$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: 5WOYZs00wD7sIp3BrdgpQCcgYfg3SkdLmfqgBph90WE= Subject key identifier: 35:0F:79:E7:76:83:DF:27:EB:81:3B:9D:EF:96:FE:F6:56:5D:5B:51 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B74 Signing time: Fri 08 Aug 2025 19:18:00 +0000 Manifest this update: Fri 08 Aug 2025 19:18:00 +0000 Manifest next update: Fri 15 Aug 2025 19:18:00 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: TgDBBnpTXzcYBgSCWs0te9eKiO+7c4IYyuc0ZSGf/X4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2935 (0xb77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Aug 8 19:18:00 2025 GMT Not After : Aug 15 19:18:00 2025 GMT Subject: CN=68964d68-0ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d3:1b:d9:fa:ad:3d:45:cc:54:21:4d:40:c8: 4a:f0:32:88:e4:f7:aa:09:94:29:55:d2:93:82:7f: 5f:7e:bd:91:89:ae:79:22:09:3e:07:c9:f0:b4:89: 71:96:38:88:de:ee:7a:2b:91:4a:18:16:b6:a6:a1: 35:1d:f2:b7:d6:f6:bb:6d:05:49:55:2e:67:7b:b1: 2b:48:ea:5e:d7:3e:71:c9:8b:01:eb:67:a8:9b:13: 46:f5:b2:ca:f1:e9:29:0a:bd:de:53:f6:58:39:85: fe:e9:20:25:36:73:46:c0:89:66:42:5c:98:76:3a: 61:97:0a:1c:5d:2a:b4:1c:bd:2f:6e:52:5f:cb:11: 30:f5:d1:fb:9d:56:a4:b4:ae:4d:35:31:d3:e8:90: 26:db:09:1c:c8:dd:d7:27:14:d8:87:d9:01:ec:79: 40:95:f9:ca:2d:93:97:77:a6:56:25:a1:df:35:8d: e2:20:de:fe:75:4f:07:e6:4b:93:53:be:77:6c:6b: ee:a8:7e:e2:5c:6b:be:0d:52:f6:2d:5f:7b:ba:64: a4:ed:1c:99:5b:3b:fe:21:9d:34:eb:29:b4:54:6c: d8:29:81:60:5b:90:3d:55:6d:c7:6d:30:fb:75:07: 78:94:ac:61:10:9f:85:2e:3e:19:c4:69:96:98:35: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0F:79:E7:76:83:DF:27:EB:81:3B:9D:EF:96:FE:F6:56:5D:5B:51 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:54:d5:1a:54:fd:45:41:79:12:99:bf:ae:d3:ed:38:d9: d0:28:96:d6:15:6c:72:77:f7:6e:7b:b4:c5:e8:0e:07:11:34: fe:83:59:81:16:0c:c3:c8:ad:32:39:d3:36:51:5f:44:5f:15: 67:6b:da:5f:77:bb:df:46:0e:da:31:d9:01:e5:30:5b:04:82: f1:65:64:68:6a:12:1e:23:96:db:7a:4f:fd:f2:6d:56:28:1e: ae:f2:8d:69:fa:af:d3:a7:b3:36:50:f0:b6:5d:9b:f7:f6:ea: 90:9d:18:89:66:ef:ef:9b:21:e7:84:7e:bf:46:bc:4f:12:90: fc:6d:55:11:4d:f4:7c:42:6c:7f:59:ec:6a:31:7e:f9:a4:e3: 0a:be:66:5e:ae:d1:9d:19:dc:6c:a2:68:97:93:f5:4e:5a:95: 23:03:06:ee:91:ff:fd:36:2b:3c:e4:d4:5e:a4:0d:0f:53:e8: 5b:50:e3:65:54:f5:9e:06:3d:a8:d7:3b:f8:7d:fa:d0:a5:bf: d9:51:df:74:90:85:16:3f:5e:f6:26:fa:08:8c:bf:ea:d5:1e: 94:77:b7:95:85:d7:0b:b1:6d:24:de:15:21:be:00:5e:dd:5d: d5:7a:62:19:61:78:b8:c3:e1:01:5b:ba:eb:fe:aa:ec:32:7e: 45:8c:b1:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwODA4MTkxODAwWhcNMjUwODE1MTkxODAwWjAYMRYwFAYD VQQDEw02ODk2NGQ2OC0wY2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNMb2fqtPUXMVCFNQMhK8DKI5PeqCZQpVdKTgn9ffr2Ria55Igk+B8nwtIlx ljiI3u56K5FKGBa2pqE1HfK31va7bQVJVS5ne7ErSOpe1z5xyYsB62eomxNG9bLK 8ekpCr3eU/ZYOYX+6SAlNnNGwIlmQlyYdjphlwocXSq0HL0vblJfyxEw9dH7nVak tK5NNTHT6JAm2wkcyN3XJxTYh9kB7HlAlfnKLZOXd6ZWJaHfNY3iIN7+dU8H5kuT U753bGvuqH7iXGu+DVL2LV97umSk7RyZWzv+IZ006ym0VGzYKYFgW5A9VW3HbTD7 dQd4lKxhEJ+FLj4ZxGmWmDVlmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDUPeed2 g98n64E7ne+W/vZWXVtRMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoM1TVGlT9RUF5Epm/rtPtONnQKJbWFWxyd/due7TF6A4HETT+g1mB FgzDyK0yOdM2UV9EXxVna9pfd7vfRg7aMdkB5TBbBILxZWRoahIeI5bbek/98m1W KB6u8o1p+q/Tp7M2UPC2XZv39uqQnRiJZu/vmyHnhH6/RrxPEpD8bVURTfR8Qmx/ WexqMX75pOMKvmZertGdGdxsomiXk/VOWpUjAwbukf/9Nis85NRepA0PU+hbUONl VPWeBj2o1zv4ffrQpb/ZUd90kIUWP172JvoIjL/q1R6Ud7eVhdcLsW0k3hUhvgBe 3V3VemIZYXi4w+EBW7rr/qrsMn5FjLHe -----END CERTIFICATE-----Generated at Sun Aug 10 18:27:14 2025 by rpki-client