$ rpki-client -vvf rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft File: fuTdyziTyc2__3a-xeAwLlIZJQE.mft (raw, json) Hash identifier: h6A43sRA8qjY0/Aez6yLzC6bHXW92vdZTPlK/qZ1Ffw= Subject key identifier: 1C:E1:28:75:80:2F:07:E2:8E:23:E5:F1:67:D8:76:6D:1F:81:3F:71 Authority key identifier: 7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01 Certificate issuer: /CN=A9168939/serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501 Certificate serial: 068C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft Manifest number: 0685 Signing time: Fri 22 Aug 2025 22:30:51 +0000 Manifest this update: Fri 22 Aug 2025 22:30:50 +0000 Manifest next update: Fri 29 Aug 2025 22:30:50 +0000 Files and hashes: 1: fuTdyziTyc2__3a-xeAwLlIZJQE.crl (hash: 2qTIJqTE3G6l9iyzdSSIGTmPr8mXuZtV3mArSb38iG4=) 2: 50548100855311EBBAE75616C4F9AE02.roa (hash: /SE7Aja2BBR+I+6zyJWrhq+Bo9c2jJI7JkKvXdCSdE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1676 (0x68c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168939, serialNumber=7EE4DDCB3893C9CDBFFF76BEC5E0302E52192501 Validity Not Before: Aug 22 22:30:50 2025 GMT Not After : Aug 29 22:30:50 2025 GMT Subject: CN=68a8ef9b-89d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:a9:2c:25:01:60:18:66:2c:d5:21:92:64: 56:85:36:de:ce:67:95:0a:6e:bb:ad:31:2c:6d:12: bb:14:79:2d:82:f0:ea:74:4e:45:58:a2:44:5d:ea: 88:11:f0:43:91:83:36:4b:92:54:6f:de:1a:96:ab: 17:77:4c:06:71:94:5f:bb:ce:ca:5a:60:77:1b:55: ea:f4:d6:9e:0d:3f:0f:f1:5f:2c:d0:f8:a4:7c:8c: ed:a3:4e:e5:50:b7:9d:c1:a3:30:ab:bb:6a:eb:ef: c4:4f:cb:ce:b8:77:dc:4a:b2:8b:52:89:5f:ce:7b: c3:ea:4a:9e:4b:58:2e:4b:c1:1e:09:18:b8:fd:00: d2:75:fc:1c:6f:68:fa:88:65:89:ef:59:f4:3b:17: 39:5d:9d:9b:fe:36:57:28:e1:71:ab:d0:de:99:35: 74:6c:2a:cc:4c:b0:e5:c5:1a:cd:91:84:75:60:c7: 85:6c:d8:50:e8:91:4e:c5:9e:4a:82:aa:8c:d5:dd: ba:28:97:9a:77:ca:83:40:c6:a0:c4:29:95:1f:9a: e4:3d:d8:36:b3:6a:f1:4f:36:7e:df:3f:b7:70:35: c8:4e:19:0d:70:8c:0b:40:00:60:b1:28:4d:07:20: 4a:ff:58:a1:77:38:b2:92:32:23:47:f2:c7:17:27: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E1:28:75:80:2F:07:E2:8E:23:E5:F1:67:D8:76:6D:1F:81:3F:71 X509v3 Authority Key Identifier: keyid:7E:E4:DD:CB:38:93:C9:CD:BF:FF:76:BE:C5:E0:30:2E:52:19:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fuTdyziTyc2__3a-xeAwLlIZJQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168939/E666E08E852611EB9D198F1DC4F9AE02/fuTdyziTyc2__3a-xeAwLlIZJQE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:f9:cd:56:51:88:4a:ef:cc:3f:ac:86:8d:70:99:6c:85:9e: