$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft File: ft761lb9iDJvbfriSHAQWAQCo18.mft (raw, json) Hash identifier: dCM9UhFa57Xlu5PMcAhCan252dslVMkhjdGOgfrzh+0= Subject key identifier: 01:9B:33:35:04:1D:AE:3C:F4:BA:D4:5D:8E:21:E6:BF:A3:89:5D:35 Authority key identifier: 7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F Certificate issuer: /CN=A91D9785/serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Certificate serial: 1A3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft Manifest number: 1A26 Signing time: Fri 22 Aug 2025 16:27:40 +0000 Manifest this update: Fri 22 Aug 2025 16:27:40 +0000 Manifest next update: Fri 29 Aug 2025 16:27:40 +0000 Files and hashes: 1: ft761lb9iDJvbfriSHAQWAQCo18.crl (hash: tUtzOK6JQM+T0Unb04/Zg/yQrn6TP/ixd6kmNqrGw5k=) 2: CBCD905AA6E811EFB43BBB4EC4F9AE02.roa (hash: /HeNZUmasiA1sFyQ07qK6IR+x8tI1Ek4b4MMz3sVfn8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:27:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6715 (0x1a3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9785, serialNumber=7EDEFAD656FD88326F6DFAE2487010580402A35F Validity Not Before: Aug 22 16:27:40 2025 GMT Not After : Aug 29 16:27:40 2025 GMT Subject: CN=68a89a7c-0bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:a1:00:10:2a:dd:4b:db:38:c9:5c:9b:4a: fb:04:b9:c0:fc:31:b1:b1:1c:9b:16:36:dd:3b:f4: df:56:11:6a:4c:23:31:1c:82:7d:51:34:e9:79:e5: d9:45:4c:5f:83:9f:5e:d1:63:af:e7:2d:1f:02:63: 7c:ae:87:1d:dc:84:f6:03:18:66:8a:d0:33:8f:ee: 67:a8:d7:a7:42:d1:a5:88:6f:57:7e:95:af:79:15: 86:79:62:a3:71:4b:93:b9:82:91:03:6a:52:a9:27: 33:7d:9f:7f:b0:f9:84:d7:da:36:9e:25:ca:09:a9: ed:3f:11:54:db:2a:f9:b7:f5:bb:24:af:55:13:cb: 80:66:16:4d:41:a8:e1:40:a4:1b:06:aa:72:33:f4: a5:22:c9:2e:d7:e6:d2:29:c0:62:c1:52:b9:22:8a: 5f:f5:77:2e:74:ce:52:87:96:e1:83:f2:e6:8d:65: f8:f9:01:5e:d0:0d:d0:2f:30:87:07:af:27:95:ad: 29:85:66:33:ab:96:ce:6f:f7:d7:69:56:8d:05:f8: e1:1d:fd:82:d7:45:5c:49:25:89:e8:75:7b:60:75: 4e:38:e4:41:e7:24:68:0c:58:73:43:0c:2b:5c:16: f2:99:36:92:69:0e:4e:be:ed:14:df:e0:60:87:13: c0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:9B:33:35:04:1D:AE:3C:F4:BA:D4:5D:8E:21:E6:BF:A3:89:5D:35 X509v3 Authority Key Identifier: keyid:7E:DE:FA:D6:56:FD:88:32:6F:6D:FA:E2:48:70:10:58:04:02:A3:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft761lb9iDJvbfriSHAQWAQCo18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9785/47DF9CEC56EC11E7BAD48D3BC4F9AE02/ft761lb9iDJvbfriSHAQWAQCo18.