$ rpki-client -vvf rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft File: FyPctBoEJopYeqzoz9na5fn1Hfc.mft (raw, json) Hash identifier: P5XJTB93scWx5l2zkBPrIasC66kAiiI+8Bjzx9HVOzs= Subject key identifier: 8E:11:44:8A:E8:98:EB:70:14:EC:AE:8C:46:F7:08:6C:BD:DF:BB:22 Authority key identifier: 17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 Certificate issuer: /CN=A9119DCB/serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft Manifest number: 07AD Signing time: Fri 22 Aug 2025 21:32:26 +0000 Manifest this update: Fri 22 Aug 2025 21:32:25 +0000 Manifest next update: Fri 29 Aug 2025 21:32:25 +0000 Files and hashes: 1: FyPctBoEJopYeqzoz9na5fn1Hfc.crl (hash: DF4Oos1uA0mTkGGDqu+hX6zIDyBXyoqkyUjn61K70Bo=) 2: 3CD29BF4D46911EE8B36431CC4F9AE02.roa (hash: eRh3STMZAaCuqDqQZCMcnNT2rNeo5Bk/5FuTVp0jQRg=) 3: 8037BC50EB2E11EDB835EF4AC4F9AE02.roa (hash: 9AUbM37b5CiLCdaFctD08Xg1S7rAzz8NUfqZj75vIUI=) 4: 7AA7B416E01011EEA1CA127CC4F9AE02.roa (hash: Ath/WU2ZkFdzqQ3oivM8Zg8QBrfw7L/kuNwCwRxLfag=) 5: 68DAAA1A749711EFB4EDA45FC4F9AE02.roa (hash: lqYCCMlU2p+r8Vr8oCvHriQYj28R9n24bUWS9AQiTY0=) 6: 2840D3A225FF11EBAF634966C4F9AE02.roa (hash: jMAptin7Nn/9ubjtB7+t/RBCpP9LLYksPnIclcQRTkk=) 7: 26D56F6425FF11EBAF634966C4F9AE02.roa (hash: Djj/jcA9qOYbqLWVcaOfucyuLejfqOjI1XLtoDbH2+E=) 8: 284E9E9E1D5611EB891ADC6CC4F9AE02.roa (hash: NCqMqwIpI4KCw7V6V+LHlzb+BzZa7gOeav4mNQAltOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:32:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119DCB, serialNumber=1723DCB41A04268A587AACE8CFD9DAE5F9F51DF7 Validity Not Before: Aug 22 21:32:25 2025 GMT Not After : Aug 29 21:32:25 2025 GMT Subject: CN=68a8e1e9-b4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:9d:dc:1b:4d:21:71:fe:35:96:bc:3d:23: db:8e:28:21:24:1c:21:93:a4:78:c5:b2:7d:0a:21: 23:78:51:b0:cf:0c:73:e1:3b:04:f0:a6:84:35:44: 30:19:a9:e8:07:29:8c:65:4b:a0:4e:35:da:81:f5: 7f:59:e0:0f:ac:d6:d2:78:35:2d:67:8d:1b:35:88: d6:47:51:c7:ca:28:3a:f3:be:de:80:24:73:5c:72: 63:2f:10:e7:2d:d7:6d:73:15:ef:7e:f0:8a:61:0f: dd:6c:a0:84:0a:01:c7:a9:9a:57:bd:bb:8a:7c:41: dd:a9:21:c1:d8:f1:d4:2d:bc:b9:67:c6:97:cb:8b: 8d:eb:f1:9a:1f:d0:2f:34:ac:a4:b2:e0:12:0d:96: ca:e1:9f:7d:db:b2:ca:02:d0:ec:62:59:9f:f0:af: ed:a1:43:70:f2:b4:c0:28:1e:63:6d:0f:67:9d:07: 39:57:4c:0b:7a:c3:ea:48:21:a5:08:d1:b7:0d:8f: f3:b8:7c:a8:e2:84:78:da:76:08:68:fa:5a:11:3d: fb:20:22:36:b6:e7:8a:fd:2d:fa:57:d0:ac:96:a8: 24:f7:35:b0:5b:1f:cb:01:10:43:3e:fa:88:c4:54: 74:3a:d9:17:ac:4f:d2:91:d9:0e:19:46:32:53:9e: 6a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:11:44:8A:E8:98:EB:70:14:EC:AE:8C:46:F7:08:6C:BD:DF:BB:22 X509v3 Authority Key Identifier: keyid:17:23:DC:B4:1A:04:26:8A:58:7A:AC:E8:CF:D9:DA:E5:F9:F5:1D:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FyPctBoEJopYeqzoz9na5fn1Hfc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119DCB/E4C0F56C187F11EBAE29692EC4F9AE02/FyPctBoEJopYeqzoz9na5fn1Hfc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:93:61:d9:99:7c:b2:bb:9a:8a:d9:d3:b7:94:00:c4:b7: a7:a3:9b:2d:53:27:c8:ce:94:48:7a:32:23:f3:31:e4:63:fb: 91:31:af:c1:1f:62:12:64:11:92:b6:80:26:9a:ab:6c:c0:63: 32:8e:d3:7c:16:f5:db:d5:75:30:b0:3e:f3:45:86:b5:63:14: 21:57:5b:84:c8:a4:26:b0:c4:3a:73:cf:02:bf:60:b0:7b:13: b8:d4:60:78:3a:b7:30:cc:a3:5c:ac:3b:90:8e:62:6a:4f:11: 45:c9:df:45:3a:6e:d1:c1:63:9f:6d:33:95:18:c6:cf:68:e4: d1:21:0c:0d:00:1e:e9:d1:95:f2:03:e5:e7:4f:51:8f:5d:6b: 95:f2:f6:84:2d:c5:8e:d7:03:29:41:14:39:db:90:4c:4b:1a: a0:cf:c7:1d:70:ca:73:f5:14:0d:52:3d:7f:70:c0:e0:1b:99: 9c:35:9a:76:98:02:d8:f9:7d:23:9d:b2:c7:53:bc:26:3a:07: 42:26:17:e0:9f:2f:9d:5d:7a:58:f8:6e:10:4b:d7:ce:34:67: 6b:e7:e1:b8:d0:38:cc:fe:f0:26:0a:16:73:e9:40:72:2a:54: ca:13:0d:f0:7b:2d:49:e2:24:1f:2b:23:2a:db:4b:2d:d3:a8: cd:38:31:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTlEQ0IxMTAvBgNVBAUTKDE3MjNEQ0I0MUEwNDI2OEE1ODdBQUNFOENGRDlEQUU1 RjlGNTFERjcwHhcNMjUwODIyMjEzMjI1WhcNMjUwODI5MjEzMjI1WjAYMRYwFAYD VQQDEw02OGE4ZTFlOS1iNGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14ad3BtNIXH+NZa8PSPbjighJBwhk6R4xbJ9CiEjeFGwzwxz4TsE8KaENUQw GanoBymMZUugTjXagfV/WeAPrNbSeDUtZ40bNYjWR1HHyig6877egCRzXHJjLxDn LddtcxXvfvCKYQ/dbKCECgHHqZpXvbuKfEHdqSHB2PHULby5Z8aXy4uN6/GaH9Av NKyksuASDZbK4Z9927LKAtDsYlmf8K/toUNw8rTAKB5jbQ9nnQc5V0wLesPqSCGl CNG3DY/zuHyo4oR42nYIaPpaET37ICI2tueK/S36V9Cslqgk9zWwWx/LARBDPvqI xFR0OtkXrE/SkdkOGUYyU55qZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI4RRIro mOtwFOyujEb3CGy937siMB8GA1UdIwQYMBaAFBcj3LQaBCaKWHqs6M/Z2uX59R33 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOURDQi9FNEMwRjU2QzE4 N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpvcFllcXpvejluYTVmbjFI ZmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z5UGN0Qm9FSm9wWWVxem96OW5hNWZuMUhmYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OURDQi9FNEMwRjU2QzE4N0YxMUVCQUUyOTY5MkVDNEY5QUUwMi9GeVBjdEJvRUpv cFllcXpvejluYTVmbjFIZmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFk5Nh2Zl8sruaitnTt5QAxLeno5stUyfIzpRIejIj8zHkY/uRMa/B H2ISZBGStoAmmqtswGMyjtN8FvXb1XUwsD7zRYa1YxQhV1uEyKQmsMQ6c88Cv2Cw exO41GB4OrcwzKNcrDuQjmJqTxFFyd9FOm7RwWOfbTOVGMbPaOTRIQwNAB7p0ZXy A+XnT1GPXWuV8vaELcWO1wMpQRQ525BMSxqgz8cdcMpz9RQNUj1/cMDgG5mcNZp2 mALY+X0jnbLHU7wmOgdCJhfgny+dXXpY+G4QS9fONGdr5+G40DjM/vAmChZz6UBy KlTKEw3wey1J4iQfKyMq20st06jNODHp -----END CERTIFICATE-----Generated at Sun Aug 24 09:33:44 2025 by rpki-client