$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft File: fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json) Hash identifier: 11eE+GmbAMU3qOGuKxpRDZ0XBsJk9dflWoWjG3BuBW4= Subject key identifier: 49:B5:ED:84:92:1B:E7:69:90:54:81:C9:C2:0B:D1:B2:6C:C8:72:40 Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A Certificate issuer: /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft Manifest number: 012D Signing time: Thu 07 Aug 2025 05:08:25 +0000 Manifest this update: Thu 07 Aug 2025 05:08:25 +0000 Manifest next update: Thu 14 Aug 2025 05:08:25 +0000 Files and hashes: 1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: jT0hJmpkAscsi5bRhcfcL6gnCReAw42rA/hxNpM6OlU=) 2: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: y81/Bm4goLn9P37Big7/CzEV9a1Uz1uENuSDaA4pS5U=) 3: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: MOWmFDpIkvE9ZXw3XjwL/Gz8uOZnXK7NosAmPb+jAAg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A Validity Not Before: Aug 7 05:08:25 2025 GMT Not After : Aug 14 05:08:25 2025 GMT Subject: CN=689434c9-ec15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:88:de:7a:76:13:6d:fa:7f:4f:2c:d7:9a:14: 4b:5e:98:4c:4d:41:2e:92:c6:76:29:4a:df:01:e3: ae:a4:7b:40:df:ee:18:a2:a6:51:90:cc:17:e6:f9: 7d:bf:2d:c0:22:b3:f2:e4:80:16:e4:95:81:cd:1b: 84:0c:78:ae:98:da:cf:79:5e:b5:ea:3c:38:8f:0f: 27:73:2f:2d:d6:9e:68:0d:b7:e2:da:fd:3c:57:39: 59:f8:5f:fc:df:b1:ef:2f:87:29:50:cf:3f:c7:0b: 24:ad:fb:07:de:ee:26:92:e8:22:5d:fd:26:92:b0: 82:88:a9:26:a3:22:a6:eb:fd:ae:ca:fe:1a:99:45: c9:63:fc:ee:92:28:f6:d9:51:88:21:a7:58:81:1b: 3c:6d:79:50:6d:1f:06:f5:00:ac:1e:22:eb:7c:b8: f6:ac:5b:b2:f8:a1:06:2a:93:7b:d8:10:ca:e9:23: a0:d2:43:70:4a:41:59:4a:15:6c:27:94:2b:be:3e: 72:c0:0e:0e:22:f6:f7:e4:55:45:7f:85:9c:8e:82: 79:e4:f6:f9:4f:6c:8d:ea:68:60:bd:9f:bb:71:dd: d2:c3:1e:4d:8f:c9:24:d3:a2:34:3a:8e:df:a3:6b: e9:36:64:c7:ec:63:31:dd:b3:4f:f5:ca:f4:8d:8e: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B5:ED:84:92:1B:E7:69:90:54:81:C9:C2:0B:D1:B2:6C:C8:72:40 X509v3 Authority Key Identifier: keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:f8:48:11:a1:52:6b:5a:42:81:e0:90:a7:79:b9:30:f6:f5: a0:4b:3a:e2:ea:ef:25:58:82:93:c6:2a:b0:30:59:f5:63:49: 69:f0:82:61:be:03:5a:84:41:ae:64:e5:ca:46:8e:10:36:2b: 98:50:66:a8:b2:95:8e:69:7c:b7:cc:06:76:04:10:35:9d:9c: 1e:19:d6:b5:9a:f4:88:1c:d9:1b:c5:20:b0:d7:fc:51:53:10: c0:4b:1f:be:ef:45:cc:c2:fe:59:03:b0:cc:62:08:96:c6:2f: 7b:7f:66:30:7b:c8:bb:36:91:70:3a:c0:05:5f:a1:20:cb:6a: 77:39:ee:91:63:4e:0b:73:22:bb:89:13:8b:dd:00:85:78:fe: fa:29:e6:5e:20:07:f6:62:22:07:9c:3b:8a:a1:13:1b:2b:ec: 14:38:04:c7:d9:1d:a6:f6:ee:99:31:5f:f5:c9:e6:db:d8:99: fb:c8:e9:c3:35:30:23:f9:e0:5c:dd:49:9a:3d:9a:d6:6f:a8: e2:16:10:f2:5f:ba:54:9f:26:38:94:1a:1e:fc:22:a8:a3:b6: 0e:15:0c:26:67:ed:7c:e9:01:d0:57:45:dc:38:b8:5e:f2:c1: 4f:9d:f6:7b:6d:99:a8:8e:13:46:34:8a:74:d2:d3:2f:50:33: 1b:78:93:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG MjY3MjQ5OEEwHhcNMjUwODA3MDUwODI1WhcNMjUwODE0MDUwODI1WjAYMRYwFAYD VQQDEw02ODk0MzRjOS1lYzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA64jeenYTbfp/TyzXmhRLXphMTUEuksZ2KUrfAeOupHtA3+4YoqZRkMwX5vl9 vy3AIrPy5IAW5JWBzRuEDHiumNrPeV616jw4jw8ncy8t1p5oDbfi2v08VzlZ+F/8 37HvL4cpUM8/xwskrfsH3u4mkugiXf0mkrCCiKkmoyKm6/2uyv4amUXJY/zukij2 2VGIIadYgRs8bXlQbR8G9QCsHiLrfLj2rFuy+KEGKpN72BDK6SOg0kNwSkFZShVs J5Qrvj5ywA4OIvb35FVFf4WcjoJ55Pb5T2yN6mhgvZ+7cd3Swx5Nj8kk06I0Oo7f o2vpNmTH7GMx3bNP9cr0jY5qlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm17YSS G+dpkFSBycIL0bJsyHJAMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3 RDRMQWV4WEU4Q255WnlTWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5+EgRoVJrWkKB4JCnebkw9vWgSzri6u8lWIKTxiqwMFn1Y0lp8IJh vgNahEGuZOXKRo4QNiuYUGaospWOaXy3zAZ2BBA1nZweGda1mvSIHNkbxSCw1/xR UxDASx++70XMwv5ZA7DMYgiWxi97f2Ywe8i7NpFwOsAFX6Egy2p3Oe6RY04LcyK7 iROL3QCFeP76KeZeIAf2YiIHnDuKoRMbK+wUOATH2R2m9u6ZMV/1yebb2Jn7yOnD NTAj+eBc3UmaPZrWb6jiFhDyX7pUnyY4lBoe/CKoo7YOFQwmZ+186QHQV0XcOLhe 8sFPnfZ7bZmojhNGNIp00tMvUDMbeJNZ -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:21 2025 by rpki-client