$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft File: fVVGmSbR-TTzrylkXrbBC7YGm8k.mft (raw, json) Hash identifier: +nyZSVg/3kiN9Fh35T2YyDr85hKfduxI/fohgPl3JDY= Subject key identifier: 19:B9:11:F3:53:50:20:79:51:BD:15:5A:1B:D8:85:36:CE:56:74:CF Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 Certificate issuer: /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Certificate serial: 0966 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft Manifest number: 08FF Signing time: Wed 18 Jun 2025 20:27:00 +0000 Manifest this update: Wed 18 Jun 2025 20:27:00 +0000 Manifest next update: Wed 25 Jun 2025 20:27:00 +0000 Files and hashes: 1: fVVGmSbR-TTzrylkXrbBC7YGm8k.crl (hash: fdeweUKkNs0/GYZkPG1mJNEjkvz4Wkp7MF228izq798=) 2: 49E75ECAD66F11EF8C443287C4F9AE02.roa (hash: a0K/4suOukzalMmGXoAuXRRlPLJmkTGLqgOEswzREmw=) 3: 501941C093F211EEA029A113C4F9AE02.roa (hash: AzLlJkV6uweEFCMcx/o9vS17187fN+9zNJtq2qRlwjg=) 4: 8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (hash: FcRac2o84caHLtMjvHJ0PmKpdtxd6KVZGVT4UtbkmWg=) 5: 781C64FAF58611ED89273159C4F9AE02.roa (hash: KQsiNAY3rgJSqaPcQR/vrNEFqpIv1dzI+sj/d5igWno=) 6: FECBA2C23B2611EFAF167E83C4F9AE02.roa (hash: tfdFxm7zDzSNY8KLHsb30XY14VNoD7lmA8Phn0Ip+7k=) 7: 9672E862793811EE92C54834C4F9AE02.roa (hash: VZDkUmHUSNQz0PuWGeefW0AZnX5klCTCiKAwXgSpJ9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2406 (0x966) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9 Validity Not Before: Jun 18 20:27:00 2025 GMT Not After : Jun 25 20:27:00 2025 GMT Subject: CN=68532114-abf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:59:71:41:24:6b:50:6d:bf:31:bb:9a:1a: 0b:44:7a:2c:fa:4c:7a:45:62:9f:f9:07:4f:8c:dd: 10:d6:a2:cc:e1:c6:c7:af:25:ae:87:97:d0:f5:56: 85:1d:9f:07:a1:6f:8e:3a:b0:9d:13:38:0d:ea:96: fe:84:8d:94:33:a0:ce:02:03:fe:c0:83:8b:67:ac: ca:9f:e2:fd:a7:df:54:cf:11:22:3b:be:25:7f:15: e8:c8:44:e2:eb:71:d6:64:d0:3e:f9:dc:db:d0:47: ae:bd:56:cc:6f:70:e9:a7:83:07:6b:c4:ef:a3:a4: 46:8a:58:b1:2c:6f:73:ee:ed:5b:35:6c:9a:f3:d3: f8:70:fe:c3:3a:7e:62:51:c4:81:fb:8b:04:e1:d6: 6f:b5:fd:3a:c2:73:a9:df:ac:00:5e:6c:b4:74:42: d1:c1:ce:e2:bb:08:b7:01:19:e0:49:2f:64:88:5b: de:61:c3:33:ff:12:13:ef:04:a9:a0:1a:6c:fd:d9: 6d:18:83:82:f6:7b:5f:8b:eb:43:6e:fe:e6:a1:6e: 02:57:76:3e:ac:b9:5a:f6:15:95:ad:b3:01:ed:35: 9f:d7:0b:da:0c:5f:ba:27:73:b9:cf:68:a3:05:52: 