$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft File: FxesrAU_Ex4iYUUnNlE-To9ibNs.mft (raw, json) Hash identifier: i3GPayYfwemMmsg3XArOEs7iQ9xnZQ+dTkVM8PjRHXA= Subject key identifier: 3F:5F:9C:3C:56:E3:56:49:17:F8:2C:EB:F5:7B:50:87:E6:1F:82:BB Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB Certificate issuer: /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Certificate serial: 0AFC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft Manifest number: 0AE4 Signing time: Fri 22 Aug 2025 19:33:36 +0000 Manifest this update: Fri 22 Aug 2025 19:33:35 +0000 Manifest next update: Fri 29 Aug 2025 19:33:35 +0000 Files and hashes: 1: FxesrAU_Ex4iYUUnNlE-To9ibNs.crl (hash: vzK9MVufQY/AKAxSJ58ip299LFAoGhyG4KAXTZ06CXs=) 2: 618A7D781F7111F09D1AC487C4F9AE02.roa (hash: dKwlV0sWG4z1v1VE3IcZIKnEPq5EIzoE6Vqo7I/hzas=) 3: 13321D24572211EA88CE445FC4F9AE02.roa (hash: O5ljMaLXjT5F5QYrN31gp31zcfvR+zM4AIkQWAKZEY4=) 4: 090D807E05F511EEBB8E1062C4F9AE02.roa (hash: UOh7++5vEfWh4Ro/LeqzWIUlR0tMNgzC3QTRX96GET8=) 5: 0878844205F511EEBB8E1062C4F9AE02.roa (hash: /6Err68K4WtTvTK2vN0EmkYV4fAmF1HeKbI8wzMjgSU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:33:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2812 (0xafc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB Validity Not Before: Aug 22 19:33:35 2025 GMT Not After : Aug 29 19:33:35 2025 GMT Subject: CN=68a8c610-7067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:45:31:df:06:cd:be:ef:2c:b3:32:03:0a:3f: 16:3e:03:a2:5e:07:03:fc:60:9a:4c:13:77:cc:18: 2d:f9:df:91:5f:7b:ee:4a:6b:9f:2a:00:4b:9e:75: 14:d5:32:b1:89:8a:3d:83:0a:51:39:64:da:80:f3: 53:cf:87:8a:69:3f:b9:0b:48:b2:8d:72:01:99:cc: fb:bc:24:0b:5f:6b:77:11:d1:13:ef:25:87:99:2f: e2:6a:b2:b1:12:2e:a9:73:29:53:ea:5f:23:81:1d: d8:68:a9:ce:05:af:3c:3c:da:80:95:20:97:60:54: bf:0b:f5:12:45:5e:aa:bb:dc:05:3a:c6:a1:bd:fb: 14:c6:87:70:a3:fa:ce:6d:26:df:33:01:19:c4:9a: 63:6d:d3:23:6e:f2:bb:ba:d0:82:11:8f:a9:37:20: f3:cc:2e:be:a2:74:ff:a7:fd:77:34:2e:cb:67:b2: 7d:fd:95:92:2f:43:18:ed:65:c1:3b:0f:b3:8f:1a: 5f:d1:67:00:75:30:9e:7c:cb:ba:2d:46:e3:57:2f: d0:9b:72:aa:8b:4c:cf:9a:47:b6:34:fa:78:46:dc: 41:01:70:c7:fb:60:5f:df:34:e7:54:0d:57:2f:7f: 1e:70:25:fd:ef:b4:8a:91:8b:10:68:26:26:24:cd: 95:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5F:9C:3C:56:E3:56:49:17:F8:2C:EB:F5:7B:50:87:E6:1F:82:BB X509v3 Authority Key Identifier: keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c2:20:44:c0:cb:9a:b6:05:2f:ab:77:a6:85:56:b9:0e:74: b4:67:49:a0:ee:6c:7b:cc:87:b5:b6:81:d0:08:e7:0c:81:bc: 29:04:7f:80:8c:52:9a:d4:fa:ea:68:3e:64:64:d1:a7:35:35: 1b:1a:8d:b9:3e:e8:48:cf:51:6e:70:3b:30:20:ef:ec:8d:6c: 65:39:04:ab:ed:64:51:fd:7d:a5:e4:ed:0f:d4:e0:c5:2d:1d: b6:54:40:6c:fb:15:de:c8:39:09:c7:93:1b:37:33:d4:3d:7b: 0e:43:af:e8:ee:4f:5f:4e:86:8d:dc:ac:c3:60:6d:cd:ca:c6: 84:48:6b:18:71:1c:73:4d:46:55:dd:91:4a:8a:1c:ac:ab:67: 9a:55:80:61:5a:43:02:86:fc:da:0d:db:2c:95:5c:5c:81:ba: c6:30:f0:04:4f:a5:df:ad:bc:d0:43:1c:15:37:32:1c:86:73: c9:cb:a1:41:68:f8:6d:6c:a7:0c:fe:a6:ba:b3:de:f2:ae:04: 7e:22:71:b4:f4:1a:2c:bd:5a:c6:94:50:40:20:87:4e:6e:3c: ae:2b:9d:c7:1a:23:1c:e6:37:8f:10:0c:df:d2:8b:1c:14:20: 83:1d:d1:6b:13:23:5b:01:95:a3:03:24:18:88:f4:5d:cb:7d: 18:14:28:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk4NkQxMTAvBgNVBAUTKDE3MTdBQ0FDMDUzRjEzMUUyMjYxNDUyNzM2NTEzRTRF OEY2MjZDREIwHhcNMjUwODIyMTkzMzM1WhcNMjUwODI5MTkzMzM1WjAYMRYwFAYD VQQDEw02OGE4YzYxMC03MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA70Ux3wbNvu8sszIDCj8WPgOiXgcD/GCaTBN3zBgt+d+RX3vuSmufKgBLnnUU 1TKxiYo9gwpROWTagPNTz4eKaT+5C0iyjXIBmcz7vCQLX2t3EdET7yWHmS/iarKx Ei6pcylT6l8jgR3YaKnOBa88PNqAlSCXYFS/C/USRV6qu9wFOsahvfsUxodwo/rO bSbfMwEZxJpjbdMjbvK7utCCEY+pNyDzzC6+onT/p/13NC7LZ7J9/ZWSL0MY7WXB Ow+zjxpf0WcAdTCefMu6LUbjVy/Qm3Kqi0zPmke2NPp4RtxBAXDH+2Bf3zTnVA1X L38ecCX977SKkYsQaCYmJM2VhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9fnDxW 41ZJF/gs6/V7UIfmH4K7MB8GA1UdIwQYMBaAFBcXrKwFPxMeImFFJzZRPk6PYmzb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTg2RC9BMDA3NEQxODUz M0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4NGlZVVVuTmxFLVRvOWli TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z4ZXNyQVVfRXg0aVlVVW5ObEUtVG85aWJOcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTg2RC9BMDA3NEQxODUzM0IxMUVBQkFBNzVCM0FDNEY5QUUwMi9GeGVzckFVX0V4 NGlZVVVuTmxFLVRvOWliTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8wiBEwMuatgUvq3emhVa5DnS0Z0mg7mx7zIe1toHQCOcMgbwpBH+A jFKa1PrqaD5kZNGnNTUbGo25PuhIz1FucDswIO/sjWxlOQSr7WRR/X2l5O0P1ODF LR22VEBs+xXeyDkJx5MbNzPUPXsOQ6/o7k9fToaN3KzDYG3NysaESGsYcRxzTUZV 3ZFKihysq2eaVYBhWkMChvzaDdsslVxcgbrGMPAET6XfrbzQQxwVNzIchnPJy6FB aPhtbKcM/qa6s97yrgR+InG09BosvVrGlFBAIIdObjyuK53HGiMc5jePEAzf0osc FCCDHdFrEyNbAZWjAyQYiPRdy30YFCjy -----END CERTIFICATE-----Generated at Sat Aug 23 10:32:50 2025 by rpki-client