$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft File: -ffptMwx85XFzbj6yfUvyldSTeE.mft (raw, json) Hash identifier: IeWUxLwN9wZp7/gKMQxcRS1CCJaO2G85SEqx4Dwb8Ls= Subject key identifier: 3F:AD:3A:E7:B3:2F:D8:F9:73:F6:8B:C6:44:EC:62:71:7C:71:BB:D0 Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 Certificate issuer: /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Certificate serial: 02DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft Manifest number: 02C9 Signing time: Sat 23 Aug 2025 01:41:14 +0000 Manifest this update: Sat 23 Aug 2025 01:41:14 +0000 Manifest next update: Sat 30 Aug 2025 01:41:14 +0000 Files and hashes: 1: -ffptMwx85XFzbj6yfUvyldSTeE.crl (hash: V71HjlITfV79LU5n6PVuGx7UnyXGAPeFqlIgT/MYz88=) 2: 0EDE44B2797511EF9F3FEC4CC4F9AE02.roa (hash: NDIUMNLgNwlA3XdorfdGi7go+NI9mRVzxQ8Xlow0T8g=) 3: 14A16ED4F0C011EFB89A0131C4F9AE02.roa (hash: 7v3zrNq+442jAdZuC2gsCpXpLV0fHPfa8xoCxBp0rBk=) 4: DC7E1FA0474711F0A918DB1FC4F9AE02.roa (hash: 4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:41:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 733 (0x2dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1 Validity Not Before: Aug 23 01:41:14 2025 GMT Not After : Aug 30 01:41:14 2025 GMT Subject: CN=68a91c3a-cbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:74:73:9a:83:25:88:1d:91:a3:c7:55:3a:28: 0d:b4:a4:f9:8b:2f:03:fb:dd:4f:da:eb:c9:ff:9f: d6:0f:24:ea:6c:67:75:ac:17:d0:87:d6:60:fd:a5: 82:5d:c9:3f:f2:84:b0:d0:31:1e:72:fd:3e:09:eb: 1a:3f:ae:f7:06:b4:ee:a9:40:02:64:9a:ec:29:dc: 4f:df:45:f7:87:92:7b:e8:e0:26:47:3c:1f:63:ed: b1:c6:0e:3f:c7:19:e7:5b:d8:3f:aa:10:f6:84:57: 85:3c:41:65:59:66:33:91:c7:f1:3d:75:aa:96:a1: 99:fe:e0:a9:fd:ad:35:ee:07:aa:55:80:22:69:1a: 08:ab:bd:bd:1c:f6:db:a3:c2:d9:31:53:cf:bf:5a: c3:48:a6:eb:bd:f5:0e:67:9b:a0:f7:04:a6:3b:53: 95:05:e1:f9:73:15:39:ec:20:b6:6a:64:01:b7:92: a6:41:d0:aa:12:fa:9c:78:a9:44:0c:63:59:f0:da: 34:a9:bd:6b:3c:d1:2f:34:52:45:a7:25:f2:97:3b: 6d:83:32:93:27:0f:5b:74:0e:fb:21:97:e0:dd:c8: a9:c9:66:8d:7e:78:b3:d6:af:95:11:4d:04:c8:0e: fd:b4:52:55:37:72:ec:7c:ea:d7:e7:60:d9:7a:b2: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:AD:3A:E7:B3:2F:D8:F9:73:F6:8B:C6:44:EC:62:71:7C:71:BB:D0 X509v3 Authority Key Identifier: keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:1a:1f:e9:11:fc:56:bd:79:57:85:39:68:04:eb:c4:c0:9f: 