$ rpki-client -vvf rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft File: FF-_nuMXN-kcPNSE7AFq48jzgDw.mft (raw, json) Hash identifier: 3QT4YpdRBra/3QRolDurzCNVHLDDIySf+2h2IXUAOT8= Subject key identifier: 9F:78:63:64:84:70:7F:F1:A2:86:3C:C6:5F:C6:B5:BD:A4:61:51:7A Authority key identifier: 14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C Certificate issuer: /CN=A91B978D/serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Certificate serial: 02DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft Manifest number: 02D5 Signing time: Sat 23 Aug 2025 01:36:17 +0000 Manifest this update: Sat 23 Aug 2025 01:36:17 +0000 Manifest next update: Sat 30 Aug 2025 01:36:17 +0000 Files and hashes: 1: FF-_nuMXN-kcPNSE7AFq48jzgDw.crl (hash: 4wxjgoJ0z0nb5H9e1hO4QvOGcg/mg/8h+06zMgNzlwA=) 2: D5D64BB0FB6811EC863B8150C4F9AE02.roa (hash: QqynXUFn2t2DwRQgssbkvYUHxaAcBlMuvOzz1OFVxaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:36:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 730 (0x2da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B978D, serialNumber=145FBF9EE31737E91C3CD484EC016AE3C8F3803C Validity Not Before: Aug 23 01:36:17 2025 GMT Not After : Aug 30 01:36:17 2025 GMT Subject: CN=68a91b11-bee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:70:d3:7f:42:50:9d:cf:f2:07:91:3a:07: 0d:5e:ac:07:fe:ca:31:20:db:40:3a:25:9f:a0:42: 28:0d:1b:df:86:23:97:b8:82:4e:0d:96:6a:69:6b: 13:89:56:33:01:95:39:5f:b8:10:a2:0f:3f:4a:99: 05:72:02:e5:55:21:06:cd:5d:68:67:9b:c3:12:65: 5c:a6:3d:65:b9:4a:e7:1b:c8:c5:e8:e3:20:fc:43: 0d:32:58:fa:3d:10:12:dc:06:61:a2:df:ea:94:a3: 9a:1b:e6:da:ef:5c:c7:8f:01:56:93:01:94:d6:ad: 03:e9:c0:0e:46:ae:dc:fd:93:30:64:8d:ba:0a:ba: b4:e9:ec:65:64:86:e0:69:11:a4:71:7b:c9:e0:ad: df:3c:6c:38:35:b4:ba:ed:6c:32:b9:a9:ce:fb:19: 4f:9f:19:f3:cf:db:bc:36:db:1a:35:45:6b:ce:a7: 73:af:c6:1e:ea:c5:fb:67:fe:9e:03:bf:e6:ef:10: 6a:05:f1:e6:5b:2d:fb:43:f4:e3:a5:2d:46:81:35: e7:4a:bc:f6:97:b2:5a:88:f7:df:a7:38:60:ff:35: 6f:a2:48:43:eb:bb:55:e1:87:b0:31:aa:b6:3c:8f: e9:f2:c0:d6:ff:09:24:8b:05:eb:ff:f7:b9:66:62: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:78:63:64:84:70:7F:F1:A2:86:3C:C6:5F:C6:B5:BD:A4:61:51:7A X509v3 Authority Key Identifier: keyid:14:5F:BF:9E:E3:17:37:E9:1C:3C:D4:84:EC:01:6A:E3:C8:F3:80:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FF-_nuMXN-kcPNSE7AFq48jzgDw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B978D/67B44828FB6611ECABA1014FC4F9AE02/FF-_nuMXN-kcPNSE7AFq48jzgDw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:52:13:98:77:a8:5b:28:a3:74:e8:8f:0b:b2:8d:7f:c7:af: