$ rpki-client -vvf rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft File: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft (raw, json) Hash identifier: b+fTjWRJ8kUli3ry55AljFAmSUJQtbTi+vAS7jESg+k= Subject key identifier: 06:5B:18:4B:01:A1:97:DD:4D:3A:2F:52:CE:C8:C9:E1:BB:24:A5:2E Authority key identifier: 70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 Certificate issuer: /CN=A91983E5/serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft Manifest number: 0CB7 Signing time: Mon 04 Aug 2025 18:21:52 +0000 Manifest this update: Mon 04 Aug 2025 18:21:52 +0000 Manifest next update: Mon 11 Aug 2025 18:21:52 +0000 Files and hashes: 1: cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl (hash: BoIHSWzv7ohQjfSMptFDfjoLugs82d8ZfaaGMnkEGJY=) 2: 430E6130F4B011E99BB3425CC4F9AE02.roa (hash: srN4MybkybSjP5c+l2pI3OXFvu05+GspG1m/SkxGd6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91983E5, serialNumber=7053FF81FECF059A3E8BD70F85D64943D114E536 Validity Not Before: Aug 4 18:21:52 2025 GMT Not After : Aug 11 18:21:52 2025 GMT Subject: CN=6890fa40-0e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:ec:d9:c4:15:c4:d4:7e:12:48:7b:99:09: ad:f2:4f:e1:19:f5:67:ad:49:a5:ff:a2:0e:8f:c0: ca:72:5c:2b:93:7f:16:49:03:72:5f:78:4a:12:92: 46:96:26:ce:e5:9f:40:49:dc:97:97:93:f1:f8:fd: 06:85:18:1c:61:5b:a5:e2:24:13:60:33:11:68:be: 56:4c:36:6e:7f:83:5d:d6:cd:61:48:14:f8:8e:95: 20:f7:df:ab:8d:9a:65:2c:26:a1:43:27:d9:89:cd: 07:fc:bb:4e:25:69:2c:c0:06:87:48:1e:d5:3f:e5: 49:26:7e:09:50:d9:97:8f:61:72:03:35:a7:41:f9: 7a:54:32:c3:ee:8a:14:bb:6c:44:30:0d:f8:04:75: c4:dd:c9:95:9b:ac:14:58:b8:af:fb:db:f8:23:59: 46:81:00:46:fe:36:3e:15:c3:4c:ce:b8:6e:78:97: 5b:30:9a:33:db:59:a0:c1:2e:6f:26:d6:bd:2c:b5: 09:01:54:3a:38:94:ed:17:4d:0a:49:db:c3:6d:c4: 86:aa:5b:fe:06:cc:71:08:1f:3c:15:31:67:4e:12: 6c:d1:43:eb:a6:3c:94:7a:84:88:a6:3b:02:dc:e9: 27:c5:5f:2a:20:c2:30:68:8c:4e:f5:e7:f3:3e:94: b8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5B:18:4B:01:A1:97:DD:4D:3A:2F:52:CE:C8:C9:E1:BB:24:A5:2E X509v3 Authority Key Identifier: keyid:70:53:FF:81:FE:CF:05:9A:3E:8B:D7:0F:85:D6:49:43:D1:14:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91983E5/7038386CF4AF11E9A51CF05AC4F9AE02/cFP_gf7PBZo-i9cPhdZJQ9EU5TY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:9d:4d:bb:50:79:75:43:2e:2b:26:3e:2f:3a:c9:cf:56:ff: 