$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft File: faWJztV_HlzEhgPROEIjk24WAn4.mft (raw, json) Hash identifier: W/By56PGvtYVDxda6ANz5+pju0JszewVhuD2pBTxzIA= Subject key identifier: A3:F0:DE:96:2A:7A:A3:4F:3E:F8:2C:C2:99:C0:72:E9:0E:00:8C:EC Authority key identifier: 7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E Certificate issuer: /CN=A91E9721/serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Certificate serial: 106B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft Manifest number: 1060 Signing time: Fri 22 Aug 2025 17:31:28 +0000 Manifest this update: Fri 22 Aug 2025 17:31:27 +0000 Manifest next update: Fri 29 Aug 2025 17:31:27 +0000 Files and hashes: 1: faWJztV_HlzEhgPROEIjk24WAn4.crl (hash: cBF2Sw/VyQqQ+FZhll2MoKCrIibUxUkz9qaXaDsj0nA=) 2: 16EA264C3FC611E9A0E68A30C4F9AE02.roa (hash: dldKM97yEUd08i981SQo623EWErkeJZ6nMm6B405eVg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4203 (0x106b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9721, serialNumber=7DA589CED57F1E5CC48603D1384223936E16027E Validity Not Before: Aug 22 17:31:27 2025 GMT Not After : Aug 29 17:31:27 2025 GMT Subject: CN=68a8a96f-1b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ec:b3:14:d8:07:92:fb:fb:cd:94:35:f1:a7: c9:2a:31:fd:80:5e:52:40:ee:9a:a2:fa:7a:5a:cc: a9:2f:ce:3f:cd:f5:44:7e:74:37:ac:e9:57:34:75: 3a:83:d5:f0:55:9d:01:f5:c0:b4:4a:17:83:eb:e4: 53:dd:22:9f:e5:f8:98:95:5c:46:96:a5:cd:3c:d1: 45:ce:3e:e0:2d:9c:36:73:14:94:64:09:df:15:5c: 1e:5f:ec:b6:b1:53:c0:72:d6:50:62:ed:f6:32:cf: fa:a1:e4:5c:27:14:38:62:6b:15:c8:8b:81:73:2a: 74:e3:2c:eb:cf:40:8e:26:67:ad:a8:9a:37:76:a5: 8d:89:a2:26:66:bd:d4:60:6c:94:ea:cd:37:c5:08: 56:44:5a:0f:a2:02:20:8e:b0:7c:97:a2:13:18:43: 82:09:1e:e0:dc:29:3c:f6:2d:d5:5c:dd:b3:20:f6: 2a:2f:b9:0b:2f:29:8f:96:90:31:89:81:0c:12:6d: 07:c0:29:dc:07:83:41:e7:7c:a1:b6:fd:ee:e8:cf: 05:de:91:a4:ca:77:4e:2c:85:55:18:3a:d9:89:0f: fa:62:40:15:63:c8:f0:97:7c:bd:9b:6b:aa:df:b2: 24:1a:1c:e2:42:22:c8:c0:df:5c:fe:d1:0b:a3:f3: 4d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F0:DE:96:2A:7A:A3:4F:3E:F8:2C:C2:99:C0:72:E9:0E:00:8C:EC X509v3 Authority Key Identifier: keyid:7D:A5:89:CE:D5:7F:1E:5C:C4:86:03:D1:38:42:23:93:6E:16:02:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/faWJztV_HlzEhgPROEIjk24WAn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9721/8AEC2AC43FC411E992A3E62DC4F9AE02/faWJztV_HlzEhgPROEIjk24WAn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b3:3a:ee:f0:01:d9:18:31:4c:92:4f:d2:a7:16:0b:82:59: