$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft File: FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft (raw, json) Hash identifier: dJ8tXzDVHmtmvl1eN739/oCbZATtd2otdA1UVihzrmo= Subject key identifier: 5F:EE:1B:C7:CA:DC:C9:60:A0:B6:AC:44:D5:1A:E7:D3:3E:CF:90:37 Authority key identifier: 14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 Certificate issuer: /CN=A91B2131/serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Certificate serial: 069E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft Manifest number: 0698 Signing time: Fri 22 Aug 2025 22:24:29 +0000 Manifest this update: Fri 22 Aug 2025 22:24:29 +0000 Manifest next update: Fri 29 Aug 2025 22:24:29 +0000 Files and hashes: 1: FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl (hash: H8Zpr3dtxRXTYnXQLadBfJPhjgnTL9TDVDXwkKyAzKI=) 2: D240E2EE814D11EBB1CE367FC4F9AE02.roa (hash: OcDk0+b+7yUXsyGIwS3/BcoBm4sD7lmajtFFAPMecA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2131, serialNumber=1407E31C87E1162459D83C3AEB488C975A9C23F1 Validity Not Before: Aug 22 22:24:29 2025 GMT Not After : Aug 29 22:24:29 2025 GMT Subject: CN=68a8ee1d-c05f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:6b:65:c6:18:68:39:59:00:5a:f8:99:8b: c1:24:5e:a3:c6:06:2f:bc:15:5a:c7:59:a3:2f:c9: 9b:2a:54:cd:0a:2a:05:f1:af:77:87:d1:bd:24:75: 72:b8:0b:30:15:26:5d:71:e8:3c:37:b2:a8:5b:5f: 6e:06:a7:dd:55:da:91:11:38:d8:b5:f5:b8:75:ae: 3e:e4:03:12:95:d4:d4:ad:44:6e:35:19:da:d8:f8: ad:69:27:0f:03:ed:90:3e:44:bc:8f:ca:29:12:4a: 28:05:3e:ec:fd:c0:62:e0:09:1b:06:2a:6c:b7:e0: 70:8f:2a:a7:4b:62:41:f4:01:f3:6a:0a:7f:13:2e: ff:2d:e1:69:97:72:de:be:2c:cd:b2:78:c9:cf:c9: 4f:09:5d:d3:30:5f:34:c5:36:ea:cc:fd:db:ce:0c: fa:4e:f3:3a:f8:2e:7f:7e:66:4f:4e:ed:e5:78:ab: 5a:99:20:f4:4b:c1:bb:56:69:9b:42:52:e9:9e:d0: e9:ed:77:73:ed:2b:77:a2:2f:51:af:64:1c:4b:f0: 76:11:ce:2b:3c:0f:60:53:a7:15:84:d3:e0:83:31: e9:d9:b7:db:82:88:be:e8:a6:47:20:80:00:ae:0a: 20:b4:7e:17:eb:0e:48:1f:ca:b8:10:81:40:05:d0: ce:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:1B:C7:CA:DC:C9:60:A0:B6:AC:44:D5:1A:E7:D3:3E:CF:90:37 X509v3 Authority Key Identifier: keyid:14:07:E3:1C:87:E1:16:24:59:D8:3C:3A:EB:48:8C:97:5A:9C:23:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FAfjHIfhFiRZ2Dw660iMl1qcI_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2131/BE4A6CD07D7211EB8CB63665C4F9AE02/FAfjHIfhFiRZ2Dw660iMl1qcI_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:01:0e:d0:ed:45:89:7d:eb:47:80:52:42:df:f1:46:83:1a: 