$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft File: FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft (raw, json) Hash identifier: Gy0pbImJ1IfRh/qHyZfLPg/6h89EQjcunmKXP4dLzTc= Subject key identifier: 90:20:55:C5:E1:53:C3:4E:EE:15:46:BF:A6:1B:57:C4:14:12:E8:40 Authority key identifier: 14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 Certificate issuer: /CN=A91FE769/serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft Manifest number: 17 Signing time: Sat 23 Aug 2025 08:13:01 +0000 Manifest this update: Sat 23 Aug 2025 08:13:00 +0000 Manifest next update: Sat 30 Aug 2025 08:13:00 +0000 Files and hashes: 1: FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl (hash: vfeWkGd4lSpGzlLaJPqU7tUGO26maqvER+JOr6fFYEc=) 2: D63D48DE604F11F0B5D8E73CC4F9AE02.roa (hash: QfOLWdJ3P41WbgaABeuC3OluZff7oMV/GJPRbloorX8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE769, serialNumber=14E172EBE9ED9C3104D54F11AA976223EB376907 Validity Not Before: Aug 23 08:13:00 2025 GMT Not After : Aug 30 08:13:00 2025 GMT Subject: CN=68a9780d-d858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:53:0a:b2:c0:3a:7a:f4:42:8b:95:16:14: dc:93:20:47:46:e5:86:7f:0d:12:37:45:0f:4d:a0: 0d:5e:de:a7:93:97:83:9d:f3:57:7a:15:fa:7b:e9: 4e:13:9a:e6:da:de:f9:93:91:53:62:35:f2:4d:39: ef:81:38:06:21:a7:ca:95:07:0b:a3:b8:f5:83:11: 95:b2:de:02:ad:20:8f:ab:ba:d6:c4:82:fd:c9:82: 1b:48:6b:10:85:ef:3c:ec:9f:4f:0f:dc:d5:e0:c9: 89:40:9c:9f:77:0c:ec:38:97:1a:39:f2:4e:f6:5c: 9b:83:b3:e1:f5:73:54:b4:5a:cd:e8:83:50:58:15: 21:38:88:72:a2:17:c9:de:ce:0e:c8:4d:cb:55:23: 2d:41:d7:73:c5:2b:d2:11:ff:99:27:b6:8b:92:bd: cc:53:b3:b3:40:6d:30:d7:6c:9a:b1:11:cb:5d:eb: cb:fe:bc:7c:9c:d1:c5:3d:7b:17:8a:e1:31:74:13: d4:51:16:af:aa:a6:b8:e5:17:ed:78:43:9c:17:10: 61:42:db:90:8c:16:82:43:43:f9:2b:5f:c9:b4:91: f3:24:c7:4b:17:90:9f:f6:b4:cb:88:3a:e6:ac:cc: 32:69:70:77:19:d0:84:05:75:24:b6:27:8a:2e:b6: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:20:55:C5:E1:53:C3:4E:EE:15:46:BF:A6:1B:57:C4:14:12:E8:40 X509v3 Authority Key Identifier: keyid:14:E1:72:EB:E9:ED:9C:31:04:D5:4F:11:AA:97:62:23:EB:37:69:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOFy6-ntnDEE1U8RqpdiI-s3aQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE769/C5D6A57E604C11F090816A15C4F9AE02/FOFy6-ntnDEE1U8RqpdiI-s3aQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:9a:b6:c3:1d:ba:67:46:c0:5d:ec:f2:29:ae:03:e0:40:69: 84:ce:52:b1:ae:e7:2e:47:cc:bb:1d:e9:03:be:2e:87:bd:66: ac:a9:ad:8a:15:a4:04:e4:7f:68:c0:a8:46:52:c5:0b:ba:c6: 05:c0:b9:23:0e:1c:26:b2:dd:a6:ba:36:a2:d9:7d:23:38:a0: 81:40:a4:a0:2e:86:40:73:13:e9:8d:01:28:0c:8b:09:ff:9b: 10:4d:93:e6:80:52:98:80:9f:df:bb:c8:f9:dd:42:6a:1e:58: 4e:05:69:e6:0e:00:bb:6e:23:a3:a6:eb:49:bf:e6:09:2b:a9: cd:c1:e2:51:98:a3:7a:a8:bf:31:5a:b2:4b:33:2c:67:19:a7: 36:72:66:08:af:0d:e1:23:1f:41:96:f6:f9:d7:28:48:2d:44: a6:7c:3d:0c:fd:66:3e:46:1b:d0:b5:08:5b:22:cb:71:47:8b: 22:21:59:4f:e1:63:4f:85:20:b4:43:41:b9:b5:1b:eb:47:82: 1a:d9:48:ca:ed:f7:85:0a:4f:d6:05:d3:9e:39:56:46:28:c3: 33:9c:f8:23:9f:c0:4b:50:f5:58:bb:56:47:3f:31:63:78:0f: 98:52:17:ef:9c:43:37:20:ac:8a:8f:60:5b:01:e3:4f:71:a5: 46:74:da:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTc2OTExMC8GA1UEBRMoMTRFMTcyRUJFOUVEOUMzMTA0RDU0RjExQUE5NzYyMjNF QjM3NjkwNzAeFw0yNTA4MjMwODEzMDBaFw0yNTA4MzAwODEzMDBaMBgxFjAUBgNV BAMTDTY4YTk3ODBkLWQ4NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC74VMKssA6evRCi5UWFNyTIEdG5YZ/DRI3RQ9NoA1e3qeTl4Od81d6Ffp76U4T muba3vmTkVNiNfJNOe+BOAYhp8qVBwujuPWDEZWy3gKtII+rutbEgv3JghtIaxCF 7zzsn08P3NXgyYlAnJ93DOw4lxo58k72XJuDs+H1c1S0Ws3og1BYFSE4iHKiF8ne zg7ITctVIy1B13PFK9IR/5kntouSvcxTs7NAbTDXbJqxEctd68v+vHyc0cU9exeK 4TF0E9RRFq+qprjlF+14Q5wXEGFC25CMFoJDQ/krX8m0kfMkx0sXkJ/2tMuIOuas zDJpcHcZ0IQFdSS2J4outnX1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkCBVxeFT w07uFUa/phtXxBQS6EAwHwYDVR0jBBgwFoAUFOFy6+ntnDEE1U8RqpdiI+s3aQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNzY5L0M1RDZBNTdFNjA0 QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRFRTFVOFJxcGRpSS1zM2FR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRk9GeTYtbnRuREVFMVU4UnFwZGlJLXMzYVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF NzY5L0M1RDZBNTdFNjA0QzExRjA5MDgxNkExNUM0RjlBRTAyL0ZPRnk2LW50bkRF RTFVOFJxcGRpSS1zM2FRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAICatsMdumdGwF3s8imuA+BAaYTOUrGu5y5HzLsd6QO+Loe9ZqyprYoV pATkf2jAqEZSxQu6xgXAuSMOHCay3aa6NqLZfSM4oIFApKAuhkBzE+mNASgMiwn/ mxBNk+aAUpiAn9+7yPndQmoeWE4FaeYOALtuI6Om60m/5gkrqc3B4lGYo3qovzFa skszLGcZpzZyZgivDeEjH0GW9vnXKEgtRKZ8PQz9Zj5GG9C1CFsiy3FHiyIhWU/h Y0+FILRDQbm1G+tHghrZSMrt94UKT9YF0545VkYowzOc+COfwEtQ9Vi7Vkc/MWN4 D5hSF++cQzcgrIqPYFsB409xpUZ02gY= -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:50 2025 by rpki-client