$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft File: F3JfretEo_qLMf_wpjy8UVWpB9g.mft (raw, json) Hash identifier: gkYz6xHHDfqlzMA5VGnJEa2QaXYrEK0jXQdD5/5WunQ= Subject key identifier: 68:37:64:10:D4:60:00:B8:89:8D:5E:66:5E:DD:AC:21:5B:63:58:9C Authority key identifier: 17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 Certificate issuer: /CN=A91B0049/serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Certificate serial: 07B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft Manifest number: 07AF Signing time: Fri 08 Aug 2025 21:40:22 +0000 Manifest this update: Fri 08 Aug 2025 21:40:21 +0000 Manifest next update: Fri 15 Aug 2025 21:40:21 +0000 Files and hashes: 1: F3JfretEo_qLMf_wpjy8UVWpB9g.crl (hash: GQzS8yIgqrZaOvQlREDRHPZy8VRU9PvvLP+VM7fRWhs=) 2: C6591C620DFD11EBAD63A21CC4F9AE02.roa (hash: wiuGLfhX4Abp89BeKvQrP2ym0zYLw1999qfgLcOKlHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1973 (0x7b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0049, serialNumber=17725FADEB44A3FA8B31FFF0A63CBC5155A907D8 Validity Not Before: Aug 8 21:40:21 2025 GMT Not After : Aug 15 21:40:21 2025 GMT Subject: CN=68966ec5-bdc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:86:ab:7d:b4:2b:5d:2d:e5:41:d4:c6:ee: 21:9e:b4:ad:d5:bc:cc:10:8f:03:bf:21:3f:0b:ad: a4:06:f9:ef:3e:be:fb:a7:fb:eb:e2:3c:dd:76:9a: 0b:fd:f1:5b:e6:52:30:ca:e8:7f:24:50:31:39:b9: 05:24:a3:1c:9b:2f:e7:a5:93:a8:d7:72:2b:07:e8: 63:dd:1d:57:be:6a:fa:69:1a:f1:20:1d:24:92:d4: 0e:0a:d4:fb:3f:13:72:0e:86:ca:ec:8c:34:13:9f: 47:5f:d0:2a:53:dc:1c:22:3a:4e:f2:0f:f4:88:02: 22:13:1c:7f:14:3a:16:a5:4f:49:b9:16:49:7a:c7: 15:41:e8:8c:53:02:21:49:44:ed:46:ee:da:a5:b7: cb:77:dc:d1:b7:56:80:d9:d7:7e:b3:d2:e2:75:22: 1f:c3:72:75:66:24:54:55:d1:3d:1c:4e:70:da:76: 8f:6d:b8:97:2d:d5:45:23:d4:ea:ed:ec:c6:c9:e6: 9f:e7:04:34:14:fa:ea:d3:36:8c:79:62:b0:5e:85: 83:80:19:d5:48:db:31:f0:68:aa:c3:68:47:25:ca: 4f:24:98:ee:d2:69:70:07:ea:1b:12:f2:1f:da:67: 9f:48:03:53:75:03:9f:d7:b3:8d:b9:0a:04:de:3e: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:64:10:D4:60:00:B8:89:8D:5E:66:5E:DD:AC:21:5B:63:58:9C X509v3 Authority Key Identifier: keyid:17:72:5F:AD:EB:44:A3:FA:8B:31:FF:F0:A6:3C:BC:51:55:A9:07:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F3JfretEo_qLMf_wpjy8UVWpB9g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0049/7EC909760DFC11EBB2F1381BC4F9AE02/F3JfretEo_qLMf_wpjy8UVWpB9g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:2e:70:f0:f4:52:bf:df:5e:7e:77:95:ef:4e:a3:64:70:e7: 