$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft File: fkTc6XLxPIDlNLLmhf4dKg12FRI.mft (raw, json) Hash identifier: oywm6IaZY9zvcyqMLsSBMmkOuCbJG3IgicCuhvXBW4U= Subject key identifier: 40:A1:8C:93:24:5A:B6:4A:E9:47:C2:32:CE:38:2A:96:11:A3:62:CB Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 Certificate issuer: /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Certificate serial: 02EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft Manifest number: 02D0 Signing time: Sat 23 Aug 2025 01:45:00 +0000 Manifest this update: Sat 23 Aug 2025 01:45:00 +0000 Manifest next update: Sat 30 Aug 2025 01:45:00 +0000 Files and hashes: 1: fkTc6XLxPIDlNLLmhf4dKg12FRI.crl (hash: lvDVqW/etMtii+Z8MFd0ap5WKhDxmLT2pb1VIUShY8I=) 2: D08FF4F0BB7111EFACA16B1DC4F9AE02.roa (hash: 8yMX2hTP3K05Xyvd555G2ig/V1hEQ+eTfzKML7MR+kI=) 3: A48E2B14A73B11EF9933C14AC4F9AE02.roa (hash: Pi9jvcspA1D49dJkl4PL8lZ8CXbTkLcOR5O9MkCQurg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:44:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 751 (0x2ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512 Validity Not Before: Aug 23 01:45:00 2025 GMT Not After : Aug 30 01:45:00 2025 GMT Subject: CN=68a91d1c-5660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:20:3e:8c:e4:01:73:5c:e4:cf:61:c2:6a: 7e:71:34:2c:63:54:3a:8f:16:25:0b:f2:cb:e4:5a: b7:5d:ab:db:38:1d:f8:0f:5f:a0:9b:4b:51:cf:13: 09:bc:63:f5:cd:73:73:ce:fb:9d:0c:34:fd:af:44: 50:56:c6:36:af:35:4d:75:9a:c5:0d:93:ef:55:5b: 41:7c:ec:8e:f5:f2:de:15:6e:21:87:45:90:ef:dd: 21:82:93:d8:e6:da:d7:86:58:d1:56:8d:e4:fe:87: 11:f9:16:3a:19:de:aa:89:a3:94:b4:b7:56:e9:30: 00:45:84:75:5f:e5:3c:58:91:a5:c3:7c:0c:39:46: a9:01:76:de:d0:37:4b:69:29:c9:b9:07:3c:6e:d2: 86:e0:46:cc:70:64:1c:20:65:f3:f6:62:47:09:8d: ec:67:e1:d1:7e:a9:be:38:f3:a6:40:fe:29:6e:95: bc:ac:91:82:e7:c2:05:df:eb:80:0f:07:17:3e:31: d1:98:17:ea:7c:db:82:a5:89:09:52:59:75:90:a5: f6:a2:d6:24:0c:f9:91:39:ed:6a:a2:1e:31:94:5a: 4b:7e:02:7c:f5:a7:c7:da:b2:45:6e:a4:9f:87:ef: 68:45:0c:80:cc:94:14:f0:1b:98:59:d5:9f:0f:b8: c1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:8C:93:24:5A:B6:4A:E9:47:C2:32:CE:38:2A:96:11:A3:62:CB X509v3 Authority Key Identifier: keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:8c:4f:30:3e:bb:6c:39:8e:9a:36:af:6f:53:3f:2b:fb:8f: 54:18:bc:29:34:72:1d:6a:ab:89:89:b5:26:df:b6:8b:88:4f: ce:66:c3:f2:85:9c:6e:a0:94:d7:47:01:2d:e0:b0:28:a4:56: c0:8d:c1:52:af:a5:35:07:fe:ba:9c:c0:99:ad:2c:1a:e6:a3: 9f:b5:19:5d:7d:95:20:a3:cf:9a:9c:b0:54:a5:c4:0c:96:9a: a9:08:01:52:8f:86:85:57:01:91:10:2f:a2:98:d3:1f:d1:ab: 32:f4:fe:b7:cd:d3:2c:bc:b4:11:88:a3:9d:eb:d6:73:e5:08: bc:4e:a0:b7:fa:db:3a:3c:c7:da:e1:46:ad:bc:3d:98:af:31: 66:58:cb:a2:21:33:84:db:b9:96:a4:4e:fa:2d:84:f7:f9:43: 38:96:52:1d:5a:2e:86:4f:60:e4:07:3b:56:cd:03:75:0f:1b: 29:5e:04:38:e4:d3:fc:ce:2a:c7:57:0c:60:8a:32:67:19:75: 5f:95:1b:ce:71:bd:3d:31:1e:a9:78:43:55:f1:e9:c4:26:f0: 2c:91:64:bb:7e:8b:be:c8:5e:ce:f3:a5:10:16:18:1d:45:23: 2c:dc:55:a4:83:74:7a:c5:52:d4:db:15:a7:e8:36:1e:54:bf: 41:e3:6b:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzI3MEYxMTAvBgNVBAUTKDdFNDREQ0U5NzJGMTNDODBFNTM0QjJFNjg1RkUxRDJB MEQ3NjE1MTIwHhcNMjUwODIzMDE0NTAwWhcNMjUwODMwMDE0NTAwWjAYMRYwFAYD VQQDEw02OGE5MWQxYy01NjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoUIgPozkAXNc5M9hwmp+cTQsY1Q6jxYlC/LL5Fq3XavbOB34D1+gm0tRzxMJ vGP1zXNzzvudDDT9r0RQVsY2rzVNdZrFDZPvVVtBfOyO9fLeFW4hh0WQ790hgpPY 5trXhljRVo3k/ocR+RY6Gd6qiaOUtLdW6TAARYR1X+U8WJGlw3wMOUapAXbe0DdL aSnJuQc8btKG4EbMcGQcIGXz9mJHCY3sZ+HRfqm+OPOmQP4pbpW8rJGC58IF3+uA DwcXPjHRmBfqfNuCpYkJUll1kKX2otYkDPmROe1qoh4xlFpLfgJ89afH2rJFbqSf h+9oRQyAzJQU8BuYWdWfD7jBkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEChjJMk WrZK6UfCMs44KpYRo2LLMB8GA1UdIwQYMBaAFH5E3Oly8TyA5TSy5oX+HSoNdhUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MjcwRi9EQzVFNzRDQTA4 RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJRGxOTExtaGY0ZEtnMTJG UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZrVGM2WEx4UElEbE5MTG1oZjRkS2cxMkZSSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjcwRi9EQzVFNzRDQTA4RTgxMUVEQjlFMUI2MzNDNEY5QUUwMi9ma1RjNlhMeFBJ RGxOTExtaGY0ZEtnMTJGUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzjE8wPrtsOY6aNq9vUz8r+49UGLwpNHIdaquJibUm37aLiE/OZsPy hZxuoJTXRwEt4LAopFbAjcFSr6U1B/66nMCZrSwa5qOftRldfZUgo8+anLBUpcQM lpqpCAFSj4aFVwGREC+imNMf0asy9P63zdMsvLQRiKOd69Zz5Qi8TqC3+ts6PMfa 4UatvD2YrzFmWMuiITOE27mWpE76LYT3+UM4llIdWi6GT2DkBztWzQN1DxspXgQ4 5NP8zirHVwxgijJnGXVflRvOcb09MR6peENV8enEJvAskWS7fou+yF7O86UQFhgd RSMs3FWkg3R6xVLU2xWn6DYeVL9B42sx -----END CERTIFICATE-----Generated at Sat Aug 23 15:57:24 2025 by rpki-client