$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: XWV21CFF9BRRb0HOwv0w+CraHJHlmjPSYYrdT0bNDYk= Subject key identifier: 4C:FA:9C:F6:68:38:70:0B:41:62:AF:AF:A0:DC:B9:0E:78:6B:88:FA Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 0272 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 026F Signing time: Tue 05 Aug 2025 02:22:12 +0000 Manifest this update: Tue 05 Aug 2025 02:22:12 +0000 Manifest next update: Tue 12 Aug 2025 02:22:12 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: Xd1ZqGpgaaeivAZnFhxpjf78HetxfV43NJhi58GhI8c=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: i6vZoTblkosBjA9WaiqC5i10CiSdhYr1XsByXvuMvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 626 (0x272) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Aug 5 02:22:12 2025 GMT Not After : Aug 12 02:22:12 2025 GMT Subject: CN=68916ad4-9e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:9e:02:c8:6b:77:29:c2:41:a0:09:b9:20: c7:da:55:2c:a3:78:8b:c8:1b:0d:63:e0:23:dc:bc: 0b:14:c9:b3:3f:68:e9:d7:a4:93:31:a7:9c:ac:25: ec:2b:c6:81:a6:d8:dc:d6:91:7b:45:66:82:a6:fa: 6d:5c:6a:db:61:95:f5:92:4b:41:19:32:2d:f3:33: cf:0b:12:d3:9c:de:6a:c0:d1:93:f5:52:ed:6f:4a: d2:ae:a8:63:e4:a7:59:29:cd:e5:23:29:5a:90:61: 8b:32:d6:ac:d8:ed:26:af:39:59:7d:92:39:cc:26: 84:6b:0d:ca:ba:d0:b4:4a:5f:bb:2a:b7:38:70:ba: 18:f6:93:26:15:a7:b3:5f:ef:e7:be:b3:0d:41:6b: 5d:4b:44:32:6d:69:42:8c:83:35:1c:fe:4a:a8:e2: 11:27:c7:21:cc:1d:35:1e:cf:5f:01:47:1d:fd:42: 75:a7:2e:71:42:6f:62:6a:c7:ed:8b:fb:54:b9:b6: 81:46:b4:81:d6:35:e6:72:28:3f:15:dd:d4:b2:4e: 16:4e:14:46:ef:ce:59:90:cf:91:9b:ab:59:fa:6e: ba:0b:f9:61:dd:59:4e:cc:98:35:25:01:92:91:b0: 4d:03:32:2e:24:a7:ce:81:e3:ca:51:74:d8:4c:a9: 2e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:FA:9C:F6:68:38:70:0B:41:62:AF:AF:A0:DC:B9:0E:78:6B:88:FA X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:6c:6f:26:c7:57:29:48:94:de:ea:bc:b8:10:b4:ba:ca:f9: 11:db:53:44:f3:41:a7:9c:f5:f4:91:b0:f2:62:26:74:29:92: 1f:3a:d3:fd:7b:5c:aa:50:73:b7:96:98:82:f4:9f:1f:7e:be: 25:ff:ed:24:17:2a:19:90:5d:7c:99:89:17:28:62:ad:5c:22: 2c:f5:28:75:b2:a6:0d:f0:18:a1:e3:4e:e5:b1:5c:04:c9:da: b3:42:52:27:a7:7f:3e:d0:58:0a:8d:78:9b:76:0b:25:87:97: dc:b5:ce:f8:e7:d2:3c:83:d4:92:b8:71:58:a4:94:d6:b1:3a: 23:b5:a1:97:0e:bd:a4:62:24:a1:ef:d7:90:34:95:c1:97:1e: 41:72:02:93:ea:0d:65:07:98:25:6c:a5:76:0d:4a:b6:cd:35: 10:27:55:9d:ea:15:07:1c:34:7c:26:29:af:17:65:4f:f5:29: fd:a7:f1:11:6c:96:b4:c4:c8:61:e7:ff:1f:3c:8e:3c:82:b6: 92:bb:a5:4d:25:8b:80:8d:f3:c4:61:c5:63:56:39:ca:57:2c: 17:b5:8d:64:20:d2:39:bf:83:9e:7a:d4:cd:e3:9f:91:0b:b8: 6e:1e:ce:95:c2:15:64:f6:c0:11:9a:0a:c9:a0:49:15:e6:d0: 94:9b:b5:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwODA1MDIyMjEyWhcNMjUwODEyMDIyMjEyWjAYMRYwFAYD VQQDEw02ODkxNmFkNC05ZTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAieAshrdynCQaAJuSDH2lUso3iLyBsNY+Aj3LwLFMmzP2jp16STMaecrCXs K8aBptjc1pF7RWaCpvptXGrbYZX1kktBGTIt8zPPCxLTnN5qwNGT9VLtb0rSrqhj 5KdZKc3lIylakGGLMtas2O0mrzlZfZI5zCaEaw3KutC0Sl+7Krc4cLoY9pMmFaez X+/nvrMNQWtdS0QybWlCjIM1HP5KqOIRJ8chzB01Hs9fAUcd/UJ1py5xQm9iasft i/tUubaBRrSB1jXmcig/Fd3Usk4WThRG785ZkM+Rm6tZ+m66C/lh3VlOzJg1JQGS kbBNAzIuJKfOgePKUXTYTKkuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEz6nPZo OHALQWKvr6DcuQ54a4j6MB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWbG8mx1cpSJTe6ry4ELS6yvkR21NE80GnnPX0kbDyYiZ0KZIfOtP9 e1yqUHO3lpiC9J8ffr4l/+0kFyoZkF18mYkXKGKtXCIs9Sh1sqYN8Bih407lsVwE ydqzQlInp38+0FgKjXibdgslh5fctc7459I8g9SSuHFYpJTWsTojtaGXDr2kYiSh 79eQNJXBlx5BcgKT6g1lB5glbKV2DUq2zTUQJ1Wd6hUHHDR8JimvF2VP9Sn9p/ER bJa0xMhh5/8fPI48graSu6VNJYuAjfPEYcVjVjnKVywXtY1kINI5v4OeetTN45+R C7huHs6VwhVk9sARmgrJoEkV5tCUm7VM -----END CERTIFICATE-----Generated at Wed Aug 6 04:08:57 2025 by rpki-client