$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: TK0MP2w/McYqeVwGE8TmfhWpahXARdwqZR+O7QrfvdA= Subject key identifier: 67:84:BF:18:2E:92:DE:A6:2B:69:EA:E9:B9:1A:2F:AE:23:3A:D8:D7 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 0411 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 03F9 Signing time: Sun 03 Aug 2025 01:05:47 +0000 Manifest this update: Sun 03 Aug 2025 01:05:46 +0000 Manifest next update: Sun 10 Aug 2025 01:05:46 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: FLYvyLMGMoUMlWKNtUSPVLsNJWBR92NMHhLXJRYM+Kw=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) 3: C76E25524B1711EE8CE6C778C4F9AE02.roa (hash: HsErDDItwf5JjFC0N3vp/RvWt4W7KbQd/xCB8B2lvo4=) 4: 844FB44036A211EEAE901A49C4F9AE02.roa (hash: GNVfwfyUifybt9+TxmCqpnk4LFqX/6GaqA3Bsi9KVRs=) 5: DC32812203E911F099ED6083C4F9AE02.roa (hash: J4XsQqIXXNrH3AjPKCK2loEl+rnRQyBlEzKkOSyTXKc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:05:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1041 (0x411) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: Aug 3 01:05:46 2025 GMT Not After : Aug 10 01:05:46 2025 GMT Subject: CN=688eb5ea-9ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:7e:98:ba:30:c3:33:5f:0e:3c:d1:52:62: 3e:6f:cf:17:5d:c3:78:4b:b9:24:5a:52:91:87:b0: 0c:35:47:ba:4f:95:c5:51:3a:dc:fe:41:b1:7d:01: 81:5f:79:1b:4d:8e:74:e6:ce:04:7f:18:16:43:6a: c7:a7:fd:7d:71:44:67:28:b1:99:cd:ff:39:a1:77: ba:9b:69:60:15:8d:c2:83:a7:4b:db:40:68:2c:6a: f7:de:e4:7c:7f:78:d8:01:47:ef:0f:3d:79:0c:07: 8d:72:90:52:1b:1a:c3:8b:0f:ad:15:8a:ae:ff:75: 4d:7e:30:4c:69:df:a0:b2:2d:25:7e:55:4b:11:02: 68:90:9c:99:e7:d3:34:1a:c3:98:8d:32:21:a0:60: c2:13:f1:66:da:c9:58:27:0a:16:a2:90:dc:43:9f: 7c:6f:f2:3a:f3:09:bc:59:e3:3c:32:06:d3:ce:8f: 0d:b2:43:84:83:5d:9c:b2:1f:96:85:df:5f:b3:92: e8:54:52:1f:b7:99:b6:d8:fe:44:15:49:ad:a2:b1: 6e:e5:d7:04:68:60:ea:f9:75:da:8f:45:68:ea:00: c1:63:64:53:6f:fb:c8:cb:8d:34:07:6f:36:38:ea: f2:5f:d7:ae:3b:9e:cf:ab:cc:db:dc:59:01:1a:51: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:84:BF:18:2E:92:DE:A6:2B:69:EA:E9:B9:1A:2F:AE:23:3A:D8:D7 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:29:e4:29:0c:04:49:11:bd:5f:b0:d0:bc:df:b0:ab:a2:cb: 47:aa:ce:9c:d2:ab:40:62:67:4b:5b:68:ed:40:64:20:16:bb: 59:c0:36:54:0e:45:91:c8:dd:0b:d6:6d:31:9d:1b:9e:a5:8e: 50:91:9c:34:6c:82:dc:39:89:7a:27:52:ca:9d:71:ad:c3:14: ab:1e:7d:47:60:5a:6a:91:75:8e:30:00:7a:2e:b6:a4:a7:04: b3:86:5c:85:3d:d8:b5:3c:ff:41:95:23:74:9a:fa:1a:8e:ad: 37:34:30:fb:30:1d:15:77:b0:5a:9a:fb:fd:4c:f9:fc:a3:72: 93:87:a4:8f:82:c5:5d:93:eb:a2:9f:a3:45:36:27:68:c1:a0: c7:2f:4f:a8:1b:bf:0d:31:89:54:0b:52:bc:7c:7f:84:fb:5e: b5:e8:ff:0d:59:e0:f8:7b:eb:f9:c3:fa:d8:91:f0:61:8c:36: 52:b0:5c:f6:98:7a:09:7a:35:61:f4:48:da:dd:ec:05:71:40: 97:f4:49:d6:d6:4c:d2:ff:52:90:58:33:14:2f:cd:d9:71:be: 06:72:27:1b:3f:b2:ae:30:cc:25:24:51:54:bc:a1:c3:84:2f: f6:a5:d4:ea:67:05:f3:a4:13:a1:a9:03:b4:40:2c:87:51:80: e7:d2:52:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUwODAzMDEwNTQ2WhcNMjUwODEwMDEwNTQ2WjAYMRYwFAYD VQQDEw02ODhlYjVlYS05ZmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWl+mLowwzNfDjzRUmI+b88XXcN4S7kkWlKRh7AMNUe6T5XFUTrc/kGxfQGB X3kbTY505s4EfxgWQ2rHp/19cURnKLGZzf85oXe6m2lgFY3Cg6dL20BoLGr33uR8 f3jYAUfvDz15DAeNcpBSGxrDiw+tFYqu/3VNfjBMad+gsi0lflVLEQJokJyZ59M0 GsOYjTIhoGDCE/Fm2slYJwoWopDcQ598b/I68wm8WeM8MgbTzo8NskOEg12csh+W hd9fs5LoVFIft5m22P5EFUmtorFu5dcEaGDq+XXaj0Vo6gDBY2RTb/vIy400B282 OOryX9euO57Pq8zb3FkBGlGHQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeEvxgu kt6mK2nq6bkaL64jOtjXMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkKeQpDARJEb1fsNC837CrostHqs6c0qtAYmdLW2jtQGQgFrtZwDZU DkWRyN0L1m0xnRuepY5QkZw0bILcOYl6J1LKnXGtwxSrHn1HYFpqkXWOMAB6Lrak pwSzhlyFPdi1PP9BlSN0mvoajq03NDD7MB0Vd7Bamvv9TPn8o3KTh6SPgsVdk+ui n6NFNidowaDHL0+oG78NMYlUC1K8fH+E+1616P8NWeD4e+v5w/rYkfBhjDZSsFz2 mHoJejVh9Eja3ewFcUCX9EnW1kzS/1KQWDMUL83Zcb4GcicbP7KuMMwlJFFUvKHD hC/2pdTqZwXzpBOhqQO0QCyHUYDn0lLv -----END CERTIFICATE-----Generated at Mon Aug 4 18:59:15 2025 by rpki-client