$ rpki-client -vvf rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft File: fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft (raw, json) Hash identifier: iWxmo+MZ8hJ0FZ76BSHd/u7RUKZViDIcg2rCd07rRG8= Subject key identifier: D2:AA:93:52:3B:37:01:4A:FD:12:D4:49:16:EF:94:C5:7A:88:3E:96 Authority key identifier: 7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B Certificate issuer: /CN=A91C96A7/serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Certificate serial: 0FF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft Manifest number: 0FE5 Signing time: Fri 22 Aug 2025 17:36:33 +0000 Manifest this update: Fri 22 Aug 2025 17:36:33 +0000 Manifest next update: Fri 29 Aug 2025 17:36:33 +0000 Files and hashes: 1: fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl (hash: M1pmAX/wV4sRblo96SS3lMf2QQn29RNO+urI7a4ZG2A=) 2: 1BB9CAB6578011E99E80631AC4F9AE02.roa (hash: ZXqZATdJArBJctrOdjHOaMsx7uV2N+d+PjLUYYLOgsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4081 (0xff1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C96A7, serialNumber=7DC56893DA35483FD9094DF03504DE217B6E3B3B Validity Not Before: Aug 22 17:36:33 2025 GMT Not After : Aug 29 17:36:33 2025 GMT Subject: CN=68a8aaa1-01bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c2:28:2d:2d:82:c6:04:5c:1b:72:d5:e9:b8: 34:bd:b7:a2:da:c3:32:49:54:63:74:d9:4b:7e:4a: 5e:f7:c8:66:9b:93:c4:31:ac:f0:40:c8:6f:b9:8a: fa:61:26:96:8c:34:c0:be:fe:cd:f1:b7:cb:17:8d: f1:a5:fc:14:58:ce:d5:4f:2f:ab:f9:8c:02:d4:34: d5:ca:6d:f3:8f:79:5f:e3:fc:2b:64:65:1b:44:a8: 4d:46:14:12:a1:17:90:ec:ce:2f:e1:34:51:77:a9: 44:ae:19:c6:4f:0f:00:6a:8e:cd:5a:e2:c5:30:7d: d1:a0:f9:91:db:a6:72:a3:13:67:6e:08:11:ef:ba: 77:4a:61:43:c4:30:3d:54:25:60:ae:1b:b7:29:30: 8c:7d:9b:3e:51:0a:4e:6f:9f:09:66:ea:f7:7a:23: f5:58:bd:71:99:d3:f6:d7:74:21:80:c8:50:02:a1: 46:be:6e:9d:d6:2a:ca:e4:d7:d9:04:99:4e:fa:d0: a1:f3:a6:eb:43:d5:01:58:0b:89:a6:22:01:f6:70: 07:0f:6c:9b:83:57:ed:bd:1d:86:86:4e:de:0e:ba: 6b:35:4e:ea:a0:52:b8:ce:23:fd:cb:4c:72:82:1b: ff:a3:50:6d:15:06:d1:55:6f:e7:5f:29:79:19:8f: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:93:52:3B:37:01:4A:FD:12:D4:49:16:EF:94:C5:7A:88:3E:96 X509v3 Authority Key Identifier: keyid:7D:C5:68:93:DA:35:48:3F:D9:09:4D:F0:35:04:DE:21:7B:6E:3B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fcVok9o1SD_ZCU3wNQTeIXtuOzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C96A7/26E74996577F11E98E90CA18C4F9AE02/fcVok9o1SD_ZCU3wNQTeIXtuOzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f7:41:bf:d8:b1:62:f0:43:e1:9d:e0:e7:c6:76:f3:6c:3b: 