$ rpki-client -vvf rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft File: Fh4CKuiXURLudYnUmzFmDKkKBBA.mft (raw, json) Hash identifier: X71s+P9JbZXMiiA4bsiO6QIwEclTMCtWARYyIDj5EbI= Subject key identifier: 7B:7F:A1:A9:5B:39:01:BD:43:C4:40:73:23:6E:01:29:10:98:E1:1E Authority key identifier: 16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 Certificate issuer: /CN=A91A865F/serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft Manifest number: 0BE7 Signing time: Mon 04 Aug 2025 19:02:29 +0000 Manifest this update: Mon 04 Aug 2025 19:02:29 +0000 Manifest next update: Mon 11 Aug 2025 19:02:29 +0000 Files and hashes: 1: Fh4CKuiXURLudYnUmzFmDKkKBBA.crl (hash: NAlQz3cHN+IOFTHBJ4C4vNJiMNbyS1YUKTdQck3sfOA=) 2: 8BB1EB9E1C8A11EABAA73A62C4F9AE02.roa (hash: Ds+NhA319pny+P4IRt5z4T91HtH5A62GJ0ezQK1TtfA=) 3: 8AAF803A1C8A11EABAA73A62C4F9AE02.roa (hash: aCDVqL+/mM6LYQbOqfYbo7QgHkUrD6MbyKhMbVWHThI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A865F, serialNumber=161E022AE8975112EE7589D49B31660CA90A0410 Validity Not Before: Aug 4 19:02:29 2025 GMT Not After : Aug 11 19:02:29 2025 GMT Subject: CN=689103c5-53ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:ef:72:aa:f3:a0:f5:ee:96:10:dd:fd:d6: ca:18:3b:b6:4a:7b:9a:4e:99:c1:19:7e:05:d0:0d: 13:c2:2c:cb:35:c6:fa:c4:08:a8:f8:e2:e7:2e:55: 96:21:18:59:3e:ac:3d:5f:44:ac:f7:60:5f:eb:ab: 1f:da:96:f3:e8:81:6d:fa:6d:0a:ab:93:75:59:85: e9:cb:27:7e:1b:54:6b:3b:cc:e0:7f:34:6e:59:d1: 89:d8:ee:61:66:9a:43:59:43:30:c4:50:35:8b:86: 2c:8d:30:47:3b:c4:8b:e9:f6:ca:81:31:ee:64:4a: b3:d5:f8:87:7e:7b:f8:1d:d3:4d:fc:37:49:e1:1b: 1e:47:01:d4:9a:1e:65:c8:a1:3b:81:ca:06:42:ac: 79:77:a9:4b:cc:04:c0:ed:f6:9b:d8:a3:95:b1:f5: 90:ba:2c:aa:44:51:54:1b:9b:f0:8d:ec:2f:ea:2e: 9f:d0:50:50:14:75:b5:8b:80:9e:da:6e:5f:0c:d6: 4a:72:75:c8:97:3d:81:26:ed:f6:66:33:24:8a:59: c7:a5:36:90:0f:27:0e:91:07:48:0e:6b:65:dd:ef: 44:ea:7c:2e:2d:74:95:66:2d:f7:16:d5:b6:c5:d9: a1:cd:05:11:aa:98:bb:45:b6:cf:e9:37:3c:43:97: 51:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7F:A1:A9:5B:39:01:BD:43:C4:40:73:23:6E:01:29:10:98:E1:1E X509v3 Authority Key Identifier: keyid:16:1E:02:2A:E8:97:51:12:EE:75:89:D4:9B:31:66:0C:A9:0A:04:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fh4CKuiXURLudYnUmzFmDKkKBBA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A865F/BF966E4A1C8911EAA9B95761C4F9AE02/Fh4CKuiXURLudYnUmzFmDKkKBBA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:3c:cd:28:72:bd:cf:92:7b:1d:4f:ab:96:3d:d4:48:cb:75: 