$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft File: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft (raw, json) Hash identifier: yqjbeVMzyQA1dbWV13Dz7TYmpR8GiT213TR9R3JIYXU= Subject key identifier: 10:5E:97:23:EC:0A:73:CB:92:88:0D:33:3E:FC:62:0C:5A:36:79:2E Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 Certificate issuer: /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Certificate serial: 14E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft Manifest number: 14CF Signing time: Wed 02 Jul 2025 15:39:42 +0000 Manifest this update: Wed 02 Jul 2025 15:39:41 +0000 Manifest next update: Wed 09 Jul 2025 15:39:41 +0000 Files and hashes: 1: fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl (hash: 0CDZ2GceAXqLKkK3CGorO4TRfDIZTODbjOsB3BjyOeI=) 2: C163B1881A4711EDA547FE24C4F9AE02.roa (hash: YyHC9fQHplsWKxQpqgQ61v95ti092y+Fsw7rZXStZmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5344 (0x14e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4 Validity Not Before: Jul 2 15:39:41 2025 GMT Not After : Jul 9 15:39:41 2025 GMT Subject: CN=686552bd-8698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:04:8f:6e:dc:50:20:5f:16:1e:a6:c7:1f: 6e:ec:f5:d0:42:66:d4:e2:98:70:27:c9:5c:81:a3: 14:a4:49:6d:56:85:4f:9e:c1:8c:8a:3d:56:c3:52: 85:6e:68:4a:bc:4b:97:b8:95:e2:40:62:ff:39:80: 00:03:d8:1f:47:20:2c:1b:64:62:5d:d2:2a:b1:b6: 5e:6b:c3:2e:e1:8b:19:dd:20:41:7b:44:72:b5:34: 99:8c:07:4e:39:b1:09:9b:12:37:02:aa:94:15:fc: 23:be:35:94:ef:29:f2:87:9b:94:f2:05:b0:01:87: 98:4b:5b:f8:3c:99:9f:67:7f:67:e1:ba:6d:6d:02: c7:4f:d4:80:d2:ad:1e:3d:9f:a0:f5:09:fb:12:27: 64:99:7e:07:bb:82:bf:d0:3b:c7:ff:9a:08:2a:e9: 86:60:04:bd:73:48:5c:3e:47:92:fb:02:3c:c1:e6: 33:c5:22:f9:57:f9:0c:ae:7f:93:c7:bc:5e:ca:fc: 21:e5:45:3c:d1:91:1f:55:ac:19:c0:ae:4a:2a:b6: 96:ed:19:78:36:85:fb:b1:b0:45:b3:36:28:93:7d: 23:54:33:a5:d9:57:db:e6:b7:85:ef:e1:e8:57:20: 68:35:e1:85:94:b3:11:33:9b:63:4d:5e:50:22:77: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:97:23:EC:0A:73:CB:92:88:0D:33:3E:FC:62:0C:5A:36:79:2E X509v3 Authority Key Identifier: keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:dc:48:9b:a0:b3:f4:df:a5:37:ec:64:2b:47:7b:31:77:86: bc:01:e1:d7:fb:ae:a6:65:ab:40:83:ff:2c:03:73:55:2e:6a: 68:6d:23:dc:0a:54:cd:e0:aa:1b:60:e0:9f:4b:05:a0:cd:08: d2:2f:fb:3e:e8:40:b6:cf:78:71:33:4d:7f:a8:ec:ff:4d:10: 24:ff:56:6b:3b:be:c2:52:b8:e1:de:49:90:5b:8d:06:9b:2b: fc:2e:fc:2d:e6:6f:20:b9:a1:c1:23:af:68:7a:37:fe:00:a0: 05:eb:5e:86:e1:7a:73:39:b2:61:59:02:c6:1a:31:b2:ef:7f: 14:c5:8b:25:70:ad:c0:ee:31:38:0f:9f:9e:7e:5c:d3:ee:11: e7:0a:ae:76:24:da:52:eb:51:9b:19:cd:3c:6d:f8:c3:e8:f0: ec:cf:0d:97:3e:ea:23:de:6a:e7:d6:35:84:bb:41:0c:a6:2f: 11:48:b2:bb:05:40:9d:d7:7c:db:bc:02:3b:f0:4e:73:d4:2b: 06:4b:4b:c3:16:41:15:d1:0a:d7:52:64:6b:f5:56:63:98:ca: 02:0f:7a:66:01:6c:cf:7a:83:05:2a:1c:b5:55:3c:37:ed:99: dc:45:a6:b6:06:09:f0:f8:93:09:0c:c0:f3:d2:31:8b:f0:6b: 84:e8:7d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTJBRTUxMTAvBgNVBAUTKDdDNjNCMjgzRDlCOEEwNkVFQUQwNjIxQjgyM0VEMEY0 RTY5OURERjQwHhcNMjUwNzAyMTUzOTQxWhcNMjUwNzA5MTUzOTQxWjAYMRYwFAYD VQQDEw02ODY1NTJiZC04Njk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvUEj27cUCBfFh6mxx9u7PXQQmbU4phwJ8lcgaMUpEltVoVPnsGMij1Ww1KF bmhKvEuXuJXiQGL/OYAAA9gfRyAsG2RiXdIqsbZea8Mu4YsZ3SBBe0RytTSZjAdO ObEJmxI3AqqUFfwjvjWU7ynyh5uU8gWwAYeYS1v4PJmfZ39n4bptbQLHT9SA0q0e PZ+g9Qn7EidkmX4Hu4K/0DvH/5oIKumGYAS9c0hcPkeS+wI8weYzxSL5V/kMrn+T x7xeyvwh5UU80ZEfVawZwK5KKraW7Rl4NoX7sbBFszYok30jVDOl2Vfb5reF7+Ho VyBoNeGFlLMRM5tjTV5QInfBnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBBelyPs CnPLkogNMz78YgxaNnkuMB8GA1UdIwQYMBaAFHxjsoPZuKBu6tBiG4I+0PTmmd30 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMkFFNS85RDcyNzZCNjVD QTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9HN3EwR0liZ2o3UTlPYVoz ZlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZHT3lnOW00b0c3cTBHSWJnajdROU9hWjNmUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MkFFNS85RDcyNzZCNjVDQTkxMUU4QUE0MkEzNDZDNEY5QUUwMi9mR095ZzltNG9H N3EwR0liZ2o3UTlPYVozZlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAK3EiboLP036U37GQrR3sxd4a8AeHX+66mZatAg/8sA3NVLmpobSPc ClTN4KobYOCfSwWgzQjSL/s+6EC2z3hxM01/qOz/TRAk/1ZrO77CUrjh3kmQW40G myv8Lvwt5m8guaHBI69oejf+AKAF616G4XpzObJhWQLGGjGy738UxYslcK3A7jE4 D5+eflzT7hHnCq52JNpS61GbGc08bfjD6PDszw2XPuoj3mrn1jWEu0EMpi8RSLK7 BUCd13zbvAI78E5z1CsGS0vDFkEV0QrXUmRr9VZjmMoCD3pmAWzPeoMFKhy1VTw3 7ZncRaa2Bgnw+JMJDMDz0jGL8GuE6H17 -----END CERTIFICATE-----Generated at Thu Jul 3 21:43:26 2025 by rpki-client