45:1d:bb:88:c8:21:a7:18:cd:86:0a:e0:98:06:63:54:be:85: c8:8a:5e:45:35:c7:ca:e2:b8:fd:32:18:20:ee:67:ee:0c:cd: d9:fc:cc:5f:4c:c4:37:62:e1:5e:95:f3:5f:de:9c:78:26:00: 74:18:b7:6f:4c:7b:8a:b2:a9:78:f5:1b:48:4b:0f:36:e4:d4: 8b:0a:42:5a:85:b0:04:63:c6:35:5e:41:17:bf:33:fc:d9:c7: c8:87:ff:c9:f8:41:db:06:66:1e:bf:ce:21:39:e1:56:ef:dd: fe:c6:ec:c7:55:df:ad:4c:7f:5a:88:a4:8e:5d:5d:16:4e:eb: cf:72:82:b1:29:83:15:7c:ea:1e:73:c3:a3:6e:95:de:9b:06: 54:a2:62:06:72:70:a0:91:3b:c9:63:ef:17:11:4c:79:39:e5: a8:7c:ab:93:db:88:c6:b2:12:9a:28:98:dc:fd:c3:f1:74:3c: 6a:3f:3a:df:a4:b6:55:cc:e8:ae:b1:32:b8:8c:90:71:00:8c: 09:07:4b:89:2e:57:89:72:34:89:83:e2:1a:52:50:a0:ba:aa: b9:59:c4:6f:3a:59:59:45:b0:5f:5e:ee:d3:5e:c8:c7:0b:b5: ef:bd:a7:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2QTcxMTAvBgNVBAUTKDdEQzU2ODkzREEzNTQ4M0ZEOTA5NERGMDM1MDRERTIx N0I2RTNCM0IwHhcNMjUwODIyMTczNjMzWhcNMjUwODI5MTczNjMzWjAYMRYwFAYD VQQDEw02OGE4YWFhMS0wMWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4MIoLS2CxgRcG3LV6bg0vbei2sMySVRjdNlLfkpe98hmm5PEMazwQMhvuYr6 YSaWjDTAvv7N8bfLF43xpfwUWM7VTy+r+YwC1DTVym3zj3lf4/wrZGUbRKhNRhQS oReQ7M4v4TRRd6lErhnGTw8Aao7NWuLFMH3RoPmR26ZyoxNnbggR77p3SmFDxDA9 VCVgrhu3KTCMfZs+UQpOb58JZur3eiP1WL1xmdP213QhgMhQAqFGvm6d1irK5NfZ BJlO+tCh86brQ9UBWAuJpiIB9nAHD2ybg1ftvR2Ghk7eDrprNU7qoFK4ziP9y0xy ghv/o1BtFQbRVW/nXyl5GY+JUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKqk1I7 NwFK/RLUSRbvlMV6iD6WMB8GA1UdIwQYMBaAFH3FaJPaNUg/2QlN8DUE3iF7bjs7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTZBNy8yNkU3NDk5NjU3 N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNEX1pDVTN3TlFUZUlYdHVP enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZjVm9rOW8xU0RfWkNVM3dOUVRlSVh0dU96cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTZBNy8yNkU3NDk5NjU3N0YxMUU5OEU5MENBMThDNEY5QUUwMi9mY1ZvazlvMVNE X1pDVTN3TlFUZUlYdHVPenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBe90G/2LFi8EPhneDnxnbzbDtFHbuIyCGnGM2GCuCYBmNUvoXIil5F NcfK4rj9Mhgg7mfuDM3Z/MxfTMQ3YuFelfNf3px4JgB0GLdvTHuKsql49RtISw82 5NSLCkJahbAEY8Y1XkEXvzP82cfIh//J+EHbBmYev84hOeFW793+xuzHVd+tTH9a iKSOXV0WTuvPcoKxKYMVfOoec8OjbpXemwZUomIGcnCgkTvJY+8XEUx5OeWofKuT 24jGshKaKJjc/cPxdDxqPzrfpLZVzOiusTK4jJBxAIwJB0uJLleJcjSJg+IaUlCg uqq5WcRvOllZRbBfXu7TXsjHC7XvvacD -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:47 2025 by rpki-client