$ rpki-client -vvf rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft File: fDPCHh829n5MagTrI5AZrXcryyo.mft (raw, json) Hash identifier: ks5BAPEDSDNIekFHQUhvbOhQqS6Eso4UF0F+ANimHTY= Subject key identifier: 94:19:A0:51:54:87:B3:10:99:40:33:65:83:78:2E:1C:49:CE:70:B9 Authority key identifier: 7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A Certificate issuer: /CN=A91836C4/serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft Manifest number: 01E1 Signing time: Sat 09 Aug 2025 03:00:40 +0000 Manifest this update: Sat 09 Aug 2025 03:00:40 +0000 Manifest next update: Sat 16 Aug 2025 03:00:40 +0000 Files and hashes: 1: fDPCHh829n5MagTrI5AZrXcryyo.crl (hash: 08tt7f19LV9SfxpEc5tJhMfGwyngMTxOQ34iTDhFkpA=) 2: 37A0ACFC8FCD11EDB4772D55C4F9AE02.roa (hash: OVe6KSw+7kYYiHPF4YI7Y6sSZ8QGj8mE1P0YOqWt/tI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836C4, serialNumber=7C33C21E1F36F67E4C6A04EB239019AD772BCB2A Validity Not Before: Aug 9 03:00:40 2025 GMT Not After : Aug 16 03:00:40 2025 GMT Subject: CN=6896b9d8-5dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:49:0b:4c:c1:40:da:e8:af:b9:b0:01:6d: a9:85:86:be:7a:64:57:19:66:e7:ca:6e:4d:f6:60: c9:fd:34:b1:31:ba:7e:5b:13:5d:78:5e:c3:bd:a8: 79:8c:7a:f1:d9:f3:a3:a9:6d:c3:6c:55:bf:07:c6: f9:35:2b:74:a5:7f:5b:ad:44:87:8b:e3:9e:c9:9c: 6b:1b:bf:5a:48:b5:16:bc:34:3a:66:cb:d1:4e:e9: 22:de:e4:0c:8a:b2:44:1d:d6:96:a8:26:6a:f9:6d: ba:f4:2a:85:ee:72:47:79:a2:e1:15:14:dc:8e:22: 8a:39:cb:84:9b:02:20:ea:94:f4:e6:12:82:23:fc: 60:26:2f:30:8f:d5:7b:31:e0:da:dc:b6:bd:f7:d2: 29:a6:ba:e9:b8:ca:46:f8:b8:31:79:1b:04:ba:be: 3b:ac:22:20:25:35:cb:97:b0:01:13:98:b6:78:80: ba:40:e6:81:30:ad:f7:b4:1a:39:ea:aa:6f:b9:96: c4:3b:80:a3:5e:be:4f:dd:7b:1d:6d:76:4b:3f:ca: 77:56:96:3e:c9:a2:11:3d:46:7f:1c:18:9f:35:3d: f9:2f:79:e8:bf:1e:be:f5:2a:1a:e2:28:95:0b:1c: 69:d4:8b:c9:5a:65:56:b6:98:35:2f:4d:3e:19:45: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:19:A0:51:54:87:B3:10:99:40:33:65:83:78:2E:1C:49:CE:70:B9 X509v3 Authority Key Identifier: keyid:7C:33:C2:1E:1F:36:F6:7E:4C:6A:04:EB:23:90:19:AD:77:2B:CB:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fDPCHh829n5MagTrI5AZrXcryyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836C4/9D4B10688FCA11EDB7911254C4F9AE02/fDPCHh829n5MagTrI5AZrXcryyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:f9:c9:8d:51:ef:89:0c:c1:d3:05:d3:e9:6b:0d:44:c0:31: 