$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft File: fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft (raw, json) Hash identifier: nQLQqNfgZxa6d0akR36Gw0zuqORda2Ygr86EPVgvTJU= Subject key identifier: 07:EF:96:58:F9:C9:51:78:45:14:C7:CA:63:31:F1:19:76:38:EC:A1 Authority key identifier: 7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 Certificate issuer: /CN=A91BDC68/serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft Manifest number: 1D Signing time: Sat 09 Aug 2025 08:27:38 +0000 Manifest this update: Sat 09 Aug 2025 08:27:37 +0000 Manifest next update: Sat 16 Aug 2025 08:27:37 +0000 Files and hashes: 1: fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl (hash: Js4i9aCAF0G81LmU0d9kac9ObngOZk72A1ktuPYquUw=) 2: 6C18BEE0519811F08E123360C4F9AE02.roa (hash: aNXBkCTSnj9L9YAKLhVVj1WRcZCzQq19CJAT5ztk+BY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC68, serialNumber=7E3AC6919C228F9801ACF9075D908E512DD6DA34 Validity Not Before: Aug 9 08:27:37 2025 GMT Not After : Aug 16 08:27:37 2025 GMT Subject: CN=6897067a-1fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:60:25:cf:c9:96:b1:e3:18:ff:9d:5d:d3:19: 6b:29:75:ca:84:a3:bc:21:bf:a4:97:b3:77:8a:8b: fc:0d:eb:2b:b9:f0:b1:97:34:51:91:75:86:68:55: f8:b9:18:72:de:24:e4:7c:98:30:1a:7d:37:e7:06: ab:da:c5:7c:ec:d4:ae:b5:cf:94:fd:4f:a1:70:15: ac:6e:4e:47:e0:48:8a:95:21:58:fe:bc:d8:e6:c8: 09:0e:fc:e4:3a:5f:25:fe:33:9f:90:0b:15:5c:a0: 61:74:44:28:a9:fc:e0:57:b0:db:fe:ce:5a:dd:49: 00:6e:dc:46:8f:18:55:a6:32:e3:0d:74:ec:40:e6: fe:4b:f7:7d:f2:b3:a9:9f:7f:38:16:bf:91:ac:58: db:02:41:f2:41:ca:a1:d6:7d:b4:bc:db:de:b3:10: be:cc:67:be:fd:04:ce:fa:e6:3b:4a:72:b2:3e:e1: 9a:c2:17:89:45:05:6b:c2:f5:56:6a:ce:55:55:09: 62:2c:3c:d0:dc:cc:ae:18:2f:4c:31:da:02:f8:ce: ca:53:b2:9d:49:45:a9:f9:3f:71:83:37:74:50:6c: 30:5e:cc:73:42:7e:52:d2:35:6f:45:c2:e3:73:18: d7:9d:ea:cf:a5:2e:f5:46:4d:cb:3d:fd:b1:19:3b: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EF:96:58:F9:C9:51:78:45:14:C7:CA:63:31:F1:19:76:38:EC:A1 X509v3 Authority Key Identifier: keyid:7E:3A:C6:91:9C:22:8F:98:01:AC:F9:07:5D:90:8E:51:2D:D6:DA:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjrGkZwij5gBrPkHXZCOUS3W2jQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC68/56FCE08C519711F0B6E9785EC4F9AE02/fjrGkZwij5gBrPkHXZCOUS3W2jQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:f7:0f:a1:a1:ba:7b:b6:be:f5:bd:f8:e7:3b:92:76:61:8b: 