4d:d3:49:d3:51:5b:3d:76:6c:ff:75:2d:71:62:97:8f:90:3d: cb:1b:4b:b0:a9:5d:4b:c2:06:6d:4a:5f:57:e7:8b:e2:ba:af: fc:29:9f:80:bf:e3:f6:58:28:df:b7:9f:3a:6a:88:9b:d4:5d: 14:11:4f:51:a3:68:d2:8c:4e:e4:ad:01:10:2d:e2:be:4c:8c: 95:33:97:03:7f:a3:96:68:ab:51:aa:5e:28:b7:f2:54:7f:98: a9:18:04:c5:4d:95:40:5c:fb:6d:05:6a:68:93:e9:f4:45:90: f3:7d:8e:e8:da:bc:6d:bf:6b:1a:4c:27:cc:e2:0b:21:ed:47: 2b:47:28:5b:86:1a:14:d1:fd:75:5a:5f:ba:7a:42:47:38:61: b0:79:01:04:2e:93:48:b0:6e:11:b4:40:06:fb:d2:8d:41:82: aa:88:d2:53:36:23:90:a7:5f:8f:75:63:cc:53:28:dd:13:61: db:a6:32:d5:08:c4:89:50:ae:76:e1:ac:55:8c:dd:80:e9:f2: 96:48:42:b4:35:13:be:31:09:7d:1f:25:3e:86:f5:b6:97:29: ff:06:c9:fe:50:f4:03:7d:ba:f9:a4:cf:94:2b:55:0e:20:d1: e0:31:53:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRGRkExMTAvBgNVBAUTKEY5RjdFOUI0Q0MzMUYzOTVDNUNEQjhGQUM5RjUyRkNB NTc1MjRERTEwHhcNMjUwODIzMDE0MTE0WhcNMjUwODMwMDE0MTE0WjAYMRYwFAYD VQQDEw02OGE5MWMzYS1jYmJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HRzmoMliB2Ro8dVOigNtKT5iy8D+91P2uvJ/5/WDyTqbGd1rBfQh9Zg/aWC Xck/8oSw0DEecv0+CesaP673BrTuqUACZJrsKdxP30X3h5J76OAmRzwfY+2xxg4/ xxnnW9g/qhD2hFeFPEFlWWYzkcfxPXWqlqGZ/uCp/a017geqVYAiaRoIq729HPbb o8LZMVPPv1rDSKbrvfUOZ5ug9wSmO1OVBeH5cxU57CC2amQBt5KmQdCqEvqceKlE DGNZ8No0qb1rPNEvNFJFpyXylzttgzKTJw9bdA77IZfg3cipyWaNfniz1q+VEU0E yA79tFJVN3LsfOrX52DZerIupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+tOuez L9j5c/aLxkTsYnF8cbvQMB8GA1UdIwQYMBaAFPn36bTMMfOVxc24+sn1L8pXUk3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREZGQS9DRTgxQTUxNDAz MkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1WEZ6Ymo2eWZVdnlsZFNU ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1mZnB0TXd4ODVYRnpiajZ5ZlV2eWxkU1RlRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REZGQS9DRTgxQTUxNDAzMkMxMUVEQThDQjQwNkVDNEY5QUUwMi8tZmZwdE13eDg1 WEZ6Ymo2eWZVdnlsZFNUZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzGh/pEfxWvXlXhTloBOvEwJ9N00nTUVs9dmz/dS1xYpePkD3LG0uw qV1LwgZtSl9X54viuq/8KZ+Av+P2WCjft586aoib1F0UEU9Ro2jSjE7krQEQLeK+ TIyVM5cDf6OWaKtRql4ot/JUf5ipGATFTZVAXPttBWpok+n0RZDzfY7o2rxtv2sa TCfM4gsh7UcrRyhbhhoU0f11Wl+6ekJHOGGweQEELpNIsG4RtEAG+9KNQYKqiNJT NiOQp1+PdWPMUyjdE2HbpjLVCMSJUK524axVjN2A6fKWSEK0NRO+MQl9HyU+hvW2 lyn/Bsn+UPQDfbr5pM+UK1UOINHgMVPO -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:55 2025 by rpki-client