$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft File: FZbEu-cy2oXLg-incIc-o0E3AaU.mft (raw, json) Hash identifier: Z/boald0c31hfP5pLIXJ2dxmVO4zqDYNmJNWQX5Iffs= Subject key identifier: AE:12:FC:0E:45:66:D0:50:1E:B0:6A:29:97:92:2A:8D:54:09:C0:B1 Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 Certificate issuer: /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Certificate serial: 137F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft Manifest number: 1356 Signing time: Sun 10 Aug 2025 17:00:45 +0000 Manifest this update: Sun 10 Aug 2025 17:00:45 +0000 Manifest next update: Sun 17 Aug 2025 17:00:45 +0000 Files and hashes: 1: FZbEu-cy2oXLg-incIc-o0E3AaU.crl (hash: 6oqOcvkN5XI+gqW2MtiIyMCm8/1H3amBpsGXdJ3BWuM=) 2: 56094384320611EA84C94231C4F9AE02.roa (hash: mZoT1sj2WR9PydzJ0T/LJHzRsHoob8BeC9+MkrsPnys=) 3: 443241A0321B11EA83044473C4F9AE02.roa (hash: n0sRanfJ+3KhBJUHh6jH9cwbJaaTZCbfJ+87aODuzgM=) 4: 1FD07ED231FB11EAA335E10FC4F9AE02.roa (hash: y17aQP9C+LDn4Yph2n6mf2nnVwvpkbeV6pXqgmt1qVQ=) 5: 4B18BBA8A9F811EEB85DBD24C4F9AE02.roa (hash: sd3UhNYbHggo+XcciVWTFZxv/tGVhGFf2hY/GpsuhSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4991 (0x137f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5 Validity Not Before: Aug 10 17:00:45 2025 GMT Not After : Aug 17 17:00:45 2025 GMT Subject: CN=6898d03d-baa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:2e:5e:20:8c:e3:f3:cf:e4:39:09:96:ed: 14:68:33:29:35:9b:1e:51:e5:07:26:ab:26:62:74: ed:76:6c:a6:1d:92:69:f5:41:4f:a4:54:60:6a:c2: 6a:bc:2b:c2:37:8c:14:a2:20:11:bf:4c:a6:75:b4: 5b:fc:f4:53:c8:4c:47:e7:c2:1f:47:9a:9d:de:86: f9:93:c8:b8:5d:ff:6f:82:1c:20:51:a2:29:f5:8e: 53:2b:73:c2:69:f9:ce:0b:f0:ff:7b:f1:a3:e5:4c: 41:79:84:67:14:a3:67:e1:70:f2:25:eb:6f:7a:9c: c9:04:b9:ff:56:5c:ba:52:4f:74:76:95:b7:83:42: 3e:51:a8:c8:9a:43:a5:50:10:fb:bd:46:54:bd:ab: 39:82:42:d7:a1:84:7a:9e:a6:cf:24:00:ed:bc:13: 56:51:d8:02:31:5c:60:71:d8:b9:6d:55:11:68:01: 19:80:15:a0:ec:ab:2e:32:ca:06:82:60:c7:21:9f: a5:6d:88:4e:dd:ac:72:80:53:7c:e6:e5:e4:fe:f3: 0d:41:6d:b3:4a:b5:ab:5a:da:17:2b:b5:ae:ac:22: fc:90:0f:ca:a0:b8:86:6c:60:a9:4e:e5:99:b9:f7: ba:c2:94:7a:30:cb:20:5d:bc:3e:63:6c:b2:9d:43: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:12:FC:0E:45:66:D0:50:1E:B0:6A:29:97:92:2A:8D:54:09:C0:B1 X509v3 Authority Key Identifier: keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:50:f6:82:89:45:ad:dd:93:04:51:fc:30:ae:6c:2e:52:90: