cf:f1:9f:83:0f:55:8f:99: 29:a6:5f:26:33:41:4c:ee:23:5b:f6:e9:2b:49:61:17:e0:70: 0f:43:49:1b:47:03:9a:22:ac:a0:85:9e:f4:a1:55:72:ec:de: fb:6a:4a:60:3b:e3:8b:24:ac:ff:4e:5a:5b:f6:13:42:2e:e4: 0f:cd:f9:81:8c:46:b8:a7:c5:1e:51:99:ff:df:f6:14:a2:0d: 1a:fa:64:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTFEOTExMTAvBgNVBAUTKDcwNTU4MUQ0MEM5NTgxQTI2NTFFNTMyNTIzOERCM0JE Q0IzQTdEMDUwHhcNMjUwNzAzMDEwOTI2WhcNMjUwNzEwMDEwOTI2WjAYMRYwFAYD VQQDEw02ODY1ZDg0Ni1lZDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApByyruryAcSKZI+wMOF0QtG08RD3inSjsAosOO07ZJo51YTOcP/vffqK+H+A Agm2UIXkMLoSRO3iQ1jkqYMPjNtl9U/vWLMvHcjv7Rtl7RN5gehhBwMcNfvvJPZJ w5dmvzXleTwbBm1b/G3eX0qDWIoxqtMLTau/a3BN698VqtTFjDaPfSS0yuD5t0N6 e3KpC7FB+nTWaB5baHfCygapDKaEih8VpjcpKgQwnZK9mYc8NCRxcJnxKHWSUvoc tAVaIEoHDLPEXZgsmovDszuyxz3oQChm1TC9bkhV3iZt4zZ3pXScrnUV5ONnwmx1 oxrENGBjvuYwTvp82pip4Iz79QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZLn3ne zwpoYAe1KscwETi5fHdcMB8GA1UdIwQYMBaAFHBVgdQMlYGiZR5TJSONs73LOn0F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUQ5MS81RDhDMTcxMkEw NDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5VmdhSmxIbE1sSTQyenZjczZm UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGV0IxQXlWZ2FKbEhsTWxJNDJ6dmNzNmZRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUQ5MS81RDhDMTcxMkEwNDAxMUVDODQ1QUU5MjZDNEY5QUUwMi9jRldCMUF5Vmdh SmxIbE1sSTQyenZjczZmUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAHSeL6EjIHqGliaWqhq8iZlvHTC8N5vaAJg2PEIwmSLOPJ71ahze0 2Bl+6MwEAypBJfJyBCCywJpxlTzUFmfwinptSlxvbLn6HcCOcVXr5h/1aSmjLMbm gBv8asQr0ewX4p5rw94ZqDRJOX2t1nzZVmSftAufEVenMmasYolQp6tW1lk/Q7lm 7lw6loVrXBP41x+3gwG3HsQJfIZqORPKYaLo6buPhjMU8iWVz/Gfgw9Vj5kppl8m M0FM7iNb9ukrSWEX4HAPQ0kbRwOaIqyghZ70oVVy7N77akpgO+OLJKz/Tlpb9hNC LuQPzfmBjEa4p8UeUZn/3/YUog0a+mQC -----END CERTIFICATE-----Generated at Thu Jul 3 15:05:46 2025 by rpki-client