$ rpki-client -vvf rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft File: fFO_avST0kw7fGuiFrOCsMf3_CQ.mft (raw, json) Hash identifier: y8ead2VFOlAE74GWkBryIjqk/pwRnak9KiBukdJ31zQ= Subject key identifier: 8C:A7:B6:65:3B:FB:33:33:D4:31:3E:75:F0:FC:9C:15:48:FA:54:59 Authority key identifier: 7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 Certificate issuer: /CN=A913FA1D/serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Certificate serial: 08BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft Manifest number: 08AE Signing time: Fri 22 Aug 2025 20:38:37 +0000 Manifest this update: Fri 22 Aug 2025 20:38:37 +0000 Manifest next update: Fri 29 Aug 2025 20:38:37 +0000 Files and hashes: 1: fFO_avST0kw7fGuiFrOCsMf3_CQ.crl (hash: tNih1kqV9haMGBRvGJfeyp7w0M6W018Zu112x++tzUg=) 2: F86B8216BFED11EABE972E5AC4F9AE02.roa (hash: ltvBn5VJXtz7vFB4RWKdDxpG2I+f/J+ryir96EuYqEY=) 3: F902E016BFED11EABE972E5AC4F9AE02.roa (hash: Te4pe39x+PJOiuAURDPZwLT95T5tpG83Z202ebgxGsE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:38:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2234 (0x8ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FA1D, serialNumber=7C53BF6AF493D24C3B7C6BA216B382B0C7F7FC24 Validity Not Before: Aug 22 20:38:37 2025 GMT Not After : Aug 29 20:38:37 2025 GMT Subject: CN=68a8d54d-5136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9a:66:ea:48:82:67:93:4a:1e:bc:0e:f6:22: 76:66:e2:de:e8:46:93:98:db:aa:73:2c:55:f0:a6: ae:08:2d:b4:5f:b8:02:c1:2e:f6:45:5e:88:88:ae: 7e:4d:6a:69:4e:02:41:b6:d5:fb:ac:f2:ea:d9:41: e7:8b:10:5f:5d:76:cd:4a:0e:58:08:cc:01:92:c8: e1:7a:f8:5c:21:40:df:3d:4d:00:5e:bb:8a:4e:4a: 99:67:b2:2d:2b:e1:45:fb:5d:88:88:c3:30:b5:86: d1:16:50:e4:5d:ae:63:23:1b:dc:ec:0d:b8:e1:12: 80:05:c3:77:19:c6:72:48:95:29:bf:23:13:61:27: 06:19:cb:05:25:ea:e1:64:c3:bc:41:c1:eb:19:dc: aa:53:1c:fd:56:16:69:2c:29:6c:36:b1:81:cb:f3: 47:b2:3b:ef:d1:ad:f6:07:fa:ad:8f:52:dd:59:0a: 81:e4:87:24:1e:66:8d:a3:7d:3a:a2:00:07:cd:8f: fd:93:a4:59:32:44:54:56:e8:8a:49:52:a7:3b:24: 3f:98:39:a3:90:56:ff:d1:cb:46:24:61:62:00:ed: 0f:b5:16:d5:29:72:cb:09:e0:62:74:9b:7f:4d:e1: 80:07:af:21:35:9a:d5:b8:ed:85:76:8c:38:1f:df: 5a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A7:B6:65:3B:FB:33:33:D4:31:3E:75:F0:FC:9C:15:48:FA:54:59 X509v3 Authority Key Identifier: keyid:7C:53:BF:6A:F4:93:D2:4C:3B:7C:6B:A2:16:B3:82:B0:C7:F7:FC:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fFO_avST0kw7fGuiFrOCsMf3_CQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FA1D/9EEA4D68BFEC11EA89929A58C4F9AE02/fFO_avST0kw7fGuiFrOCsMf3_CQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:3e:2e:26:32:a4:74:ad:04:27:e9:34:0f:e8:25:4a:66: e7:3f:18:8f:6c:36:e4:26:b1:69:d8:4a:9f:9c:a2:11:91:78: 97:ee:22:1b:83:b1:76:df:c8:4f:de:df:33:76:4e:0b:1a:db: ff:5b:68:d4:91:9a:ed:90:5c:0e:ab:41:6f:ac:5f:0c:52:ba: d5:d9:0d:ce:4d:54:0d:25:8f:51:33:11:a4:17:d7:73:4b:dd: 27:24:e2:78:80:6a:fc:5c:e3:e9:e5:e9:89:49:83:d8:03:95: 06:c7:f7:93:d0:cf:f7:74:ba:a3:ff:72:86:64:c0:c9:98:53: b0:78:50:44:4c:c7:ec:6d:f6:b9:6d:73:7c:49:bc:c4:b6:bf: aa:c4:64:3e:c4:5f:5b:35:84:c3:1e:7a:58:a7:ad:94:98:8c: 99:8d:ba:6f:f7:61:40:53:18:ce:f7:06:06:9f:77:bd:e9:bb: 41:35:6d:61:26:71:f8:a7:13:72:a1:2a:61:5d:71:ac:fa:20: 77:1d:ed:2b:f6:fe:f8:24:52:26:5d:17:c3:c0:3e:b0:c3:b3: 8d:b5:ec:ac:9c:9a:84:13:12:4f:ab:9f:db:b1:7c:d2:b4:ac: 9e:9e:00:4c:a4:f4:fa:ad:eb:89:99:ee:9f:49:77:f3:71:42: 0e:e3:2e:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZBMUQxMTAvBgNVBAUTKDdDNTNCRjZBRjQ5M0QyNEMzQjdDNkJBMjE2QjM4MkIw QzdGN0ZDMjQwHhcNMjUwODIyMjAzODM3WhcNMjUwODI5MjAzODM3WjAYMRYwFAYD VQQDEw02OGE4ZDU0ZC01MTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxppm6kiCZ5NKHrwO9iJ2ZuLe6EaTmNuqcyxV8KauCC20X7gCwS72RV6IiK5+ TWppTgJBttX7rPLq2UHnixBfXXbNSg5YCMwBksjhevhcIUDfPU0AXruKTkqZZ7It K+FF+12IiMMwtYbRFlDkXa5jIxvc7A244RKABcN3GcZySJUpvyMTYScGGcsFJerh ZMO8QcHrGdyqUxz9VhZpLClsNrGBy/NHsjvv0a32B/qtj1LdWQqB5IckHmaNo306 ogAHzY/9k6RZMkRUVuiKSVKnOyQ/mDmjkFb/0ctGJGFiAO0PtRbVKXLLCeBidJt/ TeGAB68hNZrVuO2Fdow4H99aqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyntmU7 +zMz1DE+dfD8nBVI+lRZMB8GA1UdIwQYMBaAFHxTv2r0k9JMO3xrohazgrDH9/wk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkExRC85RUVBNEQ2OEJG RUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBrdzdmR3VpRnJPQ3NNZjNf Q1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGT19hdlNUMGt3N2ZHdWlGck9Dc01mM19DUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkExRC85RUVBNEQ2OEJGRUMxMUVBODk5MjlBNThDNEY5QUUwMi9mRk9fYXZTVDBr dzdmR3VpRnJPQ3NNZjNfQ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCViD4uJjKkdK0EJ+k0D+glSmbnPxiPbDbkJrFp2EqfnKIRkXiX7iIb g7F238hP3t8zdk4LGtv/W2jUkZrtkFwOq0FvrF8MUrrV2Q3OTVQNJY9RMxGkF9dz S90nJOJ4gGr8XOPp5emJSYPYA5UGx/eT0M/3dLqj/3KGZMDJmFOweFBETMfsbfa5 bXN8SbzEtr+qxGQ+xF9bNYTDHnpYp62UmIyZjbpv92FAUxjO9wYGn3e96btBNW1h JnH4pxNyoSphXXGs+iB3He0r9v74JFImXRfDwD6ww7ONteysnJqEExJPq5/bsXzS tKyengBMpPT6reuJme6fSXfzcUIO4y68 -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:23 2025 by rpki-client