$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft File: fn-3i_rxIdy3dJPgd5raTNDVmBo.mft (raw, json) Hash identifier: mt9vvGvnChDuHUctlyU/qML1v45iAg+MNTM4NMbsPHg= Subject key identifier: 98:8E:C7:38:94:85:BA:7D:2E:DC:A0:73:66:B3:91:E4:9C:D6:88:5C Authority key identifier: 7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A Certificate issuer: /CN=A91DE7DE/serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Certificate serial: 1186 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft Manifest number: 117F Signing time: Sun 10 Aug 2025 17:13:40 +0000 Manifest this update: Sun 10 Aug 2025 17:13:39 +0000 Manifest next update: Sun 17 Aug 2025 17:13:39 +0000 Files and hashes: 1: fn-3i_rxIdy3dJPgd5raTNDVmBo.crl (hash: RjEPUSgUXMt1qNKNAFH/joYoWAMdmMVbKqj1Wl4ZpdU=) 2: D728B250060011F0A0448C64C4F9AE02.roa (hash: 63yl1Teyi3N0la02MDXzZvU9fOguPMEqkEgxVdH5wiQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4486 (0x1186) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE7DE, serialNumber=7E7FB78BFAF121DCB77493E0779ADA4CD0D5981A Validity Not Before: Aug 10 17:13:39 2025 GMT Not After : Aug 17 17:13:39 2025 GMT Subject: CN=6898d344-a10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:ee:d6:60:ea:cc:07:e0:84:3d:45:6e:6c: ae:88:ba:33:6f:c0:f8:58:74:fb:f7:e6:62:74:2b: 62:e5:cc:13:f4:34:3c:6d:e0:4b:93:d2:e1:e9:a2: ee:72:a9:75:71:be:89:25:ad:45:63:63:1f:71:b6: d0:01:34:b1:41:28:5c:e3:5b:b1:18:55:ad:63:bb: d0:aa:3f:17:db:1e:c6:dd:07:35:76:f0:0f:b5:6f: ca:e5:1b:3f:45:31:44:18:ed:37:2b:58:c9:83:2e: 2c:53:76:02:c0:94:a3:7f:a9:2f:c6:5b:5f:03:73: c3:56:61:63:ad:e2:fb:c8:fb:0e:dc:97:d1:9a:72: dd:f6:ac:b3:90:79:ba:c7:3e:1b:50:57:c9:cc:4e: b6:5f:40:d2:b0:49:ad:36:e5:14:9a:e0:4c:82:af: 9d:e1:64:ff:07:f5:7e:5c:71:36:72:b8:8a:f8:c9: e1:cf:87:b3:6a:d6:fd:26:db:a6:91:c9:31:2d:e9: be:9e:2c:8f:44:76:c1:12:24:8e:68:b4:66:71:96: 52:9d:ac:ef:c4:9b:ee:97:f1:cd:07:8a:8f:ac:69: f1:05:04:74:ca:e5:5e:82:d4:75:7c:4c:9d:6a:f0: e4:f3:21:a6:ac:8f:96:b3:86:c0:e5:d0:2b:ab:34: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8E:C7:38:94:85:BA:7D:2E:DC:A0:73:66:B3:91:E4:9C:D6:88:5C X509v3 Authority Key Identifier: keyid:7E:7F:B7:8B:FA:F1:21:DC:B7:74:93:E0:77:9A:DA:4C:D0:D5:98:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fn-3i_rxIdy3dJPgd5raTNDVmBo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE7DE/C332AFB604E111E98EA7D872C4F9AE02/fn-3i_rxIdy3dJPgd5raTNDVmBo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a9:b7:c1:39:73:26:42:ad:a5:14:97:d8:b2:e9:c9:43:ab: 