$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: IVkBtH1XeEzpLLYY2PpsO3K2CIncV8hCGmwYwbRyh/k= Subject key identifier: 91:C0:C6:62:AB:E6:72:BA:81:2F:96:27:1A:7F:E1:DF:81:6D:07:CD Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02C3 Signing time: Thu 07 Aug 2025 02:08:15 +0000 Manifest this update: Thu 07 Aug 2025 02:08:15 +0000 Manifest next update: Thu 14 Aug 2025 02:08:15 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: l2ythECyVJGFWNrnDm3HdsNPt8VdkrG+0OROgJnMORg=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: DeTJWRmDeKmiEdEbaqf7bVSh2DO8AXjNSQova+ZvrBU=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: 8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Aug 7 02:08:15 2025 GMT Not After : Aug 14 02:08:15 2025 GMT Subject: CN=68940a8f-74b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:38:ca:34:da:c8:5f:bb:ee:63:ab:c4:d8: 7d:a3:f0:fc:fc:20:b4:39:42:1c:c8:42:f3:d2:b2: 0e:82:82:ed:f5:3b:05:54:d9:1d:37:1e:5a:2d:05: 1e:22:47:b3:c4:af:4e:5e:e3:22:73:4a:f7:80:20: b7:68:08:53:1a:59:e2:15:2a:f4:39:3e:2e:b1:2d: 8f:67:5f:90:f4:d8:a5:a7:27:47:f1:32:a5:d3:fa: c9:b2:e4:17:ec:92:de:65:e6:bd:9a:8d:92:ec:15: 0f:17:fc:73:2f:93:42:db:d4:ef:4f:20:31:69:84: 62:3a:bc:f9:20:b6:85:e6:fd:3d:58:7d:4e:34:4b: 97:cc:1e:11:9a:70:92:0a:8b:50:0b:92:45:38:3c: 9c:c5:a6:31:9c:0b:80:09:63:95:9a:b2:75:68:1e: 69:11:3a:29:34:25:7e:b9:9b:b0:b2:cc:d6:38:99: 25:15:4c:3c:2e:a0:5c:ac:e7:de:f5:a3:2e:ac:f1: 8f:72:6b:d5:d3:72:aa:45:c2:b7:4f:9f:d0:58:86: 25:ce:70:d1:37:8f:c3:df:e5:a0:b4:37:16:42:07: d0:7c:47:cc:4c:ec:d7:f9:65:33:3a:fc:3d:b5:b2: 2e:e5:0d:73:af:5a:13:93:ea:e6:96:81:b8:12:ed: 5b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C0:C6:62:AB:E6:72:BA:81:2F:96:27:1A:7F:E1:DF:81:6D:07:CD X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:3a:ea:fb:df:6b:75:0d:d6:b5:c5:df:2e:32:10:9c:e8:87: d5:61:82:b5:8c:35:80:65:1a:e0:e3:c6:49:53:10:f1:a2:9b: a2:d9:56:44:b3:61:20:64:dc:8a:29:78:b3:e0:0a:4f:68:bd: f0:fe:c7:d1:6e:f1:d7:aa:9f:b8:4d:e4:55:0f:6b:43:4d:fc: d4:f7:f7:9f:d4:fe:9f:03:54:66:e1:89:c7:9e:49:64:46:be: a2:b9:6c:a0:c7:39:51:4c:9c:48:89:a3:80:ab:03:fe:d1:dd: 1d:bd:6b:11:68:7e:15:bc:3b:cb:c6:22:a0:dc:8f:f1:4b:f5: 0e:1b:de:c9:dc:7b:d0:f6:58:10:89:4d:6c:2c:ee:91:88:09: fb:8f:3a:44:84:32:a0:5e:d7:ee:99:77:c5:41:b2:d1:a9:bd: 37:31:76:ce:5b:61:14:90:10:da:e2:bc:6b:84:d5:83:17:ee: 60:a1:83:c4:ac:b5:c2:96:e3:c8:1e:a4:64:66:b5:a3:f4:9a: 63:f3:df:56:28:a5:16:f5:83:7d:70:06:eb:af:f2:da:d4:c2: 5f:37:67:d7:7d:14:e3:e5:2b:8e:87:36:30:6d:5b:6f:5d:7e: 22:19:a8:cf:0a:b6:0c:aa:7a:ed:53:41:4f:86:65:e8:44:a7: ff:e8:4c:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwODA3MDIwODE1WhcNMjUwODE0MDIwODE1WjAYMRYwFAYD VQQDEw02ODk0MGE4Zi03NGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ks4yjTayF+77mOrxNh9o/D8/CC0OUIcyELz0rIOgoLt9TsFVNkdNx5aLQUe IkezxK9OXuMic0r3gCC3aAhTGlniFSr0OT4usS2PZ1+Q9NilpydH8TKl0/rJsuQX 7JLeZea9mo2S7BUPF/xzL5NC29TvTyAxaYRiOrz5ILaF5v09WH1ONEuXzB4RmnCS CotQC5JFODycxaYxnAuACWOVmrJ1aB5pETopNCV+uZuwsszWOJklFUw8LqBcrOfe 9aMurPGPcmvV03KqRcK3T5/QWIYlznDRN4/D3+WgtDcWQgfQfEfMTOzX+WUzOvw9 tbIu5Q1zr1oTk+rmloG4Eu1b9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHAxmKr 5nK6gS+WJxp/4d+BbQfNMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Our732t1Dda1xd8uMhCc6IfVYYK1jDWAZRrg48ZJUxDxopui2VZE s2EgZNyKKXiz4ApPaL3w/sfRbvHXqp+4TeRVD2tDTfzU9/ef1P6fA1Rm4YnHnklk Rr6iuWygxzlRTJxIiaOAqwP+0d0dvWsRaH4VvDvLxiKg3I/xS/UOG97J3HvQ9lgQ iU1sLO6RiAn7jzpEhDKgXtfumXfFQbLRqb03MXbOW2EUkBDa4rxrhNWDF+5goYPE rLXCluPIHqRkZrWj9Jpj899WKKUW9YN9cAbrr/La1MJfN2fXfRTj5SuOhzYwbVtv XX4iGajPCrYMqnrtU0FPhmXoRKf/6EzJ -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:55 2025 by rpki-client