$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft File: FYg0tWOnwztJgzS8-jD41rZ03J4.mft (raw, json) Hash identifier: WDx4dqBKmdmgGL39StRChm2TezwHLmjxJKC1GmaPvaw= Subject key identifier: 44:59:A5:A1:F5:45:B4:CE:D1:2D:A4:49:A2:52:6E:E6:3A:6F:D5:97 Authority key identifier: 15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E Certificate issuer: /CN=A91CDB75/serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft Manifest number: 012A Signing time: Sat 23 Aug 2025 04:48:58 +0000 Manifest this update: Sat 23 Aug 2025 04:48:57 +0000 Manifest next update: Sat 30 Aug 2025 04:48:57 +0000 Files and hashes: 1: FYg0tWOnwztJgzS8-jD41rZ03J4.crl (hash: tWSXahFVftbjpAQgZfnGD6A1fruB5AyM0v+3jLxOb+M=) 2: C5589FB4BF9C11EEAAE7743EC4F9AE02.roa (hash: dUufcGrEf1g89p6hQjifaNkQf1XSBUMLG147+uIrEko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDB75, serialNumber=158834B563A7C33B498334BCFA30F8D6B674DC9E Validity Not Before: Aug 23 04:48:57 2025 GMT Not After : Aug 30 04:48:57 2025 GMT Subject: CN=68a94839-d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:38:5d:6c:71:ce:25:61:08:75:a5:15:ee:37: f9:ec:46:74:6d:87:ab:f5:fe:9a:59:a5:4b:8f:ad: ff:73:8e:7d:64:18:06:d3:cc:1c:eb:93:97:5d:41: d1:98:62:6e:8c:ff:f9:3e:3c:c5:25:ba:4a:df:6c: 92:ee:5d:f6:bd:5a:e8:d9:80:de:ba:f9:a1:b4:7f: 92:7e:0f:6a:82:3e:2b:31:cf:5e:f7:72:21:bd:69: 20:32:ab:f0:8f:99:2c:6f:3d:0c:af:63:f0:64:96: 03:c0:ae:f7:32:c9:15:69:e8:0d:fb:e7:d5:aa:83: d3:71:db:c2:dc:96:b4:6f:eb:11:73:42:bb:c1:9d: f3:74:68:cf:63:83:1f:3b:38:7e:5c:12:e4:0f:a0: 77:67:21:e3:db:a7:14:c8:1a:09:9b:6d:37:32:16: 6f:8e:33:72:5b:cd:14:48:07:79:3b:af:7c:a1:e9: c8:94:fe:0b:73:1c:fb:5d:5b:a7:fe:45:03:8c:a3: 94:c5:4e:8d:8c:65:35:fe:c7:1b:98:10:f6:30:9c: 11:69:a3:35:b6:33:76:a7:ad:c4:53:43:9f:0e:51: 32:4f:fb:d9:0e:de:b0:22:38:e8:57:b5:65:9a:fa: 8e:0f:44:ed:19:00:d5:4a:93:47:e1:f7:72:35:cf: 52:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:59:A5:A1:F5:45:B4:CE:D1:2D:A4:49:A2:52:6E:E6:3A:6F:D5:97 X509v3 Authority Key Identifier: keyid:15:88:34:B5:63:A7:C3:3B:49:83:34:BC:FA:30:F8:D6:B6:74:DC:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FYg0tWOnwztJgzS8-jD41rZ03J4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/DCD2D494BB7711EEAAD7B241C4F9AE02/FYg0tWOnwztJgzS8-jD41rZ03J4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:3e:a1:47:d4:4a:8c:3d:36:65:30:93:0f:f8:89:eb:a8:7f: