$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft File: F2pOA7VAryUUqLxxnCug-fdv-y8.mft (raw, json) Hash identifier: oBT2HCJtBkHU0SxyBPMdp3CgAeYWc8Dfs5DTKzJ2XoM= Subject key identifier: C0:B2:71:5E:FB:28:FD:D3:04:CE:B2:93:80:8C:39:51:C7:3F:CD:88 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft Manifest number: 0F47 Signing time: Wed 02 Jul 2025 17:48:00 +0000 Manifest this update: Wed 02 Jul 2025 17:47:59 +0000 Manifest next update: Wed 09 Jul 2025 17:47:59 +0000 Files and hashes: 1: F2pOA7VAryUUqLxxnCug-fdv-y8.crl (hash: WUXRNqMRoYnXwuFYIMTlD6E+GYBoyg6AXHhsvY9zf0s=) 2: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (hash: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Jul 2 17:47:59 2025 GMT Not After : Jul 9 17:47:59 2025 GMT Subject: CN=686570cf-23b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:fe:b7:d4:d8:20:eb:c4:43:f8:6e:34:40: 0f:b6:93:74:93:be:36:5c:e2:e6:ce:87:1a:36:89: 4a:61:f1:f1:59:3e:48:bd:c5:9a:6a:ba:82:8c:d8: ef:15:39:3a:5c:45:a5:1d:d0:6b:bb:be:be:88:26: cf:fb:b6:a2:d2:93:f6:18:02:87:5b:1c:4a:ee:1d: bb:10:20:56:f7:52:1f:8b:14:61:b3:96:c5:5f:60: 62:8c:42:8c:9e:5d:4b:f2:79:cf:35:a0:8d:08:c8: a8:7e:57:78:a2:51:c1:dc:fd:6a:0d:b3:c1:27:bb: c1:19:c9:f9:ca:b9:9f:ae:c0:a7:ad:58:17:23:15: 14:9c:58:6b:26:f2:23:13:23:79:3f:20:f7:d8:fe: d6:75:0a:c1:c4:f9:67:79:5d:a4:df:96:31:9f:6f: 06:6b:01:5d:82:83:1a:8f:20:31:1f:55:a4:6a:8b: 4d:3e:40:ff:c4:d6:ad:fa:b8:15:e6:16:cd:c4:cd: 86:e8:37:2b:78:a6:0b:ba:6e:1d:c4:c7:7c:d1:61: a3:51:33:fa:c9:a4:ee:ac:b2:53:8b:5d:d0:d9:d8: 08:f6:55:86:af:78:ba:cd:a3:c6:94:60:3c:20:06: 64:99:06:2f:22:29:87:c2:8e:1a:51:d6:a1:01:18: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B2:71:5E:FB:28:FD:D3:04:CE:B2:93:80:8C:39:51:C7:3F:CD:88 X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:d7:a9:76:06:fc:27:81:6e:68:66:9c:07:41:94:ce:5e:4d: 0a:b5:4b:24:85:df:9b:ac:dd:c8:84:f9:aa:b4:48:38:df:cc: 4a:02:ed:d0:f3:31:29:15:fd:90:46:63:23:1d:0e:78:e7:8b: 99:78:9d:9f:ee:7b:67:ab:6f:3f:4f:9b:07:c5:2a:d0:ac:cb: b0:ac:ed:30:4c:6c:c3:d4:c5:e9:34:34:2e:31:38:a5:33:44: 56:cd:98:8b:ae:67:30:59:09:f6:60:5c:8d:1b:2b:5b:e0:7f: 4d:46:37:7e:f1:ce:fe:f9:c7:4a:61:6a:35:b1:46:b4:d0:cd: 49:ba:21:d3:56:d0:e5:8b:62:43:aa:05:b6:62:19:fe:47:8e: 36:11:65:3b:cf:08:4f:47:e3:c4:5e:b6:b9:97:5e:54:ba:0a: 2f:f0:ef:73:4b:25:a2:0b:62:8b:9f:29:81:52:67:cf:8c:ab: 24:de:74:a8:30:78:5a:32:77:b6:59:d0:bc:ac:b0:a8:96:95: 5e:b9:4d:1e:b4:dd:ab:9a:2b:b9:65:c5:9d:7d:a7:c8:63:c7: b5:a7:3a:ad:b6:4f:7a:2b:5e:08:ad:23:05:60:07:67:53:0d: e4:1a:f3:9f:78:c2:8d:f0:51:e2:98:80:21:ee:bf:43:54:c4: d2:88:e5:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNzAyMTc0NzU5WhcNMjUwNzA5MTc0NzU5WjAYMRYwFAYD VQQDEw02ODY1NzBjZi0yM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqX/+t9TYIOvEQ/huNEAPtpN0k742XOLmzocaNolKYfHxWT5IvcWaarqCjNjv FTk6XEWlHdBru76+iCbP+7ai0pP2GAKHWxxK7h27ECBW91IfixRhs5bFX2BijEKM nl1L8nnPNaCNCMiofld4olHB3P1qDbPBJ7vBGcn5yrmfrsCnrVgXIxUUnFhrJvIj EyN5PyD32P7WdQrBxPlneV2k35Yxn28GawFdgoMajyAxH1WkaotNPkD/xNat+rgV 5hbNxM2G6DcreKYLum4dxMd80WGjUTP6yaTurLJTi13Q2dgI9lWGr3i6zaPGlGA8 IAZkmQYvIimHwo4aUdahARjZkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMCycV77 KP3TBM6yk4CMOVHHP82IMB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzMC9BREZBNTU0QzcwODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5 VVVxTHh4bkN1Zy1mZHYteTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB216l2BvwngW5oZpwHQZTOXk0KtUskhd+brN3IhPmqtEg438xKAu3Q 8zEpFf2QRmMjHQ5454uZeJ2f7ntnq28/T5sHxSrQrMuwrO0wTGzD1MXpNDQuMTil M0RWzZiLrmcwWQn2YFyNGytb4H9NRjd+8c7++cdKYWo1sUa00M1JuiHTVtDli2JD qgW2Yhn+R442EWU7zwhPR+PEXra5l15Uugov8O9zSyWiC2KLnymBUmfPjKsk3nSo MHhaMne2WdC8rLColpVeuU0etN2rmiu5ZcWdfafIY8e1pzqttk96K14IrSMFYAdn Uw3kGvOfeMKN8FHimIAh7r9DVMTSiOXB -----END CERTIFICATE-----Generated at Thu Jul 3 17:30:01 2025 by rpki-client