$ rpki-client -vvf rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft File: FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft (raw, json) Hash identifier: J37OcxuKndexfaSPGDAr+9PE9vBgObph+DrFQjgBe3Y= Subject key identifier: 01:73:B3:57:05:A5:47:0C:D5:B6:CB:0A:3A:18:3D:0A:77:E1:87:C6 Authority key identifier: 15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 Certificate issuer: /CN=A91468A1/serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Certificate serial: 0AF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft Manifest number: 0AE8 Signing time: Fri 22 Aug 2025 19:31:18 +0000 Manifest this update: Fri 22 Aug 2025 19:31:18 +0000 Manifest next update: Fri 29 Aug 2025 19:31:18 +0000 Files and hashes: 1: FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl (hash: +JQ+LOpY47yU6z71U/JKT4mp0wSpqj9cP8GToGTzZ7A=) 2: F0520A385DD611EAA4AD4767C4F9AE02.roa (hash: kJMo9RQs1RmR4jKIjh2FdUcRITpXXdCWCEKsh+3zIHs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:31:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2800 (0xaf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91468A1, serialNumber=152A3B43225CFA2C5F8DE27A9A6893D3B23F5DE3 Validity Not Before: Aug 22 19:31:18 2025 GMT Not After : Aug 29 19:31:18 2025 GMT Subject: CN=68a8c586-e1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:52:bf:bc:8c:30:61:b9:b0:9b:02:db:5a:3f: f0:51:d2:9e:8d:62:73:29:78:16:29:14:fe:12:3a: ca:4a:ef:7a:a2:90:ac:12:ce:9b:7a:73:23:9b:de: 04:74:d6:de:7f:cd:74:4d:1c:09:a7:75:a8:36:c7: 51:1e:4d:3b:c9:da:28:d0:ac:eb:84:87:2c:04:60: d5:a2:bb:b8:6b:84:73:cf:c1:15:f6:a8:4a:9f:7c: 32:cb:d9:87:10:c0:69:6f:06:0a:04:f9:9c:22:b8: d9:ce:ea:8b:69:8f:29:81:ec:d4:1b:b4:62:51:39: d9:7e:43:74:52:db:cb:5d:ff:43:af:47:2d:44:01: b8:c7:1f:fe:73:01:f8:35:da:11:da:16:67:31:7d: 9d:e7:09:5e:05:1a:6d:a9:c3:3b:f5:79:4a:e2:14: 56:e8:18:83:bb:65:5e:19:e9:04:84:16:cb:6d:0d: 11:16:18:a2:d3:a2:58:42:75:19:25:df:f5:0f:65: 68:cf:07:a7:15:4c:ff:62:88:c1:f3:d0:e2:4c:77: a7:e3:78:5b:be:24:0b:91:72:e5:cf:3e:0f:c5:4a: 66:ce:5f:4a:67:0c:95:56:f9:a6:82:52:59:60:5e: 73:a8:5c:9e:c5:99:40:86:65:76:e5:5e:3f:dd:ec: 75:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:73:B3:57:05:A5:47:0C:D5:B6:CB:0A:3A:18:3D:0A:77:E1:87:C6 X509v3 Authority Key Identifier: keyid:15:2A:3B:43:22:5C:FA:2C:5F:8D:E2:7A:9A:68:93:D3:B2:3F:5D:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSo7QyJc-ixfjeJ6mmiT07I_XeM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91468A1/2E1CC644511811EA9387C66BC4F9AE02/FSo7QyJc-ixfjeJ6mmiT07I_XeM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:fe:cc:8c:38:d9:44:28:ed:06:bb:8b:a7:df:6f:78:a8:f3: 