$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft File: FSUB4tXSvcrhiMNKZT5A9Amittc.mft (raw, json) Hash identifier: rebnzI4hvGRuU7mO5aeHUUaoJFr7xB6qPLibs2eXa6s= Subject key identifier: 94:C4:B0:D8:7E:5D:3C:B3:69:E8:84:96:A7:C9:5D:CF:57:F9:7A:F3 Authority key identifier: 15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 Certificate issuer: /CN=A913D3CE/serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Certificate serial: C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft Manifest number: C5 Signing time: Sat 09 Aug 2025 06:13:59 +0000 Manifest this update: Sat 09 Aug 2025 06:13:59 +0000 Manifest next update: Sat 16 Aug 2025 06:13:59 +0000 Files and hashes: 1: FSUB4tXSvcrhiMNKZT5A9Amittc.crl (hash: gz+ctdltK2Y8QXO60EwR7UZ6uQYZ9SXyL+n08oriIa8=) 2: E0E7D5E6495E11EF8EE0647AC4F9AE02.roa (hash: UDZYmG58wyjbsalkwL0khlvNfAUCeUpCV/XCm2ms8Lo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 199 (0xc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D3CE, serialNumber=152501E2D5D2BDCAE188C34A653E40F409A2B6D7 Validity Not Before: Aug 9 06:13:59 2025 GMT Not After : Aug 16 06:13:59 2025 GMT Subject: CN=6896e727-5b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:16:31:b0:77:c5:a5:6f:8e:d1:de:34:b8:e6: 74:f1:54:84:01:bc:4e:ef:05:3e:f4:1d:2c:47:82: ba:69:5d:d5:25:dd:51:45:92:73:db:cf:56:ab:7d: f0:04:e2:5d:69:3b:9b:57:bc:df:b1:6e:1a:33:74: dd:33:8c:c7:b6:d2:20:0a:38:ed:1d:82:7e:d3:54: b3:d9:22:50:18:ef:95:c1:38:47:36:1c:1e:42:ed: 44:84:cd:f8:4d:5f:22:32:6d:93:2c:64:45:b6:32: 01:41:09:57:8e:d4:42:85:fc:6c:7f:bb:09:94:0b: bf:4e:d6:18:e8:92:fa:af:fd:82:2d:5c:9c:71:4f: 8e:6a:c6:41:f0:06:7e:1b:45:c1:96:9c:d9:b7:e7: 70:b8:cd:94:44:24:c0:31:9e:c5:58:f3:3c:32:2f: ca:2d:97:1c:bc:03:56:49:cd:a1:69:ee:bb:1f:ad: 59:1a:e6:33:de:17:d6:22:fe:95:7b:a1:07:1f:0f: 43:b3:e4:30:b1:9a:22:6e:e1:33:96:29:19:d5:72: a4:e2:52:ae:aa:32:5a:3a:e2:9c:9d:e1:b8:ae:6e: 1d:13:fc:17:e9:61:b1:f4:19:63:78:e3:1d:e1:52: 4c:90:c5:e0:9c:2f:65:be:01:8a:39:ec:b2:9d:0c: 58:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C4:B0:D8:7E:5D:3C:B3:69:E8:84:96:A7:C9:5D:CF:57:F9:7A:F3 X509v3 Authority Key Identifier: keyid:15:25:01:E2:D5:D2:BD:CA:E1:88:C3:4A:65:3E:40:F4:09:A2:B6:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FSUB4tXSvcrhiMNKZT5A9Amittc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/142A2B08495E11EFBE8F2079C4F9AE02/FSUB4tXSvcrhiMNKZT5A9Amittc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:3a:12:c4:68:1a:4c:3d:97:c8:70:29:be:01:d7:b6:25:2b: 