$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: tDjUVg8KWsc3QjNhZHrM9ZlGiyXXT5H6GalDbdwohEA= Subject key identifier: 9E:EC:56:C8:CC:1C:BA:F8:BE:51:CD:6F:B1:DB:C0:14:21:D9:CB:72 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0AED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0ADF Signing time: Fri 08 Aug 2025 19:44:19 +0000 Manifest this update: Fri 08 Aug 2025 19:44:19 +0000 Manifest next update: Fri 15 Aug 2025 19:44:19 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: qZgo/i6EvblnQpWFUMOY6IrdtgaPHn91CJoVgp6ZU8o=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2797 (0xaed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Aug 8 19:44:19 2025 GMT Not After : Aug 15 19:44:19 2025 GMT Subject: CN=68965393-9c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:47:35:d7:3a:38:fa:e8:7c:75:a7:3c:56: a5:c4:c2:c8:3d:53:be:3d:43:38:0c:6a:17:ae:20: d2:de:8b:25:67:f5:a3:dc:96:b9:9c:02:08:e1:31: 73:db:07:45:60:8c:d7:e2:e7:56:41:a0:3d:71:71: 4a:7d:ef:2d:a3:bd:fd:f1:c7:3c:ae:09:5b:1e:c8: 9b:77:18:25:ef:50:f4:cb:ab:ee:da:1a:21:0c:e4: f0:61:29:0e:ad:dd:f3:d8:58:9f:b6:3e:2b:b8:91: e9:d6:9c:a3:ac:46:58:24:74:33:51:10:4d:85:2b: c6:13:f0:ac:d9:59:4e:86:4e:52:c3:f6:71:e5:10: 0d:ce:d7:60:7a:cd:23:a7:c6:a2:bf:48:f3:d7:9e: d5:71:3a:e0:68:4b:aa:cc:37:04:f7:6a:ab:0d:75: 42:fe:d9:b5:11:2a:b9:48:ac:f6:0e:be:98:a4:0d: c9:a6:ed:a4:f8:2b:b7:0a:27:62:31:ee:a4:2b:83: 52:35:3f:dd:e5:3d:fa:bd:e8:2c:9f:ea:7a:20:f1: 4c:56:56:f6:7b:2c:ce:38:23:f4:8c:56:1d:53:03: 42:d7:15:10:71:f9:75:c6:60:44:f5:33:44:52:e6: a4:0f:58:29:99:0a:ea:52:50:dd:ca:0e:ee:06:c6: ea:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EC:56:C8:CC:1C:BA:F8:BE:51:CD:6F:B1:DB:C0:14:21:D9:CB:72 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c0:f3:c9:37:34:9f:3d:42:58:31:6a:3a:c8:2c:e0:f3:57: 6a:42:48:6a:3e:0e:45:41:d6:18:9e:a8:15:c4:0e:c8:f1:7d: 58:38:6b:35:04:45:13:86:0d:2f:ed:39:bb:d9:5e:00:07:9a: 59:44:ed:8b:0f:62:23:b2:b7:c7:f1:57:52:9c:01:4f:64:7b: a2:44:e1:12:d6:53:13:28:39:fb:3a:c7:52:ba:c3:ad:35:d7: 0c:a7:4d:65:f0:72:15:e0:0a:7f:a0:2c:d7:32:d4:bf:70:45: e7:08:41:f5:95:bc:be:54:4d:06:4f:8e:10:80:ba:0b:58:ab: e4:49:82:21:9f:fa:37:14:bc:f6:69:38:3f:28:a2:5a:0c:3b: 05:56:bf:e9:f7:93:98:05:df:0f:85:00:70:dc:08:ac:e4:38: 1b:53:32:71:25:db:7e:22:66:12:60:ab:12:14:1f:b2:ea:c3: 19:29:69:5f:a7:f5:0d:d5:a8:0a:3b:74:9f:bf:bc:ac:a4:bb: aa:62:53:a8:4b:4c:2f:9e:95:ed:95:a5:c0:c9:d4:b5:fe:77: c5:5f:55:62:3d:ba:a4:c9:88:6a:47:c4:55:73:80:82:d3:12: 22:aa:05:61:19:77:7b:9e:2d:58:aa:f0:38:d9:cc:84:ab:35: 1e:55:0a:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwODA4MTk0NDE5WhcNMjUwODE1MTk0NDE5WjAYMRYwFAYD VQQDEw02ODk2NTM5My05YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoG5HNdc6OProfHWnPFalxMLIPVO+PUM4DGoXriDS3oslZ/Wj3Ja5nAII4TFz 2wdFYIzX4udWQaA9cXFKfe8to7398cc8rglbHsibdxgl71D0y6vu2hohDOTwYSkO rd3z2Fiftj4ruJHp1pyjrEZYJHQzURBNhSvGE/Cs2VlOhk5Sw/Zx5RANztdges0j p8aiv0jz157VcTrgaEuqzDcE92qrDXVC/tm1ESq5SKz2Dr6YpA3Jpu2k+Cu3Cidi Me6kK4NSNT/d5T36vegsn+p6IPFMVlb2eyzOOCP0jFYdUwNC1xUQcfl1xmBE9TNE UuakD1gpmQrqUlDdyg7uBsbqqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ7sVsjM HLr4vlHNb7HbwBQh2ctyMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBswPPJNzSfPUJYMWo6yCzg81dqQkhqPg5FQdYYnqgVxA7I8X1YOGs1 BEUThg0v7Tm72V4AB5pZRO2LD2IjsrfH8VdSnAFPZHuiROES1lMTKDn7OsdSusOt NdcMp01l8HIV4Ap/oCzXMtS/cEXnCEH1lby+VE0GT44QgLoLWKvkSYIhn/o3FLz2 aTg/KKJaDDsFVr/p95OYBd8PhQBw3Ais5DgbUzJxJdt+ImYSYKsSFB+y6sMZKWlf p/UN1agKO3Sfv7yspLuqYlOoS0wvnpXtlaXAydS1/nfFX1ViPbqkyYhqR8RVc4CC 0xIiqgVhGXd7ni1YqvA42cyEqzUeVQpr -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:14 2025 by rpki-client