$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft File: f2vh1aJzD8In-vyJbRNDMkF4MXk.mft (raw, json) Hash identifier: 84OZX7eN1DYBcsGOJGzvj8WCMOzKMO3jzdUJLLHKYno= Subject key identifier: AC:EF:DF:5B:1A:66:3D:18:24:D3:DA:31:88:E0:EA:F6:0B:F7:10:61 Authority key identifier: 7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 Certificate issuer: /CN=A91DB4FE/serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Certificate serial: 08A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft Manifest number: 07B2 Signing time: Fri 08 Aug 2025 22:47:50 +0000 Manifest this update: Fri 08 Aug 2025 22:47:50 +0000 Manifest next update: Fri 15 Aug 2025 22:47:50 +0000 Files and hashes: 1: f2vh1aJzD8In-vyJbRNDMkF4MXk.crl (hash: NCs1Q59qBRazPFNPxw+vds+nqSKuTH16OsqOanhJcgA=) 2: 5A034FE6BD9011EF8EBE9D64C4F9AE02.roa (hash: M0Fcljsjjstipss7xqc7MHaM40CrhRfp+Ko6GKTS2eY=) 3: 71921B808DBD11EBB4566432C4F9AE02.roa (hash: /G2Mgl5uzW1IjI6PHih/zk+tlWLrMlnnVYCS55/UFdM=) 4: 95EC5BBE0DC811F0A0561D5AC4F9AE02.roa (hash: E4qGKWG7PfGIitr8iGGPNSOx9z6hB7rmiJDWW78bXko=) 5: DB120D6EC34A11EB9559E184C4F9AE02.roa (hash: 5xpmMyySrXgvXThxY4s4oxrkg/HJvlh/5VD0HqrC+TE=) 6: 284AFDA0F86011EE8DCC542DC4F9AE02.roa (hash: ibBpC0J7xssLmpNwn4rG5DteNDNkqNer4WUY/po6k0Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2214 (0x8a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB4FE, serialNumber=7F6BE1D5A2730FC227FAFC896D13433241783179 Validity Not Before: Aug 8 22:47:50 2025 GMT Not After : Aug 15 22:47:50 2025 GMT Subject: CN=68967e96-783d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:aa:b6:f9:77:18:9c:a5:fd:72:d5:33:6c:94: b0:2f:ae:3c:a0:92:30:a2:3f:87:ae:d3:5e:b4:3e: 7e:7e:d2:aa:01:c0:a2:56:6c:19:3f:09:b9:4d:b5: 81:28:eb:9d:25:08:16:6a:6f:d2:5e:22:64:a1:a2: 81:e7:17:2d:f6:f2:06:22:9d:2a:ce:67:e8:e1:01: a9:97:d8:35:d5:d5:2b:31:7c:07:cd:35:8d:93:eb: a5:73:c2:01:65:79:7b:0a:c1:ae:7e:30:be:9b:29: 7a:e2:d7:84:c8:bd:94:6b:e1:8a:9b:d6:59:5c:9c: 63:24:77:a0:ba:57:cc:8d:fb:38:dc:26:b1:12:f7: 1d:66:eb:52:60:c5:7c:fc:33:6e:92:31:b3:39:be: 71:0a:4d:41:a4:33:0a:a0:60:ed:59:ec:e6:73:ff: a0:3d:de:e5:de:c6:8c:f9:16:a7:55:18:52:d4:0f: 63:a1:5c:12:71:52:fd:4a:68:17:87:52:b9:d3:a5: 2a:58:25:8a:2f:d2:2b:69:65:46:ad:96:bc:7c:b5: 27:26:36:8d:50:d9:8f:10:d5:43:28:08:87:7e:a0: c1:ee:be:a6:fd:e7:02:3b:f8:c5:b3:01:cb:04:11: c7:01:f1:ee:c7:70:a6:6e:8a:48:14:2c:66:68:99: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EF:DF:5B:1A:66:3D:18:24:D3:DA:31:88:E0:EA:F6:0B:F7:10:61 X509v3 Authority Key Identifier: