$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft File: FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json) Hash identifier: rCAIUz2bGdikqcg1iMfuLJmFzccrE3ZuUrdnpN7dgpY= Subject key identifier: 87:7E:85:91:7D:5C:52:35:FB:96:D1:7D:CE:BB:9D:32:77:18:2A:E0 Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 Certificate issuer: /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft Manifest number: 0101 Signing time: Sat 23 Aug 2025 05:13:46 +0000 Manifest this update: Sat 23 Aug 2025 05:13:45 +0000 Manifest next update: Sat 30 Aug 2025 05:13:45 +0000 Files and hashes: 1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 4Clg9RWvUyU0weyd7/ylkmI4L4uULcUNRPJmSgmhJas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86 Validity Not Before: Aug 23 05:13:45 2025 GMT Not After : Aug 30 05:13:45 2025 GMT Subject: CN=68a94e09-3f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f4:a2:ab:19:cc:03:72:93:49:fe:00:1b:35: 83:cf:89:11:9f:95:96:e9:8c:bc:60:db:ac:45:93: 1a:fb:0c:5a:e9:1b:3b:22:65:34:c7:c5:6e:a1:3a: e6:21:d9:18:1f:16:e1:de:24:6e:91:76:07:7d:26: c0:bc:f2:8c:f5:38:f3:b1:8f:50:03:16:fb:ea:3f: f5:99:28:e6:a8:24:15:17:2b:74:c8:1a:77:af:e7: 79:e7:28:41:de:46:72:4a:25:2d:60:c0:a3:ef:c3: 3a:f3:db:1f:a9:3f:c3:1f:43:92:bd:9e:9b:0f:b5: 27:72:a7:59:cb:83:d3:e1:2a:05:55:30:81:0b:66: 40:43:92:d7:e9:e4:83:89:d1:c5:ce:3b:d1:d1:dc: 86:56:5b:eb:01:eb:14:27:b3:b0:18:95:cf:1e:50: 97:b4:0e:59:bc:6f:eb:1a:56:a9:c3:31:83:7f:49: f4:0a:4b:08:1f:b2:0b:77:b0:57:6e:2f:f7:13:8c: ac:9a:d6:3e:f0:6d:20:3b:e0:92:9e:6a:f9:c1:b3: 37:0e:b2:7f:d2:bd:73:eb:4b:ee:f8:0c:d8:c7:fa: 40:75:64:77:ec:0a:a8:9b:70:b3:85:97:ec:dd:c6: 86:18:e1:17:e0:85:7e:48:87:8b:cf:67:b9:e6:2f: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:85:91:7D:5C:52:35:FB:96:D1:7D:CE:BB:9D:32:77:18:2A:E0 X509v3 Authority Key Identifier: keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b3:c8:f5:20:55:4f:e2:35:ee:d0:33:b0:ec:61:2a:40:7d: bf:57:bc:9a:cf:b9:71:aa:00:70:f6:e2:d6:e8:c5:9f:9d:4b: d1:1f:c6:e1:c3:ec:19:c6:18:2d:ab:89:37:e6:54:54:40:62: 31:32:13:ed:8a:b2:d5:07:5c:28:14:3b:17:88:0e:af:3f:0d: aa:8c:b9:85:7e:95:9b:0c:ff:ed:0a:a0:10:ad:66:a9:ec:68: 4a:c5:55:1a:19:1e:f7:64:97:11:19:9b:02:f7:24:98:8e:10: a9:c6:e5:25:e4:13:d2:94:12:e3:b6:5f:d6:d3:82:7d:0b:3f: 7d:1a:ab:75:88:ba:b5:7d:10:e4:22:e1:d0:a2:70:40:26:c6: 0f:35:c6:2d:f7:95:de:da:77:ba:60:2a:16:59:5e:0d:ef:f9: 9f:13:89:e5:00:c0:e5:29:65:81:97:5f:71:9b:c0:11:21:89: f9:61:c3:fb:99:c6:24:35:a6:de:2e:8f:12:2a:a4:4b:f3:d6: cc:b2:96:c7:0e:b0:7e:50:2f:fc:6b:54:c5:8f:72:8b:0a:fd: 8d:80:98:62:30:2d:73:cf:89:06:2e:a1:98:66:fd:de:ff:24: f9:fd:59:d1:5d:6d:42:7b:5f:92:c3:a9:ed:cc:7a:2c:d7:f9: 99:ed:8d:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3Q0IxMTAvBgNVBAUTKDE3MzVDQkE5RUUxNkZFODVGM0QyODNGQTVCQjk0NzlE OUFGMkNDODYwHhcNMjUwODIzMDUxMzQ1WhcNMjUwODMwMDUxMzQ1WjAYMRYwFAYD VQQDEw02OGE5NGUwOS0zZjFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PSiqxnMA3KTSf4AGzWDz4kRn5WW6Yy8YNusRZMa+wxa6Rs7ImU0x8VuoTrm IdkYHxbh3iRukXYHfSbAvPKM9TjzsY9QAxb76j/1mSjmqCQVFyt0yBp3r+d55yhB 3kZySiUtYMCj78M689sfqT/DH0OSvZ6bD7UncqdZy4PT4SoFVTCBC2ZAQ5LX6eSD idHFzjvR0dyGVlvrAesUJ7OwGJXPHlCXtA5ZvG/rGlapwzGDf0n0CksIH7ILd7BX bi/3E4ysmtY+8G0gO+CSnmr5wbM3DrJ/0r1z60vu+AzYx/pAdWR37Aqom3CzhZfs 3caGGOEX4IV+SIeLz2e55i9XnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId+hZF9 XFI1+5bRfc67nTJ3GCrgMB8GA1UdIwQYMBaAFBc1y6nuFv6F89KD+lu5R52a8syG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTdDQi80RUQyMTJEQ0Yy RjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19vWHowb1A2VzdsSG5acnl6 SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z6WExxZTRXX29YejBvUDZXN2xIblpyeXpJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTdDQi80RUQyMTJEQ0YyRjgxMUVFQTM1MDY3MzhDNEY5QUUwMi9GelhMcWU0V19v WHowb1A2VzdsSG5acnl6SVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOs8j1IFVP4jXu0DOw7GEqQH2/V7yaz7lxqgBw9uLW6MWfnUvRH8bh w+wZxhgtq4k35lRUQGIxMhPtirLVB1woFDsXiA6vPw2qjLmFfpWbDP/tCqAQrWap 7GhKxVUaGR73ZJcRGZsC9ySYjhCpxuUl5BPSlBLjtl/W04J9Cz99Gqt1iLq1fRDk IuHQonBAJsYPNcYt95Xe2ne6YCoWWV4N7/mfE4nlAMDlKWWBl19xm8ARIYn5YcP7 mcYkNabeLo8SKqRL89bMspbHDrB+UC/8a1TFj3KLCv2NgJhiMC1zz4kGLqGYZv3e /yT5/VnRXW1Ce1+Sw6ntzHos1/mZ7Y0f -----END CERTIFICATE-----Generated at Sun Aug 24 09:22:19 2025 by rpki-client