5b:a2:6a:12:2a:b7:5d:66:83:bc:4f:60:47:9e:84:ae:36:cf: df:11:09:ab:35:ac:94:86:19:44:61:4d:64:f9:c4:4c:14:a7: 47:09:3e:3a:9b:37:ad:5a:17:a2:18:0f:5e:0b:96:3d:f8:e0: fa:7b:00:aa:a0:b3:9e:a3:4c:60:12:6b:19:83:4a:bc:79:60: 89:5b:5c:58:f2:d5:4b:3b:fa:aa:3e:88:ff:19:04:fe:d6:b9: ae:ff:3e:ce:0e:38:11:2a:da:25:71:f0:60:a4:63:13:f4:f1: 7a:58:53:b1:c4:6e:14:cb:8d:f9:19:69:68:b3:a2:68:d7:62: 4d:5d:2a:37:f6:94:40:8b:d1:c2:31:43:c3:f8:0f:b5:b0:08: eb:4b:9a:7c:2b:8a:66:52:46:ff:ca:a1:e1:51:1c:86:69:9c: 26:53:4a:4d:2f:1d:51:b8:e0:51:55:7c:15:7c:05:d9:18:73: 3c:57:ce:27:39:34:2a:0d:69:bf:dc:85:ca:e6:f1:f7:30:08: 0b:7b:55:7c:90:24:3b:8d:bc:34:89:ad:d5:39:f9:21:5c:54: ab:3f:14:38:45:04:88:14:6a:8c:17:ad:3b:37:30:af:16:f7: 02:eb:a4:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU3REUxMTAvBgNVBAUTKDdFN0ZCNzhCRkFGMTIxRENCNzc0OTNFMDc3OUFEQTRD RDBENTk4MUEwHhcNMjUwODEwMTcxMzM5WhcNMjUwODE3MTcxMzM5WjAYMRYwFAYD VQQDEw02ODk4ZDM0NC1hMTBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGDu1mDqzAfghD1FbmyuiLozb8D4WHT79+ZidCti5cwT9DQ8beBLk9Lh6aLu cql1cb6JJa1FY2MfcbbQATSxQShc41uxGFWtY7vQqj8X2x7G3Qc1dvAPtW/K5Rs/ RTFEGO03K1jJgy4sU3YCwJSjf6kvxltfA3PDVmFjreL7yPsO3JfRmnLd9qyzkHm6 xz4bUFfJzE62X0DSsEmtNuUUmuBMgq+d4WT/B/V+XHE2criK+Mnhz4ezatb9Jtum kckxLem+niyPRHbBEiSOaLRmcZZSnazvxJvul/HNB4qPrGnxBQR0yuVegtR1fEyd avDk8yGmrI+Ws4bA5dArqzRSNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiOxziU hbp9Ltygc2azkeSc1ohcMB8GA1UdIwQYMBaAFH5/t4v68SHct3ST4Hea2kzQ1Zga MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTdERS9DMzMyQUZCNjA0 RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElkeTNkSlBnZDVyYVRORFZt Qm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ZuLTNpX3J4SWR5M2RKUGdkNXJhVE5EVm1Cby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTdERS9DMzMyQUZCNjA0RTExMUU5OEVBN0Q4NzJDNEY5QUUwMi9mbi0zaV9yeElk eTNkSlBnZDVyYVRORFZtQm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApqbfBOXMmQq2lFJfYsunJQ6tbomoSKrddZoO8T2BHnoSuNs/fEQmr NayUhhlEYU1k+cRMFKdHCT46mzetWheiGA9eC5Y9+OD6ewCqoLOeo0xgEmsZg0q8 eWCJW1xY8tVLO/qqPoj/GQT+1rmu/z7ODjgRKtolcfBgpGMT9PF6WFOxxG4Uy435 GWlos6Jo12JNXSo39pRAi9HCMUPD+A+1sAjrS5p8K4pmUkb/yqHhURyGaZwmU0pN Lx1RuOBRVXwVfAXZGHM8V84nOTQqDWm/3IXK5vH3MAgLe1V8kCQ7jbw0ia3VOfkh XFSrPxQ4RQSIFGqMF607NzCvFvcC66Ts -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:51 2025 by rpki-client