7b:ee:cc:f8:31:2c:03:4f:bf:23:d3:a3:aa:d4:f9:73:1f:af: 67:d3:8b:45:5a:56:89:38:ee:68:0f:da:fe:78:47:97:2b:18: 5a:e0:3d:07:1c:21:61:2d:37:a2:c3:fd:49:2c:4b:48:aa:9b: 15:75:80:37:35:dc:43:a2:07:70:83:97:3d:ee:1b:b0:7d:55: 6b:c7:66:a2:21:0b:c4:a2:4c:5b:90:5c:37:03:19:84:10:cf: f7:20:fa:34:11:bd:a8:f5:e0:0a:e9:66:d4:64:ed:56:7c:00: 10:8b:c2:9a:6e:3c:c5:5e:30:cd:ab:c6:7e:de:64:af:c0:07: 82:8c:3a:d0:ce:fa:5a:d4:3f:74:89:cf:5b:e1:e8:44:67:96: af:4d:21:32:5b:53:aa:bf:76:6d:98:66:22:e5:3c:57:c5:39: 91:13:82:04:57:8b:7d:f8:2e:c1:a1:f7:0a:7a:31:f1:2f:bc: 5b:c1:47:59:0f:08:9d:ed:4c:03:1e:ad:23:5b:2f:c1:2d:b2: d0:89:0c:48:41:a0:57:60:c1:d7:0b:54:4b:bd:36:5f:cd:ac: d8:2d:a7:29:d9:a7:e0:43:16:12:3f:2f:29:d1:db:db:b3:97: 21:59:86:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjIxMzExMTAvBgNVBAUTKDE0MDdFMzFDODdFMTE2MjQ1OUQ4M0MzQUVCNDg4Qzk3 NUE5QzIzRjEwHhcNMjUwODIyMjIyNDI5WhcNMjUwODI5MjIyNDI5WjAYMRYwFAYD VQQDEw02OGE4ZWUxZC1jMDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApW9rZcYYaDlZAFr4mYvBJF6jxgYvvBVax1mjL8mbKlTNCioF8a93h9G9JHVy uAswFSZdceg8N7KoW19uBqfdVdqRETjYtfW4da4+5AMSldTUrURuNRna2PitaScP A+2QPkS8j8opEkooBT7s/cBi4AkbBipst+BwjyqnS2JB9AHzagp/Ey7/LeFpl3Le vizNsnjJz8lPCV3TMF80xTbqzP3bzgz6TvM6+C5/fmZPTu3leKtamSD0S8G7Vmmb QlLpntDp7Xdz7St3oi9Rr2QcS/B2Ec4rPA9gU6cVhNPggzHp2bfbgoi+6KZHIIAA rgogtH4X6w5IH8q4EIFABdDOoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/uG8fK 3MlgoLasRNUa59M+z5A3MB8GA1UdIwQYMBaAFBQH4xyH4RYkWdg8OutIjJdanCPx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjEzMS9CRTRBNkNEMDdE NzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZpUloyRHc2NjBpTWwxcWNJ X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZBZmpISWZoRmlSWjJEdzY2MGlNbDFxY0lfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MjEzMS9CRTRBNkNEMDdENzIxMUVCOENCNjM2NjVDNEY5QUUwMi9GQWZqSElmaEZp UloyRHc2NjBpTWwxcWNJX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCAQ7Q7UWJfetHgFJC3/FGgxp77sz4MSwDT78j06Oq1PlzH69n04tF WlaJOO5oD9r+eEeXKxha4D0HHCFhLTeiw/1JLEtIqpsVdYA3NdxDogdwg5c97huw fVVrx2aiIQvEokxbkFw3AxmEEM/3IPo0Eb2o9eAK6WbUZO1WfAAQi8KabjzFXjDN q8Z+3mSvwAeCjDrQzvpa1D90ic9b4ehEZ5avTSEyW1Oqv3ZtmGYi5TxXxTmRE4IE V4t9+C7BofcKejHxL7xbwUdZDwid7UwDHq0jWy/BLbLQiQxIQaBXYMHXC1RLvTZf zazYLacp2afgQxYSPy8p0dvbs5chWYYR -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:28 2025 by rpki-client