$ rpki-client -vvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft File: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft (raw, json) Hash identifier: t8dY6ghx8d9pUPZnZVPlkG1vqTHUeuXMA8Tyw3tTmPc= Subject key identifier: 3B:DF:B8:2F:5A:15:25:72:B8:C3:C1:47:ED:E0:A8:5B:F8:62:29:72 Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C Certificate issuer: /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft Manifest number: C0 Signing time: Sat 23 Aug 2025 06:04:27 +0000 Manifest this update: Sat 23 Aug 2025 06:04:26 +0000 Manifest next update: Sat 30 Aug 2025 06:04:26 +0000 Files and hashes: 1: Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl (hash: T64LNfnvwTDlAIYeL5V9RoHn0ENpY9kVCHb4WyDERlA=) 2: A242BED45E1511EFBBFB911EC4F9AE02.roa (hash: BteKkWaHztNY5RPMXMdQaz6E2A7IVRfTkJnalZdJs5Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:04:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C Validity Not Before: Aug 23 06:04:26 2025 GMT Not After : Aug 30 06:04:26 2025 GMT Subject: CN=68a959ea-14ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:14:65:ee:7a:cf:e3:47:8d:45:5c:69:8c: eb:43:d8:c4:4a:f7:e4:8b:9f:d7:db:f4:6a:90:57: f6:0c:79:d4:35:98:88:7d:6c:e4:35:93:bb:b2:25: 62:60:f4:85:60:b6:d2:e6:d9:60:9e:3d:af:01:a7: ac:12:97:4c:dc:53:3d:8c:33:db:8d:05:3f:2c:14: a7:0f:8d:d9:2c:75:eb:a0:26:2b:28:27:55:a7:a6: 6c:ce:68:6d:b5:3a:b2:a5:66:6b:5d:93:d3:56:e9: 87:d6:7e:fc:60:62:1a:5b:c5:82:eb:6e:c5:b5:81: 55:68:7d:ec:33:ac:17:03:e1:68:b7:41:45:8b:a5: e9:0e:e5:76:a1:0c:e7:12:af:05:d0:71:f7:b7:56: 4c:b3:88:13:8b:1c:a0:02:24:20:a1:5d:e9:f8:7a: 65:66:74:76:a2:b0:18:d5:2c:c6:db:11:84:4c:a3: 55:24:e4:9c:3f:a3:90:79:ea:6a:7f:32:5f:b0:09: 98:04:08:e7:8f:2e:95:8b:53:b3:d8:82:83:a3:e9: fc:09:2c:87:a6:6f:8b:be:05:a5:56:5e:8b:33:cd: 4d:71:69:de:18:8d:f1:d9:81:22:f3:78:8d:59:8b: 73:63:4a:e6:01:57:c0:59:56:1b:5a:4b:96:27:9e: 42:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:DF:B8:2F:5A:15:25:72:B8:C3:C1:47:ED:E0:A8:5B:F8:62:29:72 X509v3 Authority Key Identifier: keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:7d:4f:2c:8d:14:8f:51:4c:3b:fe:dd:a7:e2:88:bb:e4:54: 33:eb:55:68:65:17:c1:a9:57:f5:16:b4:4f:cb:16:b0:1c:4f: 17:d0:83:40:eb:0f:ed:b4:cd:f1:e1:ee:10:75:0e:b5:07:0f: ea:94:39:30:25:40:3f:d4:c2:60:87:c1:30:39:35:03:87:1f: 1b:a6:6c:69:e1:eb:5d:16:f4:ab:09:fd:fe:b7:b3:57:11:bf: eb:73:9d:e2:05:c9:29:40:ae:fd:98:20:04:85:e2:6d:81:b7: 7a:4f:59:63:09:67:88:83:c7:3f:ef:e3:1a:70:41:15:30:4f: 9b:6f:73:1c:e4:06:0c:90:9c:92:9d:27:70:ce:71:a1:99:ba: b5:65:2d:7f:6c:a2:e0:50:52:e4:44:b0:a6:5a:87:a2:7e:3a: 52:e8:b8:36:a9:46:84:c2:90:77:b7:f1:a5:93:28:ae:45:07: 3c:4b:44:a5:e4:f3:dc:6c:e2:4d:98:b2:f5:23:44:1d:40:57: 37:a0:ef:35:d9:ac:cd:2e:84:9c:0f:7e:29:5d:26:86:4c:17: 66:67:1a:f4:95:8b:ed:aa:dc:e8:2b:82:d3:7b:32:ba:86:f4: 84:94:a9:90:c9:0b:94:04:11:68:92:b9:24:79:bc:77:67:6b: df:6f:06:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY3M0IxMTAvBgNVBAUTKDE1Q0Y1MERCNTJCMEYxMkYxQTZFM0IzOTYzM0Q0ODJF MDlDRkUzNUMwHhcNMjUwODIzMDYwNDI2WhcNMjUwODMwMDYwNDI2WjAYMRYwFAYD VQQDEw02OGE5NTllYS0xNGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq7wUZe56z+NHjUVcaYzrQ9jESvfki5/X2/RqkFf2DHnUNZiIfWzkNZO7siVi YPSFYLbS5tlgnj2vAaesEpdM3FM9jDPbjQU/LBSnD43ZLHXroCYrKCdVp6Zszmht tTqypWZrXZPTVumH1n78YGIaW8WC627FtYFVaH3sM6wXA+Fot0FFi6XpDuV2oQzn Eq8F0HH3t1ZMs4gTixygAiQgoV3p+HplZnR2orAY1SzG2xGETKNVJOScP6OQeepq fzJfsAmYBAjnjy6Vi1Oz2IKDo+n8CSyHpm+LvgWlVl6LM81NcWneGI3x2YEi83iN WYtzY0rmAVfAWVYbWkuWJ55CqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDvfuC9a FSVyuMPBR+3gqFv4YilyMB8GA1UdIwQYMBaAFBXPUNtSsPEvGm47OWM9SC4Jz+Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjczQi84MTJGMjEzNjVE RkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhTOGFianM1WXoxSUxnblA0 MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZjOVEyMUt3OFM4YWJqczVZejFJTGduUDQxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NjczQi84MTJGMjEzNjVERkUxMUVGOEM3RTgxN0JDNEY5QUUwMi9GYzlRMjFLdzhT OGFianM1WXoxSUxnblA0MXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhfU8sjRSPUUw7/t2n4oi75FQz61VoZRfBqVf1FrRPyxawHE8X0INA 6w/ttM3x4e4QdQ61Bw/qlDkwJUA/1MJgh8EwOTUDhx8bpmxp4etdFvSrCf3+t7NX Eb/rc53iBckpQK79mCAEheJtgbd6T1ljCWeIg8c/7+MacEEVME+bb3Mc5AYMkJyS nSdwznGhmbq1ZS1/bKLgUFLkRLCmWoeifjpS6Lg2qUaEwpB3t/GlkyiuRQc8S0Sl 5PPcbOJNmLL1I0QdQFc3oO812azNLoScD34pXSaGTBdmZxr0lYvtqtzoK4LTezK6 hvSElKmQyQuUBBFokrkkebx3Z2vfbwZR -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:03 2025 by rpki-client