ff:90:a5:01:1d:ef:e7:e7:ca:b7:30:9d:58:e5:96:3e:63:6e: 0d:ab:01:64:ef:03:27:37:52:66:25:97:5d:a6:17:0a:33:f1: 02:75:c8:a5:1e:90:49:86:9a:6f:79:91:70:33:75:e9:46:5e: fd:35:8e:37:18:7d:19:27:24:36:f1:2a:0a:fc:2c:6e:e3:29: c9:ee:63:63:0a:91:9d:2d:d2:44:1c:2a:76:3f:2f:fe:59:0a: 12:c9:dd:81:28:94:70:9a:5a:43:70:f4:8e:35:74:52:e1:92: b7:90:0d:2d:ba:75:79:87:5c:ca:2f:de:0a:24:e9:3b:be:43: 5c:ae:1b:9e:45:d3:62:8c:d3:78:5a:5d:6b:40:ab:28:73:94: b0:88:a6:83:5a:f4:52:f1:a9:5e:85:3c:8d:07:84:b8:af:c1: d8:47:d4:ac:1d:f6:45:e3:20:a1:ba:2f:5b:78:b4:12:d4:d0: 1d:27:bf:e3:4e:c3:36:c8:1e:ee:52:2c:77:09:b5:ba:97:43: c8:15:f9:74:4f:a3:d8:ad:1a:12:08:95:39:68:d6:d1:36:cf: ec:d5:64:5a:64:a5:95:23:ab:7c:bd:d4:25:04:7a:c2:34:02: 61:3e:3c:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk3OEQxMTAvBgNVBAUTKDE0NUZCRjlFRTMxNzM3RTkxQzNDRDQ4NEVDMDE2QUUz QzhGMzgwM0MwHhcNMjUwODIzMDEzNjE3WhcNMjUwODMwMDEzNjE3WjAYMRYwFAYD VQQDEw02OGE5MWIxMS1iZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/Vw039CUJ3P8geROgcNXqwH/soxINtAOiWfoEIoDRvfhiOXuIJODZZqaWsT iVYzAZU5X7gQog8/SpkFcgLlVSEGzV1oZ5vDEmVcpj1luUrnG8jF6OMg/EMNMlj6 PRAS3AZhot/qlKOaG+ba71zHjwFWkwGU1q0D6cAORq7c/ZMwZI26Crq06exlZIbg aRGkcXvJ4K3fPGw4NbS67WwyuanO+xlPnxnzz9u8NtsaNUVrzqdzr8Ye6sX7Z/6e A7/m7xBqBfHmWy37Q/TjpS1GgTXnSrz2l7JaiPffpzhg/zVvokhD67tV4YewMaq2 PI/p8sDW/wkkiwXr//e5ZmKVgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ94Y2SE cH/xooY8xl/Gtb2kYVF6MB8GA1UdIwQYMBaAFBRfv57jFzfpHDzUhOwBauPI84A8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTc4RC82N0I0NDgyOEZC NjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4ta2NQTlNFN0FGcTQ4anpn RHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZGLV9udU1YTi1rY1BOU0U3QUZxNDhqemdEdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTc4RC82N0I0NDgyOEZCNjYxMUVDQUJBMTAxNEZDNEY5QUUwMi9GRi1fbnVNWE4t a2NQTlNFN0FGcTQ4anpnRHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNUhOYd6hbKKN06I8Lso1/x6//kKUBHe/n58q3MJ1Y5ZY+Y24NqwFk 7wMnN1JmJZddphcKM/ECdcilHpBJhppveZFwM3XpRl79NY43GH0ZJyQ28SoK/Cxu 4ynJ7mNjCpGdLdJEHCp2Py/+WQoSyd2BKJRwmlpDcPSONXRS4ZK3kA0tunV5h1zK L94KJOk7vkNcrhueRdNijNN4Wl1rQKsoc5SwiKaDWvRS8alehTyNB4S4r8HYR9Ss HfZF4yChui9beLQS1NAdJ7/jTsM2yB7uUix3CbW6l0PIFfl0T6PYrRoSCJU5aNbR Ns/s1WRaZKWVI6t8vdQlBHrCNAJhPjzY -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:48 2025 by rpki-client