keyid:7F:6B:E1:D5:A2:73:0F:C2:27:FA:FC:89:6D:13:43:32:41:78:31:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2vh1aJzD8In-vyJbRNDMkF4MXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB4FE/CF4A10EA85E111EBAFB51E84C4F9AE02/f2vh1aJzD8In-vyJbRNDMkF4MXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5f:c6:1b:6f:f8:1f:86:1b:b6:1b:94:1c:b2:95:f6:4e:a1: a4:5a:12:8f:4a:81:de:44:f9:ad:90:79:80:25:bb:23:bc:86: 9d:bd:ff:f5:5b:a9:8c:be:bc:fb:09:d1:48:53:04:c5:59:0a: 10:4e:f4:03:fd:3b:54:a8:e6:53:01:c8:33:b8:69:fc:90:01: 1f:6a:28:a2:92:d3:f8:d7:72:85:5e:d2:45:cc:d1:ef:64:3d: c4:92:e3:d6:96:81:e4:99:59:87:9f:07:7c:74:d6:03:9b:bf: 77:7d:bf:f3:bb:40:38:23:fa:e4:ad:97:d3:87:da:17:03:ab: 88:60:9b:c5:d9:f5:0c:d0:7a:25:8d:5a:3a:c9:15:5b:af:28: e8:a7:93:b6:d6:e5:70:04:3e:24:9e:5f:7b:d8:af:ca:c5:69: 74:c2:52:92:37:9b:ac:c4:eb:82:02:d3:31:3d:26:ed:50:f3: 5a:f4:d6:34:41:87:f6:da:5a:e5:92:5b:40:99:a8:c4:92:20: c0:05:f8:67:83:1d:5b:f2:ef:30:e1:62:c4:4a:5e:d6:1e:dd: 39:dc:5a:45:84:30:91:d7:4b:29:7c:6e:51:3f:dc:18:08:fb: f5:60:d1:28:f5:32:51:2d:cc:56:18:b7:19:9a:77:c3:c7:c9: 0e:d4:72:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI0RkUxMTAvBgNVBAUTKDdGNkJFMUQ1QTI3MzBGQzIyN0ZBRkM4OTZEMTM0MzMy NDE3ODMxNzkwHhcNMjUwODA4MjI0NzUwWhcNMjUwODE1MjI0NzUwWjAYMRYwFAYD VQQDEw02ODk2N2U5Ni03ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6q2+XcYnKX9ctUzbJSwL648oJIwoj+HrtNetD5+ftKqAcCiVmwZPwm5TbWB KOudJQgWam/SXiJkoaKB5xct9vIGIp0qzmfo4QGpl9g11dUrMXwHzTWNk+ulc8IB ZXl7CsGufjC+myl64teEyL2Ua+GKm9ZZXJxjJHegulfMjfs43CaxEvcdZutSYMV8 /DNukjGzOb5xCk1BpDMKoGDtWezmc/+gPd7l3saM+RanVRhS1A9joVwScVL9SmgX h1K506UqWCWKL9IraWVGrZa8fLUnJjaNUNmPENVDKAiHfqDB7r6m/ecCO/jFswHL BBHHAfHux3CmbopIFCxmaJmCwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKzv31sa Zj0YJNPaMYjg6vYL9xBhMB8GA1UdIwQYMBaAFH9r4dWicw/CJ/r8iW0TQzJBeDF5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjRGRS9DRjRBMTBFQTg1 RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4SW4tdnlKYlJORE1rRjRN WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2YydmgxYUp6RDhJbi12eUpiUk5ETWtGNE1Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjRGRS9DRjRBMTBFQTg1RTExMUVCQUZCNTFFODRDNEY5QUUwMi9mMnZoMWFKekQ4 SW4tdnlKYlJORE1rRjRNWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLX8Ybb/gfhhu2G5QcspX2TqGkWhKPSoHeRPmtkHmAJbsjvIadvf/1 W6mMvrz7CdFIUwTFWQoQTvQD/TtUqOZTAcgzuGn8kAEfaiiiktP413KFXtJFzNHv ZD3EkuPWloHkmVmHnwd8dNYDm793fb/zu0A4I/rkrZfTh9oXA6uIYJvF2fUM0Hol jVo6yRVbryjop5O21uVwBD4knl972K/KxWl0wlKSN5usxOuCAtMxPSbtUPNa9NY0 QYf22lrlkltAmajEkiDABfhngx1b8u8w4WLESl7WHt053FpFhDCR10spfG5RP9wY CPv1YNEo9TJRLcxWGLcZmnfDx8kO1HKJ -----END CERTIFICATE-----Generated at Sun Aug 10 14:00:14 2025 by rpki-client