$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft File: FwBKozEFsKDm0-tOR8UTBj2SzsI.mft (raw, json) Hash identifier: PoqVEGBj2zGzjcsJacC1xvqxbW+jeW/dT5FtULDTT6U= Subject key identifier: F8:41:A5:8A:8D:38:F4:45:60:8B:7B:D9:9E:8C:3F:3A:30:F9:B0:42 Authority key identifier: 17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 Certificate issuer: /CN=A91DD4A6/serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Certificate serial: 047F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft Manifest number: 0452 Signing time: Sat 23 Aug 2025 00:37:22 +0000 Manifest this update: Sat 23 Aug 2025 00:37:21 +0000 Manifest next update: Sat 30 Aug 2025 00:37:21 +0000 Files and hashes: 1: FwBKozEFsKDm0-tOR8UTBj2SzsI.crl (hash: yZnWP5DCJQ/S5qSbgHAIorY8mfLl9qkHDF1Yw/5eFp0=) 2: F29967B22B0011F0B0319E61C4F9AE02.roa (hash: AWipWCwfBJg9FTHPHDUNW5DfQTImAx6KbbjHRDTBNc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1151 (0x47f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD4A6, serialNumber=17004AA33105B0A0E6D3EB4E47C513063D92CEC2 Validity Not Before: Aug 23 00:37:21 2025 GMT Not After : Aug 30 00:37:21 2025 GMT Subject: CN=68a90d42-d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1b:40:86:a7:1c:5b:87:8e:18:da:df:06:c9: 97:bf:f2:d4:1e:d6:fa:5d:4e:41:be:50:7d:49:45: 97:43:bc:05:76:ef:07:21:18:b8:b4:27:58:64:49: 61:0e:cd:f4:b1:0e:54:48:db:a3:fb:e1:61:fd:95: 5a:8f:cd:1b:27:1b:70:46:a5:66:22:63:a7:3d:64: e7:8d:21:cf:34:a4:3f:e0:ae:11:9a:9d:69:c0:24: 1a:6d:bc:44:b5:ae:76:09:c2:01:dc:2b:7c:35:fe: 49:19:c2:c6:98:84:9f:30:78:e8:36:e6:7f:be:e1: e1:a9:df:41:8e:60:f9:62:8c:56:d3:4c:9a:dc:8a: a4:6d:cc:49:bc:ab:8d:78:1f:48:f2:3e:13:14:13: f9:a3:1d:5f:cb:56:77:8c:f2:57:e0:6b:68:a2:66: b2:2b:dc:6e:95:7b:9b:dd:10:10:55:f8:12:de:c9: 88:42:10:90:27:57:e8:24:b2:27:21:8a:8c:56:7b: 0d:bb:bb:2c:19:49:5f:16:dd:a2:d3:0b:9d:55:3d: 4d:3e:53:11:7e:93:49:20:18:05:7a:41:b5:94:f8: f1:50:77:b4:1e:74:c2:d0:b1:93:5b:7e:ed:35:7e: fd:1a:de:17:5a:4e:5e:90:f0:a7:a5:e8:f0:1a:0b: 56:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:41:A5:8A:8D:38:F4:45:60:8B:7B:D9:9E:8C:3F:3A:30:F9:B0:42 X509v3 Authority Key Identifier: keyid:17:00:4A:A3:31:05:B0:A0:E6:D3:EB:4E:47:C5:13:06:3D:92:CE:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FwBKozEFsKDm0-tOR8UTBj2SzsI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD4A6/6A5969A87E9511EC82EE520AC4F9AE02/FwBKozEFsKDm0-tOR8UTBj2SzsI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:3a:05:dc:e6:80:1b:31:a1:f7:1a:8a:98:f1:7a:82:11:a5: