$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft File: FgxyzFd72N5TouywCYwi81pRqp4.mft (raw, json) Hash identifier: NzeGG/2GPad15X/MsnQRH5p67J3Xp1CRWxfHW9pbnr4= Subject key identifier: 4A:9F:BB:18:48:4B:EE:F3:DA:27:9D:76:EE:20:04:68:73:2A:36:51 Authority key identifier: 16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E Certificate issuer: /CN=A91C8066/serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Certificate serial: 01EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft Manifest number: 01E9 Signing time: Sat 23 Aug 2025 02:44:05 +0000 Manifest this update: Sat 23 Aug 2025 02:44:05 +0000 Manifest next update: Sat 30 Aug 2025 02:44:05 +0000 Files and hashes: 1: FgxyzFd72N5TouywCYwi81pRqp4.crl (hash: SDiV9GrN9HgTTKcRCehbXuSwAf+WFmWifdWz37Kzb3M=) 2: 452D9EF494F811ED85ADE381C4F9AE02.roa (hash: n8+NWSH/0jbCR4W6RjUOoVJVoSERmDVQnQldNxK/jIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 494 (0x1ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8066, serialNumber=160C72CC577BD8DE53A2ECB0098C22F35A51AA9E Validity Not Before: Aug 23 02:44:05 2025 GMT Not After : Aug 30 02:44:05 2025 GMT Subject: CN=68a92af5-345c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:30:ec:4b:86:fe:37:9c:b8:e0:fd:6b:10:eb: ce:fd:f4:0a:9a:88:8b:cd:3a:ba:8e:f5:f0:11:ab: 11:8c:e8:88:c6:a5:e6:f7:30:be:8a:79:e4:84:0d: 83:c5:47:e8:6e:64:53:c6:5a:80:fc:62:95:44:96: 65:d7:00:9d:0b:04:34:c3:93:22:ac:92:ae:60:f4: 44:fa:ab:64:2f:99:1a:c0:79:e6:25:0c:b9:a8:db: 21:e1:eb:a2:eb:72:c8:6f:00:04:29:7b:c9:62:ee: 15:57:47:1c:50:d1:b7:86:9d:c2:00:b7:ae:56:2f: ee:0a:5d:be:19:b7:d4:fa:6a:ac:cd:64:e4:31:65: 97:52:c7:55:f5:b6:e6:54:e2:37:d7:e2:aa:26:6f: 83:3e:5d:e9:96:c4:88:7a:bb:e0:ec:c7:66:29:07: 35:0c:ef:f6:09:25:d6:50:68:79:ae:b4:46:f0:73: 47:95:da:0d:06:8e:4f:9f:2d:95:12:4c:4b:6f:fe: fc:27:25:68:5b:53:78:2b:31:21:fa:b4:bc:79:d1: cd:16:4f:b7:77:3e:13:4e:5d:76:5b:9c:14:18:7a: 4e:86:08:d1:53:96:8a:37:47:91:96:2c:de:54:19: 98:0f:35:ac:8f:af:b9:a8:fb:df:10:70:53:b0:4a: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9F:BB:18:48:4B:EE:F3:DA:27:9D:76:EE:20:04:68:73:2A:36:51 X509v3 Authority Key Identifier: keyid:16:0C:72:CC:57:7B:D8:DE:53:A2:EC:B0:09:8C:22:F3:5A:51:AA:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FgxyzFd72N5TouywCYwi81pRqp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8066/18A5124894F511EDB10BC27DC4F9AE02/FgxyzFd72N5TouywCYwi81pRqp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:80:73:d8:1e:66:e7:61:06:d9:e9:77:7e:6e:3f:77:a5:87: