$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: kxXSkp9KYlz/MeYyBbaNX7vEoSd24LghJY720iOau5A= Subject key identifier: 5F:A2:D5:8B:0B:05:9C:5E:89:06:2E:3E:6B:67:F8:24:32:D9:67:F9 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 0117 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 0115 Signing time: Sat 09 Aug 2025 05:20:41 +0000 Manifest this update: Sat 09 Aug 2025 05:20:41 +0000 Manifest next update: Sat 16 Aug 2025 05:20:41 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: nUwZIbRFV4NYgFSA+Yd0W97ZwTeHA4ExbTakeFGbTPE=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: nZ8knmFU4g4M4hAXkEi+bsMV/nWOaZQY4l6coiYGg+M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 279 (0x117) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Aug 9 05:20:41 2025 GMT Not After : Aug 16 05:20:41 2025 GMT Subject: CN=6896daa9-dc84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:0f:5a:b5:0d:39:bd:c3:02:5c:65:31:d3: fc:22:c8:9e:2e:00:df:aa:26:15:1a:da:74:4b:c3: 07:6f:64:58:77:e9:5a:42:0a:a4:22:6c:5d:62:57: cf:0b:75:24:22:5d:d6:a5:1c:09:66:58:13:57:29: 54:78:03:b8:2c:aa:92:27:2f:b8:a1:bb:28:b4:4a: 07:53:e3:ca:69:da:3f:65:66:51:39:70:52:31:26: d7:bf:8f:38:9f:84:dc:74:d5:e3:e1:a2:b1:9b:7d: 3e:ea:5b:bc:b3:b9:74:bf:04:af:b0:f6:86:3e:36: da:2e:aa:4c:58:ef:33:cb:6a:8a:56:64:a1:e0:23: c6:a4:3f:48:17:b3:f8:05:65:b1:e4:da:f4:3d:dd: 74:79:b1:f4:eb:20:84:b6:22:e2:63:7c:9b:f9:85: c3:3e:22:2c:c4:ef:98:81:8b:84:4c:79:22:cd:72: b4:6c:70:dc:03:32:a4:6a:04:44:e9:7d:5d:f8:b8: bc:a6:34:a0:41:ac:8e:a4:89:52:8b:88:b1:4c:4f: f5:2d:ca:ed:2b:25:0e:18:8a:7d:fb:b4:d8:a7:b9: 9d:49:e2:50:05:eb:b7:89:29:c2:e6:a0:6a:07:82: 56:5b:12:1c:24:8c:d5:06:86:d8:7f:39:9f:39:b4: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A2:D5:8B:0B:05:9C:5E:89:06:2E:3E:6B:67:F8:24:32:D9:67:F9 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:5e:f8:e4:0d:75:15:92:4e:e5:1e:56:a1:73:a1:1b:24:eb: 73:32:82:1f:06:d9:dc:ae:7b:a9:92:a9:97:7f:85:86:fd:31: 14:ca:44:89:09:98:a1:e9:87:d9:33:41:13:71:e0:b3:e9:cf: 2a:ec:61:9e:d7:15:5a:74:a4:e7:c5:5f:77:b0:54:80:cb:e3: b2:13:d4:34:83:f8:32:75:2e:04:a5:62:63:44:b5:c9:69:6c: f7:f9:ee:6b:4a:f8:50:6e:b5:b8:5e:44:cc:dc:14:80:dc:01: e9:74:4e:67:e1:f3:b2:71:7a:bd:80:ba:ed:96:46:3f:b9:65: 7d:ed:a2:ae:91:ee:50:b7:03:c7:1e:93:72:c5:fd:18:13:e1: 9b:90:09:a8:9a:e4:3e:ae:6a:72:ca:b4:89:20:f9:d2:f2:3a: ff:c4:ee:de:6f:26:a5:b7:d5:a1:21:7d:ed:d8:ad:c1:36:a2: 8f:f9:eb:f5:6a:89:26:0f:cf:08:01:7e:23:fd:58:ba:ad:a2: 1c:15:ed:36:76:ca:47:9b:1f:44:cc:73:22:21:c7:72:8d:3e: 0f:80:2f:43:d5:e3:c6:a0:67:0a:7a:b1:74:46:ed:05:62:03: 2c:0b:43:50:0b:e5:28:0c:9e:ea:a1:36:a8:0c:8f:bf:8b:14: 0a:ee:9b:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwODA5MDUyMDQxWhcNMjUwODE2MDUyMDQxWjAYMRYwFAYD VQQDEw02ODk2ZGFhOS1kYzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjsPWrUNOb3DAlxlMdP8IsieLgDfqiYVGtp0S8MHb2RYd+laQgqkImxdYlfP C3UkIl3WpRwJZlgTVylUeAO4LKqSJy+4obsotEoHU+PKado/ZWZROXBSMSbXv484 n4TcdNXj4aKxm30+6lu8s7l0vwSvsPaGPjbaLqpMWO8zy2qKVmSh4CPGpD9IF7P4 BWWx5Nr0Pd10ebH06yCEtiLiY3yb+YXDPiIsxO+YgYuETHkizXK0bHDcAzKkagRE 6X1d+Li8pjSgQayOpIlSi4ixTE/1LcrtKyUOGIp9+7TYp7mdSeJQBeu3iSnC5qBq B4JWWxIcJIzVBobYfzmfObRTIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+i1YsL BZxeiQYuPmtn+CQy2Wf5MB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFXvjkDXUVkk7lHlahc6EbJOtzMoIfBtncrnupkqmXf4WG/TEUykSJ CZih6YfZM0ETceCz6c8q7GGe1xVadKTnxV93sFSAy+OyE9Q0g/gydS4EpWJjRLXJ aWz3+e5rSvhQbrW4XkTM3BSA3AHpdE5n4fOycXq9gLrtlkY/uWV97aKuke5QtwPH HpNyxf0YE+GbkAmomuQ+rmpyyrSJIPnS8jr/xO7ebyalt9WhIX3t2K3BNqKP+ev1 aokmD88IAX4j/Vi6raIcFe02dspHmx9EzHMiIcdyjT4PgC9D1ePGoGcKerF0Ru0F YgMsC0NQC+UoDJ7qoTaoDI+/ixQK7pu+ -----END CERTIFICATE-----Generated at Sat Aug 9 14:31:53 2025 by rpki-client