$ rpki-client -vvf rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft File: FTtjqTdzsliYghhmVd7zBEbdhg0.mft (raw, json) Hash identifier: 87uV5lCsBLHFJfkLDMpX3Oj+QbXr7LqVHDlNqHUpmyE= Subject key identifier: 9C:48:11:05:50:BF:18:EE:7B:66:0F:A0:B4:72:23:96:0C:9B:E8:D5 Authority key identifier: 15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D Certificate issuer: /CN=A91810B4/serialNumber=153B63A93773B2589882186655DEF30446DD860D Certificate serial: 0287 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft Manifest number: 0283 Signing time: Thu 07 Aug 2025 02:17:17 +0000 Manifest this update: Thu 07 Aug 2025 02:17:17 +0000 Manifest next update: Thu 14 Aug 2025 02:17:17 +0000 Files and hashes: 1: FTtjqTdzsliYghhmVd7zBEbdhg0.crl (hash: nC6OygF5JyPlKp3OzfF2u/XAghP/tiDJQQA0aMcE7e8=) 2: 27A32D7A16BA11EDB0E9E464C4F9AE02.roa (hash: uux+o2sOdsirWh/aoHrxCjsCKmrUczbEHaZJtHyFOgA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 647 (0x287) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91810B4, serialNumber=153B63A93773B2589882186655DEF30446DD860D Validity Not Before: Aug 7 02:17:17 2025 GMT Not After : Aug 14 02:17:17 2025 GMT Subject: CN=68940cad-5cf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:66:63:23:dd:60:b4:58:e4:d1:67:68:8a: 4a:8d:81:ba:4c:a9:90:d3:69:f8:33:f3:7b:6b:4e: 44:47:f9:f8:9d:42:6a:0a:ad:17:08:ff:7c:da:52: ef:3b:60:f8:85:b5:af:a8:7f:4b:62:86:04:e3:7f: 96:49:dd:74:67:78:da:39:f6:a6:c5:42:27:a2:a3: dd:56:c8:d0:54:cc:57:9a:a8:f6:45:2a:2e:f8:9c: 27:6e:29:31:98:ba:d0:c1:03:13:26:f7:18:d3:a2: 55:b6:a4:46:02:72:d6:e2:ac:2d:4d:e8:8b:d3:17: 25:84:a4:79:ad:c3:21:d6:23:9a:c9:dd:0f:7e:69: a1:4c:04:37:a9:b7:ea:7b:fd:e6:4a:c1:58:5e:65: 1d:d3:0b:06:7a:08:0f:17:8d:5b:4b:b1:48:78:28: c5:a8:59:20:a6:81:42:63:ae:d3:fa:a4:83:2d:0b: 7e:c7:fb:24:8c:5b:17:21:c4:08:25:ae:60:eb:f6: 99:0e:d2:b7:1d:56:0d:ed:f3:28:57:5a:fd:13:4d: 15:86:0e:ca:aa:3d:ab:f5:7e:54:11:28:b9:06:41: bb:9c:60:45:56:a5:ff:aa:ba:49:ac:4f:99:4a:7a: 04:53:39:e0:58:4e:dc:9a:76:3c:3d:02:1b:3f:0a: 0f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:11:05:50:BF:18:EE:7B:66:0F:A0:B4:72:23:96:0C:9B:E8:D5 X509v3 Authority Key Identifier: keyid:15:3B:63:A9:37:73:B2:58:98:82:18:66:55:DE:F3:04:46:DD:86:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTtjqTdzsliYghhmVd7zBEbdhg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91810B4/77D52AA016B511ED9803A272C4F9AE02/FTtjqTdzsliYghhmVd7zBEbdhg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:1a:20:43:8f:47:64:78:ed:ad:65:fc:43:9c:de:1c:c1:b4: 