$ rpki-client -vvf rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft File: Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft (raw, json) Hash identifier: 6snkIqHvN1jaReFCtROLtswY+kQ3HZoF7JrayN1BdeE= Subject key identifier: 82:0D:C1:68:74:97:47:A2:F8:9E:1B:A9:B3:74:AF:22:AA:9B:4F:86 Authority key identifier: 17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A Certificate issuer: /CN=A917EFB8/serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Certificate serial: 34BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft Manifest number: 34B5 Signing time: Fri 22 Aug 2025 14:50:44 +0000 Manifest this update: Fri 22 Aug 2025 14:50:43 +0000 Manifest next update: Fri 29 Aug 2025 14:50:43 +0000 Files and hashes: 1: Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl (hash: h0xRToJaJ6pyReMu2ujLB3i8xcMtOyaVaULpTjo3M98=) 2: E68E0FD4077B11EB98CA5D1CC4F9AE02.roa (hash: uVTYtUHXjzvA/dK6fjacM7pKV07g+NehzxqIMydfuDY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13499 (0x34bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917EFB8, serialNumber=170E9C767643C3C1F60579408648A3F0DA84045A Validity Not Before: Aug 22 14:50:43 2025 GMT Not After : Aug 29 14:50:43 2025 GMT Subject: CN=68a883c4-3e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:e4:e6:b3:21:be:fa:f9:b8:1a:69:c9:66: 6c:0e:9d:a6:e4:45:8e:86:f1:b1:9e:2f:ce:8c:9f: 6f:82:4b:ee:8b:e4:cf:94:d2:a9:9b:8e:78:c7:73: 75:35:45:99:77:08:c2:82:ea:cf:2a:54:c6:80:57: d1:e0:3e:16:5d:14:62:d1:1b:87:64:b1:dc:73:20: c4:f1:47:0d:68:16:5a:90:97:85:4d:13:87:41:bb: ea:3e:d2:2a:74:04:d3:8b:e6:19:66:0d:71:18:ef: 9b:bb:ae:1b:3d:71:fa:9e:c7:90:8e:0e:dd:99:73: 86:07:51:77:05:6f:19:aa:5d:a0:8b:fc:df:31:14: 61:b7:3c:70:4b:e6:06:a1:de:1c:6c:e2:92:a1:36: 03:1a:43:6e:b0:ed:56:0c:15:04:4c:1f:73:79:92: 55:19:66:ab:c2:54:ec:61:be:c1:1f:d4:f1:47:54: af:86:9f:32:26:10:3e:f9:e3:17:6b:42:45:67:b5: 0d:35:f5:dd:c0:0c:59:db:a9:8e:5a:16:ff:b4:9c: 74:36:b8:56:b8:77:df:a5:6f:a3:73:40:59:d9:31: 01:ee:09:53:c0:5d:d1:bf:40:bd:c4:29:92:b2:b8: b3:4c:82:2a:14:3d:04:f5:e7:6f:28:94:56:2b:f0: 00:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0D:C1:68:74:97:47:A2:F8:9E:1B:A9:B3:74:AF:22:AA:9B:4F:86 X509v3 Authority Key Identifier: keyid:17:0E:9C:76:76:43:C3:C1:F6:05:79:40:86:48:A3:F0:DA:84:04:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EFB8/D980A1721D9511E292150E7E08B02CD2/Fw6cdnZDw8H2BXlAhkij8NqEBFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:4c:9f:44:37:92:36:30:e6:42:05:d2:2a:d9:cb:29:2f:e4: 