06:3d:a0:7c:b4:bd:11:f2:50:3a:0c:cb:5e:0e:fa:3f:25:3a: e6:ec:92:c8:98:39:6e:12:e1:ed:d1:b4:31:99:9b:7a:6a:28: 77:a0:68:aa:28:5a:3a:3c:f0:52:84:b5:f1:6d:5c:3b:92:e8: 78:be:82:0c:ad:14:77:b2:17:06:1f:20:86:5e:9c:eb:28:97: 19:36:c5:d3:f6:63:45:9c:28:82:b1:7b:87:65:a9:d7:1a:e5: da:5d:15:2c:a5:51:69:37:b6:2f:81:eb:46:72:cf:5f:f6:6a: 13:1b:6b:bf:70:ba:db:37:29:d1:02:50:e4:99:c5:88:2e:90: e9:04:1a:63:b7:8b:34:43:43:b1:31:20:be:4e:20:40:a8:67: b4:7c:b6:f1:91:3c:1e:90:38:d8:0b:6b:76:d6:a2:4c:e7:db: 52:a4:68:8a:09:f5:61:e0:77:9f:4b:73:c8:7b:ac:9d:70:81: d0:72:c5:8d:91:e9:bb:82:3a:31:f8:1e:20:99:96:d1:da:69: d7:e0:7c:a1:cb:da:43:34:5f:a3:e5:d9:8b:75:30:13:f9:49: cd:03:31:1b:04:1e:ba:f7:ba:2a:b3:af:90:bb:8e:99:ee:d4: b7:b8:6f:18 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC REM2ODExMC8GA1UEBRMoN0UzQUM2OTE5QzIyOEY5ODAxQUNGOTA3NUQ5MDhFNTEy REQ2REEzNDAeFw0yNTA4MDkwODI3MzdaFw0yNTA4MTYwODI3MzdaMBgxFjAUBgNV BAMTDTY4OTcwNjdhLTFmZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5YCXPyZax4xj/nV3TGWspdcqEo7whv6SXs3eKi/wN6yu58LGXNFGRdYZoVfi5 GHLeJOR8mDAafTfnBqvaxXzs1K61z5T9T6FwFaxuTkfgSIqVIVj+vNjmyAkO/OQ6 XyX+M5+QCxVcoGF0RCip/OBXsNv+zlrdSQBu3EaPGFWmMuMNdOxA5v5L933ys6mf fzgWv5GsWNsCQfJByqHWfbS8296zEL7MZ779BM765jtKcrI+4ZrCF4lFBWvC9VZq zlVVCWIsPNDczK4YL0wx2gL4zspTsp1JRan5P3GDN3RQbDBezHNCflLSNW9FwuNz GNed6s+lLvVGTcs9/bEZO4IVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUB++WWPnJ UXhFFMfKYzHxGXY47KEwHwYDVR0jBBgwFoAUfjrGkZwij5gBrPkHXZCOUS3W2jQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJEQzY4LzU2RkNFMDhDNTE5 NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVnQnJQa0hYWkNPVVMzVzJq US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZmpyR2tad2lqNWdCclBrSFhaQ09VUzNXMmpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJE QzY4LzU2RkNFMDhDNTE5NzExRjBCNkU5Nzg1RUM0RjlBRTAyL2ZqckdrWndpajVn QnJQa0hYWkNPVVMzVzJqUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABj3D6Ghunu2vvW9+Oc7knZhiwY9oHy0vRHyUDoMy14O+j8lOubsksiY OW4S4e3RtDGZm3pqKHegaKooWjo88FKEtfFtXDuS6Hi+ggytFHeyFwYfIIZenOso lxk2xdP2Y0WcKIKxe4dlqdca5dpdFSylUWk3ti+B60Zyz1/2ahMba79wuts3KdEC UOSZxYgukOkEGmO3izRDQ7ExIL5OIECoZ7R8tvGRPB6QONgLa3bWokzn21KkaIoJ 9WHgd59Lc8h7rJ1wgdByxY2R6buCOjH4HiCZltHaadfgfKHL2kM0X6Pl2Yt1MBP5 Sc0DMRsEHrr3uiqzr5C7jpnu1Le4bxg= -----END CERTIFICATE-----Generated at Sun Aug 10 18:16:06 2025 by rpki-client