$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft File: ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json) Hash identifier: R6Y3o0j93HEOPNuTsJ3JJQwFMRhcM7A08mrm9Jm5i7s= Subject key identifier: 40:3A:F2:F4:A8:E8:5B:35:0E:7A:34:11:E3:B8:C1:49:D8:2F:E8:DE Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E Certificate issuer: /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft Manifest number: 0C89 Signing time: Sun 10 Aug 2025 18:19:36 +0000 Manifest this update: Sun 10 Aug 2025 18:19:36 +0000 Manifest next update: Sun 17 Aug 2025 18:19:36 +0000 Files and hashes: 1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: ageL0MX0r4EZzAYLzxGcXnZ8QyLv/QSILqyHychOeE0=) 2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E Validity Not Before: Aug 10 18:19:36 2025 GMT Not After : Aug 17 18:19:36 2025 GMT Subject: CN=6898e2b8-d7af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:04:fe:d8:25:1f:a5:6b:0e:50:2d:72:e0: 0c:39:15:01:12:8f:40:61:3b:96:b0:69:16:ad:4c: 76:c2:16:af:6b:17:71:0a:d5:e3:b6:49:ec:d5:97: 7d:fe:5a:89:f4:6c:be:7e:70:5c:69:6a:b8:22:39: 44:2b:4e:e3:20:24:7c:36:ba:7e:96:4a:4d:f5:68: c8:4f:63:50:64:a1:0f:c1:76:56:6b:6e:60:e9:68: 54:b1:77:70:e6:a8:ee:fa:24:bf:f3:42:54:c0:db: bb:b1:a6:79:bf:90:73:b6:18:16:29:51:09:f5:25: f4:9f:4a:cb:19:5a:20:2e:3d:3a:ba:27:82:b9:2f: 09:4b:23:17:5b:23:b9:bf:1f:70:04:35:f4:b5:aa: ba:9c:4b:fc:c8:58:a0:23:78:da:1b:99:c5:5d:f6: f5:2d:2e:c7:83:e9:dd:d9:97:4d:80:98:b2:46:7a: 15:19:1c:dd:05:89:9b:da:93:d5:d9:e0:1d:1a:43: bb:bf:2c:4f:4a:2e:b2:55:21:fd:f1:00:60:30:fe: 69:ec:7b:f5:18:25:90:d9:74:85:e1:ce:64:14:e3: ce:e2:02:ed:eb:47:21:c5:fb:e2:3a:7c:5a:87:7e: 9c:1f:37:cb:3a:5d:49:33:c0:5b:e3:68:44:eb:8b: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3A:F2:F4:A8:E8:5B:35:0E:7A:34:11:E3:B8:C1:49:D8:2F:E8:DE X509v3 Authority Key Identifier: keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:79:6a:09:48:9e:46:92:3c:a5:1b:6d:38:eb:c0:76:49:2c: 56:7e:3b:7a:89:00:93:9d:c1:90:bb:be:0f:49:08:c4:8e:e0: 55:af:45:23:a6:58:19:c2:e0:65:c6:6c:73:a1:b4:12:77:c9: 29:81:3b:c4:b4:bc:36:39:9e:11:85:c3:33:41:51:c4:f2:8b: e7:34:e1:8d:aa:74:0f:96:f8:e5:fe:02:b9:72:af:24:79:f7: fa:a6:68:b8:d8:56:cb:b0:30:ac:4f:a4:4c:7f:0e:8a:0e:f6: 0f:f3:fd:28:d3:d6:fb:55:3d:60:8b:ac:f4:f1:95:67:7d:6f: bd:b8:ef:85:62:ae:32:1b:26:c1:3d:13:05:f5:bc:f8:48:5d: 51:51:8b:34:ac:be:dc:9d:2b:6c:32:74:2e:e7:5a:09:62:54: bc:a4:f7:58:29:02:65:57:5e:f2:87:70:47:50:97:44:cc:15: 56:ea:8d:03:86:d9:87:b8:8d:1e:72:a6:a0:a0:42:aa:26:f5: 72:bb:6d:1b:35:6f:b2:a4:da:6b:96:87:f7:95:04:72:87:c2: b0:f7:9a:54:da:ca:11:38:98:bb:8b:45:94:36:78:09:9d:5a: 98:20:ad:96:5d:08:d1:59:68:8c:9c:cf:ed:19:61:f2:75:72: 1a:f3:45:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5 MzIyREJFNkUwHhcNMjUwODEwMTgxOTM2WhcNMjUwODE3MTgxOTM2WjAYMRYwFAYD VQQDEw02ODk4ZTJiOC1kN2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAukAE/tglH6VrDlAtcuAMORUBEo9AYTuWsGkWrUx2whavaxdxCtXjtkns1Zd9 /lqJ9Gy+fnBcaWq4IjlEK07jICR8Nrp+lkpN9WjIT2NQZKEPwXZWa25g6WhUsXdw 5qju+iS/80JUwNu7saZ5v5BzthgWKVEJ9SX0n0rLGVogLj06uieCuS8JSyMXWyO5 vx9wBDX0taq6nEv8yFigI3jaG5nFXfb1LS7Hg+nd2ZdNgJiyRnoVGRzdBYmb2pPV 2eAdGkO7vyxPSi6yVSH98QBgMP5p7Hv1GCWQ2XSF4c5kFOPO4gLt60chxfviOnxa h36cHzfLOl1JM8Bb42hE64uc7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEA68vSo 6Fs1Dno0EeO4wUnYL+jeMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0 NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2 bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0 TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAweWoJSJ5GkjylG20468B2SSxWfjt6iQCTncGQu74PSQjEjuBVr0Uj plgZwuBlxmxzobQSd8kpgTvEtLw2OZ4RhcMzQVHE8ovnNOGNqnQPlvjl/gK5cq8k eff6pmi42FbLsDCsT6RMfw6KDvYP8/0o09b7VT1gi6z08ZVnfW+9uO+FYq4yGybB PRMF9bz4SF1RUYs0rL7cnStsMnQu51oJYlS8pPdYKQJlV17yh3BHUJdEzBVW6o0D htmHuI0ecqagoEKqJvVyu20bNW+ypNprlof3lQRyh8Kw95pU2soROJi7i0WUNngJ nVqYIK2WXQjRWWiMnM/tGWHydXIa80UQ -----END CERTIFICATE-----Generated at Sun Aug 10 21:07:45 2025 by rpki-client