$ rpki-client -vvf rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft File: FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft (raw, json) Hash identifier: U4S3DQFS1yuDMUo5o3XvarP1w18lD6omLzIOsQrEDCE= Subject key identifier: 86:04:4A:CB:38:1C:02:C2:BA:57:E0:C9:B7:CE:D8:32:C6:A7:B1:29 Authority key identifier: 15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 Certificate issuer: /CN=A912C15B/serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft Manifest number: 0156 Signing time: Sat 23 Aug 2025 04:16:27 +0000 Manifest this update: Sat 23 Aug 2025 04:16:26 +0000 Manifest next update: Sat 30 Aug 2025 04:16:26 +0000 Files and hashes: 1: FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl (hash: Wi036kjp5H9+Zo08lb1dIcV5sK/WSy8S2M3Syod/Oos=) 2: 76CF6D4C746E11EE8A2F7739C4F9AE02.roa (hash: EklU2yYDZmbaPYZyZPtK0kbQPPoSC3rB5vaEtJ2TbLI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C15B, serialNumber=15361347A10814A3E668B7269FE20707B18E7973 Validity Not Before: Aug 23 04:16:26 2025 GMT Not After : Aug 30 04:16:26 2025 GMT Subject: CN=68a9409b-aff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:b4:fa:37:d9:23:69:90:39:12:72:96:85: de:c1:20:b3:ae:e8:18:a7:5a:bc:a6:8f:41:16:ce: f0:36:45:b8:7e:29:1d:15:08:30:ed:da:c5:72:33: c9:3f:c2:3d:0e:c0:5d:79:46:17:42:0d:db:be:f2: 04:67:bb:8d:ca:4c:0a:70:1c:72:7b:1d:d2:dd:9c: 9f:8f:85:07:2f:2e:d6:8e:df:21:56:8a:a6:4d:b7: b8:14:0c:c0:4a:51:20:30:de:57:a0:48:5e:71:e5: ce:2b:20:3c:cb:53:4b:01:b7:50:af:c4:ef:86:c1: 62:75:33:71:06:2a:82:34:45:9f:0d:c1:23:53:45: 8d:e5:b5:c5:98:73:3e:fd:a0:0d:cc:34:e6:7b:8c: 89:cb:f7:7b:8e:40:12:9e:a6:a3:65:a3:b9:47:32: 60:c2:a1:b9:e8:8d:a5:40:df:94:97:94:6e:1a:87: ce:62:61:d8:27:75:33:a1:27:a2:6e:c4:7d:c0:6f: 78:86:81:ad:57:a5:e5:09:00:70:9b:51:78:41:06: bd:21:09:9b:5e:92:da:b5:48:24:71:fa:49:63:3a: 85:7e:67:11:8c:9c:0b:a1:1c:41:8e:fc:64:f0:05: e5:29:ea:73:73:77:2d:77:31:50:63:fc:a3:ef:94: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:04:4A:CB:38:1C:02:C2:BA:57:E0:C9:B7:CE:D8:32:C6:A7:B1:29 X509v3 Authority Key Identifier: keyid:15:36:13:47:A1:08:14:A3:E6:68:B7:26:9F:E2:07:07:B1:8E:79:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FTYTR6EIFKPmaLcmn-IHB7GOeXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C15B/E97DEF40746D11EE9E633C37C4F9AE02/FTYTR6EIFKPmaLcmn-IHB7GOeXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:72:e6:c8:ac:69:57:40:30:65:72:79:75:04:fb:26:68: 