5c:62:c0:e2:e5:f2:e8:27:07:52:78:f6:a8:27:d8:81:76:ad: 13:49:51:ee:38:b5:5a:52:8f:c1:dd:1d:56:6c:e8:ff:02:3e: 33:d8:a7:fd:76:93:b5:0b:4a:68:26:c2:71:fd:34:f6:29:4c: ce:29:07:a2:f0:47:a5:2a:e4:83:cf:ad:f4:9d:77:e7:f8:15: 8f:61:74:cf:6d:34:83:32:7e:d1:aa:40:b6:41:99:f9:85:c6: 46:17:63:1d:7a:cc:a5:90:39:cd:20:20:06:55:96:45:cf:4c: 0d:d8:05:cf:91:46:34:30:43:2a:d0:9e:e0:57:ba:78:b0:01: 2c:4e:95:b7:ed:75:47:30:ab:1c:b1:0a:c1:10:fe:f0:eb:4e: b6:69:53:85:04:64:d4:d3:8e:06:9f:03:d2:6a:75:91:06:5d: ab:98:3c:3b:fd:d9:00:c7:20:ff:f8:1e:3e:5b:b5:3d:92:f8: a3:36:c1:d4:92:45:69:a2:e1:ce:7b:0e:00:5d:7d:65:04:0d: 5e:4f:22:c1:16:df:67:8d:9d:dc:31:64:05:82:4e:47:82:bf: b8:5f:ec:be:95:0f:84:44:a3:33:14:47:49:eb:94:d8:cd:b2: bb:3c:44:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAocwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEwQjQxMTAvBgNVBAUTKDE1M0I2M0E5Mzc3M0IyNTg5ODgyMTg2NjU1REVGMzA0 NDZERDg2MEQwHhcNMjUwODA3MDIxNzE3WhcNMjUwODE0MDIxNzE3WjAYMRYwFAYD VQQDEw02ODk0MGNhZC01Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo9lmYyPdYLRY5NFnaIpKjYG6TKmQ02n4M/N7a05ER/n4nUJqCq0XCP982lLv O2D4hbWvqH9LYoYE43+WSd10Z3jaOfamxUInoqPdVsjQVMxXmqj2RSou+Jwnbikx mLrQwQMTJvcY06JVtqRGAnLW4qwtTeiL0xclhKR5rcMh1iOayd0PfmmhTAQ3qbfq e/3mSsFYXmUd0wsGeggPF41bS7FIeCjFqFkgpoFCY67T+qSDLQt+x/skjFsXIcQI Ja5g6/aZDtK3HVYN7fMoV1r9E00Vhg7Kqj2r9X5UESi5BkG7nGBFVqX/qrpJrE+Z SnoEUzngWE7cmnY8PQIbPwoPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxIEQVQ vxjue2YPoLRyI5YMm+jVMB8GA1UdIwQYMBaAFBU7Y6k3c7JYmIIYZlXe8wRG3YYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTBCNC83N0Q1MkFBMDE2 QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNsaVlnaGhtVmQ3ekJFYmRo ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUdGpxVGR6c2xpWWdoaG1WZDd6QkViZGhnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTBCNC83N0Q1MkFBMDE2QjUxMUVEOTgwM0EyNzJDNEY5QUUwMi9GVHRqcVRkenNs aVlnaGhtVmQ3ekJFYmRoZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoGiBDj0dkeO2tZfxDnN4cwbRcYsDi5fLoJwdSePaoJ9iBdq0TSVHu OLVaUo/B3R1WbOj/Aj4z2Kf9dpO1C0poJsJx/TT2KUzOKQei8EelKuSDz630nXfn +BWPYXTPbTSDMn7RqkC2QZn5hcZGF2MdesylkDnNICAGVZZFz0wN2AXPkUY0MEMq 0J7gV7p4sAEsTpW37XVHMKscsQrBEP7w6062aVOFBGTU044GnwPSanWRBl2rmDw7 /dkAxyD/+B4+W7U9kvijNsHUkkVpouHOew4AXX1lBA1eTyLBFt9njZ3cMWQFgk5H gr+4X+y+lQ+ERKMzFEdJ65TYzbK7PET/ -----END CERTIFICATE-----Generated at Sat Aug 9 02:46:38 2025 by rpki-client