ea:26:65:67:11:f6:00:a1:0b:52:ed:19:bb:e8:b9:01:15:a2: 5f:1d:56:db:30:91:14:8c:28:45:f8:25:88:1c:fc:7d:e5:9f: 6b:bd:7f:bb:4d:af:95:d3:ea:bc:fd:43:2b:c0:1f:cc:26:44: da:89:1b:18:52:1e:e0:d7:ac:4a:f6:ca:16:12:e0:ae:0b:3a: fb:84:44:f0:5e:c2:5b:1f:db:dd:e4:f5:4b:bc:4d:ed:90:60: bc:4f:bf:8b:f7:09:40:fa:6a:2e:f2:cf:39:76:72:d8:e3:bb: 78:c8:50:49:29:c4:fc:e9:e6:9e:17:d0:69:d9:1e:30:11:e6: 34:a3:09:7f:db:29:7a:d6:22:47:42:5d:72:6d:72:f6:ea:27: bc:55:4e:2b:b7:8c:d8:60:18:24:14:86:93:c3:ce:00:42:1f: d5:a2:49:3f:73:20:b8:96:b3:0d:da:39:18:d7:07:84:91:ec: 52:36:43:1d:ff:bc:5c:db:71:90:45:5b:f7:b0:a1:5c:86:64: 3c:04:3e:fa:91:89:ed:2a:dd:a0:a1:ba:a7:31:3e:67:20:04: 7a:68:62:90:35:a1:07:b3:18:86:0c:68:bc:81:37:66:a0:1f: 1a:03:46:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcxRTMxMTAvBgNVBAUTKDE1OTZDNEJCRTczMkRBODVDQjgzRThBNzcwODczRUEz NDEzNzAxQTUwHhcNMjUwODEwMTcwMDQ1WhcNMjUwODE3MTcwMDQ1WjAYMRYwFAYD VQQDEw02ODk4ZDAzZC1iYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt8cuXiCM4/PP5DkJlu0UaDMpNZseUeUHJqsmYnTtdmymHZJp9UFPpFRgasJq vCvCN4wUoiARv0ymdbRb/PRTyExH58IfR5qd3ob5k8i4Xf9vghwgUaIp9Y5TK3PC afnOC/D/e/Gj5UxBeYRnFKNn4XDyJetvepzJBLn/Vly6Uk90dpW3g0I+UajImkOl UBD7vUZUvas5gkLXoYR6nqbPJADtvBNWUdgCMVxgcdi5bVURaAEZgBWg7KsuMsoG gmDHIZ+lbYhO3axygFN85uXk/vMNQW2zSrWrWtoXK7WurCL8kA/KoLiGbGCpTuWZ ufe6wpR6MMsgXbw+Y2yynUPiFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK4S/A5F ZtBQHrBqKZeSKo1UCcCxMB8GA1UdIwQYMBaAFBWWxLvnMtqFy4Pop3CHPqNBNwGl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzFFMy85MzgzRTY0NkFE NjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJvWExnLWluY0ljLW8wRTNB YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZaYkV1LWN5Mm9YTGctaW5jSWMtbzBFM0FhVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzFFMy85MzgzRTY0NkFENjUxMUU4QUNCRDBENkFDNEY5QUUwMi9GWmJFdS1jeTJv WExnLWluY0ljLW8wRTNBYVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbUPaCiUWt3ZMEUfwwrmwuUpDqJmVnEfYAoQtS7Rm76LkBFaJfHVbb MJEUjChF+CWIHPx95Z9rvX+7Ta+V0+q8/UMrwB/MJkTaiRsYUh7g16xK9soWEuCu Czr7hETwXsJbH9vd5PVLvE3tkGC8T7+L9wlA+mou8s85dnLY47t4yFBJKcT86eae F9Bp2R4wEeY0owl/2yl61iJHQl1ybXL26ie8VU4rt4zYYBgkFIaTw84AQh/Vokk/ cyC4lrMN2jkY1weEkexSNkMd/7xc23GQRVv3sKFchmQ8BD76kYntKt2gobqnMT5n IAR6aGKQNaEHsxiGDGi8gTdmoB8aA0bE -----END CERTIFICATE-----Generated at Sun Aug 10 21:10:37 2025 by rpki-client