0a:3e:da:50:45:31:4e:80:65:5c:48:3d:b9:48:2b:dd:5b:0a: f0:42:39:e6:5e:53:a3:7b:2f:be:42:db:c1:09:98:07:0c:18: e3:36:14:82:c8:5a:2a:1b:29:ef:12:1e:4a:7a:d3:53:7c:b8: 79:f7:a4:89:66:d2:05:8b:76:9d:90:cd:8f:a5:b1:74:9d:0a: df:b7:19:a9:d4:aa:cd:9a:b8:eb:b2:72:33:5c:ba:f8:95:e8: 84:8d:f8:49:e8:a2:84:e0:3a:2c:a5:be:5c:ee:0e:39:3a:59: fb:ba:34:79:01:4e:c6:34:c2:aa:7c:dd:2f:b9:d6:6c:aa:58: fd:c0:9d:83:5b:a7:75:5c:d9:bc:8d:ad:ad:4b:af:6c:26:de: 53:fa:8f:50:82:06:04:4d:d4:95:f1:e0:d4:f9:49:3d:31:ae: 6e:3f:74:0c:e5:61:a9:a4:6f:30:2a:ed:31:9b:01:14:02:fc: f6:bd:0f:89:5b:f8:92:f8:52:ea:96:8b:28:a9:5b:69:96:0e: 77:77:aa:c6:5b:11:4b:6c:f0:0e:99:57:fa:0e:c2:84:3d:b4: 8f:61:64:d9:f0:e3:3d:68:c3:cb:c7:68:10:39:14:4d:b7:4b: 3a:08:37:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMxNUIxMTAvBgNVBAUTKDE1MzYxMzQ3QTEwODE0QTNFNjY4QjcyNjlGRTIwNzA3 QjE4RTc5NzMwHhcNMjUwODIzMDQxNjI2WhcNMjUwODMwMDQxNjI2WjAYMRYwFAYD VQQDEw02OGE5NDA5Yi1hZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkm0+jfZI2mQORJyloXewSCzrugYp1q8po9BFs7wNkW4fikdFQgw7drFcjPJ P8I9DsBdeUYXQg3bvvIEZ7uNykwKcBxyex3S3Zyfj4UHLy7Wjt8hVoqmTbe4FAzA SlEgMN5XoEheceXOKyA8y1NLAbdQr8TvhsFidTNxBiqCNEWfDcEjU0WN5bXFmHM+ /aANzDTme4yJy/d7jkASnqajZaO5RzJgwqG56I2lQN+Ul5RuGofOYmHYJ3UzoSei bsR9wG94hoGtV6XlCQBwm1F4QQa9IQmbXpLatUgkcfpJYzqFfmcRjJwLoRxBjvxk 8AXlKepzc3ctdzFQY/yj75QeJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIYESss4 HALCulfgybfO2DLGp7EpMB8GA1UdIwQYMBaAFBU2E0ehCBSj5mi3Jp/iBwexjnlz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzE1Qi9FOTdERUY0MDc0 NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZLUG1hTGNtbi1JSEI3R09l WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZUWVRSNkVJRktQbWFMY21uLUlIQjdHT2VYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzE1Qi9FOTdERUY0MDc0NkQxMUVFOUU2MzNDMzdDNEY5QUUwMi9GVFlUUjZFSUZL UG1hTGNtbi1JSEI3R09lWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCI93LmyKxpV0AwZXJ5dQT7JmgKPtpQRTFOgGVcSD25SCvdWwrwQjnm XlOjey++QtvBCZgHDBjjNhSCyFoqGynvEh5KetNTfLh596SJZtIFi3adkM2PpbF0 nQrftxmp1KrNmrjrsnIzXLr4leiEjfhJ6KKE4Dospb5c7g45Oln7ujR5AU7GNMKq fN0vudZsqlj9wJ2DW6d1XNm8ja2tS69sJt5T+o9QggYETdSV8eDU+Uk9Ma5uP3QM 5WGppG8wKu0xmwEUAvz2vQ+JW/iS+FLqlosoqVtplg53d6rGWxFLbPAOmVf6DsKE PbSPYWTZ8OM9aMPLx2gQORRNt0s6CDd6 -----END CERTIFICATE-----Generated at Sat Aug 23 13:19:49 2025 by rpki-client