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:61:a2:7c:cb:05:1d:8e:fb:f1:cf:79:63:bf:4e:b1:21:bb: f3:83:9f:04:04:40:ef:a7:8d:ad:1b:c2:14:42:a2:80:52:c5: f6:0f:7a:b7:f8:ab:6c:43:0d:9f:2f:f5:fa:86:88:d1:97:b0: 62:79:6a:46:d1:81:1f:c2:79:c3:54:37:16:68:5e:6b:b7:f1: 78:b7:f2:34:3f:89:90:18:c8:7c:6f:65:a4:19:e8:dc:2c:50: 47:77:43:79:fa:db:f2:19:42:4b:73:79:a4:f1:3a:a0:89:e2: 77:aa:52:07:cd:08:15:e8:01:7b:93:50:90:b6:ee:ad:72:3d: 8d:33:04:ce:12:e8:ae:48:76:20:23:3e:4c:92:03:4e:5b:17: c9:6d:58:cd:de:26:52:a9:96:ee:06:12:9c:f3:32:de:c1:f9: d4:fb:21:f6:40:4b:7e:0a:e3:01:4d:d5:90:75:5e:70:55:a0: 3d:fc:41:d3:02:e9:ed:cf:df:95:a5:5b:e3:cc:2e:57:67:9a: 18:eb:36:df:33:1a:5d:be:a9:85:55:db:a8:bb:a9:91:f2:2c: 3f:5b:d6:3c:53:7e:db:21:e2:ab:e2:ba:5a:3e:a3:ca:e9:ff: 90:42:bb:ef:16:48:06:28:1c:f4:34:77:33:ad:5a:95:cd:a1: c5:06:f9:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk3ODUxMTAvBgNVBAUTKDdFREVGQUQ2NTZGRDg4MzI2RjZERkFFMjQ4NzAxMDU4 MDQwMkEzNUYwHhcNMjUwODIyMTYyNzQwWhcNMjUwODI5MTYyNzQwWjAYMRYwFAYD VQQDEw02OGE4OWE3Yy0wYmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwoqhABAq3UvbOMlcm0r7BLnA/DGxsRybFjbdO/TfVhFqTCMxHIJ9UTTpeeXZ RUxfg59e0WOv5y0fAmN8rocd3IT2AxhmitAzj+5nqNenQtGliG9XfpWveRWGeWKj cUuTuYKRA2pSqSczfZ9/sPmE19o2niXKCantPxFU2yr5t/W7JK9VE8uAZhZNQajh QKQbBqpyM/SlIsku1+bSKcBiwVK5Iopf9XcudM5Sh5bhg/LmjWX4+QFe0A3QLzCH B68nla0phWYzq5bOb/fXaVaNBfjhHf2C10VcSSWJ6HV7YHVOOORB5yRoDFhzQwwr XBbymTaSaQ5Ovu0U3+BghxPAcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGbMzUE Ha489LrUXY4h5r+jiV01MB8GA1UdIwQYMBaAFH7e+tZW/Ygyb2364khwEFgEAqNf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTc4NS80N0RGOUNFQzU2 RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlESnZiZnJpU0hBUVdBUUNv MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NzYxbGI5aURKdmJmcmlTSEFRV0FRQ28xOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTc4NS80N0RGOUNFQzU2RUMxMUU3QkFENDhEM0JDNEY5QUUwMi9mdDc2MWxiOWlE SnZiZnJpU0hBUVdBUUNvMTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQABYaJ8ywUdjvvxz3ljv06xIbvzg58EBEDvp42tG8IUQqKAUsX2D3q3 +KtsQw2fL/X6hojRl7BieWpG0YEfwnnDVDcWaF5rt/F4t/I0P4mQGMh8b2WkGejc LFBHd0N5+tvyGUJLc3mk8TqgieJ3qlIHzQgV6AF7k1CQtu6tcj2NMwTOEuiuSHYg Iz5MkgNOWxfJbVjN3iZSqZbuBhKc8zLewfnU+yH2QEt+CuMBTdWQdV5wVaA9/EHT Auntz9+VpVvjzC5XZ5oY6zbfMxpdvqmFVduou6mR8iw/W9Y8U37bIeKr4rpaPqPK 6f+QQrvvFkgGKBz0NHczrVqVzaHFBvle -----END CERTIFICATE-----Generated at Sat Aug 23 13:47:59 2025 by rpki-client