$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft File: fsx3osytqtpjQvwPRGkYdeo_koc.mft (raw, json) Hash identifier: 9JsozAQF6MkuWgEpMuX1+VDsR561Q+BdwJVl1NCVPCQ= Subject key identifier: CF:65:13:81:4D:94:87:D8:D4:DB:33:37:52:D1:47:57:8F:A0:8A:10 Authority key identifier: 7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 Certificate issuer: /CN=A91B2BC9/serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft Manifest number: 01E9 Signing time: Sat 23 Aug 2025 02:42:55 +0000 Manifest this update: Sat 23 Aug 2025 02:42:55 +0000 Manifest next update: Sat 30 Aug 2025 02:42:55 +0000 Files and hashes: 1: fsx3osytqtpjQvwPRGkYdeo_koc.crl (hash: w3N/GgoPeUwh76bpWZS2K4L0y71VhQGjFIm1FbDbnZg=) 2: 044E6658915A11ED8D2FBE43C4F9AE02.roa (hash: 5eORjOKdJA5R5JqKv9kUobgVioj38QF3cQAhkx2yC1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B2BC9, serialNumber=7ECC77A2CCADAADA6342FC0F44691875EA3F9287 Validity Not Before: Aug 23 02:42:55 2025 GMT Not After : Aug 30 02:42:55 2025 GMT Subject: CN=68a92aaf-759f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:94:10:c1:a4:6e:91:4f:52:87:0b:bb:b0: 8f:11:f9:b0:89:86:d7:c5:eb:ac:8e:46:90:7e:6f: e1:be:03:64:3d:19:f1:9f:bf:ba:5d:c4:3f:b5:2f: bb:cb:9e:62:7c:3c:7e:a2:ab:51:16:8e:c4:56:a8: 61:9d:0c:0f:c3:6a:59:b9:36:f0:5d:72:8a:b8:cd: 87:d2:c6:c8:82:07:39:18:90:80:bc:6b:c3:02:b3: 25:5d:f5:90:04:06:c1:37:44:ed:34:e5:26:0b:a4: 3f:d0:86:88:03:d8:ea:a1:1b:18:4b:96:56:12:58: b2:69:a4:a1:ac:02:8e:c4:05:fc:e0:1e:b8:68:bb: e2:90:65:3f:eb:9b:80:22:ba:17:a1:7f:6f:e2:8f: 3d:4e:72:14:a0:29:56:3e:79:f1:1b:18:5c:68:23: 5a:f1:a6:3a:be:c8:57:83:c0:bb:c1:1f:39:7a:6a: 21:ed:a7:cb:46:f7:5d:b3:51:57:2e:21:76:36:8d: 84:db:57:54:f6:e1:0c:4b:f2:c7:f0:ee:39:23:79: 12:82:f9:b8:d6:13:e5:28:ce:7b:ec:6d:b1:a5:cb: 37:9c:57:8b:64:6c:f8:41:20:e6:ac:77:1e:a8:fd: 7d:f4:6c:0f:47:92:41:f8:1f:67:14:b0:92:e4:e2: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:65:13:81:4D:94:87:D8:D4:DB:33:37:52:D1:47:57:8F:A0:8A:10 X509v3 Authority Key Identifier: keyid:7E:CC:77:A2:CC:AD:AA:DA:63:42:FC:0F:44:69:18:75:EA:3F:92:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fsx3osytqtpjQvwPRGkYdeo_koc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2BC9/66D37AA6915611ED8D4B773DC4F9AE02/fsx3osytqtpjQvwPRGkYdeo_koc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:44:01:f0:f6:b0:a3:ea:b5:98:7f:d1:01:61:04:e8:96:f7: 