$ rpki-client -vvf rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft File: fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft (raw, json) Hash identifier: DOcUhUPRMdBrAqcsw5nqlGDhC48NN0qtHFhdmXr2T8Y= Subject key identifier: C6:00:5D:19:65:AF:B4:A1:1B:7F:49:76:42:CC:AC:83:3D:29:9F:03 Authority key identifier: 7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 Certificate issuer: /CN=A913D02A/serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Certificate serial: 0B7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft Manifest number: 0B7B Signing time: Fri 22 Aug 2025 19:10:16 +0000 Manifest this update: Fri 22 Aug 2025 19:10:16 +0000 Manifest next update: Fri 29 Aug 2025 19:10:16 +0000 Files and hashes: 1: fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl (hash: BvilcTUFcGaWb4aC9K1GbM9lojSSveswGeCBH4P9HpI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2942 (0xb7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913D02A, serialNumber=7CBF81C59E325EF00697310B3945FEA1C106B378 Validity Not Before: Aug 22 19:10:16 2025 GMT Not After : Aug 29 19:10:16 2025 GMT Subject: CN=68a8c098-74fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c5:b2:2c:93:19:5a:dd:88:7b:04:42:df:14: 5a:04:c7:c4:6c:21:9a:ed:5c:2f:ac:5b:65:cd:0a: 6d:9e:7d:46:a9:81:9e:b9:45:79:67:b7:61:3a:2a: da:3d:1b:2d:1f:32:24:91:42:1d:1d:41:4d:85:2e: 03:1b:6a:29:71:66:cb:ad:02:b1:30:bc:19:ec:c7: 6f:58:4c:51:1d:c8:4c:0c:ea:85:7e:39:ae:72:f1: 36:ba:dc:a3:ef:77:58:68:df:9a:ad:bc:5a:7e:c1: 08:69:12:e5:04:1b:b2:41:d3:e7:10:a6:d2:42:d8: ad:04:00:f9:04:e9:9d:11:8d:e0:1c:30:7d:59:e8: 61:89:b0:3b:3a:5a:c2:79:c2:c6:fd:49:a8:29:cc: 66:a1:1d:13:e5:6b:52:dc:4b:c2:2c:e4:8c:df:b5: 20:36:94:de:ab:18:c3:87:bc:3c:41:4f:10:e9:37: 19:68:b6:ac:28:1a:c3:d6:31:dd:52:09:0b:94:ab: 6d:57:6c:7b:f4:bb:0d:87:e1:83:6f:88:f9:73:3d: 7b:9f:ac:4e:c5:21:77:84:0e:89:9d:99:74:cb:4c: 2e:34:f5:b3:28:37:7a:a4:ff:2b:ac:0a:45:76:0a: 81:8f:e8:78:74:4d:6a:11:6b:5d:ff:dc:1c:8c:8e: 16:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:00:5D:19:65:AF:B4:A1:1B:7F:49:76:42:CC:AC:83:3D:29:9F:03 X509v3 Authority Key Identifier: keyid:7C:BF:81:C5:9E:32:5E:F0:06:97:31:0B:39:45:FE:A1:C1:06:B3:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fL-BxZ4yXvAGlzELOUX-ocEGs3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D02A/77A1D95E33BC11EA8349850BC4F9AE02/fL-BxZ4yXvAGlzELOUX-ocEGs3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:b7:45:f6:8d:82:b3:dd:b2:00:5a:17:be:03:f1:6b:2c:6e: 19:92:e8:a3:56:e1:70:08:9f:24:4a:88:6f:14:bf:07:a8:f6: 62:5d:34:29:f9:e2:85:6e:46:72:0f:93:ec:ab:66:c3:4d:6d: 95:71:ae:3c:4b:fc:bd:53:10:0c:30:ae:02:11:a8:57:a9:46: 0b:70:aa:61:ea:24:11:e9:4a:48:0d:d1:60:59:ab:d7:1f:40: 96:04:93:c7:44:6e:a7:d2:32:e6:39:1a:24:ae:58:aa:e7:e7: c5:01:4d:40:c8:c4:09:84:14:ff:d5:1b:50:7e:a1:72:c9:6e: b4:c4:76:d9:b0:f9:7e:48:da:ab:53:fa:0a:6a:c5:c0:44:07: 0a:5a:1e:7d:05:21:f6:dd:7f:44:03:23:21:46:b3:07:c3:e1: d3:71:c7:6b:d9:db:12:5a:15:51:b2:d0:29:fd:35:ef:1a:06: 25:98:7e:5a:53:ef:55:35:b0:cf:44:78:66:db:af:c1:8a:f9: bb:f4:d2:de:ec:05:79:3d:aa:65:67:16:41:3e:76:2a:20:31: 02:f7:ba:99:ad:1f:8c:ab:02:65:48:21:db:04:b0:de:74:a7: 33:4f:eb:9c:39:50:d0:82:e3:a7:c0:54:97:3c:bd:91:a5:36: 20:18:8c:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0QwMkExMTAvBgNVBAUTKDdDQkY4MUM1OUUzMjVFRjAwNjk3MzEwQjM5NDVGRUEx QzEwNkIzNzgwHhcNMjUwODIyMTkxMDE2WhcNMjUwODI5MTkxMDE2WjAYMRYwFAYD VQQDEw02OGE4YzA5OC03NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcWyLJMZWt2IewRC3xRaBMfEbCGa7VwvrFtlzQptnn1GqYGeuUV5Z7dhOira PRstHzIkkUIdHUFNhS4DG2opcWbLrQKxMLwZ7MdvWExRHchMDOqFfjmucvE2utyj 73dYaN+arbxafsEIaRLlBBuyQdPnEKbSQtitBAD5BOmdEY3gHDB9WehhibA7OlrC ecLG/UmoKcxmoR0T5WtS3EvCLOSM37UgNpTeqxjDh7w8QU8Q6TcZaLasKBrD1jHd UgkLlKttV2x79LsNh+GDb4j5cz17n6xOxSF3hA6JnZl0y0wuNPWzKDd6pP8rrApF dgqBj+h4dE1qEWtd/9wcjI4WBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYAXRll r7ShG39JdkLMrIM9KZ8DMB8GA1UdIwQYMBaAFHy/gcWeMl7wBpcxCzlF/qHBBrN4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAyQS83N0ExRDk1RTMz QkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2QUdsekVMT1VYLW9jRUdz M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMLUJ4WjR5WHZBR2x6RUxPVVgtb2NFR3MzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RDAyQS83N0ExRDk1RTMzQkMxMUVBODM0OTg1MEJDNEY5QUUwMi9mTC1CeFo0eVh2 QUdsekVMT1VYLW9jRUdzM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIt0X2jYKz3bIAWhe+A/FrLG4ZkuijVuFwCJ8kSohvFL8HqPZiXTQp +eKFbkZyD5Psq2bDTW2Vca48S/y9UxAMMK4CEahXqUYLcKph6iQR6UpIDdFgWavX H0CWBJPHRG6n0jLmORokrliq5+fFAU1AyMQJhBT/1RtQfqFyyW60xHbZsPl+SNqr U/oKasXARAcKWh59BSH23X9EAyMhRrMHw+HTccdr2dsSWhVRstAp/TXvGgYlmH5a U+9VNbDPRHhm26/Bivm79NLe7AV5PaplZxZBPnYqIDEC97qZrR+MqwJlSCHbBLDe dKczT+ucOVDQguOnwFSXPL2RpTYgGIxS -----END CERTIFICATE-----Generated at Sat Aug 23 19:39:46 2025 by rpki-client