d4:da:4f:b1:ae:83:e9:d2:7a:40:0a:11:c9:2c:37:2f:58:9d: 3c:16:c4:38:b1:2d:6a:b2:5c:61:af:6b:20:14:38:93:f6:11: e3:71:f5:c8:83:a2:ba:dd:3a:64:85:4c:db:4b:f7:49:d9:d7: c5:c1:4c:13:05:06:b1:6a:92:1f:1e:e8:de:ab:28:6e:1b:52: 6a:35:03:9c:ba:3c:88:72:eb:4a:77:9b:1a:c3:0b:ec:81:a4: dd:eb:b2:97:5a:af:4c:a4:f3:f4:fb:ab:d1:a9:36:37:48:78: 55:91:79:48:72:e5:44:13:d5:7b:2a:79:54:5f:dc:13:cf:61: 28:25:1f:83:65:f2:6a:5c:1a:6b:48:4a:5e:85:4f:f9:07:05: a1:d7:83:4b:62:95:3f:21:80:70:f4:d5:e6:72:b2:1d:11:50: fa:64:78:cc:e2:75:5e:59:b4:41:46:d6:96:31:5b:a4:13:10: 76:9c:dc:20:d6:5d:25:06:3f:02:66:36:75:0d:34:ff:2c:13: a4:49:c6:aa:a7:80:d4:50:78:ef:5c:fd:d6:0a:b7:40:72:17: 36:6b:92:bd:d6:a5:d1:03:b8:b6:e3:34:ea:2f:9b:bc:6e:4d: 70:23:39:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk3MjExMTAvBgNVBAUTKDdEQTU4OUNFRDU3RjFFNUNDNDg2MDNEMTM4NDIyMzkz NkUxNjAyN0UwHhcNMjUwODIyMTczMTI3WhcNMjUwODI5MTczMTI3WjAYMRYwFAYD VQQDEw02OGE4YTk2Zi0xYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyeyzFNgHkvv7zZQ18afJKjH9gF5SQO6aovp6WsypL84/zfVEfnQ3rOlXNHU6 g9XwVZ0B9cC0SheD6+RT3SKf5fiYlVxGlqXNPNFFzj7gLZw2cxSUZAnfFVweX+y2 sVPActZQYu32Ms/6oeRcJxQ4YmsVyIuBcyp04yzrz0COJmetqJo3dqWNiaImZr3U YGyU6s03xQhWRFoPogIgjrB8l6ITGEOCCR7g3Ck89i3VXN2zIPYqL7kLLymPlpAx iYEMEm0HwCncB4NB53yhtv3u6M8F3pGkyndOLIVVGDrZiQ/6YkAVY8jwl3y9m2uq 37IkGhziQiLIwN9c/tELo/NNdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPw3pYq eqNPPvgswpnAcukOAIzsMB8GA1UdIwQYMBaAFH2lic7Vfx5cxIYD0ThCI5NuFgJ+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTcyMS84QUVDMkFDNDNG QzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hsekVoZ1BST0VJamsyNFdB bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZhV0p6dFZfSGx6RWhnUFJPRUlqazI0V0FuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTcyMS84QUVDMkFDNDNGQzQxMUU5OTJBM0U2MkRDNEY5QUUwMi9mYVdKenRWX0hs ekVoZ1BST0VJamsyNFdBbjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZszru8AHZGDFMkk/SpxYLglnU2k+xroPp0npAChHJLDcvWJ08FsQ4 sS1qslxhr2sgFDiT9hHjcfXIg6K63TpkhUzbS/dJ2dfFwUwTBQaxapIfHujeqyhu G1JqNQOcujyIcutKd5sawwvsgaTd67KXWq9MpPP0+6vRqTY3SHhVkXlIcuVEE9V7 KnlUX9wTz2EoJR+DZfJqXBprSEpehU/5BwWh14NLYpU/IYBw9NXmcrIdEVD6ZHjM 4nVeWbRBRtaWMVukExB2nNwg1l0lBj8CZjZ1DTT/LBOkScaqp4DUUHjvXP3WCrdA chc2a5K91qXRA7i24zTqL5u8bk1wIznK -----END CERTIFICATE-----Generated at Sun Aug 24 03:11:03 2025 by rpki-client