$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft File: FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft (raw, json) Hash identifier: SovyEwNpQliEnKj7Mpd6KNdtw1Or6gnCQWutZCIaTFc= Subject key identifier: 61:2C:88:DA:65:86:83:DF:C7:C4:65:D7:D8:63:64:17:88:53:D9:EF Authority key identifier: 15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 Certificate issuer: /CN=A91DD299/serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft Manifest number: 8C Signing time: Thu 07 Aug 2025 07:08:27 +0000 Manifest this update: Thu 07 Aug 2025 07:08:27 +0000 Manifest next update: Thu 14 Aug 2025 07:08:27 +0000 Files and hashes: 1: FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl (hash: Hm3zN6KvxsNRjI1KEnRq77Ly/+gz5DZWqUllyidHV8o=) 2: F7AA5B1CA1DA11EF86B88981C4F9AE02.roa (hash: DGxrKRXPi2bgrxreeXRQjRNOo70ByLeA01zODoILz2c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD299, serialNumber=156ED5BF81437C1B71E71CB02EEC27AB18AF79A4 Validity Not Before: Aug 7 07:08:27 2025 GMT Not After : Aug 14 07:08:27 2025 GMT Subject: CN=689450eb-e33b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:76:02:35:bf:bb:2f:00:b7:61:65:c2:2f:bc: 94:76:ec:c5:59:83:81:9a:79:ec:ae:ef:d7:e8:9a: a9:25:7b:e2:ae:42:38:12:c5:e0:82:df:60:83:79: 59:b9:fd:48:dc:c3:49:db:84:eb:a0:83:4d:e8:94: 2c:81:56:bd:56:b8:6b:6b:90:ce:2c:79:63:d2:e7: 34:aa:4a:5e:1f:43:00:d8:f5:de:fb:cf:a1:3e:08: 1c:d8:24:6f:23:8d:0b:72:05:8e:18:07:cf:45:7a: 32:28:12:b8:09:39:6a:3d:ac:f3:2c:85:cd:32:32: 3b:02:b1:bb:64:30:cc:31:c7:aa:1d:91:c6:53:20: cf:a0:37:08:86:4d:cd:78:bc:9d:b3:1e:35:4a:a5: ed:15:a3:5f:31:d6:6b:e8:75:89:89:6c:3a:da:54: fd:35:36:d4:5f:e4:d6:ce:50:53:a8:07:af:97:7a: fc:17:30:8c:4e:b9:25:c4:33:d0:c7:9f:76:77:47: c8:2b:ce:68:65:ad:92:c6:10:a1:9b:f3:da:6f:e8: a3:2d:4d:00:35:e2:29:6a:45:43:92:0d:15:bf:47: 01:c7:1a:33:dc:d4:31:a8:0b:fa:a8:3b:4f:53:52: b4:f5:07:a8:1a:40:7b:c4:64:51:df:69:e3:92:71: 01:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2C:88:DA:65:86:83:DF:C7:C4:65:D7:D8:63:64:17:88:53:D9:EF X509v3 Authority Key Identifier: keyid:15:6E:D5:BF:81:43:7C:1B:71:E7:1C:B0:2E:EC:27:AB:18:AF:79:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FW7Vv4FDfBtx5xywLuwnqxiveaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD299/5EB93A72A1DA11EFB2333A45C4F9AE02/FW7Vv4FDfBtx5xywLuwnqxiveaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:15:e4:da:65:4f:15:2d:ab:f4:2b:8b:38:65:df:c8:47:91: 54:1f:be:70:a3:6d:c1:21:3f:4d:c9:3f:00:46:e7:b7:46:16: ff:42:29:a3:75:1c:ac:4e:b0:9e:f5:eb:54:61:a9:9c:db:29: 84:8c:bb:2f:13:5f:b4:22:c0:77:61:66:d7:b6:82:fe:26:ac: 1b:10:d0:bb:88:68:d1:01:a0:78:ff:d3:4d:06:80:91:36:35: e4:bf:ec:51:82:d1:c5:72:a6:15:0d:ed:e8:02:15:75:20:00: 94:57:2e:96:73:c6:19:c7:a0:aa:fb:6f:b9:ec:70:27:0d:92: 94:8a:20:25:07:92:25:f0:cc:78:07:d0:69:44:88:b2:fb:4a: 13:cd:49:c2:74:ca:0d:69:fd:80:36:c4:1f:49:4b:3e:a9:50: 14:5d:0a:09:d7:af:29:98:b9:83:97:3b:6a:43:87:fb:8b:88: 34:24:d8:f8:a1:d1:19:10:52:c1:ee:d7:7d:e2:ab:25:2f:e4: 79:23:d2:7d:85:bf:74:b0:17:24:b7:1b:59:3c:0e:db:27:08: 73:83:8b:21:cc:fc:14:b5:9e:16:6b:2f:17:70:3d:ed:3d:f3: 87:a1:28:ec:ff:ac:8d:1c:3f:56:1e:41:67:ef:83:75:e2:1e: d4:5b:89:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyOTkxMTAvBgNVBAUTKDE1NkVENUJGODE0MzdDMUI3MUU3MUNCMDJFRUMyN0FC MThBRjc5QTQwHhcNMjUwODA3MDcwODI3WhcNMjUwODE0MDcwODI3WjAYMRYwFAYD VQQDEw02ODk0NTBlYi1lMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA13YCNb+7LwC3YWXCL7yUduzFWYOBmnnsru/X6JqpJXvirkI4EsXggt9gg3lZ uf1I3MNJ24TroINN6JQsgVa9Vrhra5DOLHlj0uc0qkpeH0MA2PXe+8+hPggc2CRv I40LcgWOGAfPRXoyKBK4CTlqPazzLIXNMjI7ArG7ZDDMMceqHZHGUyDPoDcIhk3N eLydsx41SqXtFaNfMdZr6HWJiWw62lT9NTbUX+TWzlBTqAevl3r8FzCMTrklxDPQ x592d0fIK85oZa2SxhChm/Pab+ijLU0ANeIpakVDkg0Vv0cBxxoz3NQxqAv6qDtP U1K09QeoGkB7xGRR32njknEBEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGEsiNpl hoPfx8Rl19hjZBeIU9nvMB8GA1UdIwQYMBaAFBVu1b+BQ3wbceccsC7sJ6sYr3mk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI5OS81RUI5M0E3MkEx REExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZCdHg1eHl3THV3bnF4aXZl YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXN1Z2NEZEZkJ0eDV4eXdMdXducXhpdmVhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDI5OS81RUI5M0E3MkExREExMUVGQjIzMzNBNDVDNEY5QUUwMi9GVzdWdjRGRGZC dHg1eHl3THV3bnF4aXZlYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATFeTaZU8VLav0K4s4Zd/IR5FUH75wo23BIT9NyT8ARue3Rhb/Qimj dRysTrCe9etUYamc2ymEjLsvE1+0IsB3YWbXtoL+JqwbENC7iGjRAaB4/9NNBoCR NjXkv+xRgtHFcqYVDe3oAhV1IACUVy6Wc8YZx6Cq+2+57HAnDZKUiiAlB5Il8Mx4 B9BpRIiy+0oTzUnCdMoNaf2ANsQfSUs+qVAUXQoJ168pmLmDlztqQ4f7i4g0JNj4 odEZEFLB7td94qslL+R5I9J9hb90sBcktxtZPA7bJwhzg4shzPwUtZ4Way8XcD3t PfOHoSjs/6yNHD9WHkFn74N14h7UW4m4 -----END CERTIFICATE-----Generated at Fri Aug 8 19:33:45 2025 by rpki-client