$ rpki-client -vvf rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft File: FgS-6E66CP3JRuSLTBTo3CVCGTo.mft (raw, json) Hash identifier: oK8cP6HX2KMINBgkmLnhoUMMkSsThKViFpaMzX9WBOA= Subject key identifier: 95:22:94:6E:97:87:FB:DA:C3:F2:AB:90:63:CA:CE:FC:0F:3D:19:BF Authority key identifier: 16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A Certificate issuer: /CN=A91513FA/serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Certificate serial: 027E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft Manifest number: 027A Signing time: Sat 23 Aug 2025 01:57:09 +0000 Manifest this update: Sat 23 Aug 2025 01:57:08 +0000 Manifest next update: Sat 30 Aug 2025 01:57:08 +0000 Files and hashes: 1: FgS-6E66CP3JRuSLTBTo3CVCGTo.crl (hash: g8anxrhub2VWUByLNjiSImEf140i+akLSirWaSH7lFg=) 2: 6901B0861DF211ED95A51A3EC4F9AE02.roa (hash: 0XIDOV8UwVvmlax4boMgDyUwaF1U/8jmEUNtClSqDZc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:57:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 638 (0x27e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91513FA, serialNumber=1604BEE84EBA08FDC946E48B4C14E8DC2542193A Validity Not Before: Aug 23 01:57:08 2025 GMT Not After : Aug 30 01:57:08 2025 GMT Subject: CN=68a91ff4-6c1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:3a:38:dd:b7:9e:01:b5:ff:55:ee:07:82: 87:50:3d:9b:c1:64:73:bb:ab:0e:15:be:8c:6e:a4: 30:67:12:a9:d7:15:40:53:c4:95:d5:d1:4c:27:05: d9:2d:f8:4f:09:34:0f:d2:77:3c:80:d1:97:a6:02: 0e:e7:b5:53:1f:bf:c3:9d:7b:e2:15:19:12:89:a4: 92:1a:32:34:6c:d6:9b:39:a4:77:34:f9:f0:d2:2c: 53:3c:90:cf:43:fb:b9:3f:4c:96:62:6a:a9:69:88: f0:af:67:21:04:52:09:8d:71:b3:41:26:a5:2d:e8: 74:9d:e4:92:95:14:d5:35:95:51:c1:4b:2d:b5:df: cd:77:85:d9:08:da:5d:e4:69:d0:14:e1:53:0c:49: 89:5f:ae:1c:30:c6:f7:65:6a:31:53:c5:6b:76:11: cb:0c:87:a7:a7:30:75:11:90:83:ae:f4:11:d5:1f: e9:a8:f4:7a:e5:2a:bf:31:28:0c:0d:b3:70:33:64: e3:35:1d:2c:ff:28:5e:24:30:33:36:af:fc:f0:81: 11:70:03:f4:b8:a4:d4:7f:e8:7f:ae:53:b8:8a:3a: 74:fa:fb:22:ce:92:fe:cf:22:fd:a4:d3:59:75:79: 6d:e3:b4:37:c9:75:6f:68:4c:6d:81:65:f1:29:af: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:22:94:6E:97:87:FB:DA:C3:F2:AB:90:63:CA:CE:FC:0F:3D:19:BF X509v3 Authority Key Identifier: keyid:16:04:BE:E8:4E:BA:08:FD:C9:46:E4:8B:4C:14:E8:DC:25:42:19:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgS-6E66CP3JRuSLTBTo3CVCGTo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91513FA/329397661DEE11ED9472C136C4F9AE02/FgS-6E66CP3JRuSLTBTo3CVCGTo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:49:cf:7c:6d:5b:21:91:4e:d1:75:27:30:9d:7e:56:44:9b: e1:db:00:b2:a4:16:92:e4:c5:b8:77:43:51:41:dd:39:e7:52: 99:c7:61:c0:3a:07:bd:f2:15:48:5d:84:f2:ac:48:48:b3:4e: fd:55:4b:fc:06:47:03:56:e8:23:87:27:01:a2:f1:69:a7:99: 3f:08:48:55:1b:a4:b2:6d:2e:b1:76:22:88:20:5c:ff:0a:db: 03:5f:20:29:f9:c3:97:b2:b0:14:42:92:d0:a2:de:fb:cf:e6: 04:c7:b7:63:ef:c5:cd:ca:d9:10:65:57:c2:86:49:be:43:bc: e4:28:75:90:55:4d:f6:5a:8a:f4:ed:63:05:70:51:c5:45:72: 24:ea:a1:f8:7a:75:40:e3:30:1a:fd:7d:35:4b:58:b7:de:ca: 40:d5:cc:de:e5:30:63:f1:68:a0:60:2b:a8:0e:75:3a:b0:38: 76:27:1a:81:bb:c6:c9:64:28:85:55:5b:be:4a:cd:45:87:60: 01:f0:ff:d5:f1:64:8f:34:f3:2c:f9:c7:2c:96:af:c6:84:9e: 5c:1a:a3:16:37:80:a6:29:3a:c0:f5:cd:e5:dd:35:18:76:ec: 6b:9c:06:1b:ec:22:11:25:45:89:45:65:9f:58:86:00:96:6b: f9:61:24:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEzRkExMTAvBgNVBAUTKDE2MDRCRUU4NEVCQTA4RkRDOTQ2RTQ4QjRDMTRFOERD MjU0MjE5M0EwHhcNMjUwODIzMDE1NzA4WhcNMjUwODMwMDE1NzA4WjAYMRYwFAYD VQQDEw02OGE5MWZmNC02YzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurw6ON23ngG1/1XuB4KHUD2bwWRzu6sOFb6MbqQwZxKp1xVAU8SV1dFMJwXZ LfhPCTQP0nc8gNGXpgIO57VTH7/DnXviFRkSiaSSGjI0bNabOaR3NPnw0ixTPJDP Q/u5P0yWYmqpaYjwr2chBFIJjXGzQSalLeh0neSSlRTVNZVRwUsttd/Nd4XZCNpd 5GnQFOFTDEmJX64cMMb3ZWoxU8VrdhHLDIenpzB1EZCDrvQR1R/pqPR65Sq/MSgM DbNwM2TjNR0s/yheJDAzNq/88IERcAP0uKTUf+h/rlO4ijp0+vsizpL+zyL9pNNZ dXlt47Q3yXVvaExtgWXxKa8pcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJUilG6X h/vaw/KrkGPKzvwPPRm/MB8GA1UdIwQYMBaAFBYEvuhOugj9yUbki0wU6NwlQhk6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTNGQS8zMjkzOTc2NjFE RUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQM0pSdVNMVEJUbzNDVkNH VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZnUy02RTY2Q1AzSlJ1U0xUQlRvM0NWQ0dUby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTNGQS8zMjkzOTc2NjFERUUxMUVEOTQ3MkMxMzZDNEY5QUUwMi9GZ1MtNkU2NkNQ M0pSdVNMVEJUbzNDVkNHVG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSSc98bVshkU7RdScwnX5WRJvh2wCypBaS5MW4d0NRQd0551KZx2HA Oge98hVIXYTyrEhIs079VUv8BkcDVugjhycBovFpp5k/CEhVG6SybS6xdiKIIFz/ CtsDXyAp+cOXsrAUQpLQot77z+YEx7dj78XNytkQZVfChkm+Q7zkKHWQVU32Wor0 7WMFcFHFRXIk6qH4enVA4zAa/X01S1i33spA1cze5TBj8WigYCuoDnU6sDh2JxqB u8bJZCiFVVu+Ss1Fh2AB8P/V8WSPNPMs+ccslq/GhJ5cGqMWN4CmKTrA9c3l3TUY duxrnAYb7CIRJUWJRWWfWIYAlmv5YSQ5 -----END CERTIFICATE-----Generated at Sat Aug 23 17:57:05 2025 by rpki-client