$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft File: FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft (raw, json) Hash identifier: iYDm37sVTnIHNcsmWbs52PjA2ZHnXodbvF2fFAPdpNM= Subject key identifier: 50:D5:E8:19:10:EF:E6:0E:0D:BC:EA:F1:75:20:AD:59:42:2E:A5:C2 Authority key identifier: 16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 Certificate issuer: /CN=A91F6E7D/serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Certificate serial: 09E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft Manifest number: 09DF Signing time: Fri 08 Aug 2025 20:14:32 +0000 Manifest this update: Fri 08 Aug 2025 20:14:32 +0000 Manifest next update: Fri 15 Aug 2025 20:14:32 +0000 Files and hashes: 1: FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl (hash: TMIz7dQxwK5E1RPNWQXz9976v+K0sy2glUwA48O+maM=) 2: 4AEB32A2D2F911EA93B2C659C4F9AE02.roa (hash: TMxL1xAZ65D51is8H5Va3LgyajI14UzGu3dizhDhFWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2535 (0x9e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=1613D6EBFCD849CFCC0A888DB97E6BBF5207ADB3 Validity Not Before: Aug 8 20:14:32 2025 GMT Not After : Aug 15 20:14:32 2025 GMT Subject: CN=68965aa8-3e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b3:f2:c0:74:dd:05:89:fc:24:c5:67:4a:0e: 09:1f:03:82:5e:c5:85:53:12:1c:35:8a:84:8b:d2: 48:a3:d7:78:b4:7d:23:d7:ff:82:ca:a8:59:08:07: 8c:0e:f7:4c:17:ea:c5:47:75:30:f0:ea:48:bf:d9: a8:01:6f:c9:ca:ed:81:5f:09:d7:02:89:d6:d8:09: ad:6b:40:5f:e1:cd:51:d1:ac:6e:34:19:b6:42:dd: db:34:b4:df:fe:c2:73:c0:d5:d4:d9:47:64:c1:86: 2f:13:f5:df:88:99:b4:1e:26:5a:73:43:ec:4d:62: 80:df:fb:7e:b3:ba:e5:c6:ec:39:9a:da:bb:f1:63: e9:07:3f:5f:3f:8a:27:be:a3:8a:1c:4b:b8:44:43: c0:f6:2d:de:30:0e:53:97:c3:3d:07:a2:3b:7b:51: ef:11:9e:37:a9:f4:8a:a9:89:1f:5d:cf:cf:ca:9a: de:fd:14:d9:d6:5d:13:b6:28:a6:36:6e:95:89:44: 83:61:ff:96:a3:44:a7:e3:25:f5:c3:dc:ee:f8:ee: a4:0a:c0:5c:88:7d:50:fe:60:4b:65:e2:1e:60:96: de:6a:a1:e1:b3:a0:13:c6:9c:6a:d4:b1:a4:6a:90: 7d:68:e8:d4:8a:c6:a4:3d:ee:15:f0:49:a8:b0:fc: e6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D5:E8:19:10:EF:E6:0E:0D:BC:EA:F1:75:20:AD:59:42:2E:A5:C2 X509v3 Authority Key Identifier: keyid:16:13:D6:EB:FC:D8:49:CF:CC:0A:88:8D:B9:7E:6B:BF:52:07:AD:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhPW6_zYSc_MCoiNuX5rv1IHrbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1E9A11C2838111EAACB9BC30C4F9AE02/FhPW6_zYSc_MCoiNuX5rv1IHrbM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:d2:96:f0:e3:de:6d:78:02:50:a3:5e:7e:e2:67:0f:c4:e4: ec:38:7a:67:db:75:b1:c4:5e:16:47:57:e4:27:d1:85:26:f5: 78:18:13:e1:38:87:3a:10:7b:a9:60:9a:44:8f:3b:f6:85:76: 64:b6:41:9f:95:4b:2d:81:7b:b3:26:44:ad:e2:3a:56:44:62: 45:cf:02:36:ad:18:eb:1f:91:24:bf:11:f7:33:b9:81:15:61: cc:53:b4:9b:c0:e0:78:91:d7:e7:58:71:06:97:c4:19:18:87: 06:59:18:e3:96:08:2a:b5:6c:e0:f9:ee:ac:38:67:94:16:70: cf:c4:e1:c2:f5:54:07:6b:62:ba:6b:a4:86:bc:77:b9:9d:d7: 16:03:d3:22:17:53:80:16:25:d0:29:00:48:17:93:b3:62:8a: 03:d3:5f:42:93:30:53:ef:64:bc:13:3a:65:ef:f9:40:27:b7: fc:44:85:6a:49:fb:ec:c9:41:82:20:e3:85:3f:fc:f3:1e:af: 12:4e:e1:ad:c8:9c:cc:d6:90:e6:08:a8:72:2b:69:c1:13:d3: 39:8e:d1:d2:99:64:8d:01:95:30:88:19:ee:fe:66:e8:4c:a0: be:5b:98:33:59:25:4c:d0:1a:c7:b0:39:cb:bf:b8:5a:3e:f2: 0f:b9:a3:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDE2MTNENkVCRkNEODQ5Q0ZDQzBBODg4REI5N0U2QkJG NTIwN0FEQjMwHhcNMjUwODA4MjAxNDMyWhcNMjUwODE1MjAxNDMyWjAYMRYwFAYD VQQDEw02ODk2NWFhOC0zZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9LPywHTdBYn8JMVnSg4JHwOCXsWFUxIcNYqEi9JIo9d4tH0j1/+CyqhZCAeM DvdMF+rFR3Uw8OpIv9moAW/Jyu2BXwnXAonW2Amta0Bf4c1R0axuNBm2Qt3bNLTf /sJzwNXU2UdkwYYvE/XfiJm0HiZac0PsTWKA3/t+s7rlxuw5mtq78WPpBz9fP4on vqOKHEu4REPA9i3eMA5Tl8M9B6I7e1HvEZ43qfSKqYkfXc/Pypre/RTZ1l0Ttiim Nm6ViUSDYf+Wo0Sn4yX1w9zu+O6kCsBciH1Q/mBLZeIeYJbeaqHhs6ATxpxq1LGk apB9aOjUisakPe4V8EmosPzmKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDV6BkQ 7+YODbzq8XUgrVlCLqXCMB8GA1UdIwQYMBaAFBYT1uv82EnPzAqIjbl+a79SB62z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xRTlBMTFDMjgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNjX01Db2lOdVg1cnYxSUhy Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZoUFc2X3pZU2NfTUNvaU51WDVydjFJSHJiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xRTlBMTFDMjgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9GaFBXNl96WVNj X01Db2lOdVg1cnYxSUhyYk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA10pbw495teAJQo15+4mcPxOTsOHpn23WxxF4WR1fkJ9GFJvV4GBPh OIc6EHupYJpEjzv2hXZktkGflUstgXuzJkSt4jpWRGJFzwI2rRjrH5EkvxH3M7mB FWHMU7SbwOB4kdfnWHEGl8QZGIcGWRjjlggqtWzg+e6sOGeUFnDPxOHC9VQHa2K6 a6SGvHe5ndcWA9MiF1OAFiXQKQBIF5OzYooD019CkzBT72S8Ezpl7/lAJ7f8RIVq SfvsyUGCIOOFP/zzHq8STuGtyJzM1pDmCKhyK2nBE9M5jtHSmWSNAZUwiBnu/mbo TKC+W5gzWSVM0BrHsDnLv7haPvIPuaMw -----END CERTIFICATE-----Generated at Sun Aug 10 14:01:19 2025 by rpki-client