$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft File: FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft (raw, json) Hash identifier: PdzHmaBOIqGKJGt5R5YD0Vluttw+P6fY6Ri14mCyHAk= Subject key identifier: 66:63:D1:2C:A7:EE:88:38:D7:86:9D:68:03:34:31:DD:45:AC:17:7E Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft Manifest number: 020A Signing time: Tue 05 Aug 2025 02:44:16 +0000 Manifest this update: Tue 05 Aug 2025 02:44:15 +0000 Manifest next update: Tue 12 Aug 2025 02:44:15 +0000 Files and hashes: 1: FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl (hash: oLWVJ6Zu76af1BqR0nEvv6ywDqi9M8PI88u4gK2jS24=) 2: 1083BE64499711EE86AE452DC4F9AE02.roa (hash: slu67F8KWLFn/RxCNvxBYhj1V1Mx5+noN3O9kww2W8Y=) 3: 7DD0E8845A3211EDB637E665C4F9AE02.roa (hash: wtWT4PZFgcn64rOhtqw01Kyp1pjejdqieeode8aJT6o=) 4: 7D0DFE0A5A3211EDB637E665C4F9AE02.roa (hash: K4zq7amWLtDyT+UqSOR4oOsSasN49MRy2b9Pfvweln4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:44:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91314BC, serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14 Validity Not Before: Aug 5 02:44:15 2025 GMT Not After : Aug 12 02:44:15 2025 GMT Subject: CN=68917000-dc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:17:aa:ba:d9:a1:09:4f:fc:92:9f:3b:1c: cc:ed:4e:a5:97:04:29:55:75:4c:fa:25:56:b2:62: 32:b7:62:79:a8:ce:75:5e:e2:24:6f:f9:90:19:f9: fe:d3:30:36:49:95:7c:1f:41:62:dd:b0:bf:1b:e3: 67:75:e4:5c:bf:b4:2b:87:0d:66:b8:22:ed:65:28: 86:1b:8b:7d:f3:4a:ec:3d:67:de:da:cd:7b:8f:88: 54:b6:06:4a:98:45:e0:80:5c:6a:16:af:79:c1:9e: ff:15:47:fe:0a:12:5b:04:f2:d6:1c:d8:db:7e:9b: 8b:9e:35:d9:25:89:66:14:e6:bb:45:13:02:bb:60: e9:27:11:48:b1:09:15:37:61:cd:ae:72:19:f2:f0: 4c:bf:2b:64:5f:20:f6:f9:ac:cb:87:62:73:c9:00: 50:59:cf:8a:30:82:33:fe:43:4b:a0:71:bc:ba:00: 83:01:ec:e0:be:78:c8:2d:19:97:9f:f5:75:74:c9: 25:14:b9:f8:bb:37:4d:1f:61:6d:78:fc:3d:50:f7: bc:f3:2f:77:59:21:04:ff:8e:c8:7f:55:83:bc:50: bf:c4:ae:89:1b:06:bf:8e:ec:52:b6:35:ef:ca:af: 26:12:bd:bb:0a:ba:ee:94:e6:de:cf:47:60:56:e5: 6a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:D1:2C:A7:EE:88:38:D7:86:9D:68:03:34:31:DD:45:AC:17:7E X509v3 Authority Key Identifier: keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:13:65:6b:6d:6f:e8:a7:54:8b:c5:71:0a:65:ad:fc:b9:6e: 4a:e9:8e:72:6c:a1:fd:1a:bb:30:9b:00:61:bf:25:c4:07:48: 0f:3f:e4:41:2e:ed:58:2a:15:7c:7f:7e:64:25:df:6d:24:f6: 29:6d:5f:b6:fd:b6:27:9a:c0:42:4a:ac:77:e0:ae:79:d7:16: 7d:49:3d:fb:be:0e:9f:d8:b0:e2:1c:6e:ef:c0:bb:b6:68:8f: e7:c4:fd:27:3b:a5:f2:23:e0:ca:5b:89:63:d0:61:3b:85:b5: 1a:de:cf:08:4e:17:07:9f:4c:07:dd:87:24:24:48:75:4c:82: 1e:b8:ed:73:b8:28:38:7c:07:eb:5f:51:d8:62:2d:d0:7e:f5: 28:e4:e9:e7:56:ca:4b:01:10:68:33:25:26:c7:5a:6a:52:10: 56:67:e4:ee:f6:07:20:ef:2e:0e:cb:1e:f4:01:50:8c:46:9a: d6:91:67:b1:fb:ff:3a:57:52:52:4c:88:ea:dc:08:eb:6b:fd: 4f:48:97:c6:37:14:22:1d:98:27:1d:0d:ec:51:a0:f0:c5:ef: 37:ac:df:50:37:8d:24:0f:e3:c5:72:60:bd:9c:60:06:1f:3e: 42:c2:c8:2a:f1:da:d8:11:61:6a:97:74:07:04:ef:39:f9:f6: 25:5a:c0:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzE0QkMxMTAvBgNVBAUTKDE2ODQxNUMwQzEzNDAxQzBENzcxNTcxREY4NkY4Q0Q1 Rjg1MDNCMTQwHhcNMjUwODA1MDI0NDE1WhcNMjUwODEyMDI0NDE1WjAYMRYwFAYD VQQDEw02ODkxNzAwMC1kYzQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwp4XqrrZoQlP/JKfOxzM7U6llwQpVXVM+iVWsmIyt2J5qM51XuIkb/mQGfn+ 0zA2SZV8H0Fi3bC/G+NndeRcv7Qrhw1muCLtZSiGG4t980rsPWfe2s17j4hUtgZK mEXggFxqFq95wZ7/FUf+ChJbBPLWHNjbfpuLnjXZJYlmFOa7RRMCu2DpJxFIsQkV N2HNrnIZ8vBMvytkXyD2+azLh2JzyQBQWc+KMIIz/kNLoHG8ugCDAezgvnjILRmX n/V1dMklFLn4uzdNH2FtePw9UPe88y93WSEE/47If1WDvFC/xK6JGwa/juxStjXv yq8mEr27CrrulObez0dgVuVquwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZj0Syn 7og414adaAM0Md1FrBd+MB8GA1UdIwQYMBaAFBaEFcDBNAHA13FXHfhvjNX4UDsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTRCQy83RkQwMTY2QzVB MkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFjRFhjVmNkLUctTTFmaFFP eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZvUVZ3TUUwQWNEWGNWY2QtRy1NMWZoUU94US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTRCQy83RkQwMTY2QzVBMkYxMUVEQTE5RTVFNjFDNEY5QUUwMi9Gb1FWd01FMEFj RFhjVmNkLUctTTFmaFFPeFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsE2VrbW/op1SLxXEKZa38uW5K6Y5ybKH9GrswmwBhvyXEB0gPP+RB Lu1YKhV8f35kJd9tJPYpbV+2/bYnmsBCSqx34K551xZ9ST37vg6f2LDiHG7vwLu2 aI/nxP0nO6XyI+DKW4lj0GE7hbUa3s8IThcHn0wH3YckJEh1TIIeuO1zuCg4fAfr X1HYYi3QfvUo5OnnVspLARBoMyUmx1pqUhBWZ+Tu9gcg7y4Oyx70AVCMRprWkWex +/86V1JSTIjq3Ajra/1PSJfGNxQiHZgnHQ3sUaDwxe83rN9QN40kD+PFcmC9nGAG Hz5Cwsgq8drYEWFql3QHBO85+fYlWsDD -----END CERTIFICATE-----Generated at Wed Aug 6 18:47:11 2025 by rpki-client