7b:3a:91:fa:15:3b:d7:f4:62:38:0e:9c:4e:d5:24:65:d2:ec: b4:db:7f:46:f2:4b:94:4a:28:64:66:f6:23:ec:c2:f0:fb:d4: 68:f2:c1:96:93:7e:aa:61:c9:37:63:10:43:ec:94:d1:88:3f: b2:49:22:10:b1:c2:9d:da:ad:0d:b4:63:b6:c4:47:b4:92:a4: 1c:1d:10:f9:3d:08:10:06:54:20:d4:f1:06:0a:7a:e9:67:d8: 4c:e7:a0:4c:4a:1a:c3:b8:52:95:92:1f:d6:b1:6c:86:7d:9e: 91:a8:b3:17:0d:34:52:66:d3:66:ae:f5:0e:54:48:46:ea:e1: 0a:91:c5:43:a5:70:89:44:66:48:42:17:b9:ee:81:fb:55:5c: e5:59:a8:82:f1:f1:d0:2f:1b:39:54:82:6a:36:d2:b7:af:67: cf:f4:94:b6:ed:e4:f9:42:18:29:c2:a1:5b:38:e2:04:10:5b: fb:da:79:70:67:83:bf:53:73:51:1a:d8:57:ca:bf:b5:0b:e7: e1:72:2d:b8:27:32:a6:96:4a:6e:a8:17:14:38:48:ef:de:ae: b8:4c:19:a3:b1:90:ee:ca:02:1a:50:13:29:f4:25:b3:60:aa: 08:a7:83:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjJCQzkxMTAvBgNVBAUTKDdFQ0M3N0EyQ0NBREFBREE2MzQyRkMwRjQ0NjkxODc1 RUEzRjkyODcwHhcNMjUwODIzMDI0MjU1WhcNMjUwODMwMDI0MjU1WjAYMRYwFAYD VQQDEw02OGE5MmFhZi03NTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqumUEMGkbpFPUocLu7CPEfmwiYbXxeusjkaQfm/hvgNkPRnxn7+6XcQ/tS+7 y55ifDx+oqtRFo7EVqhhnQwPw2pZuTbwXXKKuM2H0sbIggc5GJCAvGvDArMlXfWQ BAbBN0TtNOUmC6Q/0IaIA9jqoRsYS5ZWEliyaaShrAKOxAX84B64aLvikGU/65uA IroXoX9v4o89TnIUoClWPnnxGxhcaCNa8aY6vshXg8C7wR85emoh7afLRvdds1FX LiF2No2E21dU9uEMS/LH8O45I3kSgvm41hPlKM577G2xpcs3nFeLZGz4QSDmrHce qP199GwPR5JB+B9nFLCS5OLNQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM9lE4FN lIfY1NszN1LRR1ePoIoQMB8GA1UdIwQYMBaAFH7Md6LMraraY0L8D0RpGHXqP5KH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMkJDOS82NkQzN0FBNjkx NTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0cGpRdndQUkdrWWRlb19r b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZzeDNvc3l0cXRwalF2d1BSR2tZZGVvX2tvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MkJDOS82NkQzN0FBNjkxNTYxMUVEOEQ0Qjc3M0RDNEY5QUUwMi9mc3gzb3N5dHF0 cGpRdndQUkdrWWRlb19rb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBURAHw9rCj6rWYf9EBYQTolvd7OpH6FTvX9GI4DpxO1SRl0uy0239G 8kuUSihkZvYj7MLw+9Ro8sGWk36qYck3YxBD7JTRiD+ySSIQscKd2q0NtGO2xEe0 kqQcHRD5PQgQBlQg1PEGCnrpZ9hM56BMShrDuFKVkh/WsWyGfZ6RqLMXDTRSZtNm rvUOVEhG6uEKkcVDpXCJRGZIQhe57oH7VVzlWaiC8fHQLxs5VIJqNtK3r2fP9JS2 7eT5QhgpwqFbOOIEEFv72nlwZ4O/U3NRGthXyr+1C+fhci24JzKmlkpuqBcUOEjv 3q64TBmjsZDuygIaUBMp9CWzYKoIp4Ot -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:41 2025 by rpki-client