7e:31:13:73:2f:9a:7e:45:18:f4:08:df:fd:db:c3:a8:02:bd: ff:6d:b7:f1:d4:1f:7a:46:38:41:f0:f0:79:be:3b:0e:f2:7e: ed:5f:8e:4f:40:d1:30:df:bc:cf:fa:0c:5b:46:3a:e3:e3:a5: 08:24:17:c2:f6:eb:4c:b8:9f:e0:10:40:0e:fc:fe:7f:9c:7f: b7:e4:35:3e:00:51:be:94:40:20:53:14:fe:d3:1c:13:ce:d7: 9d:47:b6:e1:78:13:c1:7e:6a:9e:99:8b:46:90:fb:a5:7d:18: f5:00:30:7f:0b:37:d7:71:8a:5d:9b:4c:98:94:bc:12:d7:13: 8a:ef:e8:80:bb:cd:67:5d:a3:7a:44:fd:37:5c:ce:14:bc:cd: 14:c0:9c:f4:38:c3:c4:f8:1a:fc:20:d1:73:2c:88:76:cd:e0: 33:e7:33:f2:a2:2e:84:1f:34:2c:fe:75:e1:48:03:12:ba:c2: e9:71:56:b4:fd:47:6f:ce:d7:6e:c4:ba:d5:e1:0c:74:dc:22: f1:e4:8b:16:16:61:16:85:08:f1:f7:7b:0a:41:04:0b:bc:6e: 0f:f0:e2:5e:07:44:d2:88:9a:00:08:d1:23:cf:79:fc:6b:e9: 5f:4f:11:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNLswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0VGQjgxMTAvBgNVBAUTKDE3MEU5Qzc2NzY0M0MzQzFGNjA1Nzk0MDg2NDhBM0Yw REE4NDA0NUEwHhcNMjUwODIyMTQ1MDQzWhcNMjUwODI5MTQ1MDQzWjAYMRYwFAYD VQQDEw02OGE4ODNjNC0zZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFTk5rMhvvr5uBppyWZsDp2m5EWOhvGxni/OjJ9vgkvui+TPlNKpm454x3N1 NUWZdwjCgurPKlTGgFfR4D4WXRRi0RuHZLHccyDE8UcNaBZakJeFTROHQbvqPtIq dATTi+YZZg1xGO+bu64bPXH6nseQjg7dmXOGB1F3BW8Zql2gi/zfMRRhtzxwS+YG od4cbOKSoTYDGkNusO1WDBUETB9zeZJVGWarwlTsYb7BH9TxR1Svhp8yJhA++eMX a0JFZ7UNNfXdwAxZ26mOWhb/tJx0NrhWuHffpW+jc0BZ2TEB7glTwF3Rv0C9xCmS srizTIIqFD0E9edvKJRWK/AAlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIINwWh0 l0ei+J4bqbN0ryKqm0+GMB8GA1UdIwQYMBaAFBcOnHZ2Q8PB9gV5QIZIo/DahARa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUZCOC9EOTgwQTE3MjFE OTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4SDJCWGxBaGtpajhOcUVC Rm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3NmNkblpEdzhIMkJYbEFoa2lqOE5xRUJGby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RUZCOC9EOTgwQTE3MjFEOTUxMUUyOTIxNTBFN0UwOEIwMkNEMi9GdzZjZG5aRHc4 SDJCWGxBaGtpajhOcUVCRm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoTJ9EN5I2MOZCBdIq2cspL+R+MRNzL5p+RRj0CN/928OoAr3/bbfx 1B96RjhB8PB5vjsO8n7tX45PQNEw37zP+gxbRjrj46UIJBfC9utMuJ/gEEAO/P5/ nH+35DU+AFG+lEAgUxT+0xwTztedR7bheBPBfmqemYtGkPulfRj1ADB/CzfXcYpd m0yYlLwS1xOK7+iAu81nXaN6RP03XM4UvM0UwJz0OMPE+Br8INFzLIh2zeAz5zPy oi6EHzQs/nXhSAMSusLpcVa0/UdvztduxLrV4Qx03CLx5IsWFmEWhQjx93sKQQQL vG4P8OJeB0TSiJoACNEjz3n8a+lfTxFD -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:10 2025 by rpki-client