$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: 0opm1F+bGBey+79sAvSVfqNS0cKDZldkGHzUBo+Lz5E= Subject key identifier: 4E:92:D0:86:D0:8E:BD:29:30:43:D7:04:41:DD:3E:A0:93:6C:16:37 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07A5 Signing time: Wed 06 Aug 2025 21:45:57 +0000 Manifest this update: Wed 06 Aug 2025 21:45:56 +0000 Manifest next update: Wed 13 Aug 2025 21:45:56 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: JQJiFxsvzc1AMqKz9ge/XSxb0PPRCyyj1BXSeR8iC0w=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 21:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1999 (0x7cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Aug 6 21:45:56 2025 GMT Not After : Aug 13 21:45:56 2025 GMT Subject: CN=6893cd15-357b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:8b:29:5b:87:a1:a3:da:2e:67:13:f1:89: 28:00:0d:50:1a:0e:9d:c7:3a:a1:df:13:7e:5d:a6: 87:60:7c:af:a4:a9:74:e8:5c:2c:79:fb:c0:94:8c: 11:03:b8:c4:d6:54:b9:c3:7d:04:ae:ed:51:6e:70: a1:88:7e:8e:2a:27:79:86:eb:02:b8:c8:e0:21:af: 8f:41:22:50:ef:6d:bc:59:b3:95:c7:a8:f8:5e:8e: b5:59:21:dd:42:25:e1:ec:2f:85:cc:d2:fc:30:f5: 8a:9e:d7:f3:b5:1d:11:95:47:f5:3c:c9:39:af:aa: 03:dc:29:88:71:05:49:e9:32:41:5a:b4:a6:40:e3: ba:ac:82:37:12:1e:d0:6e:48:82:0e:64:0f:dd:2e: 15:94:d8:3d:e4:72:42:d7:5a:50:c6:9e:24:43:88: 0b:a4:cd:c0:b3:78:79:03:28:a3:b7:98:26:0b:9a: 20:a4:eb:64:95:08:4b:16:19:b4:3f:51:c6:74:64: b0:7d:0c:54:ff:d4:b9:02:bf:a4:1c:da:2c:d4:13: 75:a3:c3:a6:67:30:8b:1f:52:f0:fc:c0:ff:d5:90: 73:46:4d:d1:50:d2:3f:74:e7:22:31:f6:62:7c:b6: 36:7b:94:ca:e6:35:de:52:2c:62:f9:d1:37:b9:b1: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:92:D0:86:D0:8E:BD:29:30:43:D7:04:41:DD:3E:A0:93:6C:16:37 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:90:1f:aa:44:c6:aa:76:b6:4e:5e:07:21:99:5a:19:76:a7: 57:a1:56:8b:0c:c2:26:0f:ed:16:93:50:8e:32:d8:c1:8a:1b: 59:52:10:20:a1:66:e2:8d:da:98:71:68:da:4d:3f:2f:09:f5: 78:9e:35:18:09:80:cc:c6:49:c6:72:d3:72:ac:91:99:02:50: dd:bb:a9:f9:72:49:10:b9:a5:00:32:5a:c9:07:25:c5:bb:5a: 7c:2d:99:28:dd:15:17:c4:94:bf:b0:4a:89:10:05:b6:ac:72: 1d:5b:3a:6c:3f:4b:d7:f8:f9:2a:03:7c:ab:79:84:92:2b:89: bd:1b:6d:cb:85:ff:bb:7c:b1:47:39:9b:7f:06:3a:37:5a:96: 04:9e:9d:12:b1:0b:90:c4:c3:6c:05:0e:b4:00:b3:23:76:16: d8:cd:76:fa:a0:27:ba:ec:78:f6:6b:cb:83:52:c4:50:97:5f: f9:e3:73:7f:dd:e1:0b:f9:eb:45:a0:23:bf:1b:c4:39:55:b3: 83:eb:39:e2:da:9a:c7:62:e3:cf:9e:6b:c0:62:f2:33:a4:4e: f5:ad:a6:28:eb:cf:a5:b0:38:58:04:5f:92:87:05:af:fa:1f: a5:8c:f5:96:89:6a:2c:20:0f:30:90:81:24:92:6b:91:0a:cb: eb:42:e7:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwODA2MjE0NTU2WhcNMjUwODEzMjE0NTU2WjAYMRYwFAYD VQQDEw02ODkzY2QxNS0zNTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1ESLKVuHoaPaLmcT8YkoAA1QGg6dxzqh3xN+XaaHYHyvpKl06FwsefvAlIwR A7jE1lS5w30Eru1RbnChiH6OKid5husCuMjgIa+PQSJQ7228WbOVx6j4Xo61WSHd QiXh7C+FzNL8MPWKntfztR0RlUf1PMk5r6oD3CmIcQVJ6TJBWrSmQOO6rII3Eh7Q bkiCDmQP3S4VlNg95HJC11pQxp4kQ4gLpM3As3h5Ayijt5gmC5ogpOtklQhLFhm0 P1HGdGSwfQxU/9S5Ar+kHNos1BN1o8OmZzCLH1Lw/MD/1ZBzRk3RUNI/dOciMfZi fLY2e5TK5jXeUixi+dE3ubF1IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6S0IbQ jr0pMEPXBEHdPqCTbBY3MB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQkB+qRMaqdrZOXgchmVoZdqdXoVaLDMImD+0Wk1COMtjBihtZUhAg oWbijdqYcWjaTT8vCfV4njUYCYDMxknGctNyrJGZAlDdu6n5ckkQuaUAMlrJByXF u1p8LZko3RUXxJS/sEqJEAW2rHIdWzpsP0vX+PkqA3yreYSSK4m9G23Lhf+7fLFH OZt/Bjo3WpYEnp0SsQuQxMNsBQ60ALMjdhbYzXb6oCe67Hj2a8uDUsRQl1/543N/ 3eEL+etFoCO/G8Q5VbOD6zni2prHYuPPnmvAYvIzpE71raYo68+lsDhYBF+ShwWv +h+ljPWWiWosIA8wkIEkkmuRCsvrQucr -----END CERTIFICATE-----Generated at Thu Aug 7 00:39:42 2025 by rpki-client