e5:8c:a5:c6:78:1d:b9:7a:75:3a:73:be:47:56:6f:33:bd:40: f4:cb:5f:e5:e3:aa:7a:a4:7b:76:00:6b:6e:ce:09:31:88:16: 8e:47:30:5b:d0:d4:78:90:e2:77:53:ff:96:53:f0:21:8f:8d: 69:ec:fd:f5:24:41:0b:43:de:39:00:fa:5e:00:c0:1a:02:6a: 42:71:2d:11:95:2f:b2:15:ff:01:52:ee:46:00:d2:54:c2:74: 70:13:ae:ac:60:8a:ac:22:a0:b5:05:55:0d:ae:ab:41:29:ce: f6:84:a1:a7:dc:83:a2:3f:07:52:6d:10:c7:15:de:24:86:f4: 93:56:fb:f6:f9:87:6c:a4:cc:e9:0a:1b:75:ad:ff:e8:34:b8: 95:2b:d4:8f:ee:d1:ff:e2:49:ef:78:65:9b:df:35:eb:81:98: 40:66:b9:bf:43:59:f9:82:48:d9:b3:78:48:0a:e6:c9:a3:28: aa:f6:4c:88:4e:03:e9:24:d6:d4:a0:1a:f7:5b:91:34:57:91: bb:1c:3a:5e:cd:22:e6:9c:cc:9e:cb:1d:a3:77:bd:60:63:af: bb:7b:23:cb:58:ab:7f:05:71:e9:db:73:80:da:31:59:d0:72: a2:42:b7:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0QTYxMTAvBgNVBAUTKDE3MDA0QUEzMzEwNUIwQTBFNkQzRUI0RTQ3QzUxMzA2 M0Q5MkNFQzIwHhcNMjUwODIzMDAzNzIxWhcNMjUwODMwMDAzNzIxWjAYMRYwFAYD VQQDEw02OGE5MGQ0Mi1kMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhtAhqccW4eOGNrfBsmXv/LUHtb6XU5BvlB9SUWXQ7wFdu8HIRi4tCdYZElh Ds30sQ5USNuj++Fh/ZVaj80bJxtwRqVmImOnPWTnjSHPNKQ/4K4Rmp1pwCQabbxE ta52CcIB3Ct8Nf5JGcLGmISfMHjoNuZ/vuHhqd9BjmD5YoxW00ya3IqkbcxJvKuN eB9I8j4TFBP5ox1fy1Z3jPJX4GtoomayK9xulXub3RAQVfgS3smIQhCQJ1foJLIn IYqMVnsNu7ssGUlfFt2i0wudVT1NPlMRfpNJIBgFekG1lPjxUHe0HnTC0LGTW37t NX79Gt4XWk5ekPCnpejwGgtW6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPhBpYqN OPRFYIt72Z6MPzow+bBCMB8GA1UdIwQYMBaAFBcASqMxBbCg5tPrTkfFEwY9ks7C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDRBNi82QTU5NjlBODdF OTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNLRG0wLXRPUjhVVEJqMlN6 c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0Z3QktvekVGc0tEbTAtdE9SOFVUQmoyU3pzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDRBNi82QTU5NjlBODdFOTUxMUVDODJFRTUyMEFDNEY5QUUwMi9Gd0JLb3pFRnNL RG0wLXRPUjhVVEJqMlN6c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEOgXc5oAbMaH3GoqY8XqCEaXljKXGeB25enU6c75HVm8zvUD0y1/l 46p6pHt2AGtuzgkxiBaORzBb0NR4kOJ3U/+WU/Ahj41p7P31JEELQ945APpeAMAa AmpCcS0RlS+yFf8BUu5GANJUwnRwE66sYIqsIqC1BVUNrqtBKc72hKGn3IOiPwdS bRDHFd4khvSTVvv2+YdspMzpCht1rf/oNLiVK9SP7tH/4knveGWb3zXrgZhAZrm/ Q1n5gkjZs3hICubJoyiq9kyITgPpJNbUoBr3W5E0V5G7HDpezSLmnMyeyx2jd71g Y6+7eyPLWKt/BXHp23OA2jFZ0HKiQrc9 -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:12 2025 by rpki-client