$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: iXsjPam/SdAaXeVO5JhwnNZep8p+sbtZ8mwR6IGUFXM= Subject key identifier: F3:69:D8:02:92:98:2E:07:48:0E:DC:B5:2B:BD:05:BF:6E:8C:50:9E Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FDE Signing time: Fri 08 Aug 2025 17:41:19 +0000 Manifest this update: Fri 08 Aug 2025 17:41:19 +0000 Manifest next update: Fri 15 Aug 2025 17:41:19 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: 962guZsK/ZxRVtkKiq4Aae4l05MWhAJvvuW/RXF3gzQ=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4074 (0xfea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Aug 8 17:41:19 2025 GMT Not After : Aug 15 17:41:19 2025 GMT Subject: CN=689636bf-3cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:17:d5:f7:dd:57:0e:cf:a3:63:d1:5d:fe:3b: f1:b3:ce:48:0f:e9:25:28:21:65:ab:40:5b:13:50: eb:ed:ed:6c:0e:45:94:0f:ca:14:df:11:09:95:15: 97:25:a7:35:5b:6c:5c:f9:45:1e:17:e4:68:23:0e: 89:1e:18:68:62:06:6d:3e:e9:d9:07:3d:1e:4a:b4: f9:fe:60:37:1f:60:a6:ec:4a:d8:fe:62:2b:00:46: 6b:91:0e:62:83:87:bf:8d:41:5b:17:e0:ee:c4:81: 94:4d:f6:a6:94:a5:fd:90:2b:0c:f8:66:81:4e:a0: f2:55:97:bd:c4:c9:f2:99:47:57:72:6e:91:c6:eb: eb:f8:43:02:88:d9:c1:7f:c8:6d:f7:93:8e:8e:60: a0:cc:7d:59:82:1f:af:c6:c9:bb:cc:ac:4b:df:f9: 1a:04:29:1f:01:7e:1c:39:67:1c:14:8b:c6:71:ad: 67:45:59:a0:eb:64:25:7d:5c:0d:50:26:9c:3d:55: c0:f6:fe:5b:bb:30:37:0f:39:7c:5b:b1:f1:dc:fb: f8:70:05:93:6c:97:22:25:ad:c1:0f:c0:ba:3b:f3: 39:06:c0:5e:2c:ca:71:97:f1:4e:31:2d:99:04:04: 57:ba:72:b7:61:34:27:96:57:e2:f2:67:6f:bb:ae: 7a:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:69:D8:02:92:98:2E:07:48:0E:DC:B5:2B:BD:05:BF:6E:8C:50:9E X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:f8:82:de:4c:b0:c0:72:9a:bb:04:6f:93:9e:9e:38:a9:f7: 15:e7:f0:51:37:52:08:37:1c:f1:65:59:4e:63:bd:f7:ba:d3: 7e:26:cc:a5:73:7d:b4:df:c8:0d:c4:bc:70:ca:ad:b7:da:46: e2:f2:aa:29:b9:c1:06:0e:10:eb:82:af:4d:f7:f5:5a:b9:be: 95:8e:4d:3a:f6:47:3e:a5:5c:d7:5d:63:69:0c:90:7f:b5:05: 1f:e7:96:1a:60:b7:12:03:8a:7a:bb:21:61:3f:2a:9d:04:36: f7:3e:df:70:31:9c:ba:72:03:32:54:52:bc:3b:a8:8c:f7:40: cc:97:df:ae:e4:06:c5:6f:ea:94:27:cd:1f:88:98:4f:30:87: ed:f5:a9:d0:4c:d8:e0:d2:cf:b3:11:6e:2b:48:86:c6:c0:10: 4c:43:85:bf:0a:0e:bb:66:cb:24:e6:bb:c3:32:21:4b:0b:56: de:bc:b6:fc:9b:b3:7e:38:0f:bf:5e:ab:a5:b7:d0:67:34:0e: 7c:b9:e8:9c:13:b0:80:b8:7a:12:32:fd:d2:3b:ca:f2:04:33: 63:89:a5:f7:82:f8:d2:0f:d2:bf:5c:8d:b8:3d:55:64:9d:a5: 1a:2c:95:17:e6:15:20:6f:48:f8:51:0b:1e:03:60:7a:c1:6a: 17:46:61:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwODA4MTc0MTE5WhcNMjUwODE1MTc0MTE5WjAYMRYwFAYD VQQDEw02ODk2MzZiZi0zY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1BfV991XDs+jY9Fd/jvxs85ID+klKCFlq0BbE1Dr7e1sDkWUD8oU3xEJlRWX Jac1W2xc+UUeF+RoIw6JHhhoYgZtPunZBz0eSrT5/mA3H2Cm7ErY/mIrAEZrkQ5i g4e/jUFbF+DuxIGUTfamlKX9kCsM+GaBTqDyVZe9xMnymUdXcm6Rxuvr+EMCiNnB f8ht95OOjmCgzH1Zgh+vxsm7zKxL3/kaBCkfAX4cOWccFIvGca1nRVmg62QlfVwN UCacPVXA9v5buzA3Dzl8W7Hx3Pv4cAWTbJciJa3BD8C6O/M5BsBeLMpxl/FOMS2Z BARXunK3YTQnllfi8mdvu656OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNp2AKS mC4HSA7ctSu9Bb9ujFCeMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ+ILeTLDAcpq7BG+Tnp44qfcV5/BRN1IINxzxZVlOY733utN+Jsyl c32038gNxLxwyq232kbi8qopucEGDhDrgq9N9/Vaub6Vjk069kc+pVzXXWNpDJB/ tQUf55YaYLcSA4p6uyFhPyqdBDb3Pt9wMZy6cgMyVFK8O6iM90DMl9+u5AbFb+qU J80fiJhPMIft9anQTNjg0s+zEW4rSIbGwBBMQ4W/Cg67Zssk5rvDMiFLC1bevLb8 m7N+OA+/Xqult9BnNA58ueicE7CAuHoSMv3SO8ryBDNjiaX3gvjSD9K/XI24PVVk naUaLJUX5hUgb0j4UQseA2B6wWoXRmE1 -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:41 2025 by rpki-client