$ rpki-client -vvf rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft File: FWV3K3tOvoUEnSr5syrMh4AxGl0.mft (raw, json) Hash identifier: ls+2ZmxacJd/I9raz04z9ZNWB3sX+6ccys7SXF6jO8I= Subject key identifier: E8:2A:D2:1F:DF:62:78:F1:22:BC:F6:2B:C7:E2:93:D4:76:4E:7F:08 Authority key identifier: 15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D Certificate issuer: /CN=A91251AD/serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Certificate serial: 03DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft Manifest number: 03D3 Signing time: Sat 23 Aug 2025 00:51:08 +0000 Manifest this update: Sat 23 Aug 2025 00:51:08 +0000 Manifest next update: Sat 30 Aug 2025 00:51:08 +0000 Files and hashes: 1: FWV3K3tOvoUEnSr5syrMh4AxGl0.crl (hash: 2tRybXdHajYXtAfQvGf2PIcifsRMMjBEiT7549KcqOY=) 2: D2FE3A16501411F084311D4CC4F9AE02.roa (hash: sczNDr9Uf1o14TeMLvhQpR0Eoi4DkVd7EM/ILBPX2f8=) 3: EB9FE0C2500C11F0AC93B675C4F9AE02.roa (hash: ZEuV8rnSTrAUL1+f9B0DJgZDQV0kGj4jMARqkjlC+9I=) 4: 2106E428992111EC99E0095AC4F9AE02.roa (hash: E9NEqlH96lKzIMQJHYm3U7gAA+i7maF4xaW2S95jQF0=) 5: 412371002A5911F08EA23244C4F9AE02.roa (hash: nv5XmU97C++H82vtSbaW06zkLpVOeaF9Xg49KK/5bYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 987 (0x3db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91251AD, serialNumber=1565772B7B4EBE85049D2AF9B32ACC8780311A5D Validity Not Before: Aug 23 00:51:08 2025 GMT Not After : Aug 30 00:51:08 2025 GMT Subject: CN=68a9107c-b5dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:45:7d:cc:fa:02:96:86:37:b3:6e:b3:10: 5b:01:30:36:2d:de:9f:04:64:b7:c7:30:02:9f:6b: 79:84:df:57:d1:f5:c8:7b:af:bb:6a:ae:82:f6:2d: b2:1c:aa:15:c9:37:c5:43:1a:bc:d1:65:b1:54:c8: ad:b8:7b:f5:9b:47:33:57:b8:34:2b:6f:91:02:8f: 30:bd:70:cd:be:0e:b2:a2:bd:86:ec:2d:41:9e:51: 8e:7e:e8:0e:f7:b2:5a:7b:13:c1:89:08:37:c8:f1: 19:f3:54:b7:1a:35:6d:dd:d0:db:ee:5c:d9:92:8c: a2:27:72:b3:77:5a:b1:c8:c6:2b:51:73:63:a0:f7: f5:b3:d4:02:80:dc:6e:71:82:ea:f6:35:f5:56:e8: 7e:1c:94:ae:e2:e0:be:f2:da:38:44:eb:04:fe:80: 5d:22:81:e3:e0:5e:a0:6b:86:5c:9b:90:77:44:f6: 82:ca:d3:08:d6:2b:d7:f5:ed:9a:b7:3e:03:d7:68: 8b:35:c3:be:f5:1d:a0:a8:05:ee:47:26:13:28:59: f5:b5:21:ef:31:c5:fd:bd:05:de:21:fc:ad:b8:9b: 29:bb:ba:e5:da:56:72:85:72:07:61:7d:35:7f:3b: fb:92:7e:75:5b:09:af:b3:3c:12:38:fe:ad:4a:f3: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2A:D2:1F:DF:62:78:F1:22:BC:F6:2B:C7:E2:93:D4:76:4E:7F:08 X509v3 Authority Key Identifier: