$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: HKB11/6ny6SOXHBBM/ZZWX/QKwktCDobvbDEpECqtE4= Subject key identifier: 1B:54:9B:69:BC:C9:29:96:16:DC:2D:8F:4F:44:E8:D6:71:68:E2:EC Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 08A7 Signing time: Fri 08 Aug 2025 20:52:56 +0000 Manifest this update: Fri 08 Aug 2025 20:52:55 +0000 Manifest next update: Fri 15 Aug 2025 20:52:55 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: bSLeI6UR2RUi/hLE+DrimYa6hYUiUOBaPLJs719DOzY=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2227 (0x8b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Aug 8 20:52:55 2025 GMT Not After : Aug 15 20:52:55 2025 GMT Subject: CN=689663a7-b9f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:90:3f:bc:d1:fd:05:92:75:f0:83:eb:4a: 61:1a:cd:76:fb:3d:02:f7:a5:e9:66:dc:21:2a:f9: 8d:7d:1c:b6:57:30:42:9e:f8:20:fe:a5:38:76:9d: 89:45:47:a5:20:d1:a0:c5:ef:97:c0:f7:df:a5:01: bc:7f:2f:f8:32:10:3d:61:2c:70:f8:87:59:9d:52: 3b:ee:78:4f:16:47:f8:2b:f4:74:ce:03:a5:4c:7b: 03:e4:a6:d6:cd:7f:72:f6:d3:a3:a6:c9:0e:77:61: c6:68:7b:03:7c:56:7c:76:1c:3e:fd:37:7a:d6:c3: 6d:96:01:94:00:1f:8d:da:50:13:a6:b4:75:1f:03: 8c:34:75:7a:89:58:ff:39:bd:f9:79:f4:b4:d3:99: 82:b5:0c:90:f4:50:99:a2:88:93:26:49:b8:32:1f: fa:fb:8d:c4:54:38:a1:56:7a:42:fd:e4:33:96:a8: f2:03:3e:bf:8f:d2:3a:67:43:64:87:be:f6:54:d9: ad:af:3e:2d:bb:d5:c2:84:80:ee:a9:b3:e3:34:25: 34:62:58:ec:c4:3e:90:7d:05:e7:97:49:76:23:d8: cf:d1:63:64:b3:80:42:2a:62:14:74:96:eb:61:48: cf:b0:67:93:f3:54:da:14:a7:c7:19:81:3f:70:e8: de:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:54:9B:69:BC:C9:29:96:16:DC:2D:8F:4F:44:E8:D6:71:68:E2:EC X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8b:5c:a8:24:29:18:fb:ca:40:51:dc:22:67:03:1c:1a:cc: dc:ec:a6:b9:9c:77:07:d5:d2:9e:fd:dc:e5:75:ee:25:ce:cc: eb:35:05:96:b7:00:0a:e3:d2:57:d9:70:7d:5a:c4:d9:b5:a4: 3a:7a:ba:77:0b:4d:ab:ad:07:b2:84:fb:a0:fb:94:3d:44:79: 4f:67:ac:00:42:ba:2a:23:37:ca:40:7e:81:9e:be:76:74:64: 56:91:11:5a:5c:66:24:68:8a:c8:6c:87:d6:bd:17:cf:e0:bf: c0:b6:a1:bb:33:46:52:a2:08:88:63:67:08:5d:e8:41:e3:ef: e4:ae:d2:fa:c2:f3:62:8c:f0:89:af:94:f1:1f:96:56:e8:c1: e4:24:a1:9a:e1:d3:d3:99:15:17:f0:ae:c9:30:bc:fc:56:8e: 4f:6d:4d:85:f6:eb:18:4b:6d:c4:0e:ec:f4:a8:c7:3f:a8:c6: 30:38:a2:2b:a6:e0:15:0b:89:f6:3d:5e:75:00:fd:a5:b2:7a: c6:72:ce:8c:1a:5a:f8:5e:9e:aa:ed:6a:00:fa:14:1f:39:65: ea:47:17:96:f8:5c:65:9a:d5:24:78:77:58:ee:22:31:08:ee: bf:02:62:73:65:fa:6b:25:5a:a7:8b:a0:71:4d:e8:bf:4b:88: b7:6f:da:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwODA4MjA1MjU1WhcNMjUwODE1MjA1MjU1WjAYMRYwFAYD VQQDEw02ODk2NjNhNy1iOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsp+QP7zR/QWSdfCD60phGs12+z0C96XpZtwhKvmNfRy2VzBCnvgg/qU4dp2J RUelINGgxe+XwPffpQG8fy/4MhA9YSxw+IdZnVI77nhPFkf4K/R0zgOlTHsD5KbW zX9y9tOjpskOd2HGaHsDfFZ8dhw+/Td61sNtlgGUAB+N2lATprR1HwOMNHV6iVj/ Ob35efS005mCtQyQ9FCZooiTJkm4Mh/6+43EVDihVnpC/eQzlqjyAz6/j9I6Z0Nk h772VNmtrz4tu9XChIDuqbPjNCU0YljsxD6QfQXnl0l2I9jP0WNks4BCKmIUdJbr YUjPsGeT81TaFKfHGYE/cOjeYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtUm2m8 ySmWFtwtj09E6NZxaOLsMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsi1yoJCkY+8pAUdwiZwMcGszc7Ka5nHcH1dKe/dzlde4lzszrNQWW twAK49JX2XB9WsTZtaQ6erp3C02rrQeyhPug+5Q9RHlPZ6wAQroqIzfKQH6Bnr52 dGRWkRFaXGYkaIrIbIfWvRfP4L/AtqG7M0ZSogiIY2cIXehB4+/krtL6wvNijPCJ r5TxH5ZW6MHkJKGa4dPTmRUX8K7JMLz8Vo5PbU2F9usYS23EDuz0qMc/qMYwOKIr puAVC4n2PV51AP2lsnrGcs6MGlr4Xp6q7WoA+hQfOWXqRxeW+FxlmtUkeHdY7iIx CO6/AmJzZfprJVqni6BxTei/S4i3b9qo -----END CERTIFICATE-----Generated at Sat Aug 9 23:22:08 2025 by rpki-client