$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft File: F4SvaM922Ze5n3dAY3gNspm1SpM.mft (raw, json) Hash identifier: lbCqCDcGy99Tltrk9A3RFxx+vGxfBH3bbqDDohfA8Ng= Subject key identifier: 81:26:FB:75:33:2C:19:56:A7:7D:20:B0:32:8C:A6:F4:9F:98:25:38 Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft Manifest number: 2C Signing time: Tue 05 Aug 2025 08:22:49 +0000 Manifest this update: Tue 05 Aug 2025 08:22:49 +0000 Manifest next update: Tue 12 Aug 2025 08:22:49 +0000 Files and hashes: 1: F4SvaM922Ze5n3dAY3gNspm1SpM.crl (hash: p3iAZrtPGi0UWw/TTBrbA50zgTiHGx0r45GziPiY+cg=) 2: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (hash: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0=) 3: 7B6FCB36340B11F0B358096BC4F9AE02.roa (hash: KBbDfS3aaIsenqMIDTBfa9Z6EFC3wO32oIY+laKdQAc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: Aug 5 08:22:49 2025 GMT Not After : Aug 12 08:22:49 2025 GMT Subject: CN=6891bf59-87e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:00:59:12:93:ca:e2:86:22:65:3b:c7:29: cf:d1:e3:d0:af:13:a4:32:54:c8:cf:f6:ba:0d:cf: 09:ba:74:29:a0:eb:0e:e1:83:1e:55:0b:03:f7:16: 24:f1:b5:79:d9:76:9b:03:7a:c3:df:0d:90:08:46: 34:41:df:0f:0b:03:f5:94:e8:41:64:d8:72:e1:60: ca:5f:a6:f6:f8:d6:9f:c9:92:43:3f:67:93:c5:ca: b8:c2:3d:27:45:ba:d5:a1:8c:38:88:d6:ea:23:32: 57:4a:e9:1c:4a:3d:10:e3:56:58:68:7b:b9:5e:49: 7a:e3:2d:4a:2a:6e:ab:09:1f:82:14:fe:8a:1d:c7: 5b:35:0f:d1:2c:e5:fb:c4:dd:95:5a:b0:c8:71:ee: 71:bc:e9:4d:e0:16:db:9a:fb:00:8a:dc:82:6e:5e: a6:0e:a1:13:03:01:81:17:01:32:06:c8:5b:d1:15: 13:5f:f0:a6:28:d9:14:0f:c9:19:3b:c7:0e:ea:cb: e6:c2:a5:c8:3b:78:eb:2e:be:bb:30:8a:40:24:79: 65:df:fd:a1:df:54:44:da:dc:d0:ce:99:ec:35:d1: 2e:15:4c:b0:9a:6e:35:9d:d3:30:f1:b2:9c:b7:af: fb:8b:28:73:1a:33:2d:6f:b0:be:8f:ed:83:e9:c9: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:26:FB:75:33:2C:19:56:A7:7D:20:B0:32:8C:A6:F4:9F:98:25:38 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:2b:6e:d9:8c:3c:e5:21:6b:7f:52:36:79:51:58:fa:3b:e8: 3f:dd:4d:07:74:a3:c0:d5:fc:72:8c:c9:3e:4c:ae:ab:1a:48: 29:eb:cd:69:5f:3a:4c:b9:9a:cf:32:0b:77:7d:b9:e9:2f:46: 1a:5f:92:59:0b:4d:ec:88:53:7b:4f:cb:6e:38:3a:08:83:07: ea:ae:0f:d0:f3:6e:f8:6f:eb:29:34:5d:01:83:72:1e:61:89: 44:07:be:93:7d:d8:45:be:4d:89:48:72:4e:39:3d:68:a1:5b: 34:41:ee:a1:b8:1d:dc:30:9a:1d:1b:8f:40:88:db:33:ad:41: 2a:2e:44:b0:83:69:ce:aa:22:ff:35:ea:10:56:f7:e4:bc:19: 22:22:ac:ad:cc:c4:fa:4e:b7:3d:66:dd:b5:85:fa:ce:ab:88: 5f:5b:ac:fa:58:83:87:08:15:2e:a8:c6:75:a8:33:c4:58:24: ee:de:9a:e3:30:2e:c5:3a:db:d2:7c:7e:68:0d:b9:ee:f3:3a: 35:34:8f:7c:ad:ad:db:db:28:e2:a2:b1:ed:1d:1f:7e:1f:d3: b6:dc:80:2f:56:88:cf:a8:e1:d3:ef:a8:bc:55:be:9b:40:4c: a3:5e:65:ea:24:b4:57:de:99:c6:1e:1c:f7:55:aa:cc:fc:92: 9c:56:cc:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA4MDUwODIyNDlaFw0yNTA4MTIwODIyNDlaMBgxFjAUBgNV BAMTDTY4OTFiZjU5LTg3ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUzABZEpPK4oYiZTvHKc/R49CvE6QyVMjP9roNzwm6dCmg6w7hgx5VCwP3FiTx tXnZdpsDesPfDZAIRjRB3w8LA/WU6EFk2HLhYMpfpvb41p/JkkM/Z5PFyrjCPSdF utWhjDiI1uojMldK6RxKPRDjVlhoe7leSXrjLUoqbqsJH4IU/oodx1s1D9Es5fvE 3ZVasMhx7nG86U3gFtua+wCK3IJuXqYOoRMDAYEXATIGyFvRFRNf8KYo2RQPyRk7 xw7qy+bCpcg7eOsuvrswikAkeWXf/aHfVETa3NDOmew10S4VTLCabjWd0zDxspy3 r/uLKHMaMy1vsL6P7YPpyVMtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUgSb7dTMs GVanfSCwMoym9J+YJTgwHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5LzE0QTdCMjYyMzNGRjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlpl NW4zZEFZM2dOc3BtMVNwTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADgrbtmMPOUha39SNnlRWPo76D/dTQd0o8DV/HKMyT5MrqsaSCnrzWlf Oky5ms8yC3d9uekvRhpfklkLTeyIU3tPy244OgiDB+quD9Dzbvhv6yk0XQGDch5h iUQHvpN92EW+TYlIck45PWihWzRB7qG4Hdwwmh0bj0CI2zOtQSouRLCDac6qIv81 6hBW9+S8GSIirK3MxPpOtz1m3bWF+s6riF9brPpYg4cIFS6oxnWoM8RYJO7emuMw LsU629J8fmgNue7zOjU0j3ytrdvbKOKise0dH34f07bcgC9WiM+o4dPvqLxVvptA TKNeZeoktFfemcYeHPdVqsz8kpxWzJI= -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:03 2025 by rpki-client