keyid:15:65:77:2B:7B:4E:BE:85:04:9D:2A:F9:B3:2A:CC:87:80:31:1A:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWV3K3tOvoUEnSr5syrMh4AxGl0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91251AD/8FDDF5E8991D11EC80939A54C4F9AE02/FWV3K3tOvoUEnSr5syrMh4AxGl0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:20:b0:02:01:e4:49:3f:53:67:4a:f6:56:0a:39:c7:99:fe: c3:dc:38:4b:79:66:e4:13:92:39:63:5e:d5:20:f5:07:34:24: 80:03:ef:3e:87:21:25:1f:8a:19:46:af:37:36:32:46:07:3d: 16:c8:90:ca:c3:ce:13:fb:5a:89:6b:63:00:59:ad:ba:bb:00: 25:df:1e:41:f9:d3:1f:82:0f:1b:e3:4b:73:4d:34:34:d7:2d: ea:c1:dc:03:ae:de:e9:d3:9f:ac:ca:97:26:01:26:7c:8f:98: b7:f8:bc:0a:41:b9:d3:9d:a0:f3:22:f9:36:ac:43:3c:46:5b: 8b:66:87:28:b3:b6:70:df:d0:23:d3:cc:5f:38:fc:60:20:63: e5:9c:c5:3c:f7:30:7d:a9:a2:06:4b:84:3d:1c:f2:ca:c0:8c: e2:77:8b:b8:35:ca:c1:36:f6:83:6f:31:85:49:a7:d4:c8:2b: 23:03:88:43:78:e2:06:db:ee:37:96:15:27:cf:99:92:c8:09: bf:e1:49:eb:6d:8f:fa:8d:a0:09:d8:d6:5c:7d:4e:34:64:98: 39:03:0f:c0:e1:fe:19:bf:d6:ac:b5:a6:7f:b2:46:94:56:2e: f2:a4:7f:5f:d7:fc:19:85:f3:ab:b7:9f:3f:9d:6d:5f:38:9c: f3:8e:8a:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUxQUQxMTAvBgNVBAUTKDE1NjU3NzJCN0I0RUJFODUwNDlEMkFGOUIzMkFDQzg3 ODAzMTFBNUQwHhcNMjUwODIzMDA1MTA4WhcNMjUwODMwMDA1MTA4WjAYMRYwFAYD VQQDEw02OGE5MTA3Yy1iNWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvEJFfcz6ApaGN7NusxBbATA2Ld6fBGS3xzACn2t5hN9X0fXIe6+7aq6C9i2y HKoVyTfFQxq80WWxVMituHv1m0czV7g0K2+RAo8wvXDNvg6yor2G7C1BnlGOfugO 97JaexPBiQg3yPEZ81S3GjVt3dDb7lzZkoyiJ3Kzd1qxyMYrUXNjoPf1s9QCgNxu cYLq9jX1Vuh+HJSu4uC+8to4ROsE/oBdIoHj4F6ga4Zcm5B3RPaCytMI1ivX9e2a tz4D12iLNcO+9R2gqAXuRyYTKFn1tSHvMcX9vQXeIfytuJspu7rl2lZyhXIHYX01 fzv7kn51WwmvszwSOP6tSvOkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgq0h/f YnjxIrz2K8fik9R2Tn8IMB8GA1UdIwQYMBaAFBVldyt7Tr6FBJ0q+bMqzIeAMRpd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTFBRC84RkRERjVFODk5 MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3ZvVUVuU3I1c3lyTWg0QXhH bDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZXVjNLM3RPdm9VRW5TcjVzeXJNaDRBeEdsMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTFBRC84RkRERjVFODk5MUQxMUVDODA5MzlBNTRDNEY5QUUwMi9GV1YzSzN0T3Zv VUVuU3I1c3lyTWg0QXhHbDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3ILACAeRJP1NnSvZWCjnHmf7D3DhLeWbkE5I5Y17VIPUHNCSAA+8+ hyElH4oZRq83NjJGBz0WyJDKw84T+1qJa2MAWa26uwAl3x5B+dMfgg8b40tzTTQ0 1y3qwdwDrt7p05+sypcmASZ8j5i3+LwKQbnTnaDzIvk2rEM8RluLZocos7Zw39Aj 08xfOPxgIGPlnMU89zB9qaIGS4Q9HPLKwIzid4u4NcrBNvaDbzGFSafUyCsjA4hD eOIG2+43lhUnz5mSyAm/4UnrbY/6jaAJ2NZcfU40ZJg5Aw/A4f4Zv9astaZ/skaU Vi7ypH9f1/wZhfOrt58/nW1fOJzzjorg -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:55 2025 by rpki-client