$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json) Hash identifier: QtU31FT35ddF4icQku6gOBCA8Anw2pqtMOYph2Plsbk= Subject key identifier: 20:29:B7:47:62:80:3E:8F:D1:85:F8:3B:A0:52:18:47:F8:1C:A5:B1 Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Certificate serial: 0121 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft Manifest number: 011E Signing time: Sat 23 Aug 2025 05:00:19 +0000 Manifest this update: Sat 23 Aug 2025 05:00:18 +0000 Manifest next update: Sat 30 Aug 2025 05:00:18 +0000 Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: j4VlX64Wd9G37fTMR7xAkuD+28vgE4Fbh5yy5A4uNkM=) 2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: 7LY78H5hS+YFZuVbW5A4tc8w5yevBk0DBjddJ2jmN+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 289 (0x121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A Validity Not Before: Aug 23 05:00:18 2025 GMT Not After : Aug 30 05:00:18 2025 GMT Subject: CN=68a94ae3-e42e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:01:91:ff:15:f6:e2:15:44:1e:41:7e:af: 20:4d:8f:b7:8e:31:ac:b8:3e:e9:06:fc:13:06:8d: 95:74:29:3b:aa:e4:aa:63:92:b6:eb:4b:48:1e:ac: 76:9a:ab:ba:09:91:5d:0c:a7:8b:b8:db:0d:23:18: 18:ce:0d:24:66:d1:ce:ba:0f:9a:34:86:f1:c3:d5: 67:d0:32:e2:00:18:62:34:4e:4d:c0:2d:5a:f5:d6: 31:3e:7a:a2:9d:8c:99:f4:bf:c0:67:6e:d5:e8:bd: 4f:2b:d6:2b:68:b5:43:da:0e:b2:56:0a:68:48:53: e5:c5:4f:ce:dc:d8:0c:25:b6:f6:47:53:db:69:d1: 06:64:42:1d:0e:6e:07:30:4c:01:88:af:40:ee:40: d2:7b:de:18:3d:35:cb:38:a6:a3:30:c0:0a:93:12: 6f:75:b9:7c:59:31:5c:40:78:ed:5a:f3:84:4c:e7: 73:88:1a:8c:0c:5e:0d:20:39:43:ac:2c:f8:58:3c: 8f:3f:4f:55:92:35:28:1d:b4:9a:73:33:fe:33:af: 5e:fb:b2:06:0e:c2:b4:a4:bd:f0:af:d9:90:4b:c9: e4:43:1a:5f:61:b3:6e:34:db:82:e6:db:ab:f8:37: 7e:01:d3:ad:5c:c0:a7:e6:35:4a:31:ba:76:f9:1f: c2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:29:B7:47:62:80:3E:8F:D1:85:F8:3B:A0:52:18:47:F8:1C:A5:B1 X509v3 Authority Key Identifier: keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:78:3b:b9:ba:06:15:fe:91:cb:7a:10:da:de:2d:2f:65:37: 34:a3:82:00:97:86:b0:18:19:86:3c:2e:08:a8:09:0d:c2:33: dd:ec:e2:35:e2:51:ad:9a:b8:6a:71:07:18:1d:de:6c:7f:c7: bc:d7:2e:48:1e:59:a3:ff:ec:42:66:2f:8b:70:5e:f0:35:30: 8f:97:e6:96:01:7d:ac:88:a1:a5:9e:14:b7:2b:ca:4e:56:3f: ab:e8:89:a5:34:29:fe:bf:a8:ee:44:0d:ee:66:82:c3:23:63: 24:15:c9:ba:3c:f4:23:fe:27:a9:8e:d0:e2:6c:41:ee:c3:50: c5:79:7e:d9:5f:cb:1e:da:f9:83:51:b5:61:c7:46:82:d3:b6: 80:bb:f0:30:79:ef:bf:ab:be:1f:9e:b4:ab:9b:7d:b2:5c:a6: fc:86:58:98:1f:b0:cd:73:79:a3:e8:52:5e:65:9d:d8:5c:a5: a5:e2:e0:df:7b:d6:e4:6f:e2:80:24:b7:17:ea:ad:70:17:6f: c3:27:31:90:db:ae:93:6f:d5:29:51:80:d4:fb:5d:82:0a:64: bc:ae:b1:47:e5:cc:b3:71:c7:42:5b:b9:6b:cb:3f:b0:34:6e: 95:6b:53:33:59:61:f9:58:68:36:80:12:6c:98:5d:e3:01:da: 38:d4:1e:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz MUVFRjU3N0EwHhcNMjUwODIzMDUwMDE4WhcNMjUwODMwMDUwMDE4WjAYMRYwFAYD VQQDEw02OGE5NGFlMy1lNDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDABkf8V9uIVRB5Bfq8gTY+3jjGsuD7pBvwTBo2VdCk7quSqY5K260tIHqx2 mqu6CZFdDKeLuNsNIxgYzg0kZtHOug+aNIbxw9Vn0DLiABhiNE5NwC1a9dYxPnqi nYyZ9L/AZ27V6L1PK9YraLVD2g6yVgpoSFPlxU/O3NgMJbb2R1PbadEGZEIdDm4H MEwBiK9A7kDSe94YPTXLOKajMMAKkxJvdbl8WTFcQHjtWvOETOdziBqMDF4NIDlD rCz4WDyPP09VkjUoHbSaczP+M69e+7IGDsK0pL3wr9mQS8nkQxpfYbNuNNuC5tur +Dd+AdOtXMCn5jVKMbp2+R/CjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCApt0di gD6P0YX4O6BSGEf4HKWxMB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9eDu5ugYV/pHLehDa3i0vZTc0o4IAl4awGBmGPC4IqAkNwjPd7OI1 4lGtmrhqcQcYHd5sf8e81y5IHlmj/+xCZi+LcF7wNTCPl+aWAX2siKGlnhS3K8pO Vj+r6ImlNCn+v6juRA3uZoLDI2MkFcm6PPQj/iepjtDibEHuw1DFeX7ZX8se2vmD UbVhx0aC07aAu/Awee+/q74fnrSrm32yXKb8hliYH7DNc3mj6FJeZZ3YXKWl4uDf e9bkb+KAJLcX6q1wF2/DJzGQ266Tb9UpUYDU+12CCmS8rrFH5cyzccdCW7lryz+w NG6Va1MzWWH5WGg2gBJsmF3jAdo41B6V -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:46 2025 by rpki-client