$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft File: FUc--zxa6KDEdke34P3liGtrH6M.mft (raw, json) Hash identifier: vhjG55HsbKCSnXAK1Qc/fktQMePKbN7Fo9SxGsKx9X0= Subject key identifier: D5:39:DC:14:22:F7:EA:A5:B4:7C:DA:77:FD:7C:2C:EA:14:80:56:DE Authority key identifier: 15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 Certificate issuer: /CN=A91CE4A1/serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Certificate serial: 042C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft Manifest number: 041E Signing time: Sat 23 Aug 2025 00:39:00 +0000 Manifest this update: Sat 23 Aug 2025 00:38:59 +0000 Manifest next update: Sat 30 Aug 2025 00:38:59 +0000 Files and hashes: 1: FUc--zxa6KDEdke34P3liGtrH6M.crl (hash: zj1UcVGqUWF0q+p3X+P9/RTZV7LvqOrhpwWDrMTS/uI=) 2: 2D81FF3680BB11EC8FD7663DC4F9AE02.roa (hash: 93hMZoZD1IeR9WgZB4O3EInu2uvTAMcqxAyD5/FgSlQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1068 (0x42c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4A1, serialNumber=15473EFB3C5AE8A0C47647B7E0FDE5886B6B1FA3 Validity Not Before: Aug 23 00:38:59 2025 GMT Not After : Aug 30 00:38:59 2025 GMT Subject: CN=68a90da4-668c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:39:35:cb:e5:19:44:7b:6c:a2:82:31:42:a0: 79:91:65:38:26:5b:49:ce:26:e5:7c:c6:be:2d:8a: 1d:ee:6e:fd:ec:a6:4a:29:fd:04:79:14:01:b2:bf: 5b:4b:c4:27:a6:e7:34:41:ab:6a:6d:37:c3:9f:71: 17:c5:77:0e:e9:7c:02:72:03:8a:26:86:0a:bb:40: 9d:12:6d:c9:b6:a9:ff:67:ba:14:41:f9:4c:59:33: 37:d5:6e:3d:e8:a5:c2:36:59:0f:0c:38:db:c7:bf: ae:37:ef:17:25:34:00:7f:94:70:ab:17:a6:87:92: e2:5e:89:1f:a9:5f:6f:82:54:20:8d:d3:ab:80:52: 55:eb:a2:0d:06:fc:5c:f3:08:47:0c:b2:2a:9a:9d: c4:df:91:d3:77:61:7b:3d:6e:8d:10:c4:1f:bb:9d: d1:bf:a0:aa:11:f2:1f:86:4b:32:60:0c:99:f5:8a: c0:a5:c5:fa:99:98:63:c4:83:b0:32:ee:c2:24:07: 36:50:f4:e4:65:5a:03:d2:ae:f3:4d:5d:e6:79:6e: 3d:58:9d:70:af:fd:99:2b:ed:b8:54:ad:6d:c2:06: fe:5e:66:e2:ac:55:9f:b1:37:90:16:d0:fb:af:bc: e6:21:2d:be:b0:6c:2b:3f:57:cb:db:25:e5:48:ed: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:DC:14:22:F7:EA:A5:B4:7C:DA:77:FD:7C:2C:EA:14:80:56:DE X509v3 Authority Key Identifier: keyid:15:47:3E:FB:3C:5A:E8:A0:C4:76:47:B7:E0:FD:E5:88:6B:6B:1F:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUc--zxa6KDEdke34P3liGtrH6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4A1/85FA0CE880B711EC9FEB2C67C4F9AE02/FUc--zxa6KDEdke34P3liGtrH6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:59:83:a2:27:44:0c:a8:94:78:61:39:e6:0c:ff:e8:e7:14: 