f7:36:ea:35:11:59:62:c6:fe:d8:75:08:b5:f4:81:6c:f3:90: a4:dd:c5:fa:44:e5:e7:e2:cd:a4:74:09:3b:0c:38:dd:45:70: 7b:c7:27:89:3b:60:ac:55:b4:fe:a1:3b:b8:97:e3:fe:67:1d: 69:d9:de:2e:19:82:e6:a6:32:86:2b:34:6d:75:db:3b:55:bf: 40:5e:c0:5e:85:22:21:5c:54:73:0b:46:dd:fe:ff:cc:67:93: df:95:06:6c:cd:7f:d7:fe:11:9f:2f:89:b4:77:a9:08:e6:b4: d7:e3:81:a9:d3:c5:b9:5b:f1:99:d2:cd:29:29:69:83:ed:30: 04:a0:f5:9c:78:39:32:9c:27:6d:5d:65:e1:4a:a8:5f:51:d4: d1:92:2d:9c:98:db:74:c7:1c:50:84:bd:be:5b:43:fa:95:d7: aa:bc:c0:68:76:86:d3:4e:47:c4:26:d5:e7:72:6c:0e:f7:3b: 3f:cb:ed:75:52:1c:ec:45:a5:28:9a:00:6a:c2:ea:9a:9c:8b: db:82:d0:ad:71:57:37:e6:d3:07:df:68:a0:fb:b6:32:34:3b: ff:d5:ed:88:ee:63:a3:e3:66:ef:a8:fa:61:65:66:5a:30:ce: 17:cd:14:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgwNjYxMTAvBgNVBAUTKDE2MEM3MkNDNTc3QkQ4REU1M0EyRUNCMDA5OEMyMkYz NUE1MUFBOUUwHhcNMjUwODIzMDI0NDA1WhcNMjUwODMwMDI0NDA1WjAYMRYwFAYD VQQDEw02OGE5MmFmNS0zNDVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TDsS4b+N5y44P1rEOvO/fQKmoiLzTq6jvXwEasRjOiIxqXm9zC+innkhA2D xUfobmRTxlqA/GKVRJZl1wCdCwQ0w5MirJKuYPRE+qtkL5kawHnmJQy5qNsh4eui 63LIbwAEKXvJYu4VV0ccUNG3hp3CALeuVi/uCl2+GbfU+mqszWTkMWWXUsdV9bbm VOI31+KqJm+DPl3plsSIervg7MdmKQc1DO/2CSXWUGh5rrRG8HNHldoNBo5Pny2V EkxLb/78JyVoW1N4KzEh+rS8edHNFk+3dz4TTl12W5wUGHpOhgjRU5aKN0eRlize VBmYDzWsj6+5qPvfEHBTsEoCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqfuxhI S+7z2ieddu4gBGhzKjZRMB8GA1UdIwQYMBaAFBYMcsxXe9jeU6LssAmMIvNaUaqe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODA2Ni8xOEE1MTI0ODk0 RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJONVRvdXl3Q1l3aTgxcFJx cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZneHl6RmQ3Mk41VG91eXdDWXdpODFwUnFwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODA2Ni8xOEE1MTI0ODk0RjUxMUVEQjEwQkMyN0RDNEY5QUUwMi9GZ3h5ekZkNzJO NVRvdXl3Q1l3aTgxcFJxcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4gHPYHmbnYQbZ6Xd+bj93pYf3Nuo1EVlixv7YdQi19IFs85Ck3cX6 ROXn4s2kdAk7DDjdRXB7xyeJO2CsVbT+oTu4l+P+Zx1p2d4uGYLmpjKGKzRtdds7 Vb9AXsBehSIhXFRzC0bd/v/MZ5PflQZszX/X/hGfL4m0d6kI5rTX44Gp08W5W/GZ 0s0pKWmD7TAEoPWceDkynCdtXWXhSqhfUdTRki2cmNt0xxxQhL2+W0P6ldeqvMBo dobTTkfEJtXncmwO9zs/y+11UhzsRaUomgBqwuqanIvbgtCtcVc35tMH32ig+7Yy NDv/1e2I7mOj42bvqPphZWZaMM4XzRSJ -----END CERTIFICATE-----Generated at Sat Aug 23 17:23:23 2025 by rpki-client