$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: CBZftvDTkhBSeTuATiIrgJZZwyd3S+zkBY08fmqWkLw= Subject key identifier: FF:A7:52:57:04:10:2A:92:18:DA:8E:79:3E:AF:06:05:15:BF:B9:A6 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 1E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 1B Signing time: Thu 03 Jul 2025 08:12:33 +0000 Manifest this update: Thu 03 Jul 2025 08:12:32 +0000 Manifest next update: Thu 10 Jul 2025 08:12:32 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: JdqLk1cgzcOicRYwg2BAYKvx7X+Sv23FZ2sx91IjNN4=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30 (0x1e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Jul 3 08:12:32 2025 GMT Not After : Jul 10 08:12:32 2025 GMT Subject: CN=68663b70-53eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:af:30:22:76:ca:6f:43:54:c0:14:79:df:a5: f2:b3:a2:8f:10:3f:23:71:96:d7:74:9f:c2:57:4b: 21:ef:a7:d8:46:98:18:ad:52:ad:cd:b7:46:83:af: fb:68:f2:64:27:bf:89:1e:31:ee:1e:e6:bc:3f:29: b8:79:a7:60:38:52:fb:d7:7d:7b:64:dc:f7:fb:94: d1:21:08:7c:15:99:0b:74:6e:0a:c1:82:c7:de:2c: 55:56:2e:59:12:74:95:07:dc:7a:c6:c6:63:81:97: c8:40:88:c5:a4:3a:5a:c2:12:3f:b9:4a:58:02:67: 0e:90:e6:a7:fc:bb:72:4c:f5:08:5b:a5:47:fe:40: cf:ee:ab:2c:ab:5b:08:38:4e:af:94:c5:da:37:c7: 1d:b8:1a:44:6e:da:57:01:ca:40:ac:63:68:ef:aa: 12:0e:94:8c:ed:07:29:1f:03:0c:09:e6:e0:a2:ee: 11:79:b7:b3:6c:95:eb:dc:ef:a1:e3:80:7c:c6:5f: ff:14:ed:8a:bd:9a:89:14:11:f3:6f:89:7b:82:41: cf:4c:ae:9f:f9:2e:89:45:d6:fe:a5:9f:99:ee:ec: 72:e8:ee:f4:48:0e:15:ed:89:e3:54:28:94:ec:8e: 7d:43:cc:0c:35:ed:e7:18:a9:8f:82:e8:c6:ac:ce: 30:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A7:52:57:04:10:2A:92:18:DA:8E:79:3E:AF:06:05:15:BF:B9:A6 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:f4:1e:17:c5:7f:ca:e5:3b:ff:8a:1f:bb:7e:5b:ab:5b:4a: b5:40:e7:e0:1b:b9:65:7e:43:c2:91:e2:a8:3f:49:14:72:bb: 35:fb:b7:5d:70:a8:02:cc:24:94:d5:28:32:2d:e4:7a:a0:7a: 4c:7d:4c:60:d8:f3:69:bd:03:aa:31:47:27:80:94:39:c2:d0: 8b:b2:5a:d4:2a:8f:2a:ad:af:b6:3f:b8:92:64:7e:29:d0:c1: 12:22:f1:a1:0f:b3:38:4d:8d:62:aa:78:66:5f:69:14:9d:57: 46:49:d6:f5:4d:70:83:70:ee:af:33:ca:46:7e:c8:ed:6f:e0: 39:f4:44:58:44:47:27:2c:67:58:2f:c2:66:04:b0:6e:ce:30: cd:ad:dd:1f:9d:c9:31:3e:db:cc:19:fd:87:ee:03:0d:c8:5b: 3e:fe:75:f2:e1:75:6e:e2:51:03:f4:fe:11:33:47:67:41:95: 37:71:8f:af:d3:21:79:c5:23:4a:c9:3c:56:6b:e1:80:8c:77: 20:30:e6:a4:38:25:e8:ed:9e:a4:7a:b6:42:5d:dc:55:e5:02: 4c:e6:1e:ca:6c:80:a0:60:86:b1:31:09:85:26:d8:5c:74:e4: 74:4b:d1:25:af:8d:5a:83:8e:62:fe:72:fc:d8:1f:95:a3:b3: 64:13:1f:8a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA3MDMwODEyMzJaFw0yNTA3MTAwODEyMzJaMBgxFjAUBgNV BAMTDTY4NjYzYjcwLTUzZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDorzAidspvQ1TAFHnfpfKzoo8QPyNxltd0n8JXSyHvp9hGmBitUq3Nt0aDr/to 8mQnv4keMe4e5rw/Kbh5p2A4UvvXfXtk3Pf7lNEhCHwVmQt0bgrBgsfeLFVWLlkS dJUH3HrGxmOBl8hAiMWkOlrCEj+5SlgCZw6Q5qf8u3JM9QhbpUf+QM/uqyyrWwg4 Tq+Uxdo3xx24GkRu2lcBykCsY2jvqhIOlIztBykfAwwJ5uCi7hF5t7Nslevc76Hj gHzGX/8U7Yq9mokUEfNviXuCQc9Mrp/5LolF1v6ln5nu7HLo7vRIDhXtieNUKJTs jn1DzAw17ecYqY+C6MaszjCLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/6dSVwQQ KpIY2o55Pq8GBRW/uaYwHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALz0HhfFf8rlO/+KH7t+W6tbSrVA5+AbuWV+Q8KR4qg/SRRyuzX7t11w qALMJJTVKDIt5Hqgekx9TGDY82m9A6oxRyeAlDnC0IuyWtQqjyqtr7Y/uJJkfinQ wRIi8aEPszhNjWKqeGZfaRSdV0ZJ1vVNcINw7q8zykZ+yO1v4Dn0RFhERycsZ1gv wmYEsG7OMM2t3R+dyTE+28wZ/YfuAw3IWz7+dfLhdW7iUQP0/hEzR2dBlTdxj6/T IXnFI0rJPFZr4YCMdyAw5qQ4JejtnqR6tkJd3FXlAkzmHspsgKBghrExCYUm2Fx0 5HRL0SWvjVqDjmL+cvzYH5Wjs2QTH4o= -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:50 2025 by rpki-client