$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft File: fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json) Hash identifier: ZMjGy8I3rfIH6cpamTQ7NosaKTsjtifCTd0MPM8b5qA= Subject key identifier: F6:7E:E5:BB:4D:19:F5:57:E3:52:C2:6C:54:09:60:BF:F4:C9:DE:E7 Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 Certificate issuer: /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Certificate serial: 06F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft Manifest number: 06ED Signing time: Sat 02 Aug 2025 22:21:51 +0000 Manifest this update: Sat 02 Aug 2025 22:21:51 +0000 Manifest next update: Sat 09 Aug 2025 22:21:51 +0000 Files and hashes: 1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: poupSTutD2ID8lm8GW4T204HKa5bIerKvGS8ykcyQ6k=) 2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: hUqHFifGF2RTMr5P0bZj3vJ6RCASWQ9bPokCmECeKBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:21:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1780 (0x6f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07 Validity Not Before: Aug 2 22:21:51 2025 GMT Not After : Aug 9 22:21:51 2025 GMT Subject: CN=688e8f7f-244b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:55:82:fe:d6:5b:39:44:ed:4e:15:5c:d9: 6e:7d:bc:96:6c:53:57:35:2e:2b:97:5b:d7:fe:34: 0b:24:ca:d9:dc:71:95:26:dc:8f:97:83:b9:2f:97: 6e:b5:77:6a:8a:a8:9d:97:18:d3:ad:b7:49:2c:87: 8d:e2:92:ec:7c:49:d5:7e:36:37:45:b0:d3:ff:0c: 01:19:1b:25:08:05:89:78:64:11:e9:76:d1:df:5d: aa:c8:8f:b0:e8:4b:52:2d:70:f2:d1:16:1b:3e:90: 56:88:18:67:83:94:8d:a6:dd:62:77:90:66:02:85: 78:7e:e1:ea:08:7a:63:22:11:d7:0c:97:a7:a0:2d: d4:f8:2a:8a:bb:14:ec:64:85:1f:80:cb:f4:17:8b: 9e:cd:53:32:88:cb:e0:cb:ce:fd:06:e3:98:fb:09: 98:8c:10:f6:62:63:6c:8b:05:67:d1:25:89:c8:39: 83:f9:10:c3:37:d3:8a:16:91:07:53:20:30:ec:29: d1:81:80:ca:0a:21:b7:68:a1:90:5b:5f:1a:76:ab: 39:08:26:47:f4:c5:7e:c0:5f:a7:fb:5a:08:77:11: 4d:4b:03:86:32:bb:ae:64:00:33:dc:7e:20:f8:82: 51:29:ed:8e:a9:20:2b:8d:a0:5a:3b:f5:81:2e:fe: 5e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7E:E5:BB:4D:19:F5:57:E3:52:C2:6C:54:09:60:BF:F4:C9:DE:E7 X509v3 Authority Key Identifier: keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b7:c8:84:e7:43:af:fd:6f:2b:c0:5a:80:57:8e:65:8c:e5: 59:fb:77:36:4e:61:63:70:3f:9e:5b:6c:34:7e:42:ac:2c:e8: 8d:a7:e6:85:df:16:d2:df:43:70:d3:66:74:79:34:17:92:63: 84:37:75:7c:b1:81:7f:42:10:3f:14:f8:21:3a:bf:d0:19:1c: b4:20:e0:fa:18:42:9b:cc:ff:60:4e:34:80:91:20:37:ca:49: 2b:9d:6a:83:53:b8:d7:3b:01:f0:68:ff:b9:3e:56:db:c4:7a: a6:73:a8:34:9e:f9:dd:a4:06:8c:7d:34:c6:8f:40:d5:d9:18: 7f:27:59:61:30:42:73:54:78:8d:b4:b0:f3:b3:0c:7e:16:2f: 9f:c5:7c:4a:30:07:e1:0f:f1:3a:9f:9d:89:a3:d0:ab:f2:c5: 21:e4:70:44:ab:1c:a4:f9:63:fd:fb:6d:55:24:ce:84:9f:a4: c4:76:6b:28:04:b5:73:a7:37:62:1a:2e:0e:c9:66:ce:1b:47: f2:0a:60:bd:18:c3:03:25:c1:93:a5:11:c9:86:c8:eb:a3:5e: 32:85:38:ae:7e:59:33:31:67:b0:d3:45:73:65:c9:00:4b:b0: 98:ca:85:4f:80:16:53:c0:dc:77:cd:59:43:9d:4e:0b:6d:a2: da:51:c4:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUMyMzIxMTAvBgNVBAUTKDdEM0EyMkRFRDFBQkYwQ0QzOTA5MjgwQjg5QjIzNzZD NTQ1RjZGMDcwHhcNMjUwODAyMjIyMTUxWhcNMjUwODA5MjIyMTUxWjAYMRYwFAYD VQQDEw02ODhlOGY3Zi0yNDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA20JVgv7WWzlE7U4VXNlufbyWbFNXNS4rl1vX/jQLJMrZ3HGVJtyPl4O5L5du tXdqiqidlxjTrbdJLIeN4pLsfEnVfjY3RbDT/wwBGRslCAWJeGQR6XbR312qyI+w 6EtSLXDy0RYbPpBWiBhng5SNpt1id5BmAoV4fuHqCHpjIhHXDJenoC3U+CqKuxTs ZIUfgMv0F4uezVMyiMvgy879BuOY+wmYjBD2YmNsiwVn0SWJyDmD+RDDN9OKFpEH UyAw7CnRgYDKCiG3aKGQW18adqs5CCZH9MV+wF+n+1oIdxFNSwOGMruuZAAz3H4g +IJRKe2OqSArjaBaO/WBLv5eKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPZ+5btN GfVX41LCbFQJYL/0yd7nMB8GA1UdIwQYMBaAFH06It7Rq/DNOQkoC4myN2xUX28H MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzIzMi80MTczMDA4NjU5 OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhNMDVDU2dMaWJJM2JGUmZi d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZUb2kzdEdyOE0wNUNTZ0xpYkkzYkZSZmJ3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QzIzMi80MTczMDA4NjU5OEQxMUVCQUVDQzgzMjFDNEY5QUUwMi9mVG9pM3RHcjhN MDVDU2dMaWJJM2JGUmZid2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSt8iE50Ov/W8rwFqAV45ljOVZ+3c2TmFjcD+eW2w0fkKsLOiNp+aF 3xbS30Nw02Z0eTQXkmOEN3V8sYF/QhA/FPghOr/QGRy0IOD6GEKbzP9gTjSAkSA3 ykkrnWqDU7jXOwHwaP+5PlbbxHqmc6g0nvndpAaMfTTGj0DV2Rh/J1lhMEJzVHiN tLDzswx+Fi+fxXxKMAfhD/E6n52Jo9Cr8sUh5HBEqxyk+WP9+21VJM6En6TEdmso BLVzpzdiGi4OyWbOG0fyCmC9GMMDJcGTpRHJhsjro14yhTiuflkzMWew00VzZckA S7CYyoVPgBZTwNx3zVlDnU4LbaLaUcTS -----END CERTIFICATE-----Generated at Mon Aug 4 11:08:49 2025 by rpki-client