76:c5:ee:be:75:98:87:d4:64:b1:85:4c:22:6e:29:58:21:db: f5:73:9e:0d:df:82:2c:28:3c:8a:3c:a2:3d:58:ef:e9:c4:4d: ff:fa:1c:62:d8:59:3f:04:60:53:f6:1a:8d:11:0d:4a:14:05: 7b:8d:17:2d:9e:53:3d:ea:90:8c:eb:d7:5f:43:d9:d2:e8:87: ac:b6:e3:de:49:7d:25:66:25:fb:02:6b:b0:d4:18:44:30:8b: bd:a1:dc:26:84:6b:ef:01:f1:01:f8:a5:72:61:56:cc:d1:d4: c6:a9:39:94:ab:86:19:d1:28:17:4b:d5:dd:be:3b:2f:7f:ab: 25:a3:06:c2:86:7a:ae:b6:d5:28:9a:d8:35:fe:2f:e4:f3:b1: 2c:5e:de:bb:4d:fb:67:fd:b9:fc:9d:fb:f3:14:91:d1:71:9d: 82:17:49:50:27:8f:83:45:c5:23:41:6a:96:2b:d6:a1:c9:8a: 26:05:0a:2f:09:88:f5:b4:87:c5:da:aa:11:5b:38:f0:ca:2c: c4:2a:8d:be:99:de:f9:67:3f:a6:86:9d:e3:fa:45:11:4f:a0: 8b:00:86:3e:bb:7e:9c:42:e5:5b:b8:83:98:89:e9:b2:32:58: 3b:75:ee:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QzQ0UxMTAvBgNVBAUTKDE1MjUwMUUyRDVEMkJEQ0FFMTg4QzM0QTY1M0U0MEY0 MDlBMkI2RDcwHhcNMjUwODA5MDYxMzU5WhcNMjUwODE2MDYxMzU5WjAYMRYwFAYD VQQDEw02ODk2ZTcyNy01YjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxYxsHfFpW+O0d40uOZ08VSEAbxO7wU+9B0sR4K6aV3VJd1RRZJz289Wq33w BOJdaTubV7zfsW4aM3TdM4zHttIgCjjtHYJ+01Sz2SJQGO+VwThHNhweQu1EhM34 TV8iMm2TLGRFtjIBQQlXjtRChfxsf7sJlAu/TtYY6JL6r/2CLVyccU+OasZB8AZ+ G0XBlpzZt+dwuM2URCTAMZ7FWPM8Mi/KLZccvANWSc2hae67H61ZGuYz3hfWIv6V e6EHHw9Ds+QwsZoibuEzlikZ1XKk4lKuqjJaOuKcneG4rm4dE/wX6WGx9BljeOMd 4VJMkMXgnC9lvgGKOeyynQxYSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJTEsNh+ XTyzaeiElqfJXc9X+XrzMB8GA1UdIwQYMBaAFBUlAeLV0r3K4YjDSmU+QPQJorbX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xNDJBMkIwODQ5 NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3ZjcmhpTU5LWlQ1QTlBbWl0 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZTVUI0dFhTdmNyaGlNTktaVDVBOUFtaXR0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDNDRS8xNDJBMkIwODQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9GU1VCNHRYU3Zj cmhpTU5LWlQ1QTlBbWl0dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPOhLEaBpMPZfIcCm+Ade2JSt2xe6+dZiH1GSxhUwibilYIdv1c54N 34IsKDyKPKI9WO/pxE3/+hxi2Fk/BGBT9hqNEQ1KFAV7jRctnlM96pCM69dfQ9nS 6IestuPeSX0lZiX7Amuw1BhEMIu9odwmhGvvAfEB+KVyYVbM0dTGqTmUq4YZ0SgX S9Xdvjsvf6slowbChnquttUomtg1/i/k87EsXt67Tftn/bn8nfvzFJHRcZ2CF0lQ J4+DRcUjQWqWK9ahyYomBQovCYj1tIfF2qoRWzjwyizEKo2+md75Zz+mhp3j+kUR T6CLAIY+u36cQuVbuIOYiemyMlg7de7v -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:10 2025 by rpki-client