$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: qJwzmxX1OTlgcwzaOj78oqHVBvmORJZIlCFnmjJnNG0= Subject key identifier: 97:9E:04:62:06:18:AD:5E:11:52:BA:15:61:1E:F9:60:CA:3C:1F:CE Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 104E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 1044 Signing time: Wed 02 Jul 2025 17:36:57 +0000 Manifest this update: Wed 02 Jul 2025 17:36:56 +0000 Manifest next update: Wed 09 Jul 2025 17:36:56 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: hNe1815A1O8oZ2ITC70rg62LPlVuxbJ/Gei1AfyExgA=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: y5NX1YIUJkNfdZYbpVfh0lEdhrqmAzue7Svt0KDhStg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4174 (0x104e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Jul 2 17:36:56 2025 GMT Not After : Jul 9 17:36:56 2025 GMT Subject: CN=68656e38-b513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:18:65:5f:9d:a9:aa:e7:12:14:1d:1d:e6:8c: 1b:35:06:39:a4:d4:d7:1d:bf:c7:8b:69:02:3e:95: da:c2:5b:ab:70:f0:f6:ac:78:be:0f:88:be:8e:6c: 5f:c9:9a:d0:1b:94:6b:49:4a:cb:12:8a:9c:f0:9a: 42:75:b0:7f:5f:52:9a:65:ee:e7:85:2b:2c:99:d3: f6:67:57:d2:c6:ca:d5:1e:5d:c8:c2:a9:c7:33:21: dd:b8:cd:a7:df:c6:fe:1d:35:1d:29:2b:b0:92:d5: b4:b7:a6:f7:2f:b2:da:2a:ce:fc:91:62:62:4f:7d: 68:75:5c:e9:c5:bf:eb:81:24:69:2c:9a:18:78:5c: 96:f0:39:f6:2c:63:6b:cf:50:f2:34:dc:b1:92:e5: c7:45:9e:d5:02:1d:f5:6a:f9:e6:8e:99:a6:f1:ab: f3:94:16:04:19:55:46:14:ab:bb:66:07:19:53:cd: d1:90:95:bc:44:c8:6b:a5:7b:ad:0e:08:14:61:a8: 07:4e:82:93:cf:15:bb:87:0c:5d:9c:ca:00:ec:0d: 86:39:c1:95:48:f7:a2:a1:5e:3c:30:29:77:39:47: 2f:90:9b:77:31:94:87:69:0a:bd:6b:af:a6:df:8b: 6e:a5:86:01:ad:67:46:91:8a:94:69:9e:d3:99:28: 9c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:9E:04:62:06:18:AD:5E:11:52:BA:15:61:1E:F9:60:CA:3C:1F:CE X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a0:d7:9b:eb:c8:d2:97:a8:86:47:80:29:cd:7c:10:05:b5: 1d:3f:2c:46:98:77:cf:af:53:5c:c0:92:7f:bf:48:d8:2d:ab: 63:b2:2c:f2:4b:ec:3e:81:e1:a6:1a:2b:90:18:fe:0f:3b:d6: 14:62:b7:ac:54:8f:c8:4a:09:14:c1:8e:7a:87:45:36:00:ce: ee:67:d0:03:b2:6c:00:3b:3b:fc:56:eb:8c:7f:3c:5c:1b:da: b5:4e:0b:1a:eb:22:c0:69:ff:30:9a:eb:84:57:a4:4e:e0:17: 4a:88:ec:3b:d0:04:a2:14:66:2a:25:a4:1e:4e:72:8e:75:72: fd:d4:61:84:d3:c5:92:73:2b:c9:a5:46:3c:2d:66:90:78:5b: 3b:1b:31:1a:96:c3:34:ad:83:51:42:2d:af:81:37:6b:6d:08: ea:ec:0a:f1:ca:07:3f:19:1b:99:97:60:e0:62:bd:ce:e8:6d: 7a:d8:4a:ef:1e:b8:ff:36:98:4a:31:3d:e6:63:95:d3:c7:86: 83:2e:c2:2d:88:ef:93:ba:13:ab:99:c4:4b:04:3f:74:75:c1: 3d:e6:3f:21:7f:4b:8e:d5:4e:dc:07:07:6f:12:87:12:eb:65: d3:4a:9a:aa:c1:4b:63:e9:29:72:11:ae:1f:0f:4d:c0:ad:e1: b5:fa:03:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEE4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwNzAyMTczNjU2WhcNMjUwNzA5MTczNjU2WjAYMRYwFAYD VQQDEw02ODY1NmUzOC1iNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5xhlX52pqucSFB0d5owbNQY5pNTXHb/Hi2kCPpXawlurcPD2rHi+D4i+jmxf yZrQG5RrSUrLEoqc8JpCdbB/X1KaZe7nhSssmdP2Z1fSxsrVHl3IwqnHMyHduM2n 38b+HTUdKSuwktW0t6b3L7LaKs78kWJiT31odVzpxb/rgSRpLJoYeFyW8Dn2LGNr z1DyNNyxkuXHRZ7VAh31avnmjpmm8avzlBYEGVVGFKu7ZgcZU83RkJW8RMhrpXut DggUYagHToKTzxW7hwxdnMoA7A2GOcGVSPeioV48MCl3OUcvkJt3MZSHaQq9a6+m 34tupYYBrWdGkYqUaZ7TmSicqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeeBGIG GK1eEVK6FWEe+WDKPB/OMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/oNeb68jSl6iGR4ApzXwQBbUdPyxGmHfPr1NcwJJ/v0jYLatjsizy S+w+geGmGiuQGP4PO9YUYresVI/ISgkUwY56h0U2AM7uZ9ADsmwAOzv8VuuMfzxc G9q1Tgsa6yLAaf8wmuuEV6RO4BdKiOw70ASiFGYqJaQeTnKOdXL91GGE08WScyvJ pUY8LWaQeFs7GzEalsM0rYNRQi2vgTdrbQjq7Arxygc/GRuZl2DgYr3O6G162Erv Hrj/NphKMT3mY5XTx4aDLsItiO+TuhOrmcRLBD90dcE95j8hf0uO1U7cBwdvEocS 62XTSpqqwUtj6SlyEa4fD03AreG1+gO6 -----END CERTIFICATE-----Generated at Thu Jul 3 10:30:18 2025 by rpki-client