$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft File: F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json) Hash identifier: QdZinKF5o+SvGIUBlHeCiqajWvP1KJmzyP/xShfVUCM= Subject key identifier: 1A:6D:05:2D:8D:A6:FE:52:37:96:58:A5:D3:B4:0D:E8:84:43:3B:2E Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Certificate serial: 07D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft Manifest number: 07C7 Signing time: Wed 18 Jun 2025 20:58:35 +0000 Manifest this update: Wed 18 Jun 2025 20:58:34 +0000 Manifest next update: Wed 25 Jun 2025 20:58:34 +0000 Files and hashes: 1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: o8qQDn5PHm2hAegXTBeSjleeivqU7MbKYOM5DE1ayIo=) 2: 8D38DE3C2FED11ECB35A414FC4F9AE02.roa (hash: 4nNxlXf6o0nnD5I2xWyRCuAKUzO3zgq8UO0w+zr/898=) 3: 8E7B872C2FED11ECB35A414FC4F9AE02.roa (hash: OlQKH7ACIVrHGtlUAnuv3tHbt5ORT3G0pc9ERA6ytzA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 20:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2004 (0x7d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Validity Not Before: Jun 18 20:58:34 2025 GMT Not After : Jun 25 20:58:34 2025 GMT Subject: CN=6853287b-052b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:85:33:c1:22:11:3e:ee:b1:00:50:80:89: eb:1a:86:fa:3d:09:c6:07:69:7d:8f:57:80:5a:74: c0:a7:28:5a:9b:f6:d7:5e:86:e6:54:04:0f:d5:d4: 32:b0:ff:7b:8b:58:98:56:ba:71:58:cd:55:8f:02: c7:f3:79:bb:e8:ef:dc:53:8c:44:9d:18:f8:5a:55: fb:7b:cd:f9:5d:a6:7b:d9:d8:ee:f4:af:28:f1:b7: fa:06:d5:0c:76:1d:fd:ae:c8:fb:c1:ac:bb:96:a1: f6:4d:ad:9a:6c:e3:0e:02:fe:ad:5c:42:4d:42:f1: 69:c8:6a:ae:7f:68:a2:c9:ae:9a:58:a9:f7:5b:5f: 31:aa:93:69:e8:9b:e5:ca:5c:69:d1:52:df:e9:61: e3:37:f3:15:36:c3:2f:ff:b2:72:68:07:7f:24:89: 77:38:2f:01:79:a8:61:2c:e0:64:26:f7:0d:bc:b8: d2:eb:d1:94:38:66:05:06:23:d1:7d:b6:21:ee:ca: 6b:f4:f0:d3:83:d3:4b:c5:a4:2c:c7:3b:43:23:fc: 43:f3:55:bd:d2:f0:8a:f6:67:5d:c4:9b:c5:a6:3c: f1:13:33:6d:30:fb:50:91:6d:33:a2:8c:98:d6:47: 7d:a5:8a:7f:20:20:6a:2f:8b:5f:40:76:ca:82:34: d1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6D:05:2D:8D:A6:FE:52:37:96:58:A5:D3:B4:0D:E8:84:43:3B:2E X509v3 Authority Key Identifier: keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:89:35:45:7f:21:46:d0:83:d0:46:b1:d5:9e:6e:d4:4c:79: f6:52:6b:4c:46:78:a0:05:4f:25:56:3b:3c:c2:9d:e1:54:63: 7a:7d:cd:62:a1:76:4b:80:52:27:a3:3a:2e:52:4e:63:a5:dc: 65:09:28:61:31:df:d7:47:f6:a6:99:8d:7b:24:b6:3b:da:28: f5:bf:5e:f1:11:d7:ab:8a:d6:df:08:ca:0d:77:0a:71:9f:9d: 5a:b2:e5:77:c6:60:e0:1b:49:ba:a7:0a:2c:7c:06:be:93:cd: 33:52:94:9d:b8:41:ed:e9:4a:5b:e0:cb:26:2e:ac:7a:94:9b: e2:db:d4:6b:7d:be:f1:d1:94:97:7f:07:d7:71:07:92:5f:30: de:0a:2d:4d:5e:d0:70:7a:e7:7b:64:5b:1b:98:97:c1:ac:ec: 02:d0:39:53:54:95:b2:d0:72:63:50:e8:6f:01:35:4f:ad:dd: 77:7d:e9:e3:d7:24:0e:86:78:4c:c8:d8:59:2a:24:8a:eb:8b: c4:1c:24:e3:67:d0:b4:5d:75:29:82:5c:43:22:e4:ae:eb:62: fb:f0:6d:5e:df:95:79:bf:1c:70:91:59:8e:c2:66:38:8d:ca: 6d:0d:a6:4e:98:76:8f:a3:c3:d5:e2:15:9c:63:a1:a4:7f:9d: 16:2d:96:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4 NzI3OTc2MEQwHhcNMjUwNjE4MjA1ODM0WhcNMjUwNjI1MjA1ODM0WjAYMRYwFAYD VQQDEw02ODUzMjg3Yi0wNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvCFM8EiET7usQBQgInrGob6PQnGB2l9j1eAWnTApyham/bXXobmVAQP1dQy sP97i1iYVrpxWM1VjwLH83m76O/cU4xEnRj4WlX7e835XaZ72dju9K8o8bf6BtUM dh39rsj7way7lqH2Ta2abOMOAv6tXEJNQvFpyGquf2iiya6aWKn3W18xqpNp6Jvl ylxp0VLf6WHjN/MVNsMv/7JyaAd/JIl3OC8BeahhLOBkJvcNvLjS69GUOGYFBiPR fbYh7spr9PDTg9NLxaQsxztDI/xD81W90vCK9mddxJvFpjzxEzNtMPtQkW0zooyY 1kd9pYp/ICBqL4tfQHbKgjTR+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBptBS2N pv5SN5ZYpdO0DeiEQzsuMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDE3Ri9BNTZENUY0MEZCNDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3 QzZ4WjFPRDB0LUNISjVkZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANiTVFfyFG0IPQRrHVnm7UTHn2UmtMRnigBU8lVjs8wp3hVGN6fc1i oXZLgFInozouUk5jpdxlCShhMd/XR/ammY17JLY72ij1v17xEderitbfCMoNdwpx n51asuV3xmDgG0m6pwosfAa+k80zUpSduEHt6Upb4MsmLqx6lJvi29Rrfb7x0ZSX fwfXcQeSXzDeCi1NXtBweud7ZFsbmJfBrOwC0DlTVJWy0HJjUOhvATVPrd13fenj 1yQOhnhMyNhZKiSK64vEHCTjZ9C0XXUpglxDIuSu62L78G1e35V5vxxwkVmOwmY4 jcptDaZOmHaPo8PV4hWcY6Gkf50WLZZo -----END CERTIFICATE-----Generated at Thu Jun 19 11:07:52 2025 by rpki-client