5e:e2:0a:c7:29:ae:2c:21:92:6e:61:29:82:42:62: c8:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B9:11:F3:53:50:20:79:51:BD:15:5A:1B:D8:85:36:CE:56:74:CF X509v3 Authority Key Identifier: keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ab:5d:a2:39:b8:4d:c7:29:6b:60:63:cb:cb:e5:8a:d0:d7: f3:96:8c:86:e4:af:5c:39:73:17:25:f5:68:9d:a6:c6:f2:0c: bd:b0:bb:79:e9:f8:ad:95:5f:39:46:79:d6:98:84:fb:6b:4e: 36:d8:24:7b:8b:05:09:51:41:5a:1f:a8:6e:d7:06:1c:7f:fb: 95:72:4c:79:c9:b3:4a:8f:07:1a:ed:33:cd:9b:c3:ac:7a:9b: ab:d3:83:a6:32:c4:c4:3c:c9:a3:32:57:31:d7:d3:e8:65:04: 19:03:e6:95:1f:e2:23:ad:ba:3c:db:fc:e1:a2:6a:3e:18:cb: 21:1e:cf:3f:ad:b4:f3:70:2a:b2:5f:b3:08:13:23:c2:29:2c: 31:79:12:82:6e:0b:c2:fe:07:5f:13:da:12:c5:b1:33:59:e5: 29:83:59:bb:c4:32:e4:86:51:2c:14:e8:ac:d4:1c:fe:9b:0f: 3b:e8:f9:d9:cc:3c:ed:bb:10:45:d6:d5:71:ec:58:dc:d7:51: de:4e:05:81:c4:7c:2c:80:70:6d:90:6f:66:8f:d3:4c:6f:0e: 85:20:64:30:b6:f8:7d:24:e0:2d:a3:c5:74:fa:7e:ef:f6:9e: c7:53:2d:af:ea:a2:68:8c:c8:58:d5:32:20:d6:fc:67:39:37: 8e:63:19:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC QjYwNjlCQzkwHhcNMjUwNjE4MjAyNzAwWhcNMjUwNjI1MjAyNzAwWjAYMRYwFAYD VQQDEw02ODUzMjExNC1hYmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK5ZcUEka1BtvzG7mhoLRHos+kx6RWKf+QdPjN0Q1qLM4cbHryWuh5fQ9VaF HZ8HoW+OOrCdEzgN6pb+hI2UM6DOAgP+wIOLZ6zKn+L9p99UzxEiO74lfxXoyETi 63HWZNA++dzb0EeuvVbMb3Dpp4MHa8Tvo6RGilixLG9z7u1bNWya89P4cP7DOn5i UcSB+4sE4dZvtf06wnOp36wAXmy0dELRwc7iuwi3ARngSS9kiFveYcMz/xIT7wSp oBps/dltGIOC9ntfi+tDbv7moW4CV3Y+rLla9hWVrbMB7TWf1wvaDF+6J3O5z2ij BVJe4grHKa4sIZJuYSmCQmLIXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm5EfNT UCB5Ub0VWhvYhTbOVnTPMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Nzc3MC9FNjgxMDQxMEMwQUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1U VHpyeWxrWHJiQkM3WUdtOGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoq12iObhNxylrYGPLy+WK0NfzloyG5K9cOXMXJfVonabG8gy9sLt5 6fitlV85RnnWmIT7a0422CR7iwUJUUFaH6hu1wYcf/uVckx5ybNKjwca7TPNm8Os epur04OmMsTEPMmjMlcx19PoZQQZA+aVH+Ijrbo82/zhomo+GMshHs8/rbTzcCqy X7MIEyPCKSwxeRKCbgvC/gdfE9oSxbEzWeUpg1m7xDLkhlEsFOis1Bz+mw876PnZ zDztuxBF1tVx7Fjc11HeTgWBxHwsgHBtkG9mj9NMbw6FIGQwtvh9JOAto8V0+n7v 9p7HUy2v6qJojMhY1TIg1vxnOTeOYxme -----END CERTIFICATE-----Generated at Thu Jun 19 18:17:59 2025 by rpki-client