80:f8:4c:4d:5a:0e:e7:a6:df:8b:85:af:0f:cf:fb:c9:54:cc: 6a:3e:2a:5d:bb:8d:a0:4f:38:02:b1:a5:b8:aa:9b:ee:61:c6: b0:d5:bf:8b:0b:24:5a:0f:6d:b5:df:99:61:de:a7:49:7c:8a: 5e:89:1e:d4:70:46:45:e2:ed:08:42:b2:7f:e8:4b:db:31:92: 2d:4b:36:22:78:d3:d7:54:2f:c9:2d:01:8f:ea:2d:28:73:be: a3:08:e9:c8:e4:cf:7b:61:1d:68:13:b3:51:d6:28:06:62:f2: 31:de:38:82:92:7c:47:ce:d0:8b:77:86:c2:5a:87:73:0a:e4: 1f:45:2b:98:93:a5:45:45:3b:6e:79:8a:6c:f2:9f:0e:50:8f: 6f:01:ae:5c:4f:86:73:41:3b:3e:28:e8:68:3f:9d:4a:d0:55: 11:a6:84:0d:9f:a3:db:d0:0c:ab:fc:81:a7:f6:0e:7d:06:9d: d5:cb:3c:e4:96:cd:a4:7c:9d:a2:d0:d3:ec:80:2b:93:71:ad: a2:47:8b:df:73:2c:26:cb:33:20:a2:0d:b3:c3:b8:91:d2:23: da:cc:31:9b:cf:8a:07:64:f1:0c:c2:9f:63:03:3c:5e:59:8e: c1:ef:20:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2NUYxMTAvBgNVBAUTKDE2MUUwMjJBRTg5NzUxMTJFRTc1ODlENDlCMzE2NjBD QTkwQTA0MTAwHhcNMjUwODA0MTkwMjI5WhcNMjUwODExMTkwMjI5WjAYMRYwFAYD VQQDEw02ODkxMDNjNS01M2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtafvcqrzoPXulhDd/dbKGDu2SnuaTpnBGX4F0A0TwizLNcb6xAio+OLnLlWW IRhZPqw9X0Ss92Bf66sf2pbz6IFt+m0Kq5N1WYXpyyd+G1RrO8zgfzRuWdGJ2O5h ZppDWUMwxFA1i4YsjTBHO8SL6fbKgTHuZEqz1fiHfnv4HdNN/DdJ4RseRwHUmh5l yKE7gcoGQqx5d6lLzATA7fab2KOVsfWQuiyqRFFUG5vwjewv6i6f0FBQFHW1i4Ce 2m5fDNZKcnXIlz2BJu32ZjMkilnHpTaQDycOkQdIDmtl3e9E6nwuLXSVZi33FtW2 xdmhzQURqpi7RbbP6Tc8Q5dR5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHt/oalb OQG9Q8RAcyNuASkQmOEeMB8GA1UdIwQYMBaAFBYeAirol1ES7nWJ1JsxZgypCgQQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODY1Ri9CRjk2NkU0QTFD ODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVSTHVkWW5VbXpGbURLa0tC QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoNENLdWlYVVJMdWRZblVtekZtREtrS0JCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODY1Ri9CRjk2NkU0QTFDODkxMUVBQTlCOTU3NjFDNEY5QUUwMi9GaDRDS3VpWFVS THVkWW5VbXpGbURLa0tCQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATPM0ocr3PknsdT6uWPdRIy3WA+ExNWg7npt+Lha8Pz/vJVMxqPipd u42gTzgCsaW4qpvuYcaw1b+LCyRaD22135lh3qdJfIpeiR7UcEZF4u0IQrJ/6Evb MZItSzYieNPXVC/JLQGP6i0oc76jCOnI5M97YR1oE7NR1igGYvIx3jiCknxHztCL d4bCWodzCuQfRSuYk6VFRTtueYps8p8OUI9vAa5cT4ZzQTs+KOhoP51K0FURpoQN n6Pb0Ayr/IGn9g59Bp3Vyzzkls2kfJ2i0NPsgCuTca2iR4vfcywmyzMgog2zw7iR 0iPazDGbz4oHZPEMwp9jAzxeWY7B7yBO -----END CERTIFICATE-----Generated at Wed Aug 6 11:17:36 2025 by rpki-client