91:bb:81:df:d8:5d:c2:14:55:15:ee:e0:6f:b0:35:11:9b:e5: ab:ac:18:19:f0:c4:4a:28:ba:b4:e7:d6:36:8a:d0:9e:90:f6: 2a:fd:f3:78:93:c6:bb:d0:a5:71:06:e9:2b:e4:9c:cc:83:d1: a6:da:93:c9:9e:f4:e0:86:86:6c:db:f7:42:80:11:0b:ff:57: ea:1a:c0:17:01:82:82:56:a7:62:a8:f5:b7:cc:22:6d:c3:bb: 52:18:68:1f:22:41:27:9e:d0:1a:37:81:c4:34:c6:65:cc:a4: e6:53:a6:37:34:62:87:59:5c:f8:39:6f:31:aa:9f:d5:a3:85: 11:65:ed:52:6e:a6:11:5c:b2:8d:e1:1d:7f:a5:f6:2a:0f:dd: 9a:84:db:5e:77:f2:18:49:7a:1d:7b:d1:3d:94:1c:8a:59:3a: cf:5f:cc:1b:63:c3:a2:db:08:2e:f7:ed:6e:51:39:d6:f7:5d: 22:20:26:ed:7f:e8:d6:de:66:41:a8:92:8e:f5:3f:67:73:38: c0:56:6f:6f:11:c0:48:d9:d3:39:68:7b:90:45:00:6e:ac:77: e3:d3:ea:ba:26:e8:2a:cb:0c:1b:78:44:76:cd:4c:a7:2c:16: 42:b5:f4:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgzRTUxMTAvBgNVBAUTKDcwNTNGRjgxRkVDRjA1OUEzRThCRDcwRjg1RDY0OTQz RDExNEU1MzYwHhcNMjUwODA0MTgyMTUyWhcNMjUwODExMTgyMTUyWjAYMRYwFAYD VQQDEw02ODkwZmE0MC0wZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHLs2cQVxNR+Ekh7mQmt8k/hGfVnrUml/6IOj8DKclwrk38WSQNyX3hKEpJG libO5Z9ASdyXl5Px+P0GhRgcYVul4iQTYDMRaL5WTDZuf4Nd1s1hSBT4jpUg99+r jZplLCahQyfZic0H/LtOJWkswAaHSB7VP+VJJn4JUNmXj2FyAzWnQfl6VDLD7ooU u2xEMA34BHXE3cmVm6wUWLiv+9v4I1lGgQBG/jY+FcNMzrhueJdbMJoz21mgwS5v Jta9LLUJAVQ6OJTtF00KSdvDbcSGqlv+BsxxCB88FTFnThJs0UPrpjyUeoSIpjsC 3OknxV8qIMIwaIxO9efzPpS4AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZbGEsB oZfdTTovUs7IyeG7JKUuMB8GA1UdIwQYMBaAFHBT/4H+zwWaPovXD4XWSUPRFOU2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODNFNS83MDM4Mzg2Q0Y0 QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJaby1pOWNQaGRaSlE5RVU1 VFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NGUF9nZjdQQlpvLWk5Y1BoZFpKUTlFVTVUWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODNFNS83MDM4Mzg2Q0Y0QUYxMUU5QTUxQ0YwNUFDNEY5QUUwMi9jRlBfZ2Y3UEJa by1pOWNQaGRaSlE5RVU1VFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmnU27UHl1Qy4rJj4vOsnPVv+Ru4Hf2F3CFFUV7uBvsDURm+WrrBgZ 8MRKKLq059Y2itCekPYq/fN4k8a70KVxBukr5JzMg9Gm2pPJnvTghoZs2/dCgBEL /1fqGsAXAYKCVqdiqPW3zCJtw7tSGGgfIkEnntAaN4HENMZlzKTmU6Y3NGKHWVz4 OW8xqp/Vo4URZe1SbqYRXLKN4R1/pfYqD92ahNted/IYSXode9E9lByKWTrPX8wb Y8Oi2wgu9+1uUTnW910iICbtf+jW3mZBqJKO9T9nczjAVm9vEcBI2dM5aHuQRQBu rHfj0+q6JugqywwbeER2zUynLBZCtfSZ -----END CERTIFICATE-----Generated at Wed Aug 6 13:14:09 2025 by rpki-client