$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: /m866oRXgJxDHercZXGQsPyXyPlNBjKb/7rnRwPIGTc= Subject key identifier: 7D:48:EF:DC:08:EB:2B:0D:C8:0C:07:0A:A0:72:4A:6D:41:44:37:1D Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: FB Signing time: Mon 11 Aug 2025 05:19:43 +0000 Manifest this update: Mon 11 Aug 2025 05:19:42 +0000 Manifest next update: Mon 18 Aug 2025 05:19:42 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 7ySWkZkvlVx0jdaZ+c9jbm3rAKYUvhnEP25FAJNKhMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Aug 11 05:19:42 2025 GMT Not After : Aug 18 05:19:42 2025 GMT Subject: CN=68997d6e-92ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:86:a2:17:aa:69:f8:76:db:27:57:bf:b9:58: 74:de:92:78:78:df:d6:af:e1:38:e8:5f:08:dd:b0: 17:6e:a9:2e:d2:0c:cd:e2:f6:79:bb:b9:ae:2c:6f: 7d:3e:bc:c9:ff:3f:ab:37:4f:2f:50:f2:be:fc:55: ab:96:02:7f:30:0a:55:87:58:fa:e0:72:c6:06:4f: 32:ec:23:07:da:fe:d6:fe:62:1e:b7:f1:1b:54:55: ef:a0:cf:45:a8:3d:5c:e5:8c:0b:2d:c2:7f:74:5a: 8a:ed:0c:74:09:9e:f4:4d:86:df:fc:24:f4:0f:9c: 14:d8:91:6e:1f:e7:58:e6:75:eb:59:53:f0:91:d4: 98:4a:48:c1:5a:de:00:a3:06:64:41:17:53:66:3f: 13:5a:34:53:ca:66:8b:24:e5:a1:b5:32:2e:77:27: 22:dc:05:9e:7d:7f:51:bd:8f:61:d2:29:61:76:a0: d1:d4:d5:27:4d:bc:2b:6e:68:e5:34:45:bf:5a:c0: 6d:ff:ef:a4:f2:cc:06:ea:6e:7f:0a:bc:89:3d:b3: d5:ec:35:0d:be:3e:6f:93:4a:9e:b4:2f:e5:36:fb: f9:83:fe:3a:6c:dc:43:b0:6f:9c:a8:48:56:94:a6: e1:a8:e7:33:b8:42:2a:7e:10:b7:90:4c:c6:b2:9e: 58:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:48:EF:DC:08:EB:2B:0D:C8:0C:07:0A:A0:72:4A:6D:41:44:37:1D X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:a8:48:e9:e0:1b:a5:a2:39:e1:e5:5d:9c:19:01:70:7a:81: 7c:c0:28:82:94:63:12:25:7f:92:70:a7:97:32:79:61:3b:c5: 1a:e7:fd:b3:77:90:56:e3:3b:08:f3:1f:83:18:27:3c:89:97: 9e:72:d9:eb:7c:61:74:0a:60:9e:87:9f:fd:34:7c:6c:13:e6: ef:2f:e8:8e:74:d6:8a:7d:6b:e0:86:6d:14:f4:51:94:2b:b8: 5b:8b:cf:6c:28:f6:36:31:22:08:20:d4:92:8a:3c:6e:cc:e9: 57:c0:9b:3f:ca:5e:ca:35:cc:6d:b6:e1:39:94:25:b3:8b:70: 74:ae:8e:b0:ae:5a:d9:8c:e6:6e:8d:2d:94:c4:83:64:f3:a8: f3:18:44:db:70:aa:5b:6e:cc:dd:16:f1:a3:b1:99:a7:73:69: c4:24:b9:7e:30:f4:49:c6:7a:01:43:1d:ea:44:29:02:74:bc: 37:64:3e:23:62:3d:35:5d:60:cc:26:6f:08:25:44:0d:5e:a3: f9:8d:e9:c1:47:25:17:ab:40:6b:b6:03:3d:56:88:e7:23:fa: 71:09:99:66:0c:b8:b6:b8:48:2b:dc:32:3d:6e:4d:51:c1:7b: c7:1e:52:f0:2c:1b:37:49:94:c0:44:7f:73:e5:e4:b0:2d:ac: ee:51:cd:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwODExMDUxOTQyWhcNMjUwODE4MDUxOTQyWjAYMRYwFAYD VQQDEw02ODk5N2Q2ZS05MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4aiF6pp+HbbJ1e/uVh03pJ4eN/Wr+E46F8I3bAXbqku0gzN4vZ5u7muLG99 PrzJ/z+rN08vUPK+/FWrlgJ/MApVh1j64HLGBk8y7CMH2v7W/mIet/EbVFXvoM9F qD1c5YwLLcJ/dFqK7Qx0CZ70TYbf/CT0D5wU2JFuH+dY5nXrWVPwkdSYSkjBWt4A owZkQRdTZj8TWjRTymaLJOWhtTIudyci3AWefX9RvY9h0ilhdqDR1NUnTbwrbmjl NEW/WsBt/++k8swG6m5/CryJPbPV7DUNvj5vk0qetC/lNvv5g/46bNxDsG+cqEhW lKbhqOczuEIqfhC3kEzGsp5YOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH1I79wI 6ysNyAwHCqBySm1BRDcdMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZqEjp4Bulojnh5V2cGQFweoF8wCiClGMSJX+ScKeXMnlhO8Ua5/2z d5BW4zsI8x+DGCc8iZeectnrfGF0CmCeh5/9NHxsE+bvL+iOdNaKfWvghm0U9FGU K7hbi89sKPY2MSIIINSSijxuzOlXwJs/yl7KNcxttuE5lCWzi3B0ro6wrlrZjOZu jS2UxINk86jzGETbcKpbbszdFvGjsZmnc2nEJLl+MPRJxnoBQx3qRCkCdLw3ZD4j Yj01XWDMJm8IJUQNXqP5jenBRyUXq0BrtgM9VojnI/pxCZlmDLi2uEgr3DI9bk1R wXvHHlLwLBs3SZTARH9z5eSwLazuUc3/ -----END CERTIFICATE-----Generated at Mon Aug 11 06:20:01 2025 by rpki-client