$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft File: FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json) Hash identifier: D7+933SmEii9G/rHVHwBNjuiqg6BHfMYPAlOdDFRHrA= Subject key identifier: AF:CF:7D:9E:07:37:EC:93:FB:2B:F2:6E:A4:9D:DC:09:78:81:6E:9C Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 Certificate issuer: /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Certificate serial: 0BDD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft Manifest number: 0BD6 Signing time: Sun 10 Aug 2025 18:52:37 +0000 Manifest this update: Sun 10 Aug 2025 18:52:37 +0000 Manifest next update: Sun 17 Aug 2025 18:52:37 +0000 Files and hashes: 1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: 3b9SeneIee1f3f99OvUPzWZ6KL3ymV/RIonCjFbaLA0=) 2: FC90C520213411EA8D675645C4F9AE02.roa (hash: bfvf5p0RJyl+DBh15oeIU1R+cb9fxOcLHABt0IlZccM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3037 (0xbdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91503BB, serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9 Validity Not Before: Aug 10 18:52:37 2025 GMT Not After : Aug 17 18:52:37 2025 GMT Subject: CN=6898ea75-5e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:b2:01:50:42:ab:06:e2:cc:7a:98:c2:09: 01:b9:1e:82:6f:66:4d:45:e8:58:51:ea:13:8b:95: 99:35:86:7c:23:14:45:77:f0:da:78:e5:0c:d6:aa: f5:83:14:08:a6:c4:08:c0:9c:18:96:84:d0:fe:ed: 1b:ee:46:2f:18:5b:d3:80:6f:21:5a:0f:94:eb:6c: 4a:0d:dd:1a:0f:3b:0b:3f:16:1f:84:5b:13:5c:4e: 4c:da:7a:95:88:59:af:7b:5d:4d:59:cd:a5:24:53: be:80:51:b6:aa:19:97:9d:89:c1:3f:40:de:a3:82: 99:f5:ad:f1:4f:ea:95:c1:0d:c3:d4:cc:d4:26:77: c9:d1:55:ee:7e:3c:97:38:19:f7:db:48:f1:ce:e2: 87:aa:16:a2:6d:88:4a:fa:07:e5:af:e6:aa:3c:c7: f4:99:fc:4b:f9:7f:80:3d:8d:27:f4:74:9a:a9:e2: 76:d4:76:42:e1:fc:1c:ad:d6:92:c8:d9:cf:90:01: c5:8c:e8:1b:91:9f:d9:63:24:ba:d9:04:4d:71:ed: 45:59:5d:0e:b3:79:80:51:d9:c4:65:7f:64:11:02: be:c2:ba:42:9f:dc:21:eb:65:dc:b2:75:40:9a:22: dc:88:f8:a4:ad:ca:1b:f2:0f:7f:00:ca:74:34:29: eb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:CF:7D:9E:07:37:EC:93:FB:2B:F2:6E:A4:9D:DC:09:78:81:6E:9C X509v3 Authority Key Identifier: keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:38:e0:a2:16:57:fc:62:c4:3a:c3:9d:c7:1b:9a:d5:0c:66: 06:3b:87:9a:0a:d2:ce:b8:2f:5d:93:b0:40:b9:82:a0:2a:4e: 7f:c3:41:5d:7c:1b:b1:1f:ad:bc:87:ce:33:13:6f:51:f6:4a: 91:43:82:f0:18:f5:0c:8b:25:21:99:18:33:86:13:c1:bb:bc: d8:53:b7:1a:eb:01:b9:9d:5a:2d:7b:97:ce:cd:36:70:8b:0c: 40:8d:dc:d4:1f:9b:fb:2c:4e:bc:85:00:7c:9f:43:d2:1e:64: 55:60:a3:58:23:73:d5:e1:5d:2d:17:35:6a:59:c8:1a:aa:d8: 1e:fd:13:b3:b3:a8:9d:80:26:81:9c:d9:d7:9c:72:43:8d:09: ff:9f:ca:ad:4c:a0:7a:ef:c0:e2:65:e2:dc:57:83:ad:34:36: a3:fb:43:c3:78:10:f1:bb:b1:3b:6d:71:12:b9:70:7c:b8:5f: 48:4e:92:88:cf:8c:68:77:d7:fe:51:a1:3b:4c:32:65:50:5c: 6b:e9:5a:42:ac:d8:d1:6e:73:71:f7:c3:72:9e:10:9a:c9:a4: e3:33:42:57:c7:13:1b:00:96:d7:5a:c5:ff:ff:09:e6:67:d7: 8d:a1:e4:50:e9:27:30:07:4f:e9:77:4c:8c:8d:3c:4a:fe:66: cf:a9:ba:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3 NzU4MzAwRjkwHhcNMjUwODEwMTg1MjM3WhcNMjUwODE3MTg1MjM3WjAYMRYwFAYD VQQDEw02ODk4ZWE3NS01ZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlrGyAVBCqwbizHqYwgkBuR6Cb2ZNRehYUeoTi5WZNYZ8IxRFd/DaeOUM1qr1 gxQIpsQIwJwYloTQ/u0b7kYvGFvTgG8hWg+U62xKDd0aDzsLPxYfhFsTXE5M2nqV iFmve11NWc2lJFO+gFG2qhmXnYnBP0Deo4KZ9a3xT+qVwQ3D1MzUJnfJ0VXufjyX OBn320jxzuKHqhaibYhK+gflr+aqPMf0mfxL+X+APY0n9HSaqeJ21HZC4fwcrdaS yNnPkAHFjOgbkZ/ZYyS62QRNce1FWV0Os3mAUdnEZX9kEQK+wrpCn9wh62XcsnVA miLciPikrcob8g9/AMp0NCnrOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/PfZ4H N+yT+yvybqSd3Al4gW6cMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALOOCiFlf8YsQ6w53HG5rVDGYGO4eaCtLOuC9dk7BAuYKgKk5/w0Fd fBuxH628h84zE29R9kqRQ4LwGPUMiyUhmRgzhhPBu7zYU7ca6wG5nVote5fOzTZw iwxAjdzUH5v7LE68hQB8n0PSHmRVYKNYI3PV4V0tFzVqWcgaqtge/ROzs6idgCaB nNnXnHJDjQn/n8qtTKB678DiZeLcV4OtNDaj+0PDeBDxu7E7bXESuXB8uF9ITpKI z4xod9f+UaE7TDJlUFxr6VpCrNjRbnNx98NynhCayaTjM0JXxxMbAJbXWsX//wnm Z9eNoeRQ6ScwB0/pd0yMjTxK/mbPqbpj -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:58 2025 by rpki-client