$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: AMW3zZtEkVG1ANtwfu1HNeTAQv+8zuo3kIJbJG1Ioik= Subject key identifier: D8:56:6C:76:CA:C9:C5:C7:D5:8E:B9:8A:89:96:36:A2:10:B5:46:43 Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14FA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14E9 Signing time: Fri 22 Aug 2025 15:35:34 +0000 Manifest this update: Fri 22 Aug 2025 15:35:33 +0000 Manifest next update: Fri 29 Aug 2025 15:35:33 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: J/DHVMeiZdezUh08Zahe8D3ckWS++jjQBy/ztTigX0w=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5370 (0x14fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Aug 22 15:35:33 2025 GMT Not After : Aug 29 15:35:33 2025 GMT Subject: CN=68a88e46-08e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:e0:0b:43:0d:c7:4c:c8:55:58:4a:a3:ba: a1:92:20:4c:9d:ab:dc:fb:29:29:7e:75:42:3e:f0: 2e:d3:4c:68:16:44:e8:f1:06:de:d6:d9:0d:67:fd: bb:c0:24:5e:b4:02:c4:81:fa:e0:4d:ed:1e:02:62: 8b:75:d8:e8:27:2c:50:f5:05:93:e6:c0:9e:b0:3a: e0:76:f5:c7:99:5e:f7:ff:1e:19:66:40:a4:e2:b2: eb:3c:36:4e:29:61:e5:d7:d1:31:3c:eb:12:19:a2: 93:b2:4f:6e:8b:a3:91:5c:03:b8:a8:10:91:15:1c: 02:63:f5:ad:29:df:35:b6:c4:93:1b:5c:4c:a6:14: a3:b5:23:8b:d0:9e:92:73:94:28:41:8c:b5:09:5f: 80:f8:94:e4:95:4f:6f:84:3e:b3:02:05:0d:04:21: 15:f5:56:29:55:df:45:a5:5a:50:fb:c3:b8:89:46: 7e:d0:b2:5d:2f:73:40:a7:66:60:6b:3e:43:47:ef: 40:fb:c6:c0:a5:87:b8:73:87:18:94:fb:83:ff:50: 37:bd:c0:ce:a1:50:01:ac:42:d9:0e:66:1c:6f:ef: 30:f2:f3:a7:4c:23:4b:64:6e:86:0c:ea:c7:ce:c1: 04:5f:2e:e6:5e:7e:6f:f7:37:ca:77:e6:54:4a:60: 85:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:56:6C:76:CA:C9:C5:C7:D5:8E:B9:8A:89:96:36:A2:10:B5:46:43 X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:00:df:2f:d9:fd:9d:47:ef:99:4f:5b:4a:83:0b:95:f1:25: 86:49:36:d4:04:c2:00:a3:98:39:c1:33:d9:50:5e:0e:de:4f: f2:28:f9:8f:e8:e2:8c:ab:be:e3:3a:ee:95:f9:93:a4:57:55: df:e1:a4:a4:ce:0e:07:30:3a:b6:5c:31:df:a6:41:d0:8d:7e: ed:30:38:77:93:63:7b:42:14:77:02:a7:94:a3:38:3a:b5:25: 86:d0:6c:4c:38:a2:c7:d6:c0:b0:12:19:e9:a5:17:af:ca:2c: a0:64:a2:e2:61:96:c9:b4:7e:45:a9:a2:ad:91:e2:30:7c:90: 48:0c:77:a4:6b:4d:a2:20:c0:f9:61:05:ff:58:40:c9:64:a1: 5c:1c:9d:f6:d5:35:b6:c3:fb:72:cb:57:28:3e:c9:28:d4:b5: fd:24:ae:29:b1:00:5b:9e:d6:f2:54:51:76:a3:c3:73:f5:b3: 88:e0:0b:d5:b5:a7:37:92:53:26:a8:df:0f:4b:e6:54:e8:e4: 9e:ac:ee:d6:3d:89:d3:bc:10:9e:ab:5c:a4:8a:e0:70:14:c6: e1:ca:f1:b1:92:14:61:40:31:00:23:84:91:17:be:d6:f6:81: f0:39:e3:2e:2a:a1:fa:bf:5f:dd:e7:fd:49:e0:fa:37:e3:c5: da:bf:51:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwODIyMTUzNTMzWhcNMjUwODI5MTUzNTMzWjAYMRYwFAYD VQQDEw02OGE4OGU0Ni0wOGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlILgC0MNx0zIVVhKo7qhkiBMnavc+ykpfnVCPvAu00xoFkTo8Qbe1tkNZ/27 wCRetALEgfrgTe0eAmKLddjoJyxQ9QWT5sCesDrgdvXHmV73/x4ZZkCk4rLrPDZO KWHl19ExPOsSGaKTsk9ui6ORXAO4qBCRFRwCY/WtKd81tsSTG1xMphSjtSOL0J6S c5QoQYy1CV+A+JTklU9vhD6zAgUNBCEV9VYpVd9FpVpQ+8O4iUZ+0LJdL3NAp2Zg az5DR+9A+8bApYe4c4cYlPuD/1A3vcDOoVABrELZDmYcb+8w8vOnTCNLZG6GDOrH zsEEXy7mXn5v9zfKd+ZUSmCFeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNhWbHbK ycXH1Y65iomWNqIQtUZDMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6AN8v2f2dR++ZT1tKgwuV8SWGSTbUBMIAo5g5wTPZUF4O3k/yKPmP 6OKMq77jOu6V+ZOkV1Xf4aSkzg4HMDq2XDHfpkHQjX7tMDh3k2N7QhR3AqeUozg6 tSWG0GxMOKLH1sCwEhnppRevyiygZKLiYZbJtH5FqaKtkeIwfJBIDHeka02iIMD5 YQX/WEDJZKFcHJ321TW2w/tyy1coPsko1LX9JK4psQBbntbyVFF2o8Nz9bOI4AvV tac3klMmqN8PS+ZU6OSerO7WPYnTvBCeq1ykiuBwFMbhyvGxkhRhQDEAI4SRF77W 9oHwOeMuKqH6v1/d5/1J4Po348Xav1FE -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:25 2025 by rpki-client