6d:a5:93:ce:12:15:aa:37:6b:47:8a:d3:37:3f:7f:cb:14:b2: f7:7d:6f:97:7d:58:31:a4:2c:69:df:e4:fe:b5:e7:77:57:4d: 02:17:86:91:d9:4e:ad:c0:5a:8a:c4:04:ed:07:cb:52:eb:11: 1b:f5:04:b0:cf:ba:a0:a9:ff:ad:94:2b:f6:ab:9b:fe:77:7f: 8f:17:b8:4c:f9:38:91:f1:05:79:f8:c7:33:25:1b:39:e3:56: 28:6a:59:c1:32:ba:e8:d3:6a:a2:ee:cb:c6:8e:a1:5b:88:28: 79:41:f7:e5:b8:3b:63:60:61:84:6e:7d:c5:bc:53:1a:30:94: bc:14:6a:1e:3f:62:a3:c3:9e:2a:d7:3d:df:59:b3:e4:10:b7: 6f:18:99:90:98:7c:26:41:44:d7:f9:e4:50:2a:19:e0:6b:b2: 2e:e2:8e:9d:95:e6:50:2c:53:33:c1:72:b5:93:ba:22:92:6f: 8c:4c:a8:6d:1e:e0:b0:2d:31:e6:0e:87:3a:00:3f:b0:c9:fa: 5e:5c:ca:ec:95:86:cb:1c:16:fb:45:5f:45:dc:8b:06:4d:db: 25:53:79:46:8e:b5:82:5a:4e:08:8a:f0:5c:a8:87:2b:ec:10: ee:e7:4a:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY4QTExMTAvBgNVBAUTKDE1MkEzQjQzMjI1Q0ZBMkM1RjhERTI3QTlBNjg5M0Qz QjIzRjVERTMwHhcNMjUwODIyMTkzMTE4WhcNMjUwODI5MTkzMTE4WjAYMRYwFAYD VQQDEw02OGE4YzU4Ni1lMWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1K/vIwwYbmwmwLbWj/wUdKejWJzKXgWKRT+EjrKSu96opCsEs6benMjm94E dNbef810TRwJp3WoNsdRHk07ydoo0KzrhIcsBGDVoru4a4Rzz8EV9qhKn3wyy9mH EMBpbwYKBPmcIrjZzuqLaY8pgezUG7RiUTnZfkN0UtvLXf9Dr0ctRAG4xx/+cwH4 NdoR2hZnMX2d5wleBRptqcM79XlK4hRW6BiDu2VeGekEhBbLbQ0RFhii06JYQnUZ Jd/1D2VozwenFUz/YojB89DiTHen43hbviQLkXLlzz4PxUpmzl9KZwyVVvmmglJZ YF5zqFyexZlAhmV25V4/3ex1fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFzs1cF pUcM1bbLCjoYPQp34YfGMB8GA1UdIwQYMBaAFBUqO0MiXPosX43ieppok9OyP13j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjhBMS8yRTFDQzY0NDUx MTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1peGZqZUo2bW1pVDA3SV9Y ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZTbzdReUpjLWl4ZmplSjZtbWlUMDdJX1hlTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjhBMS8yRTFDQzY0NDUxMTgxMUVBOTM4N0M2NkJDNEY5QUUwMi9GU283UXlKYy1p eGZqZUo2bW1pVDA3SV9YZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw/syMONlEKO0Gu4un3294qPNtpZPOEhWqN2tHitM3P3/LFLL3fW+X fVgxpCxp3+T+ted3V00CF4aR2U6twFqKxATtB8tS6xEb9QSwz7qgqf+tlCv2q5v+ d3+PF7hM+TiR8QV5+MczJRs541YoalnBMrro02qi7svGjqFbiCh5QffluDtjYGGE bn3FvFMaMJS8FGoeP2Kjw54q1z3fWbPkELdvGJmQmHwmQUTX+eRQKhnga7Iu4o6d leZQLFMzwXK1k7oikm+MTKhtHuCwLTHmDoc6AD+wyfpeXMrslYbLHBb7RV9F3IsG TdslU3lGjrWCWk4IivBcqIcr7BDu50o2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:45 2025 by rpki-client