$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft File: FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft (raw, json) Hash identifier: SVgE9UvSu4LlwgaLUMfo+5cOn6dq1uy6u78nokNHDUg= Subject key identifier: 47:06:E2:4D:F0:AC:F8:89:36:DA:F8:AE:04:F5:CA:CC:9F:79:76:9C Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 Certificate issuer: /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft Manifest number: 0112 Signing time: Sat 23 Aug 2025 05:02:27 +0000 Manifest this update: Sat 23 Aug 2025 05:02:27 +0000 Manifest next update: Sat 30 Aug 2025 05:02:27 +0000 Files and hashes: 1: FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl (hash: k9HfkjMP7IOaShzpDRLbxiFHYzdH1bE9yYddHE928TY=) 2: C1F74E665C1611F0B0B40A35C4F9AE02.roa (hash: cyzmbSkuoaF4EDWEAACeoUMvRNItS2PdfJUezyi8Vms=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0 Validity Not Before: Aug 23 05:02:27 2025 GMT Not After : Aug 30 05:02:27 2025 GMT Subject: CN=68a94b63-a59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:31:35:0c:8f:89:a7:cf:be:c3:42:7b:03:f9: 19:6f:80:9b:55:92:9e:62:e4:f4:45:d2:c6:09:59: 7d:d7:c8:da:06:db:01:29:77:b1:d4:61:b7:3a:ad: f0:bb:ee:77:6e:5a:99:69:cb:2c:72:cb:9a:b2:88: 40:62:1a:a3:3b:6f:36:36:19:1f:e0:4e:cc:23:94: c3:42:81:cc:5d:f8:68:b0:dc:c1:a4:f6:da:8a:48: 00:60:53:50:d7:6f:5f:8b:91:56:66:14:22:b2:d6: 2c:8d:8f:77:0a:50:f1:e9:94:51:8e:1a:c4:32:e1: 29:c0:e8:88:c3:14:3c:58:1b:00:0e:d2:91:4a:fa: 56:1e:ed:26:fe:52:e3:93:d0:66:10:67:47:25:93: a5:b0:ca:86:d2:60:3f:24:bc:32:d5:0d:75:38:a9: 42:61:f2:eb:a7:c1:61:0c:67:b6:de:7d:59:7e:69: 52:31:39:e4:28:54:ca:29:aa:9a:65:90:90:79:4c: d2:fb:40:41:81:24:91:de:59:2e:fb:68:85:5b:1f: 86:17:90:f2:1c:69:5c:6c:c6:fc:3a:16:b7:78:39: 58:a0:66:11:cf:5e:f0:f2:0e:33:d9:cc:ac:39:cd: 8b:b5:9f:25:f6:8b:9e:7c:f3:30:c2:1e:89:a7:fd: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:E2:4D:F0:AC:F8:89:36:DA:F8:AE:04:F5:CA:CC:9F:79:76:9C X509v3 Authority Key Identifier: keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:ba:ec:08:44:fe:5d:29:26:72:fe:95:0a:cd:af:6f:77:3d: 1f:8d:87:a5:c0:b2:46:fd:46:37:92:3c:c5:eb:9d:4b:74:0b: 70:29:4b:ae:49:22:df:9b:4c:fc:1b:6f:4c:16:14:9c:1a:26: ad:27:1b:ea:39:7f:9d:98:81:73:c1:49:3c:2c:d8:8c:19:ab: 3e:df:67:c9:be:a1:26:67:30:dc:30:de:e9:28:ee:5c:01:6c: 91:a7:84:a0:76:e3:8f:60:81:14:64:9c:fe:fd:f0:bd:f9:02: 2c:1d:76:39:c4:b9:22:88:25:c7:68:0b:33:98:a1:2b:7e:ec: 0c:6b:86:44:bb:23:64:91:c7:b5:98:94:31:83:0e:5b:a5:9f: bb:38:a9:c6:07:4c:3b:87:df:66:29:0f:c9:db:a7:3c:f9:ba: 52:8c:d3:c8:ba:af:a1:9e:b7:23:51:80:67:7d:f0:e0:75:fa: ff:f5:2b:c9:73:ab:ff:f2:b7:75:0b:d2:d6:ce:e5:5c:2b:c6: 74:50:f7:26:05:b2:60:86:83:58:49:5b:16:27:2c:eb:96:98: c0:86:bb:a1:7f:43:86:cd:5a:2b:30:d6:9e:33:0f:c8:78:f0: cd:6f:5b:6e:e7:b2:89:6a:aa:d7:e7:12:53:22:f4:c0:bc:59: cc:e3:e0:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5REExMTAvBgNVBAUTKDE2RDE0QUE1MTM0RDQxMTI0NjRENzk5MkRCRjFDNDUy RjdGQTI5QTAwHhcNMjUwODIzMDUwMjI3WhcNMjUwODMwMDUwMjI3WjAYMRYwFAYD VQQDEw02OGE5NGI2My1hNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/TE1DI+Jp8++w0J7A/kZb4CbVZKeYuT0RdLGCVl918jaBtsBKXex1GG3Oq3w u+53blqZacsscsuasohAYhqjO282Nhkf4E7MI5TDQoHMXfhosNzBpPbaikgAYFNQ 129fi5FWZhQistYsjY93ClDx6ZRRjhrEMuEpwOiIwxQ8WBsADtKRSvpWHu0m/lLj k9BmEGdHJZOlsMqG0mA/JLwy1Q11OKlCYfLrp8FhDGe23n1ZfmlSMTnkKFTKKaqa ZZCQeUzS+0BBgSSR3lku+2iFWx+GF5DyHGlcbMb8Oha3eDlYoGYRz17w8g4z2cys Oc2LtZ8l9ouefPMwwh6Jp/12HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcG4k3w rPiJNtr4rgT1ysyfeXacMB8GA1UdIwQYMBaAFBbRSqUTTUESRk15ktvxxFL3+img MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlEQS8zRTYyNEJBRURB NTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFSSkdUWG1TMl9IRVV2ZjZL YUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z0RktwUk5OUVJKR1RYbVMyX0hFVXZmNkthQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlEQS8zRTYyNEJBRURBNTQxMUVFODI3Q0E1N0RDNEY5QUUwMi9GdEZLcFJOTlFS SkdUWG1TMl9IRVV2ZjZLYUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRuuwIRP5dKSZy/pUKza9vdz0fjYelwLJG/UY3kjzF651LdAtwKUuu SSLfm0z8G29MFhScGiatJxvqOX+dmIFzwUk8LNiMGas+32fJvqEmZzDcMN7pKO5c AWyRp4SgduOPYIEUZJz+/fC9+QIsHXY5xLkiiCXHaAszmKErfuwMa4ZEuyNkkce1 mJQxgw5bpZ+7OKnGB0w7h99mKQ/J26c8+bpSjNPIuq+hnrcjUYBnffDgdfr/9SvJ c6v/8rd1C9LWzuVcK8Z0UPcmBbJghoNYSVsWJyzrlpjAhruhf0OGzVorMNaeMw/I ePDNb1tu57KJaqrX5xJTIvTAvFnM4+A5 -----END CERTIFICATE-----Generated at Sun Aug 24 07:21:02 2025 by rpki-client