$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json) Hash identifier: SVk2ViNowpQY78XtKOQ3xLyta7wBChfp6nwELkDG/PU= Subject key identifier: 86:E8:4F:B6:EB:6F:3F:79:C3:1C:D7:0A:15:1F:41:12:34:8A:27:0F Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft Manifest number: 10 Signing time: Sat 09 Aug 2025 08:35:29 +0000 Manifest this update: Sat 09 Aug 2025 08:35:28 +0000 Manifest next update: Sat 16 Aug 2025 08:35:28 +0000 Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: IbSXQEYE4lX4cGOQ+AJhATbx+DKDWjyEtDFmTA1WPGY=) 2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: QfOLWdJ3P41WbgaABeuC3OluZff7oMV/GJPRbloorX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Validity Not Before: Aug 9 08:35:28 2025 GMT Not After : Aug 16 08:35:28 2025 GMT Subject: CN=68970850-1bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:42:b7:24:1e:5a:01:a0:c4:e3:63:04:2a: 01:49:01:df:04:a3:34:f5:b6:db:dc:e7:77:17:f7: f3:db:48:5f:59:4b:af:b6:87:da:c5:2c:04:be:4b: 9a:ee:3f:d8:5b:0c:1a:76:3d:4f:2a:21:99:2c:1e: 2d:49:fb:f7:e2:b7:07:23:81:3a:87:d6:54:06:76: c9:4e:17:c9:39:5d:33:a0:9c:46:a5:97:14:b0:9a: b2:25:63:7a:5d:07:1b:e0:9c:77:48:60:a2:56:65: 32:ec:99:0e:c3:82:af:d8:02:95:40:cf:99:0e:28: 5b:cd:68:36:74:1b:e3:a0:ba:83:fe:51:17:d9:01: a1:d1:d4:25:1d:0b:18:c6:4c:ec:48:23:ec:0e:cb: 3a:ed:16:fd:9a:ff:be:c6:45:ee:a3:aa:03:cb:2e: c1:68:85:83:c9:f2:d3:4a:93:7a:7e:4b:a1:7f:e9: ba:c2:61:13:be:b4:1f:f6:28:73:49:6e:6b:a7:ab: 4e:80:2f:6e:4f:7e:67:ad:f6:15:79:48:21:38:08: a8:91:c3:87:9f:b6:dd:5b:5b:e7:86:df:a9:d0:68: 32:ac:ea:62:21:aa:5e:f7:a1:e6:49:92:94:81:5f: c5:6a:7e:0f:13:19:4b:f1:f2:9b:26:2b:d8:15:23: 11:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E8:4F:B6:EB:6F:3F:79:C3:1C:D7:0A:15:1F:41:12:34:8A:27:0F X509v3 Authority Key Identifier: keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:c6:1b:fc:60:4e:bc:e7:d6:a1:4c:21:0e:2c:90:34:6a:d8: ac:4a:53:09:ef:4a:5f:7e:cd:8a:b0:01:8f:69:bd:e4:47:60: 23:95:44:ca:4e:4d:2a:0f:8d:81:7b:d7:6a:15:76:f5:71:9e: 20:d2:8a:9d:dd:21:9c:c0:95:c7:06:7e:21:0a:e5:24:d8:cd: 4d:ed:ec:b3:4b:f7:fa:eb:d0:3b:36:e2:89:c8:7d:62:11:dc: 03:84:5f:87:7e:9a:30:d4:b7:78:03:e3:80:ed:16:3e:52:1f: eb:1d:72:52:89:99:70:1b:18:bd:23:79:32:6f:2f:36:0d:a6: e7:78:bf:48:f8:c1:50:46:9a:84:22:fa:1a:d3:81:cb:23:d6: f1:17:ca:a8:9d:1d:e7:48:7e:b7:e0:a8:e5:54:40:1a:14:76: 1c:2b:52:e3:5b:18:a9:5f:86:0c:aa:6a:78:71:eb:30:ec:44: 4c:4f:c3:c3:18:3e:e4:a2:ef:86:5f:5f:bb:06:2e:e6:7d:ad: 3f:7e:be:11:3d:b7:8f:42:3d:5a:c4:fd:8d:04:2e:78:a7:be: e9:fa:d5:7c:3e:01:99:06:09:39:ca:d6:80:0a:27:54:ae:c9: 6c:cd:f1:84:22:87:37:1d:66:3b:21:7e:c2:11:fb:4f:41:79: 4d:17:aa:01 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF QjM3NjkwNzAeFw0yNTA4MDkwODM1MjhaFw0yNTA4MTYwODM1MjhaMBgxFjAUBgNV BAMTDTY4OTcwODUwLTFiYWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGM0K3JB5aAaDE42MEKgFJAd8EozT1ttvc53cX9/PbSF9ZS6+2h9rFLAS+S5ru P9hbDBp2PU8qIZksHi1J+/fitwcjgTqH1lQGdslOF8k5XTOgnEallxSwmrIlY3pd BxvgnHdIYKJWZTLsmQ7Dgq/YApVAz5kOKFvNaDZ0G+OguoP+URfZAaHR1CUdCxjG TOxII+wOyzrtFv2a/77GRe6jqgPLLsFohYPJ8tNKk3p+S6F/6brCYRO+tB/2KHNJ bmunq06AL25Pfmet9hV5SCE4CKiRw4eftt1bW+eG36nQaDKs6mIhql73oeZJkpSB X8Vqfg8TGUvx8psmK9gVIxFLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhuhPtutv P3nDHNcKFR9BEjSKJw8wHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0 QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF RTFVOFJxcGRpSS1zM2FRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEfGG/xgTrzn1qFMIQ4skDRq2KxKUwnvSl9+zYqwAY9pveRHYCOVRMpO TSoPjYF712oVdvVxniDSip3dIZzAlccGfiEK5STYzU3t7LNL9/rr0Ds24onIfWIR 3AOEX4d+mjDUt3gD44DtFj5SH+sdclKJmXAbGL0jeTJvLzYNpud4v0j4wVBGmoQi +hrTgcsj1vEXyqidHedIfrfgqOVUQBoUdhwrUuNbGKlfhgyqanhx6zDsRExPw8MY PuSi74ZfX7sGLuZ9rT9+vhE9t49CPVrE/Y0ELninvun61Xw+AZkGCTnK1oAKJ1Su yWzN8YQihzcdZjshfsIR+09BeU0XqgE= -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:45 2025 by rpki-client