72:73:81:91:44:a5:25:5b:bf:4f:c9:19:d2:16:1a:71:a8:b3: 7e:d0:21:ac:75:ca:25:9a:b2:9c:e9:eb:b6:8b:43:61:bc:fd: d3:bf:87:91:ba:eb:07:a1:ff:dc:c8:41:cb:c6:b0:a5:5b:59: 4c:95:98:d1:ca:09:69:1b:f9:b4:fb:ed:a4:53:ec:3f:00:41: 52:a1:31:55:5f:cc:d7:e1:65:59:3b:2f:86:16:3a:51:b5:8f: b6:48:fb:c0:59:e1:37:55:6d:ce:02:1d:f9:b8:a3:27:90:dc: 2a:06:a7:77:87:b7:7e:7d:1b:13:6c:44:f5:be:0c:42:20:13: f0:11:2b:72:0f:1c:f0:3b:52:0c:1f:09:0e:99:e2:97:72:fe: 07:61:dc:77:5f:2f:51:6c:9d:71:89:80:31:99:5c:0d:07:3f: 6b:f4:a5:8a:0a:36:03:e6:12:eb:26:43:20:56:49:69:26:95: ad:e7:10:60:04:d6:e9:5e:a0:bd:96:37:f6:36:b2:b8:ea:40: 46:e4:1b:62:87:21:75:f6:fd:8a:0a:c0:bc:59:13:e7:8d:6f: 92:2f:c3:db:b6:29:95:04:13:49:72:47:38:6b:c1:cb:10:8f: 33:2c:e6:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0QTExMTAvBgNVBAUTKDE1NDczRUZCM0M1QUU4QTBDNDc2NDdCN0UwRkRFNTg4 NkI2QjFGQTMwHhcNMjUwODIzMDAzODU5WhcNMjUwODMwMDAzODU5WjAYMRYwFAYD VQQDEw02OGE5MGRhNC02NjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jk1y+UZRHtsooIxQqB5kWU4JltJziblfMa+LYod7m797KZKKf0EeRQBsr9b S8Qnpuc0QatqbTfDn3EXxXcO6XwCcgOKJoYKu0CdEm3Jtqn/Z7oUQflMWTM31W49 6KXCNlkPDDjbx7+uN+8XJTQAf5Rwqxemh5LiXokfqV9vglQgjdOrgFJV66INBvxc 8whHDLIqmp3E35HTd2F7PW6NEMQfu53Rv6CqEfIfhksyYAyZ9YrApcX6mZhjxIOw Mu7CJAc2UPTkZVoD0q7zTV3meW49WJ1wr/2ZK+24VK1twgb+XmbirFWfsTeQFtD7 r7zmIS2+sGwrP1fL2yXlSO2RGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNU53BQi 9+qltHzad/18LOoUgFbeMB8GA1UdIwQYMBaAFBVHPvs8WuigxHZHt+D95Yhrax+j MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTRBMS84NUZBMENFODgw QjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZLREVka2UzNFAzbGlHdHJI Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZVYy0tenhhNktERWRrZTM0UDNsaUd0ckg2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTRBMS84NUZBMENFODgwQjcxMUVDOUZFQjJDNjdDNEY5QUUwMi9GVWMtLXp4YTZL REVka2UzNFAzbGlHdHJINk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwWYOiJ0QMqJR4YTnmDP/o5xRyc4GRRKUlW79PyRnSFhpxqLN+0CGs dcolmrKc6eu2i0NhvP3Tv4eRuusHof/cyEHLxrClW1lMlZjRyglpG/m0++2kU+w/ AEFSoTFVX8zX4WVZOy+GFjpRtY+2SPvAWeE3VW3OAh35uKMnkNwqBqd3h7d+fRsT bET1vgxCIBPwEStyDxzwO1IMHwkOmeKXcv4HYdx3Xy9RbJ1xiYAxmVwNBz9r9KWK CjYD5hLrJkMgVklpJpWt5xBgBNbpXqC9ljf2NrK46kBG5BtihyF19v2KCsC8WRPn jW+SL8PbtimVBBNJckc4a8HLEI8zLOZQ -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:39 2025 by rpki-client