$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: Kyxf3Gyyfl00pWLcOja0Ht3hlfOWlkw/3TXg6Hft2G4= Subject key identifier: 36:05:A2:F4:03:89:CF:02:91:10:84:BF:7E:95:81:16:FE:99:7B:19 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01E0 Signing time: Tue 05 Aug 2025 03:08:47 +0000 Manifest this update: Tue 05 Aug 2025 03:08:46 +0000 Manifest next update: Tue 12 Aug 2025 03:08:46 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: PHZONQsVfSJ+CCwGSvki0H6hONiIbLPaSnJ13AWf7jI=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 484 (0x1e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Aug 5 03:08:46 2025 GMT Not After : Aug 12 03:08:46 2025 GMT Subject: CN=689175bf-77c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:07:81:53:e3:5d:0a:6d:44:b7:19:af:00: 73:6f:34:f4:1e:b5:a7:07:e7:02:48:4b:27:e4:d2: ee:43:22:e5:62:b8:d8:8e:c2:8b:31:1b:a0:47:d1: ee:dc:8b:93:fc:74:a7:4c:a9:51:27:24:de:0c:fe: f7:cb:e3:39:24:24:f8:0b:31:62:18:71:97:aa:df: 16:ea:ee:0b:34:34:0b:93:d8:40:a8:59:4f:c1:ef: 60:82:ec:5b:3f:ee:ad:d3:c4:e8:bb:34:cb:4d:b0: 30:e7:0c:5a:26:54:6f:4f:88:2e:85:69:75:2d:3a: ac:58:f1:d0:7b:75:7b:06:11:3f:33:6f:2e:d1:02: 62:4a:cf:b6:74:a0:b3:42:9a:a1:d0:c5:c9:77:e0: 9d:ac:45:fa:fa:1d:8e:48:e7:82:12:90:18:c6:19: dc:d6:09:c5:58:2c:6d:fe:fa:76:e5:85:6f:52:37: 65:88:73:7d:94:fd:bc:3a:a1:0f:e5:b9:1b:f7:e7: 07:02:f7:66:dc:cc:08:73:ff:80:7d:7b:bd:d8:a0: 59:dc:21:c1:63:f2:ca:cc:d1:d8:9a:e3:fb:6b:a6: 1a:fa:d8:76:d7:bc:20:d1:e8:54:98:f3:49:b0:9e: de:45:c5:49:1a:f6:68:0a:17:4d:9b:f4:b3:b3:4d: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:05:A2:F4:03:89:CF:02:91:10:84:BF:7E:95:81:16:FE:99:7B:19 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:76:88:48:0e:f8:eb:93:05:50:0f:77:27:47:76:c8:33: 86:96:9e:42:b6:61:8e:db:56:ce:32:95:c3:d8:b4:95:84:09: a0:45:18:a1:21:66:7b:7d:09:c9:4a:f5:a6:24:b9:7d:05:a1: f3:37:47:2c:a8:8c:1a:90:51:23:56:f3:08:41:70:9d:26:29: 06:9f:14:90:46:e1:f4:1a:7e:62:3f:4c:86:0d:df:3b:32:45: a5:2f:00:2e:a2:1e:66:8a:b1:bb:50:68:b5:7f:04:30:84:15: ca:61:8d:80:f4:22:6f:a7:f1:e2:73:9c:a7:07:0b:e7:86:d2: c5:99:42:a0:ae:0a:a6:b4:a5:de:48:1e:ff:da:de:0a:82:e2: 95:16:b6:86:cf:8d:88:bf:7c:10:d1:67:6b:61:89:c1:40:ba: a5:5b:87:bd:30:16:33:dc:65:38:05:ea:a9:71:e9:48:4b:c9: 8a:87:62:14:b0:14:10:a1:a9:28:9d:52:7e:52:d7:72:5a:b7: 98:f5:12:04:27:d1:16:cc:cc:fc:05:e4:ae:81:c0:ac:f9:95: a3:b5:d8:32:64:06:8a:d7:62:d3:f5:f6:90:e9:f2:bc:0c:a3: 9a:3c:a4:50:46:58:79:32:8a:68:e9:a3:ca:fc:7b:28:14:04: 7a:d8:98:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwODA1MDMwODQ2WhcNMjUwODEyMDMwODQ2WjAYMRYwFAYD VQQDEw02ODkxNzViZi03N2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkrQHgVPjXQptRLcZrwBzbzT0HrWnB+cCSEsn5NLuQyLlYrjYjsKLMRugR9Hu 3IuT/HSnTKlRJyTeDP73y+M5JCT4CzFiGHGXqt8W6u4LNDQLk9hAqFlPwe9gguxb P+6t08TouzTLTbAw5wxaJlRvT4guhWl1LTqsWPHQe3V7BhE/M28u0QJiSs+2dKCz Qpqh0MXJd+CdrEX6+h2OSOeCEpAYxhnc1gnFWCxt/vp25YVvUjdliHN9lP28OqEP 5bkb9+cHAvdm3MwIc/+AfXu92KBZ3CHBY/LKzNHYmuP7a6Ya+th217wg0ehUmPNJ sJ7eRcVJGvZoChdNm/Szs01G9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDYFovQD ic8CkRCEv36VgRb+mXsZMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiPXaISA7465MFUA93J0d2yDOGlp5CtmGO21bOMpXD2LSVhAmgRRih IWZ7fQnJSvWmJLl9BaHzN0csqIwakFEjVvMIQXCdJikGnxSQRuH0Gn5iP0yGDd87 MkWlLwAuoh5mirG7UGi1fwQwhBXKYY2A9CJvp/Hic5ynBwvnhtLFmUKgrgqmtKXe SB7/2t4KguKVFraGz42Iv3wQ0WdrYYnBQLqlW4e9MBYz3GU4BeqpcelIS8mKh2IU sBQQoakonVJ+UtdyWreY9RIEJ9EWzMz8BeSugcCs+ZWjtdgyZAaK12LT9faQ6fK8 DKOaPKRQRlh5Mopo6aPK/HsoFAR62Jh4 -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:21 2025 by rpki-client