2e:15:60:bd:04:cc:cb:e8:ae:10:e7:e1:39:43:7b:ea:8c:34: 69:da:3f:29:41:fb:8b:2b:96:90:0b:c8:03:3c:7a:8d:34:5d: 83:e9:af:52:2a:b7:13:8a:fb:4d:13:aa:f3:6f:02:3f:e3:5f: cb:5b:9e:a6:82:25:df:0a:e8:f9:90:80:97:9a:ac:a9:a1:1d: 65:39:d2:93:4a:ab:ca:ec:ac:45:b9:76:85:a8:b1:48:cb:42: 13:ff:40:dc:c5:f3:05:3e:6a:4c:43:e1:d1:6e:99:48:b9:4f: e7:95:ac:16:e0:c5:52:2d:78:c2:53:08:79:8e:14:7c:4d:a5: 21:a6:f5:5a:91:70:22:e2:24:57:b8:c0:3c:26:15:4a:70:0e: b5:6c:31:b3:c8:a8:43:ac:28:33:12:28:7b:5e:f8:87:c8:21: 53:3d:d8:e9:e7:e3:29:eb:d0:8d:95:2a:d5:a8:2a:a4:13:44: 03:bf:29:a4:e2:bc:3e:5c:29:35:a6:90:a8:13:d5:bd:93:75: c8:66:25:41:da:fc:47:67:fa:e8:4b:d8:58:36:35:81:31:c3: 9e:a2:51:6e:29:65:62:80:3f:64:3d:54:a3:0f:e3:b9:9b:5d: 36:13:97:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNDkxMTAvBgNVBAUTKDE3NzI1RkFERUI0NEEzRkE4QjMxRkZGMEE2M0NCQzUx NTVBOTA3RDgwHhcNMjUwODA4MjE0MDIxWhcNMjUwODE1MjE0MDIxWjAYMRYwFAYD VQQDEw02ODk2NmVjNS1iZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQWGq320K10t5UHUxu4hnrSt1bzMEI8DvyE/C62kBvnvPr77p/vr4jzddpoL /fFb5lIwyuh/JFAxObkFJKMcmy/npZOo13IrB+hj3R1Xvmr6aRrxIB0kktQOCtT7 PxNyDobK7Iw0E59HX9AqU9wcIjpO8g/0iAIiExx/FDoWpU9JuRZJescVQeiMUwIh SUTtRu7apbfLd9zRt1aA2dd+s9LidSIfw3J1ZiRUVdE9HE5w2naPbbiXLdVFI9Tq 7ezGyeaf5wQ0FPrq0zaMeWKwXoWDgBnVSNsx8Giqw2hHJcpPJJju0mlwB+obEvIf 2mefSANTdQOf17ONuQoE3j791wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg3ZBDU YAC4iY1eZl7drCFbY1icMB8GA1UdIwQYMBaAFBdyX63rRKP6izH/8KY8vFFVqQfY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA0OS83RUM5MDk3NjBE RkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9fcUxNZl93cGp5OFVWV3BC OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YzSmZyZXRFb19xTE1mX3dwank4VVZXcEI5Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDA0OS83RUM5MDk3NjBERkMxMUVCQjJGMTM4MUJDNEY5QUUwMi9GM0pmcmV0RW9f cUxNZl93cGp5OFVWV3BCOWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVLnDw9FK/315+d5XvTqNkcOcuFWC9BMzL6K4Q5+E5Q3vqjDRp2j8p QfuLK5aQC8gDPHqNNF2D6a9SKrcTivtNE6rzbwI/41/LW56mgiXfCuj5kICXmqyp oR1lOdKTSqvK7KxFuXaFqLFIy0IT/0DcxfMFPmpMQ+HRbplIuU/nlawW4MVSLXjC Uwh5jhR8TaUhpvVakXAi4iRXuMA8JhVKcA61bDGzyKhDrCgzEih7XviHyCFTPdjp 5+Mp69CNlSrVqCqkE0QDvymk4rw+XCk1ppCoE9W9k3XIZiVB2vxHZ/roS9hYNjWB McOeolFuKWVigD9kPVSjD+O5m102E5cs -----END CERTIFICATE-----Generated at Sun Aug 10 05:47:31 2025 by rpki-client