$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft File: fQYsctxe8S8FxBZ5_G_iVStOoCA.mft (raw, json) Hash identifier: 0slkPBQqG+d7tJPEDdYwWgWrAtb0wEmAa0rHPhUN3Cg= Subject key identifier: C7:FB:34:F0:CA:C1:B2:B0:89:62:1A:9C:7B:8B:61:77:2A:ED:93:0A Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 Certificate issuer: /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft Manifest number: 08CE Signing time: Fri 22 Aug 2025 21:37:06 +0000 Manifest this update: Fri 22 Aug 2025 21:37:05 +0000 Manifest next update: Fri 29 Aug 2025 21:37:05 +0000 Files and hashes: 1: fQYsctxe8S8FxBZ5_G_iVStOoCA.crl (hash: XrHwBdgVbLJ5cxjjdlehG2x+32favdWDVvCVsaRdQ94=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020 Validity Not Before: Aug 22 21:37:05 2025 GMT Not After : Aug 29 21:37:05 2025 GMT Subject: CN=68a8e301-79c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:8a:11:a9:e7:e9:78:d9:83:e5:fc:96:c1: 41:9b:86:4d:f4:19:88:f1:44:df:80:51:3a:d8:5b: e2:d9:47:dc:56:72:91:3b:57:5b:5e:16:87:cd:c7: 6b:c1:88:5a:77:8d:e0:e9:9f:33:30:39:e3:dd:47: d0:47:09:0f:d7:83:0d:52:c2:cd:de:38:3c:b5:71: 31:2a:fc:90:0b:a7:51:59:59:f4:ff:cd:38:6d:70: b8:03:90:1e:98:20:06:a3:15:86:07:99:d5:12:ae: 21:d5:e3:8f:d0:b3:53:b0:b4:d8:5a:09:a3:5b:ad: 50:c9:87:ed:78:f1:7f:6c:e3:08:dc:e5:f0:2b:25: 67:58:1c:d0:dc:f5:65:af:79:25:cc:33:e9:6a:82: b1:ad:ed:5a:a8:23:ab:7e:59:b2:b2:f1:9a:a1:e9: cf:df:55:1d:a2:1c:d9:4a:d4:e6:6d:9a:9b:f1:ed: 06:f6:da:24:e1:30:75:d8:98:fc:45:e6:82:ce:30: 72:d9:a9:5b:3e:60:f6:e7:91:8f:8a:bf:18:07:85: 84:86:b7:50:cd:49:cd:23:8b:b8:2f:1c:e0:bf:cf: 52:65:39:87:dc:12:4a:f8:be:ca:20:7e:a5:36:b2: 03:59:96:c9:67:60:32:5a:fd:d8:9e:ae:ea:85:33: 7c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:FB:34:F0:CA:C1:B2:B0:89:62:1A:9C:7B:8B:61:77:2A:ED:93:0A X509v3 Authority Key Identifier: keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:69:62:25:eb:5f:29:35:fb:68:f9:23:3a:7d:6f:f1:a4:60: c2:83:1f:22:4c:a5:23:40:29:d3:a2:cb:15:3b:31:6a:8f:d9: 10:df:66:a6:fd:15:90:a2:a9:5e:b8:79:b3:b2:7d:49:94:8f: db:00:70:99:c1:28:a1:25:42:ab:af:a2:99:f9:fd:2a:bc:be: e3:5b:b7:65:77:a1:c8:06:0b:b3:21:22:f7:8d:48:25:31:00: c9:55:8d:fe:1f:ae:4d:ed:ec:70:93:ed:68:ea:2a:69:6d:a2: a4:39:c1:33:f1:82:13:1b:e1:8e:41:eb:d0:21:e7:3e:5f:77: ba:b1:84:4b:90:43:e3:d3:07:0b:3c:cb:07:b3:48:de:4d:f2: d6:a9:59:87:ad:53:2d:8c:85:20:b6:3f:9b:2d:4d:19:7c:a0: 29:46:59:f0:05:ca:b4:23:65:ac:db:48:09:b0:11:6b:c9:da: e6:9e:c8:f4:ba:f3:cd:ab:4c:d4:dd:af:48:33:da:4a:e3:bf: af:55:19:bf:f6:c1:9d:c0:87:0f:b6:fa:4f:e6:97:af:a5:e4: ce:25:16:f4:3e:9e:8c:34:f6:f1:0c:3d:12:81:78:32:b8:c3: 1f:be:63:20:c5:4c:7c:f7:87:1f:60:7c:5f:22:04:c0:3e:51: 9e:91:c2:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1 MkI0RUEwMjAwHhcNMjUwODIyMjEzNzA1WhcNMjUwODI5MjEzNzA1WjAYMRYwFAYD VQQDEw02OGE4ZTMwMS03OWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVyKEann6XjZg+X8lsFBm4ZN9BmI8UTfgFE62Fvi2UfcVnKRO1dbXhaHzcdr wYhad43g6Z8zMDnj3UfQRwkP14MNUsLN3jg8tXExKvyQC6dRWVn0/804bXC4A5Ae mCAGoxWGB5nVEq4h1eOP0LNTsLTYWgmjW61QyYftePF/bOMI3OXwKyVnWBzQ3PVl r3klzDPpaoKxre1aqCOrflmysvGaoenP31UdohzZStTmbZqb8e0G9tok4TB12Jj8 ReaCzjBy2albPmD255GPir8YB4WEhrdQzUnNI4u4Lxzgv89SZTmH3BJK+L7KIH6l NrIDWZbJZ2AyWv3Ynq7qhTN8zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMf7NPDK wbKwiWIanHuLYXcq7ZMKMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RDhFMi9DMDkyQjEwNjFERUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThT OEZ4Qlo1X0dfaVZTdE9vQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQaWIl618pNfto+SM6fW/xpGDCgx8iTKUjQCnTossVOzFqj9kQ32am /RWQoqleuHmzsn1JlI/bAHCZwSihJUKrr6KZ+f0qvL7jW7dld6HIBguzISL3jUgl MQDJVY3+H65N7exwk+1o6ippbaKkOcEz8YITG+GOQevQIec+X3e6sYRLkEPj0wcL PMsHs0jeTfLWqVmHrVMtjIUgtj+bLU0ZfKApRlnwBcq0I2Ws20gJsBFrydrmnsj0 uvPNq0zU3a9IM9pK47+vVRm/9sGdwIcPtvpP5pevpeTOJRb0Pp6MNPbxDD0SgXgy uMMfvmMgxUx894cfYHxfIgTAPlGekcKP -----END CERTIFICATE-----Generated at Sat Aug 23 16:17:51 2025 by rpki-client