be:e5:24:bb:20:de:9f:4f:dd:6d:99:b5:c2:2a:45:55:09:fd: 93:0a:e9:e1:fb:32:5d:ea:48:67:d7:7d:46:5a:cf:45:6e:44: c6:37:b5:f3:92:0c:1c:fd:26:6a:6b:a2:ca:3e:75:5c:dd:c6: cf:52:bf:6c:e8:bb:c8:a6:7f:da:e0:2d:2b:49:57:bb:7d:d6: ef:1d:ad:bc:03:08:6b:6c:fc:31:2f:04:ee:b9:7e:26:f0:04: 16:e1:de:1b:d1:36:d7:5f:ad:64:79:3b:95:9a:38:6d:e4:a8: 35:50:8a:0b:95:4f:67:db:37:c1:ae:cb:b0:df:d4:14:42:f0: 12:52:8d:b3:9f:41:be:e0:6c:9a:75:1d:7b:98:3f:e4:0d:d9: b3:01:f4:32:b9:13:05:24:d3:ad:42:5a:90:92:39:a2:a2:67: 1a:b8:a3:77:17:67:e8:5a:0e:ab:ee:35:55:77:1e:80:40:6e: cb:db:df:4f:73:ff:9c:5b:91:bc:89:5b:06:ef:45:36:68:71: 7f:6f:dc:7a:0b:62:9a:c0:ba:cf:0d:37:d5:d6:1e:70:31:d8: 8b:5f:c0:a3:c3:89:e2:71:9f:fa:85:30:9e:ab:13:bf:fe:00: f8:c5:bf:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg5MzkxMTAvBgNVBAUTKDdFRTRERENCMzg5M0M5Q0RCRkZGNzZCRUM1RTAzMDJF NTIxOTI1MDEwHhcNMjUwODIyMjIzMDUwWhcNMjUwODI5MjIzMDUwWjAYMRYwFAYD VQQDEw02OGE4ZWY5Yi04OWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+qpLCUBYBhmLNUhkmRWhTbezmeVCm67rTEsbRK7FHktgvDqdE5FWKJEXeqI EfBDkYM2S5JUb94alqsXd0wGcZRfu87KWmB3G1Xq9NaeDT8P8V8s0PikfIzto07l ULedwaMwq7tq6+/ET8vOuHfcSrKLUolfznvD6kqeS1guS8EeCRi4/QDSdfwcb2j6 iGWJ71n0Oxc5XZ2b/jZXKOFxq9DemTV0bCrMTLDlxRrNkYR1YMeFbNhQ6JFOxZ5K gqqM1d26KJead8qDQMagxCmVH5rkPdg2s2rxTzZ+3z+3cDXIThkNcIwLQABgsShN ByBK/1ihdziykjIjR/LHFydjYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzhKHWA LwfijiPl8WfYdm0fgT9xMB8GA1UdIwQYMBaAFH7k3cs4k8nNv/92vsXgMC5SGSUB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkzOS9FNjY2RTA4RTg1 MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHljMl9fM2EteGVBd0xsSVpK UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z1VGR5emlUeWMyX18zYS14ZUF3TGxJWkpRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODkzOS9FNjY2RTA4RTg1MjYxMUVCOUQxOThGMURDNEY5QUUwMi9mdVRkeXppVHlj Ml9fM2EteGVBd0xsSVpKUUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAP+c1WUYhK78w/rIaNcJlshZ6+5SS7IN6fT91tmbXCKkVVCf2TCunh +zJd6khn131GWs9FbkTGN7Xzkgwc/SZqa6LKPnVc3cbPUr9s6LvIpn/a4C0rSVe7 fdbvHa28AwhrbPwxLwTuuX4m8AQW4d4b0TbXX61keTuVmjht5Kg1UIoLlU9n2zfB rsuw39QUQvASUo2zn0G+4GyadR17mD/kDdmzAfQyuRMFJNOtQlqQkjmiomcauKN3 F2foWg6r7jVVdx6AQG7L299Pc/+cW5G8iVsG70U2aHF/b9x6C2KawLrPDTfV1h5w MdiLX8Cjw4nicZ/6hTCeqxO//gD4xb/V -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:45 2025 by rpki-client