$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: meTNrAk8DG4btTZQylPr1W5vsWXThDXyvTMNSNBcZLM= Subject key identifier: CB:60:C9:8D:AC:9B:09:95:B6:C6:00:24:CE:07:C6:F6:8D:3D:EE:CA Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0AF4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0AE6 Signing time: Fri 22 Aug 2025 19:33:53 +0000 Manifest this update: Fri 22 Aug 2025 19:33:52 +0000 Manifest next update: Fri 29 Aug 2025 19:33:52 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: Gpdrj10xHg061NcRu5Df5B3xjF4pbfAdvUY89KAQt0w=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2804 (0xaf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Aug 22 19:33:52 2025 GMT Not After : Aug 29 19:33:52 2025 GMT Subject: CN=68a8c621-9c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:38:09:b9:d2:4a:a2:62:f3:78:67:0b:7a:a4: a0:8f:fd:71:ab:54:54:be:bc:4b:6a:aa:59:b9:8a: d6:a2:72:0a:28:59:52:e4:92:eb:4d:61:63:dc:d5: cb:ba:af:cb:9b:04:2b:e3:1e:f4:f0:88:2e:48:3c: 36:68:41:d0:ec:d4:66:23:53:37:bb:b4:82:78:de: 91:7b:63:99:da:2d:ab:5d:8d:61:11:cb:7c:80:41: 91:4b:cc:f9:9a:d8:a1:f3:6a:f4:95:97:42:1f:80: 81:b8:e5:b0:fa:49:47:3d:e4:a6:c9:4b:28:90:ea: d8:5a:06:48:a5:98:34:93:90:e3:a3:23:6a:e3:4c: 5b:16:33:6e:f0:71:73:9c:5f:94:7f:8c:ab:a2:56: ec:b2:4d:92:31:7e:ee:f6:69:b5:cf:86:7f:3a:cf: 21:8a:49:0e:d7:8f:0b:5d:ad:c6:d2:3f:85:d1:53: 9d:98:de:a2:56:c7:dd:55:99:b0:ed:af:09:2f:75: 8a:a9:79:6c:48:31:6e:4c:2b:ee:23:3f:fe:a5:08: dc:5d:54:00:2f:2d:56:15:44:51:34:d8:cb:29:d4: f2:76:69:47:76:be:ce:e6:cf:28:37:08:bd:5e:8e: fe:5c:7c:53:7b:0c:6a:4b:ed:2d:31:ca:10:d4:d2: 2d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:60:C9:8D:AC:9B:09:95:B6:C6:00:24:CE:07:C6:F6:8D:3D:EE:CA X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:e4:04:6f:e1:31:b1:7e:c1:7a:71:4d:fc:98:4c:d1:81:fd: ed:5f:53:d7:72:39:93:4b:1c:bb:9d:c7:c5:b0:f2:fa:cc:b1: 26:a5:98:9d:b4:c0:dd:17:1f:db:ac:54:8f:5f:5a:27:80:6b: e1:fe:86:c9:9c:41:19:83:4f:41:9b:2b:4b:9c:cc:61:f6:36: ab:ce:28:31:92:88:1e:69:3f:b5:ea:75:45:57:d4:7f:80:7c: 3f:0e:67:b6:bd:90:1e:97:05:54:86:a6:0f:ed:e3:ce:31:14: 81:ea:34:64:0d:42:94:6e:12:78:b9:a2:df:bf:96:ef:52:22: 99:ea:f0:cf:c0:a0:5a:d7:3b:ea:00:7b:98:75:24:79:f0:7f: 69:3f:49:da:d3:cd:53:c6:50:bf:87:65:dc:be:57:b9:23:cb: 89:7a:ae:2b:be:fe:dc:8d:7a:0d:35:6b:75:2a:2e:04:0d:10: 9a:53:60:76:3d:69:cc:03:ae:21:a4:c5:13:d7:83:39:b6:d4: 2b:64:66:90:6f:6d:89:d2:3d:a2:73:e4:1c:22:62:22:e0:ec: 64:2b:47:b4:c5:c3:63:83:6d:ce:7e:ed:4a:0a:61:dc:aa:a0: 8c:8e:27:0b:9d:d2:6e:26:15:8a:87:0b:5b:69:bf:38:27:4f: 3d:45:a5:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUwODIyMTkzMzUyWhcNMjUwODI5MTkzMzUyWjAYMRYwFAYD VQQDEw02OGE4YzYyMS05YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zgJudJKomLzeGcLeqSgj/1xq1RUvrxLaqpZuYrWonIKKFlS5JLrTWFj3NXL uq/LmwQr4x708IguSDw2aEHQ7NRmI1M3u7SCeN6Re2OZ2i2rXY1hEct8gEGRS8z5 mtih82r0lZdCH4CBuOWw+klHPeSmyUsokOrYWgZIpZg0k5DjoyNq40xbFjNu8HFz nF+Uf4yrolbssk2SMX7u9mm1z4Z/Os8hikkO148LXa3G0j+F0VOdmN6iVsfdVZmw 7a8JL3WKqXlsSDFuTCvuIz/+pQjcXVQALy1WFURRNNjLKdTydmlHdr7O5s8oNwi9 Xo7+XHxTewxqS+0tMcoQ1NItYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtgyY2s mwmVtsYAJM4HxvaNPe7KMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB55ARv4TGxfsF6cU38mEzRgf3tX1PXcjmTSxy7ncfFsPL6zLEmpZid tMDdFx/brFSPX1ongGvh/obJnEEZg09BmytLnMxh9jarzigxkogeaT+16nVFV9R/ gHw/Dme2vZAelwVUhqYP7ePOMRSB6jRkDUKUbhJ4uaLfv5bvUiKZ6vDPwKBa1zvq AHuYdSR58H9pP0na081TxlC/h2Xcvle5I8uJeq4rvv7cjXoNNWt1Ki4EDRCaU2B2 PWnMA64hpMUT14M5ttQrZGaQb22J0j2ic+QcImIi4OxkK0e0xcNjg23Ofu1KCmHc qqCMjicLndJuJhWKhwtbab84J089RaUL -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:22 2025 by rpki-client