$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: 574uqgMN5v3ilIxWmrDCCTIeNxY5zY1gByZKL3HTAAo= Subject key identifier: CB:9A:05:FE:EC:F7:3F:A7:4C:FB:43:8C:86:71:F2:CF:0C:87:DD:F9 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: B7 Signing time: Sat 09 Aug 2025 06:23:47 +0000 Manifest this update: Sat 09 Aug 2025 06:23:47 +0000 Manifest next update: Sat 16 Aug 2025 06:23:47 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: gO8qn1W3XO/+vJkZdlRViijn/IFRoVARJG6VuSzTDQs=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: LeRLBY5GVV/98SK5vi8TCaYTzwu/LK8xBT06nPBMuiY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Aug 9 06:23:47 2025 GMT Not After : Aug 16 06:23:47 2025 GMT Subject: CN=6896e973-3aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:fe:4b:9e:61:73:7a:be:a4:e2:6e:e5:82: ef:f9:be:21:27:fe:cc:70:4f:54:cd:fa:59:a9:5d: 5f:aa:f7:22:7b:c3:95:5b:43:c6:ce:d9:01:a2:cf: e1:bd:21:9a:cc:eb:ca:5a:f0:04:e5:05:03:d5:89: 89:46:45:67:0c:7f:84:25:f2:72:3d:21:da:76:cc: 17:c4:21:48:5f:6a:80:f9:a7:05:4c:6c:e6:51:64: f6:1b:04:67:c2:14:cf:f2:85:d4:87:5c:18:3c:9f: a4:2e:b0:0c:18:37:51:01:fa:d0:33:99:5a:d6:76: b3:fd:1d:7e:24:77:23:23:d2:c0:79:cf:00:52:ec: f2:f9:1c:40:59:c1:44:9f:e9:91:40:6a:0f:db:83: 86:ff:95:63:28:c1:90:25:18:2f:a9:37:7f:39:78: d0:43:c6:7c:d0:5b:dc:4d:ce:71:03:45:85:ea:77: 5a:02:b3:f1:9b:80:44:98:33:31:37:0d:e5:92:a7: a2:75:4b:8d:8f:94:3a:a7:4f:2a:f1:aa:1d:53:dd: 5e:60:72:cf:ce:13:16:4c:73:63:69:ca:6a:52:d5: 13:0f:c5:01:ac:b9:a4:df:e3:9a:e4:a6:23:e1:56: 04:97:bf:fd:f0:5a:d0:18:ab:d8:8d:c2:8f:c8:59: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9A:05:FE:EC:F7:3F:A7:4C:FB:43:8C:86:71:F2:CF:0C:87:DD:F9 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:86:83:fc:42:cd:62:0c:cc:d8:ea:6e:92:8c:85:ed:76:1a: b1:3e:c6:6e:ac:14:d3:d9:bb:3f:8a:69:00:15:76:5b:2b:33: 3a:54:d0:f1:61:7a:be:e9:e5:fe:5f:67:a2:b6:1f:7e:8b:bb: d5:25:41:3a:68:f1:6b:f2:59:75:3d:6f:2c:19:f6:8c:28:8e: 24:08:e2:c3:16:a5:38:f0:87:7f:b3:05:c9:19:09:f3:33:9d: ba:b5:28:0e:5c:0a:e0:69:b1:8e:a8:ee:b9:06:4a:ac:d5:5e: d1:28:fd:b0:13:8c:b1:a3:c9:97:ec:42:0d:79:34:19:87:89: ce:6a:cf:46:87:71:29:15:66:24:c6:64:0b:c7:8b:11:b9:c2: ee:b8:32:13:7d:88:16:3e:78:d3:c3:3b:af:a7:e1:80:32:d9: a0:0d:52:58:54:d3:5f:e5:d0:ed:ed:ff:e3:dd:18:78:f5:34: f9:16:b5:ce:c0:c9:f8:3e:db:f7:3a:18:c8:b8:b0:7e:b2:66: 73:b4:7f:e3:45:b5:cc:d8:27:65:4d:4a:8e:6b:01:1a:bc:17: f7:bc:ff:bb:06:8c:09:d1:e1:65:ab:2a:9d:7f:db:ac:bd:7e: 0a:02:b8:f3:7c:19:8c:08:e9:1b:16:ce:e3:1b:42:9b:3c:a0: 80:eb:68:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwODA5MDYyMzQ3WhcNMjUwODE2MDYyMzQ3WjAYMRYwFAYD VQQDEw02ODk2ZTk3My0zYWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWL+S55hc3q+pOJu5YLv+b4hJ/7McE9UzfpZqV1fqvcie8OVW0PGztkBos/h vSGazOvKWvAE5QUD1YmJRkVnDH+EJfJyPSHadswXxCFIX2qA+acFTGzmUWT2GwRn whTP8oXUh1wYPJ+kLrAMGDdRAfrQM5la1naz/R1+JHcjI9LAec8AUuzy+RxAWcFE n+mRQGoP24OG/5VjKMGQJRgvqTd/OXjQQ8Z80FvcTc5xA0WF6ndaArPxm4BEmDMx Nw3lkqeidUuNj5Q6p08q8aodU91eYHLPzhMWTHNjacpqUtUTD8UBrLmk3+Oa5KYj 4VYEl7/98FrQGKvYjcKPyFlDLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMuaBf7s 9z+nTPtDjIZx8s8Mh935MB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyhoP8Qs1iDMzY6m6SjIXtdhqxPsZurBTT2bs/imkAFXZbKzM6VNDx YXq+6eX+X2eith9+i7vVJUE6aPFr8ll1PW8sGfaMKI4kCOLDFqU48Id/swXJGQnz M526tSgOXArgabGOqO65Bkqs1V7RKP2wE4yxo8mX7EINeTQZh4nOas9Gh3EpFWYk xmQLx4sRucLuuDITfYgWPnjTwzuvp+GAMtmgDVJYVNNf5dDt7f/j3Rh49TT5FrXO wMn4Ptv3OhjIuLB+smZztH/jRbXM2CdlTUqOawEavBf3vP+7BowJ0eFlqyqdf9us vX4KArjzfBmMCOkbFs7jG0KbPKCA62jp -----END CERTIFICATE-----Generated at Sun Aug 10 21:02:35 2025 by rpki-client