$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: dWcE31Efgob81JiEVGigEt5TUJbuvJ3G2YjFI0c0uCw= Subject key identifier: FB:40:5C:B5:0E:6A:42:5F:31:B2:F9:81:EB:F8:48:C8:24:B0:BB:49 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 090C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 08FD Signing time: Wed 02 Jul 2025 20:37:55 +0000 Manifest this update: Wed 02 Jul 2025 20:37:54 +0000 Manifest next update: Wed 09 Jul 2025 20:37:54 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: GIrX8hgaZsIBHye9EJS80sVdh+90eXjXhUpEwAsWmNk=) 2: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (hash: u6H4P2TM61hqsziMp+QKQRj8V8OU+PakHeQt/LegiXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2316 (0x90c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jul 2 20:37:54 2025 GMT Not After : Jul 9 20:37:54 2025 GMT Subject: CN=686598a2-9079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:7d:e8:18:21:cc:18:a1:b9:c3:4a:32:fa: 64:86:3b:04:82:2f:a1:61:43:9b:6c:ed:71:e7:9d: 37:90:45:8d:9c:39:1d:ae:1c:26:a9:06:7d:6d:f4: 64:c9:e5:7b:3c:a2:8a:89:ef:8c:b8:88:66:31:bf: 49:8d:5c:ab:c7:87:22:1b:62:83:14:68:df:38:d7: 19:6e:b7:45:58:4a:c5:13:18:3c:cd:76:ab:07:d8: 64:38:32:fe:43:e0:55:9d:20:48:59:36:0d:2d:3b: 17:5c:4c:d5:a5:88:1f:3c:a5:6b:f6:e0:ae:dd:02: c8:d4:77:18:4c:96:6a:ff:1f:0b:8a:c4:09:66:cd: 23:9b:e1:44:8e:54:21:bb:d4:33:55:94:d4:e2:9d: bb:ca:ca:25:81:ed:8c:d9:31:c0:39:25:04:89:73: 9c:a8:91:5a:42:40:7d:e9:4c:65:1d:19:38:5a:33: b6:c3:eb:79:05:79:2e:54:33:fe:5a:b9:c1:84:9f: df:a3:98:9f:ac:d0:08:f6:5b:70:cc:a3:6e:40:34: ab:de:06:59:10:17:41:b9:e2:26:6e:70:12:fe:13: bf:c4:b9:67:7e:d7:ec:0d:b4:db:74:30:ec:1e:77: 87:56:a4:3e:c9:0c:fc:32:5a:57:ad:7d:23:1c:7e: cb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:40:5C:B5:0E:6A:42:5F:31:B2:F9:81:EB:F8:48:C8:24:B0:BB:49 X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ca:6f:2f:e8:2d:df:43:16:e3:ec:b3:b5:b2:ec:69:4f:c9: 2e:2b:24:cf:02:74:2a:fd:55:66:91:26:55:f5:75:d2:ff:6c: 4b:66:7a:cb:0a:40:91:aa:3f:ac:34:ca:d7:2d:a8:64:e3:e1: f4:e2:e7:14:dd:54:ac:77:b8:74:ae:54:b3:65:45:f5:df:65: bc:53:bc:7b:1a:14:c2:60:e3:b1:28:9d:a7:53:0f:1b:85:ea: c9:1c:69:23:c9:9a:77:b8:5e:4a:f7:a6:1f:a6:83:18:e6:87: dc:f8:1f:13:0f:a1:6f:51:d0:79:01:5a:9e:b7:8c:80:64:2b: 43:3a:e4:18:d0:e6:4a:61:39:0c:60:5b:1e:8c:7b:cb:d7:1e: bd:da:6c:d9:78:8a:bb:76:60:75:48:f1:4f:e0:cd:98:4c:7c: 2f:c8:3d:82:a7:eb:3f:ca:ba:16:69:72:2c:96:b2:8b:af:55: c8:21:47:d6:76:eb:e7:f8:49:fd:9c:4e:c4:9c:ca:9f:7a:8e: b6:80:94:06:ad:60:4c:9c:51:11:af:1b:68:f7:83:dd:e5:be: 4b:18:fd:5f:ec:dd:e7:46:64:1e:1d:9a:73:de:68:b4:23:1a: 43:9e:f7:e3:10:be:ac:30:d3:9b:1f:fd:da:4b:04:8b:b6:4b: ae:b3:0c:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUwNzAyMjAzNzU0WhcNMjUwNzA5MjAzNzU0WjAYMRYwFAYD VQQDEw02ODY1OThhMi05MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2IN96BghzBihucNKMvpkhjsEgi+hYUObbO1x5503kEWNnDkdrhwmqQZ9bfRk yeV7PKKKie+MuIhmMb9JjVyrx4ciG2KDFGjfONcZbrdFWErFExg8zXarB9hkODL+ Q+BVnSBIWTYNLTsXXEzVpYgfPKVr9uCu3QLI1HcYTJZq/x8LisQJZs0jm+FEjlQh u9QzVZTU4p27ysolge2M2THAOSUEiXOcqJFaQkB96UxlHRk4WjO2w+t5BXkuVDP+ WrnBhJ/fo5ifrNAI9ltwzKNuQDSr3gZZEBdBueImbnAS/hO/xLlnftfsDbTbdDDs HneHVqQ+yQz8MlpXrX0jHH7L4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtAXLUO akJfMbL5gev4SMgksLtJMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNym8v6C3fQxbj7LO1suxpT8kuKyTPAnQq/VVmkSZV9XXS/2xLZnrL CkCRqj+sNMrXLahk4+H04ucU3VSsd7h0rlSzZUX132W8U7x7GhTCYOOxKJ2nUw8b herJHGkjyZp3uF5K96YfpoMY5ofc+B8TD6FvUdB5AVqet4yAZCtDOuQY0OZKYTkM YFsejHvL1x692mzZeIq7dmB1SPFP4M2YTHwvyD2Cp+s/yroWaXIslrKLr1XIIUfW duvn+En9nE7EnMqfeo62gJQGrWBMnFERrxto94Pd5b5LGP1f7N3nRmQeHZpz3mi0 IxpDnvfjEL6sMNObH/3aSwSLtkuuswzZ -----END CERTIFICATE-----Generated at Thu Jul 3 09:18:40 2025 by rpki-client