$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft File: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft (raw, json) Hash identifier: Owp7jjU7HMub3+IpN5FRufwMrL1BCtD4j4UhitUp1gY= Subject key identifier: EA:6E:21:4D:4B:5D:3D:74:3E:78:FC:E6:FB:73:30:06:2A:C7:A1:F8 Authority key identifier: D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 Certificate issuer: /CN=A91A8B67/serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Certificate serial: 88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft Manifest number: 7F Signing time: Sat 09 Aug 2025 07:18:07 +0000 Manifest this update: Sat 09 Aug 2025 07:18:07 +0000 Manifest next update: Sat 16 Aug 2025 07:18:07 +0000 Files and hashes: 1: 1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl (hash: SYQ70Vu5nJEMkM5hdKx3Pm2qHGYrGwrJycUFOVmBqNU=) 2: 1363F5E60E8E11F082304B42C4F9AE02.roa (hash: hu1JiBFiyTnMySrt80yNdScgCjSfSkHINTEYjzYfdUg=) 3: E90F04F4114711F0B6E44E12C4F9AE02.roa (hash: PlQx8+H4QWwRWOJyC7w29KW+ohdqt59u/vmKToMRgGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 136 (0x88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8B67, serialNumber=D459D267525234A0535EC38D8CCC8990194DE189 Validity Not Before: Aug 9 07:18:07 2025 GMT Not After : Aug 16 07:18:07 2025 GMT Subject: CN=6896f62f-77fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:55:d0:bc:3a:5f:5e:d5:dd:e3:a2:2d:fc: 0b:05:ea:2f:a9:ef:a5:62:a8:88:7e:73:63:33:f4: 67:90:d3:b1:66:5a:cc:8c:3d:6c:1e:a3:60:2a:cd: 78:6f:f5:7e:1b:27:12:c1:17:61:09:a9:24:c7:e4: 7d:23:03:06:c3:de:da:82:c2:ed:e4:6b:b4:05:0e: 5d:17:36:10:b9:a0:ea:3d:cb:d3:53:eb:2b:22:56: e7:ee:17:3e:c8:c2:39:1d:34:40:7c:c9:0d:b7:85: 1a:b6:ae:9f:55:42:a6:6f:26:17:2c:33:3d:4e:3e: ad:4a:d4:61:3c:3d:05:a1:50:90:e3:c9:83:34:b9: 33:83:1c:4b:f9:ae:35:5a:5e:c3:7a:5b:7b:d6:5c: 52:e6:64:37:3d:2f:a6:55:d4:1a:2a:e7:90:e3:da: 06:d6:a0:39:02:35:dd:d6:d8:e0:7e:59:f4:51:b9: 08:77:0a:29:c7:32:36:17:13:06:2a:ce:25:39:20: 95:2e:6f:fd:7a:f5:42:41:b5:29:ef:6e:e1:11:5b: 4b:68:2b:de:9b:d6:19:26:e2:93:5c:d5:a4:d1:db: 39:3b:19:dd:c3:c5:68:86:d3:b6:7c:fe:e2:fb:96: 04:a9:84:b9:50:e0:b5:f6:06:8e:3e:8e:ad:86:a3: 15:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6E:21:4D:4B:5D:3D:74:3E:78:FC:E6:FB:73:30:06:2A:C7:A1:F8 X509v3 Authority Key Identifier: keyid:D4:59:D2:67:52:52:34:A0:53:5E:C3:8D:8C:CC:89:90:19:4D:E1:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8B67/2FA00D3EC6AA11EF84FB0D0DC4F9AE02/1FnSZ1JSNKBTXsONjMyJkBlN4Yk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:8c:c8:60:5b:d2:e5:29:11:7d:f6:1b:07:02:33:43:cd:f4: ac:78:ae:48:c4:44:a9:2f:87:2a:e3:6d:0d:b3:b8:cf:b2:16: 03:18:b6:14:c5:1b:4b:64:9f:4d:d0:75:e8:17:ac:85:b5:91: f6:14:20:ca:56:81:f5:1c:82:86:00:5c:81:ce:5f:3f:32:ed: 7d:3d:04:50:aa:9f:45:1d:b4:39:84:db:f3:24:c6:81:b0:44: 67:3e:72:95:b3:b8:5d:ee:ad:63:66:cb:8b:be:34:3e:73:48: 4e:12:4a:3d:38:68:59:2b:83:de:d8:90:da:b4:52:5d:51:3c: 9d:39:d7:79:69:1b:60:3c:e8:fd:e4:d6:aa:eb:9c:49:35:2c: 00:ee:f6:45:4e:1b:7a:bc:48:20:1a:39:8c:1f:e5:2f:35:1e: d5:25:45:31:81:96:cf:e5:38:d2:62:d3:ea:c3:ff:95:55:a5: bc:d8:66:2a:e1:ef:b0:2d:3a:c3:fb:1a:77:cf:ec:a1:31:dd: 81:09:5f:18:55:43:b8:76:5a:01:4a:31:93:56:db:05:63:84: 11:aa:d1:32:44:76:df:d1:b8:d5:5c:fb:70:fc:21:65:a6:8b: 9a:7b:b5:21:64:8e:5e:ba:a8:63:84:82:b4:08:93:af:23:c4: 06:b6:64:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThCNjcxMTAvBgNVBAUTKEQ0NTlEMjY3NTI1MjM0QTA1MzVFQzM4RDhDQ0M4OTkw MTk0REUxODkwHhcNMjUwODA5MDcxODA3WhcNMjUwODE2MDcxODA3WjAYMRYwFAYD VQQDEw02ODk2ZjYyZi03N2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2NV0Lw6X17V3eOiLfwLBeovqe+lYqiIfnNjM/RnkNOxZlrMjD1sHqNgKs14 b/V+GycSwRdhCakkx+R9IwMGw97agsLt5Gu0BQ5dFzYQuaDqPcvTU+srIlbn7hc+ yMI5HTRAfMkNt4Uatq6fVUKmbyYXLDM9Tj6tStRhPD0FoVCQ48mDNLkzgxxL+a41 Wl7Delt71lxS5mQ3PS+mVdQaKueQ49oG1qA5AjXd1tjgfln0UbkIdwopxzI2FxMG Ks4lOSCVLm/9evVCQbUp727hEVtLaCvem9YZJuKTXNWk0ds5Oxndw8VohtO2fP7i +5YEqYS5UOC19gaOPo6thqMVywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpuIU1L XT10Pnj85vtzMAYqx6H4MB8GA1UdIwQYMBaAFNRZ0mdSUjSgU17DjYzMiZAZTeGJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEI2Ny8yRkEwMEQzRUM2 QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05LQlRYc09Oak15SmtCbE40 WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFGblNaMUpTTktCVFhzT05qTXlKa0JsTjRZay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OEI2Ny8yRkEwMEQzRUM2QUExMUVGODRGQjBEMERDNEY5QUUwMi8xRm5TWjFKU05L QlRYc09Oak15SmtCbE40WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqjMhgW9LlKRF99hsHAjNDzfSseK5IxESpL4cq420Ns7jPshYDGLYU xRtLZJ9N0HXoF6yFtZH2FCDKVoH1HIKGAFyBzl8/Mu19PQRQqp9FHbQ5hNvzJMaB sERnPnKVs7hd7q1jZsuLvjQ+c0hOEko9OGhZK4Pe2JDatFJdUTydOdd5aRtgPOj9 5Naq65xJNSwA7vZFTht6vEggGjmMH+UvNR7VJUUxgZbP5TjSYtPqw/+VVaW82GYq 4e+wLTrD+xp3z+yhMd2BCV8YVUO4dloBSjGTVtsFY4QRqtEyRHbf0bjVXPtw/CFl pouae7UhZI5euqhjhIK0CJOvI8QGtmSk -----END CERTIFICATE-----Generated at Sun Aug 10 18:13:04 2025 by rpki-client