$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft File: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft (raw, json) Hash identifier: WRyua1iTlGGyA4jGh6Nv3+lZFD4/TPuNo9PDSjqmiU8= Subject key identifier: 8D:D4:6A:35:C3:79:2E:96:CD:0D:10:3E:8B:6E:DB:80:62:2F:F7:A6 Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA Certificate issuer: /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Certificate serial: 08D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft Manifest number: 08CF Signing time: Fri 22 Aug 2025 20:33:08 +0000 Manifest this update: Fri 22 Aug 2025 20:33:07 +0000 Manifest next update: Fri 29 Aug 2025 20:33:07 +0000 Files and hashes: 1: FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl (hash: hErh3GE0U4wJMmZJYwWIyIOFzRfQ5wfSRzzLnHkX3uE=) 2: 4D2299ECF7C611EF92C34E4AC4F9AE02.roa (hash: vDSnr7GTN6AmKRXToXihl2BttDhcvVIF1CJ22BM3AS0=) 3: 1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (hash: 6D+05PkkEBLLvv2UgX08yRx5GMb9vhbOIwJ+Ku99Ia0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2262 (0x8d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA Validity Not Before: Aug 22 20:33:07 2025 GMT Not After : Aug 29 20:33:07 2025 GMT Subject: CN=68a8d403-c664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:5a:c3:3a:9a:d1:5c:95:e6:34:71:94:6b: f9:53:b8:b3:30:b5:7c:a6:36:6a:b3:cd:9d:75:e6: 5e:fd:41:1a:05:02:de:cd:91:b6:8a:86:d1:fa:17: c5:d2:bb:a4:5e:44:85:ce:3d:24:fd:78:2d:0a:67: ae:65:b5:e3:d1:c6:85:c9:ed:23:01:ed:59:23:c9: 5a:bc:5f:53:95:c1:8b:5e:3f:40:d4:45:ba:b9:37: 9c:65:66:55:a4:e9:cb:02:fa:0b:6b:35:61:05:a1: 3f:76:bc:9d:01:1f:71:1a:9d:a8:c0:0b:d6:20:4c: ef:b9:a2:7b:4f:9c:e9:e4:53:68:43:aa:05:8c:e1: 0c:f9:62:39:1c:4a:e9:2e:02:62:b7:16:d5:49:e8: 4b:c9:73:eb:f7:68:36:30:9a:bd:3e:f3:05:97:11: 81:5d:9a:a5:fd:ba:10:7e:e0:f2:72:7d:21:e7:fc: 3e:fe:10:d4:73:2b:8e:20:b5:7e:0b:38:cf:92:24: 96:97:6d:6d:dc:f0:2e:38:3c:62:77:24:ea:25:3b: e1:19:36:4c:11:87:d9:42:9a:d0:59:40:dd:9a:cd: 7b:d5:74:86:b7:ed:8e:68:aa:32:c0:80:0b:fe:94: 04:e4:a2:21:8e:32:b7:1a:b2:38:07:7b:41:cf:a7: 3f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:6A:35:C3:79:2E:96:CD:0D:10:3E:8B:6E:DB:80:62:2F:F7:A6 X509v3 Authority Key Identifier: keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c9:f9:02:41:e3:fa:b1:f9:a4:10:e2:85:0a:77:2d:9b:57: 1b:be:2d:68:a8:06:d3:c1:7a:a7:5c:d0:3a:02:92:70:37:e4: b6:b2:74:f7:1a:18:2b:b5:62:70:27:94:85:a7:c5:37:f6:21: 61:55:86:95:32:c5:f8:66:85:03:6a:d6:0b:e6:dd:ae:32:54: b9:db:be:6c:36:56:3f:96:13:d1:ff:f8:fb:a7:74:6a:91:d5: 01:1b:1e:06:51:03:99:96:94:59:51:45:4e:68:5e:1b:cf:90: 1f:bc:73:b9:a0:5d:a7:f9:1b:39:63:dc:ec:11:07:08:31:ed: 39:d5:79:63:4b:97:de:1a:34:95:80:ab:a2:20:b4:dd:25:86: 3a:7a:55:13:dd:68:e6:79:86:f5:b1:e4:f5:d5:69:67:fb:3e: ab:c1:0d:83:9f:f6:50:4f:39:92:76:49:4a:b8:1a:2f:f0:85: 1d:e1:1c:9a:a7:2d:42:fe:48:3d:54:30:6e:32:f8:9b:96:9b: 97:31:88:91:06:94:3f:8d:fa:5a:10:b1:c7:95:eb:90:5c:8e: 79:cb:bd:39:e7:3d:4d:4f:29:7a:2c:d9:41:05:81:21:4d:bf: 25:e1:15:f7:ca:94:ec:8c:a1:93:90:99:35:2f:14:36:9a:f7: a2:f2:c0:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx NTlEMjc4QkEwHhcNMjUwODIyMjAzMzA3WhcNMjUwODI5MjAzMzA3WjAYMRYwFAYD VQQDEw02OGE4ZDQwMy1jNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweJawzqa0VyV5jRxlGv5U7izMLV8pjZqs82ddeZe/UEaBQLezZG2iobR+hfF 0rukXkSFzj0k/XgtCmeuZbXj0caFye0jAe1ZI8lavF9TlcGLXj9A1EW6uTecZWZV pOnLAvoLazVhBaE/drydAR9xGp2owAvWIEzvuaJ7T5zp5FNoQ6oFjOEM+WI5HErp LgJitxbVSehLyXPr92g2MJq9PvMFlxGBXZql/boQfuDycn0h5/w+/hDUcyuOILV+ CzjPkiSWl21t3PAuODxidyTqJTvhGTZMEYfZQprQWUDdms171XSGt+2OaKoywIAL /pQE5KIhjjK3GrI4B3tBz6c/IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3UajXD eS6WzQ0QPotu24BiL/emMB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5 QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODg3Ri9BQjU2OTk5OEI5QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3Vjhx WHU1WXJnMG1ObkVWblNlTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVyfkCQeP6sfmkEOKFCnctm1cbvi1oqAbTwXqnXNA6ApJwN+S2snT3 GhgrtWJwJ5SFp8U39iFhVYaVMsX4ZoUDatYL5t2uMlS5275sNlY/lhPR//j7p3Rq kdUBGx4GUQOZlpRZUUVOaF4bz5AfvHO5oF2n+Rs5Y9zsEQcIMe051XljS5feGjSV gKuiILTdJYY6elUT3WjmeYb1seT11Wln+z6rwQ2Dn/ZQTzmSdklKuBov8IUd4Rya py1C/kg9VDBuMviblpuXMYiRBpQ/jfpaELHHleuQXI55y7055z1NTyl6LNlBBYEh Tb8l4RX3ypTsjKGTkJk1LxQ2mvei8sAC -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:49 2025 by rpki-client