c2:1a:52:c3:70:35:f7:57:66:3d:20:20:97:b2:78:48:34:a5: b4:57:85:32:e0:cd:00:5f:a7:bf:f3:e6:97:0d:e6:6e:15:70: bd:48:8a:20:c1:6c:fa:bb:dd:83:dc:32:8f:56:91:d9:20:70: 6f:53:9b:c7:ed:e9:f1:2f:be:f8:6f:81:19:c2:91:b4:88:0f: 4a:d2:50:68:2d:a1:b6:c4:61:fd:26:1d:9d:8c:6f:88:30:c0: 9a:23:42:3f:ca:d2:26:71:59:27:f5:a1:9c:e2:d7:fb:e5:42: 2b:dc:a7:1a:e1:c3:76:49:16:73:2e:c6:15:d2:2a:ec:fa:e9: 48:3f:31:6c:13:07:01:77:af:b1:a6:8b:41:a1:71:45:75:8c: a2:80:72:e1:87:3f:0d:7d:f3:c8:53:e7:f3:aa:f1:ba:bc:da: db:24:59:30:ae:50:72:f3:f3:fe:80:27:26:9c:c7:1f:9b:cf: cf:d8:1d:b2:72:3f:6c:a8:45:25:fb:2a:dd:66:2f:1c:b3:5f: dc:10:38:62:67:2c:74:f6:5c:e8:49:eb:fb:88:4c:84:d3:ad: fd:4b:13:ed:f7:f2:ba:d8:5b:c3:b4:3e:a3:90:3b:66:04:63: 9d:65:f7:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RCNzUxMTAvBgNVBAUTKDE1ODgzNEI1NjNBN0MzM0I0OTgzMzRCQ0ZBMzBGOEQ2 QjY3NERDOUUwHhcNMjUwODIzMDQ0ODU3WhcNMjUwODMwMDQ0ODU3WjAYMRYwFAYD VQQDEw02OGE5NDgzOS1kMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzhdbHHOJWEIdaUV7jf57EZ0bYer9f6aWaVLj63/c459ZBgG08wc65OXXUHR mGJujP/5PjzFJbpK32yS7l32vVro2YDeuvmhtH+Sfg9qgj4rMc9e93IhvWkgMqvw j5ksbz0Mr2PwZJYDwK73MskVaegN++fVqoPTcdvC3Ja0b+sRc0K7wZ3zdGjPY4Mf Ozh+XBLkD6B3ZyHj26cUyBoJm203MhZvjjNyW80USAd5O698oenIlP4Lcxz7XVun /kUDjKOUxU6NjGU1/scbmBD2MJwRaaM1tjN2p63EU0OfDlEyT/vZDt6wIjjoV7Vl mvqOD0TtGQDVSpNH4fdyNc9S5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERZpaH1 RbTO0S2kSaJSbuY6b9WXMB8GA1UdIwQYMBaAFBWINLVjp8M7SYM0vPow+Na2dNye MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREI3NS9EQ0QyRDQ5NEJC NzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6dEpnelM4LWpENDFyWjAz SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZZZzB0V09ud3p0Smd6UzgtakQ0MXJaMDNKNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REI3NS9EQ0QyRDQ5NEJCNzcxMUVFQUFEN0IyNDFDNEY5QUUwMi9GWWcwdFdPbnd6 dEpnelM4LWpENDFyWjAzSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwPqFH1EqMPTZlMJMP+InrqH/CGlLDcDX3V2Y9ICCXsnhINKW0V4Uy 4M0AX6e/8+aXDeZuFXC9SIogwWz6u92D3DKPVpHZIHBvU5vH7enxL774b4EZwpG0 iA9K0lBoLaG2xGH9Jh2djG+IMMCaI0I/ytImcVkn9aGc4tf75UIr3Kca4cN2SRZz LsYV0irs+ulIPzFsEwcBd6+xpotBoXFFdYyigHLhhz8NffPIU+fzqvG6vNrbJFkw rlBy8/P+gCcmnMcfm8/P2B2ycj9sqEUl+yrdZi8cs1/cEDhiZyx09lzoSev7iEyE 0639SxPt9/K62FvDtD6jkDtmBGOdZfcH -----END CERTIFICATE-----Generated at Sat Aug 23 12:45:56 2025 by rpki-client