21:c2:56:d7:9f:1e:6d:69:19:92:0a:56:96:85:9d:f1:71:3b: 15:af:2a:33:bf:b3:a6:52:b4:ab:36:34:c8:c5:af:9e:16:2e: 4d:8e:fb:e3:dc:03:d9:a8:49:33:84:b3:30:83:41:d8:36:45: 24:d9:42:e5:54:63:d5:d8:cf:17:f4:40:f6:49:af:9e:0d:d1: 7c:e3:ae:5b:6c:af:e4:e3:8e:39:0e:3c:96:cd:55:12:d5:14: 06:2f:ae:b5:e6:e4:f7:36:2c:38:75:53:54:04:93:f5:16:80: b1:cb:0d:85:38:57:3e:ad:f4:14:7c:59:3e:eb:af:9a:aa:b5: 9a:5c:90:f2:27:a3:4a:e6:2f:23:b4:dc:06:06:33:2b:18:42: 5b:99:76:83:91:83:fe:46:95:3a:dd:b1:92:02:e8:92:1d:b7: ed:e1:bb:90:89:c9:05:87:02:0e:91:b1:32:ea:cb:af:d6:f2: 4b:95:5b:a8:65:e9:ae:1d:47:5a:85:51:15:e9:fd:f2:eb:31: 39:57:33:63:98:39:e7:5c:7a:19:30:23:72:24:0c:eb:4e:f2: 57:9c:07:03:3b:5f:95:77:87:83:a4:b6:35:a0:6a:b5:ea:5c: 20:4c:c5:3a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODM2QzQxMTAvBgNVBAUTKDdDMzNDMjFFMUYzNkY2N0U0QzZBMDRFQjIzOTAxOUFE NzcyQkNCMkEwHhcNMjUwODA5MDMwMDQwWhcNMjUwODE2MDMwMDQwWjAYMRYwFAYD VQQDEw02ODk2YjlkOC01ZGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApI9JC0zBQNror7mwAW2phYa+emRXGWbnym5N9mDJ/TSxMbp+WxNdeF7Dvah5 jHrx2fOjqW3DbFW/B8b5NSt0pX9brUSHi+OeyZxrG79aSLUWvDQ6ZsvRTuki3uQM irJEHdaWqCZq+W269CqF7nJHeaLhFRTcjiKKOcuEmwIg6pT05hKCI/xgJi8wj9V7 MeDa3La999IpprrpuMpG+LgxeRsEur47rCIgJTXLl7ABE5i2eIC6QOaBMK33tBo5 6qpvuZbEO4CjXr5P3XsdbXZLP8p3VpY+yaIRPUZ/HBifNT35L3novx6+9Soa4iiV Cxxp1IvJWmVWtpg1L00+GUUn4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQZoFFU h7MQmUAzZYN4LhxJznC5MB8GA1UdIwQYMBaAFHwzwh4fNvZ+TGoE6yOQGa13K8sq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzZDNC85RDRCMTA2ODhG Q0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4MjluNU1hZ1RySTVBWnJYY3J5 eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZEUENIaDgyOW41TWFnVHJJNUFaclhjcnl5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MzZDNC85RDRCMTA2ODhGQ0ExMUVEQjc5MTEyNTRDNEY5QUUwMi9mRFBDSGg4Mjlu NU1hZ1RySTVBWnJYY3J5eW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw+cmNUe+JDMHTBdPpaw1EwDEhwlbXnx5taRmSClaWhZ3xcTsVryoz v7OmUrSrNjTIxa+eFi5Njvvj3APZqEkzhLMwg0HYNkUk2ULlVGPV2M8X9ED2Sa+e DdF8465bbK/k4445DjyWzVUS1RQGL6615uT3Niw4dVNUBJP1FoCxyw2FOFc+rfQU fFk+66+aqrWaXJDyJ6NK5i8jtNwGBjMrGEJbmXaDkYP+RpU63bGSAuiSHbft4buQ ickFhwIOkbEy6suv1vJLlVuoZemuHUdahVEV6f3y6zE5VzNjmDnnXHoZMCNyJAzr TvJXnAcDO1+Vd4eDpLY1oGq16lwgTMU6 -----END CERTIFICATE-----Generated at Sat Aug 9 23:28:45 2025 by rpki-client