$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: Ldvc5Kfv001RHQewpJWpZQYZNV4BR33wrz08CJQN1Tg= Subject key identifier: 15:76:08:F2:E6:B0:C0:5F:EA:09:D3:AB:11:A6:5C:06:87:C4:2C:CC Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0AE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0AE1 Signing time: Fri 08 Aug 2025 19:40:27 +0000 Manifest this update: Fri 08 Aug 2025 19:40:26 +0000 Manifest next update: Fri 15 Aug 2025 19:40:26 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: uRdisDpPBKuMeBcU6BXhdze7VvImfudTz9lvNYdzIqI=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2793 (0xae9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Aug 8 19:40:26 2025 GMT Not After : Aug 15 19:40:26 2025 GMT Subject: CN=689652aa-3798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:6e:36:c8:8e:0e:55:61:f2:f8:c1:0a:ef: e1:c4:69:29:af:e0:61:dd:e3:61:70:44:b5:de:23: 4f:48:b9:ce:46:29:d0:61:df:b2:31:6f:71:c4:ec: 52:cd:cd:0d:70:c7:ff:15:3b:3c:6a:25:f3:2b:da: 92:7b:5a:e5:cf:d4:4f:28:4a:a5:17:38:ee:a8:a1: bd:60:d0:f3:f0:2d:02:49:e0:dd:b1:5e:25:ca:15: 82:a3:24:f0:92:21:ba:c6:d0:2f:56:f4:c0:96:b5: 72:cb:fc:6a:cf:d2:39:e1:48:02:e8:33:ab:bd:e7: fb:77:b1:c2:ae:2c:9e:00:00:56:36:d5:85:88:6a: 53:9b:23:32:2f:dd:68:64:6f:9a:a3:3e:77:4e:d4: 98:2d:8a:ca:ea:46:b3:b7:54:85:33:0e:2a:71:f1: c3:74:30:a4:fc:db:28:7f:4d:36:ef:15:15:c3:55: f5:d0:5a:cc:ba:89:0d:8d:4f:7d:9a:60:6a:2c:62: 75:1c:f4:0c:c3:b1:0b:55:fb:06:f7:fb:48:a7:c7: 1a:e5:69:b2:ea:02:7c:1f:c2:e5:f3:69:35:6e:11: 64:6b:a8:37:44:f2:cc:c7:ab:b7:ac:61:dc:49:39: ae:d8:3d:ba:f3:af:fa:19:ad:6d:15:2d:f5:37:a1: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:76:08:F2:E6:B0:C0:5F:EA:09:D3:AB:11:A6:5C:06:87:C4:2C:CC X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:f5:73:1c:48:8f:d3:53:ec:d5:a0:2d:f4:63:bc:b0:19:5a: 30:69:ce:cd:1f:24:96:c0:bc:df:ec:a1:48:3a:c8:d7:dc:65: c2:6b:40:ce:9a:b2:a4:54:d3:21:e7:3e:ab:42:25:18:11:e8: e1:e7:6c:45:45:b4:c2:82:98:ae:cf:5c:62:4d:b8:61:39:ca: f5:ce:7c:56:f8:d5:e8:f7:f2:c8:b7:45:89:ce:03:0a:60:e6: 77:45:56:1c:00:a9:da:93:77:58:69:84:31:56:cd:4f:6b:1f: a4:df:31:91:40:f0:36:fe:b1:27:26:0a:c7:77:aa:8d:70:77: 0e:fb:b6:c5:63:c3:a1:bd:04:23:00:47:dd:16:d6:46:ec:20: 65:51:4c:80:55:19:2e:10:cf:d7:dd:c8:e3:ef:d3:0f:3e:ff: 4e:d2:8d:d8:e2:94:87:5d:8f:09:8e:c1:37:ed:69:11:7c:10: eb:4c:3c:4f:05:29:83:4e:7d:63:d5:11:58:64:dc:7d:85:0f: fb:cd:60:22:a6:6f:ba:1e:d1:b0:fb:00:b9:6e:70:bd:84:96: 52:34:04:10:46:1e:08:ef:ed:f3:a6:cd:e6:f8:b4:a4:c1:92: 6d:66:60:b4:6b:9a:85:26:ca:c3:96:83:86:da:f6:4c:d3:69: c6:55:0b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCukwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwODA4MTk0MDI2WhcNMjUwODE1MTk0MDI2WjAYMRYwFAYD VQQDEw02ODk2NTJhYS0zNzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu85uNsiODlVh8vjBCu/hxGkpr+Bh3eNhcES13iNPSLnORinQYd+yMW9xxOxS zc0NcMf/FTs8aiXzK9qSe1rlz9RPKEqlFzjuqKG9YNDz8C0CSeDdsV4lyhWCoyTw kiG6xtAvVvTAlrVyy/xqz9I54UgC6DOrvef7d7HCriyeAABWNtWFiGpTmyMyL91o ZG+aoz53TtSYLYrK6kazt1SFMw4qcfHDdDCk/Nsof0027xUVw1X10FrMuokNjU99 mmBqLGJ1HPQMw7ELVfsG9/tIp8ca5Wmy6gJ8H8Ll82k1bhFka6g3RPLMx6u3rGHc STmu2D2686/6Ga1tFS31N6E7xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBV2CPLm sMBf6gnTqxGmXAaHxCzMMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo9XMcSI/TU+zVoC30Y7ywGVowac7NHySWwLzf7KFIOsjX3GXCa0DO mrKkVNMh5z6rQiUYEejh52xFRbTCgpiuz1xiTbhhOcr1znxW+NXo9/LIt0WJzgMK YOZ3RVYcAKnak3dYaYQxVs1Pax+k3zGRQPA2/rEnJgrHd6qNcHcO+7bFY8OhvQQj AEfdFtZG7CBlUUyAVRkuEM/X3cjj79MPPv9O0o3Y4pSHXY8JjsE37WkRfBDrTDxP BSmDTn1j1RFYZNx9hQ/7zWAipm+6HtGw+wC5bnC9hJZSNAQQRh4I7+3zps3m+LSk wZJtZmC0a5qFJsrDloOG2vZM02nGVQtF -----END CERTIFICATE-----Generated at Sun Aug 10 05:43:30 2025 by rpki-client